56dcb7b2b", 0x84}, {&(0x7f0000005400)="f8d4469dbc6c3e2f96e908d370278b7fe6f241907ebd2d9dc4b58cd488ecc328cded5459098308b3d08e53a9086b5a9fb0c1bd9ff74e0d5664c4bf39270d7e2caa8f797765ae8be08363cac6c5b6439a7f93d26488f63e4271f68362775ac4c1491cac8edde4e96769f1b12747b34d3a44c0130d9ee7839073c801c5e89f57b43aa4362b1a1c0d25e75601f830ee9a376d070031287035501d343e05a0c433e75c8cf520bea39b99094cbbd0116785630d93e373ca32cb281e155ec465cd5c17e685cccfc281ab27cd0a12c29df1820d55", 0xd1}, {&(0x7f0000005500)="791bfa2f31aef2ab111e816e5933dbf78c", 0x11}, {&(0x7f0000005540)="a888c22223798b59dfdaba5eee2c5dea2e749f793f1062061c90fa31e5e7a7ccfa6c4a9373608c1934657535cdc55c1fa4e5c2ec1e1fac506a83414c4af9bc2b36326192813eb9c936c407057779ee25581ae12e765e49ac8f24d9d1fe838e59779badd6301bad9ab647f913eb536a6ed71e087426b8d627482e", 0x7a}, {&(0x7f00000055c0)="1b9db103eee34eb869337a735607593f1dcc5c45779e2b3e170d3e0738483bf9a9882a51b1056585f29d6fcc928e8525802ca62f17a4cc956054b5f07d13499113a44e790c1c2ac04dede9bae1fdf5fbd09d643c0eb18f5f7633666ccadf546098fb5e5a16a05d207f3c91822fd35f80dcad30341f347f42", 0x78}, {&(0x7f0000005640)="9b4dde358890d3f10cc34ab94a2cbc4d618ebddd8a2479bb00cb05497dada1df81f55d7dc6d51bbdb3cdfd14e78f51b90eabccd7ab6d428b716ff891360884667a972779882b10b17e9af070ec88e842ff7169780286b8", 0x57}, {&(0x7f00000056c0)}], 0xa, &(0x7f0000005880)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee00}}}, @cred={{0x1c}}], 0x40, 0x40081}}, {{&(0x7f00000058c0)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000006e40)=[{&(0x7f0000005940)="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", 0x1000}, {&(0x7f0000006940)="a6bbfdcec72aa5c14870d6ab9ed1ecb1c839933186741bf20e96e436a98f89edcd1996a12ec2ed7324626d857989bf31d8c1cae635e82e0a2f8b7237096cd2fd86a811d573e7de671217f5410aa3e03399eb92a7f48d8079ae5dffa71cdf8669dca6f5c81a2fbde7a9d62edfbbd2b27ab5eeb8166aacf5ab69a88bd401d64dc6a470a5568f9ca31df5418c630db46d109b2f7009ee039dd49e1720cbdac5d61b511fec5a285db5fa2e991283f80483de7ae33a9f0ea326d5d5c1fef2b89633655745eeef9f23bf8d448e96cb6f2950bf988c30047ec51b9933d41cbab9f02c4e3759ed022f9024b42f176401e197", 0xee}, {&(0x7f0000006a40)="f8d1178b637b09089b37a9a990573a0b6630aa5da34880b91b3080ec347024fe23f4ab13dcb3faa5e8366f5c76df794deb9ea6f3f23a6ee48531796b7756a4af212170510e822cc46746bf867a0a33f5004937e96b86c49171307122269bdffe0272b79177969295f731364a969544c28a6118b9abb8cd327669bceb7e7cf1a648c42e23cd72c181d3a54c0b5a2b911be8912494ee023f5cc44addda63c6a6da816ea8d942aee73d3604ee688d5f470b61df04e00a44427765978b1493f4f393cca5a2c6c735a9b5170a3e9a79e2c0224c02afa416e2c62821ce60731eaa8e7b", 0xe0}, {&(0x7f0000006b40)="57f87b6acc03ec2b61f90689e6e82b913897", 0x12}, {&(0x7f0000006b80)="dce18342934a29cdd6389d67a6a6781f756f42df026d84ccc62124d8660ad8368282b3104d7ea694ab02d87bb6c5bf7e492bf4afa62442b5c7a11705e63c5c7f4023ac1ea3b3c263cb2d2743bd0e11263a0e9c7cd4f53faf35cc4abe8e705fd922647aaf21048ddf7b59d56aedcf7dc46da31509ff15429bfbd03ae13738de026ba3d00737475d7e56bbe78dd5", 0x8d}, {&(0x7f0000006c40)="17ad124c756b490a3ce9f3f111409723ee591fd6cb8b0453e6cfc70cc3f932cbcffc5449ad604c4feb57e290b8a9c0fe32770f9249c1f9339e08d3916183f3a0760cb36b9bfcd1998994c0d183aede80e4f6c6114cf398aedb636c5b9ac24c6fb4f5cf37", 0x64}, {&(0x7f0000006cc0)="fe211e95affa1571ab5967fadfce09a2b857f11a95d56c180fada7bc4818af9b49b93060fa1da1d41232f8684663e1e768076630c7ff3cdf9a35753a4943b3d6eb839ba2fc3a430a4e15149a1e00", 0x4e}, {&(0x7f0000006d40)="e5cb1fdd20806f319cfbdc9d4af1ea1b50cd5db868723e298b3cef34e712d637814c57ad3a9879fb10cb0d0b065b10f40f25b779b26e8999f4ed90497924146590a7e4169531dec738db0047e7b195481dfcaed9c744824d9590188aa31a1b6a2cac3b01733d05fe6aaee099e0fe81059c1db93292878ba3fb401e7be48c5e4fc1a2e859264a3fb73069c2a5278e838394b7c27f4a2fb5690933f832e78ca2195db7b88d444430b2253002203cdd0f8140fff85b5eda1e11ba91d033fd67bed06dc9f8d75de153a7b047cf873f16", 0xce}], 0x8, &(0x7f00000070c0)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, r0, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff, r1]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, r0]}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01, 0xee01}}}], 0x100, 0x4040000}}, {{&(0x7f00000071c0)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000007340)=[{&(0x7f0000007240)="2f67eefc1b4947207b38f10257e56a6e8fe6372e5e2e280e256b51f68d09abb53d3cecc925a13f60f4af425db8ea0970db245a2047f177ad066881004e331241b32d", 0x42}, {&(0x7f00000072c0)="50c1f8deb9463478bb7c22d4f0d96ef3b3d53a1a571f9b7998c109727e279f1bdc7a0e95b1c19b1885918abac3636f18e3b470ee416b818115fc63dba7c1ad446227496fd4951b4ebf9d3ac4bac8821f1fd54cb9e300848f08296a1981", 0x5d}], 0x2, &(0x7f0000007540)=[@cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0xffffffffffffffff}}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, r1, r1]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01, 0xee00}}}, @rights={{0x24, 0x1, 0x1, [r0, r0, 0xffffffffffffffff, 0xffffffffffffffff, r0]}}], 0xa8, 0x4}}, {{&(0x7f0000007600)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000008780)=[{&(0x7f0000007680)="c1382618391096354c42e84cd0f98c14638f2e70cc96d41ae646eaf9209508364123231265954fe780c60f862c5c9af5727f4f3ed0f9efaf75f5f75bcebab710dbdeebf31cb065f7967e42cb8f62ed41d361acd17144bba795ec81889e683fa4ae2ab1346947c8ffa7e0a7a492711f361e25b06862e7cb31f1c827c96d275c1d7eae6432d3b8161ccf9c18c1e48db62f7c16b8ce75b6974b0567a6cafb7deac379d9324b6d3c880df0b2bbca08864ed086a780ab99918cdc75c1c46fb453fc480f582d3f32ac8be9c45bf4e7c33504", 0xcf}, {&(0x7f0000007780)="e767ae176627c3f3a16d693461ace6f74b81acef90cac88ea6f7472ce8d242e5f2c2adb1a239a9c3b63bdedb5cb310cf98f08a3ef4da06531a52dcd28be4fd4b146428afca815773b637dad2ae3e3d9e2009aeefcd0094aad2c5810ae2722bfeadb24cdbdef1189f7f3177bac3fc94bed06e983a3fd72ba0d3f3dcc45396e9f1d653bee932ee7a8e5ff15653d5e2794736277a48e799940b49b39929e2c617367b8b03b33b3c7581a507e4a77428ca8699325582dd84b87c141e28bffbed8148f983744d63a6cc0486334fa49149634f9d24febe2f5e9491dc720d1391fc56486b8494b8b921f8a3f258018a424c8e2e53b49948b499711608fecefa7cae4c40cd70cc3e49c6a8e90268c0b28783c303b8dd209e4fad403cc1f2908a146de37032c66e7273ea70ba6d167174a991d778c3148c4a7f60d0ad7df20dba1ae5f305f3d957665cfbf47854e213c2a5e090690a685b112106c7bf869b6ec11d2a99bc6e322aa74b770c47b438625bca3c164a34394cc289b369b5a3ae85693d6e5665625c2a71cb5396d10cc279af9414cf0f091063541e7e3163da2febe3683972a8b802bd4e63cde07e046948a25f24e93a49e120539abc028508d2637f9ce7a819c5692c45325279b0d8e2d9dfd0d6cc6d3c1634da44fa250fcf15953ce665aa0f200f69ba66c44a151a7ada4cb83f26077cd5cb5cb861019f4785ca21c060723f96b59b657aa56198df75262a18fb5db073a029e25b1962c0abe7f576e103997cd12e93b7ea5414e607bc707a4d8e4716bc9f02f67f639d2b84769dc044303858245da51827f421951c314609022a3e21452585e3502156e860181818b28d5f77d0b980c139e5f9682df0cfcf6e0321e53e1b21ba721306b23efc654b2d0c22090ce1ebeffc33761ff0818ae11c4e3def56ed9a1f4cd1a7b123e8940593925fe37432c02dd575f2e89ab4029922a6d792b166f28b4ef878b24485732a158b2297ec95bdfe44b25b81b67f8d267b30a578875da36c1c5ef34da3b4a72c76b9c8a2c0faff66c9bf88840026686b1f5face1379a585053fbcf93c9b4a3bd12cf76a292808807982de3a6a62b2d3e4a8ae70b72ec3878e9322275b70835221899445634e7ed8d89281de8f3fa8b87c0445237a1cfedc3157ee5f05914d00277a3d7b29b5058bc17770790848600df0dd35e8b0dbea659b1990a2994eb2cc3b84f6a0b921163cea9f80a585121ca9f9c75901854f057cf6e7921bb5bbd7be43c527454abac8d94a5e2cd73c8b0700fdd0585e51d982c6a4fcde1f412fd3ba5c7105330c8ad54f71a404afc9337aa3ae524fb6a4ccf43e2349d357883087620c4bb6245c4db0e3d035b3f2ceba7e03d672cd556d1395846b1ae68ff303be9ca94d29608d4b2cf6fc0b230ff0f1d633b4145c9d2b3244e1ee5fb2263b4eb09d0a4910764e3f4e9bb1e337ad4fc115603e2fb09bf84b3d322c39bb2eb790aaaca26f3a4ac749e316bcb63e3fa5891e706f9e407806d68c23288ae37ecfe893771ec6a5473470a8a53886094ff6b346089419eab538767ac101d19174e154ea7c0407f12f541a92320ff1332ea9fba1644be1500ddabbbf3bfe70bb9b5404697aca235f26146e8a8412483602977cc38c873836830f4aea30cf8430e51e96571b53f155ea943c3b1545f7062fe2659073ecf053298554d90a4187029ab14ab4f5dc7449ccc23cd917cc72e05626953d7e524e6a0a060e6968051090d7d2850f20e4a8935e238bc28557a28ce5980bb1d0618d2c1ecf66ed11c41676354e7a422f7cda0293e0473522493d7e3bd18b7852b767b23b9cbd68037b396e5be59703c6b8e0493f65541b118d51f1d696b063026facb6b2b0a170a4dcabeb187afffbe5dbfc186c87a6cce8cf11133381366f456d1984c8b0e9f5bdd4e58f35db30ff17258b8403ed4106e453d00bfbe7a428df24b278a84e17a220d532289e9f2d5dd2ede026c34c599487ce705f4acafcbcd57f1f56d933133acbdc00974b93d48ceaf6c4a3603804c6aba84ffd392d8ea457e899ea16b68ea1d63ed699af7e9521cc08d3911c4a9b91c3a9d22c97accdf4bebd3575cf1bd7b9d00f6e9e96120e4381437983a4c4dee7a3b631e7cd62e995fd014d06f537b642678225c1ce156bc60e5166c03899a4a65eb5d8b64f78b92df081bc90a750e485586c1c95067c58ed74ae7d9c1e895d9148392f3c3d0663aaea397645b642fad8863c63d1e4ea454d0c5f891d440ddda86cb00fabec1a4123bffa389943aecc98bb3871374e8231c3799e7d9fd2f80f75b7a11c82cf06e0a12d36e6277c5f1a73332e0f0ec38c8250cb3e5efd4fe2312e6ed71361de17bdadbd612e583d99d88cbd02b1ef2f236e63dbac24568b59dbb87351d5409e0ed9ed1104e189ebe6b2d5d88d49b4ee9e180ab85fd9b93e3148c0a1c7620543ab2ff97dbd68d17bc7f9c78044656d70ac1648bed21c5b9a3da65bdc1845612612e59adab979fc92ffaf0fb727e7270663ca04e9fe5727ab2162cb885e9855a423a5efa2feb480459d72aef7e5c863778a3dbefa64cb7962e429fc51cb4c72cb9bb9d73fc30887a22ce2b5a658ca070eb215948f82ccd4693215802038b94969f09c25ae997b97dcaafaff6c732634ea565c60909a0ccc799ad3fed1f8b6bd08ca0a948ae150b92c906012f0f10f7878660aa76a1d80259cc07a3c00852fe59573ef84b077f511bdf162e60b0ac22bdcce139379b9899aefd466c14bce15f5605592b3c0f530ed17754f998d58d11b1bdefde112ac88f5672ced9739a89935ac82b6e72f6ad8820755e36995d3f0009470f8f2e75dd42c2dc55c81960093a0387d68fbb7ce38f58ead786237dcbf80f50aafc0919f5cda34a7c64ab807252044850821ed73e87dde29d338fa6ef847c4495571f8868fc0cae12f4658ca026010457eec6c2fea9a953a9e0a0bb069e284c9ef3b1aa956bd4c7114867be8309779f8480295cc89c20c2f847d1245fa876ed5c69a771569a431715159a5353965bda3845ce25d2ab41d6e202c5aee8dbd3961b78f32f88d7f327a21a84c202d3c8edc00e4e0e053466887a8f068746714cfeab0fbd44985391f9b99cf960ab6ae362df1c39da242cd39bc7d1209cd056477a2291c424e9513e526eb073aa9eb90120c802b27f8d4054481a010c548a75cc22ed382258e68286438844240b945ce28521ea65405b601c60642199457ffc2d396e14497ec24b44f6a55ebb40d2d5d9fcee7c0d5731938c0e78d9ec7f1cc03be6c8fc071c73d26bf26ea75006c644be2e442c32f51580b98c4a8bf8abe37830c368e3dbe887b74d83b967a1241119ff57a54c9f494a5f9aceb80cbbe630f470b43fd3200fcf424f36eeb1cdbbaabaebb04c569893b95af31a420493f7da8b0ffeb528eb1bdd69d98475a71f7a7614948e338f7423b702f9c153fd7f116273bfe94609077bdb4cc787e17c92911cdd1055c006f954fd161e41a8b0642cc4fa104928e825daa6ecc680dab4f0ab08a1e3e8236a40d92f7b1a44539dc084a1254062cb3ea48b82e60d5bebda0a5e52e4cc0b1a3940a1a901619d71e9f5d02d5229c3bf5885fdda095e62cc79de7aa4d6018664ab239c8c94c299f03e3449518492c9dbffa6d6e688065ae8eb737613768867543bf2b5a59347c92908058f06d08bcdbd72a21037d85c0e5464ec02e5e6000652245fbf78e0a1240adce56d1d2069a954ae659417eea91733638c2d38353dc0365eab5e96ad25ec6a7e58bd3f26ff80086bdf018fc608060fa791341ddc8f67ec7ceae9c586bc8364166226189f613382e53a098f8bca0a0ababb031ada13436a6f65d017fc0fc0cfb3a1f23a92cb6cbe68774fef412e33564204b8c320d4488ef70ef885e8c2a8839f63d986db38fe60179ac8b022a3bd5fd85fc35869120070194caabfe86f87ebf16150cf9ee2781bd87dd9f53afa1a3a6a4aa13b11b408e0f933aa2aaea42534ed16aed1ec50241728cf0cedcbe6314a63e8d20353a45bcb8d7f34163bd1205cf540feebe098769f7693d8372bd6d00e4d139aece956acb823b3fd715438c130eeaa6bfe121f6f1a9ca2220abcd74783c51db742f61d582561069728a3fd22f020e3a8ed731b06bd3e7b1e30029f9394ba841e01fe5444ad3a60f58148535391075374ad4e9ff74ac86472a1130976ea063a743f18f6067f212e84692a5a8217c6a0ebf88a8e52178a7e34136732fe719d6e4cad254217c357fb30aae25c7138ea3adf43d21e89707a13eb615e6d384fa31ad9ed1b6a6c8dd43a51cbaae4f7badee9c23617535909789528f6877051047e837d2ee0f4a37e152c7bef137ca3cb9e970e9b4b5bddf106d3da97f12f7eda25991e50b4d4748e5702fe88080f3acf0ae78af743b570996f19011b2396bcfb675392e2b8ecb2afdf183cda98c948b9031d41ec16ac15053e208e07d0b7053b0e694e410099841a3e382fb6cd55c786b70f6f3bd5bff858cc38ec202ffee60d6496f61e76da7041aff320b278ccc89b994a8bef8dcc12b74f4b98cdde57a8b87e0a385bad54f11caa87dc5243371353d0735894a9c24ab5e5b6457312418de6a4f3d821354bc4b1c2e915e138539c7cc95bae72aca54b83a3588bf7b3e86b19c91e57bbd23a0a055b64d9711ee2d24eb2c932784e4eed51c7decadd95b5efb176e2049c4a5bbdc86f49ad2406474004a670bd10f94db30cf5651bbc1e47d2e6cf565a2e7094ead4ffff58c35a99b21e3dfe1ffa88b2358b2820b3212cc56e122fcd40f30a432689e61ad9ea8bab82ae5db72331c531088a2db80d77d5b303b303a45852a01e8d0e39e84b3cacf6ebf251bd3a3b9224b1adea4b26fb9cff9f2a6e8912c3e0308b86d7014e27f1505bdb4e6382d7b6ec7ae6d4882b4c8948da15af333674463984356a4dbcec05a0879662e9084b7a1d6f8dbfcd9299298abad97187b64fb201e8acbb7ddfe9713432adca4ce14c3c3b08022ce1191781cce75701e85dacc7f05386e398dad34a077a726c3dcca55aca85d36ace05ec7b95cdd98926084b6e55ce0e804c47f43818ccb55261db8e2a9d724847a45c145704b9de73f21ee35210110a07260ffe188f7fbc20ae992d4dfa0564e8ea60b73092e9553817ec3b65f4400ac67aeb5e06237f4dfcf1045746634c9f1f0e10615bdcaf0031dbe6042668af1db7a8a821f3787fa14a1240a4ae7d0f94e213803d6b2bd0118b700dee1006b309b0e9d32e0ad7ceaa12f881557850c9fb9fd91c72bead4bc22fe0463ac3699c59ff1163c415d101de33f0204d215b3fc256f9548da40bdb95ffb12a09e4ff37adc6ef8360eff11072e8e1c38b0eaa59b5e4a89d0ee757429644c16b5726ac7cb8f64c9391e4496881a18dd8ea78d9a8a2d17c65b92af3bff87ca59979fa4ce6305a472148248fe99d4de2bbb20db90bb4c4c5c05a35c5ff70a82b8310daef4e34315c869567f38082392164ca889e93b463931ec2e683a849db776a6c67570060c8c15c7f9903e19b1e6b903b8a524608e990588113f5d5f630008e4eb2042cbce8cc3217a99ce15571efebdf52d974a582d364c668c65e4ff8a541b03898520f933ad7dad61e4a0e0fab6a96a14591dc29630a00f479e9fe7752ec8c999fdab01579c4a71d405ca87a53120b6ccbf4c9120c893878188505828c43c16baf6a78aba23501838ffe2c5339ecbd2e96ac21f8ecea205f8e1b7ffbfba4a4bb9a3031b633cf8e5e423290f9c6982244a093514122981ddabe5f", 0x1000}], 0x2, &(0x7f0000008880)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, r1, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff}}}, @rights={{0x28, 0x1, 0x1, [r0, r0, 0xffffffffffffffff, r0, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [r0, r2, r1, r0, r3, r6, r7]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, r1, r8]}}, @rights={{0x20, 0x1, 0x1, [r9, r1, r0, r0]}}], 0xd8, 0x10}}], 0x9, 0x200444c5) (async) bind$inet6(r1, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) (async) listen(r1, 0x400000001ffffffd) (async) setsockopt$inet6_IPV6_ADDRFORM(r1, 0x29, 0x1, &(0x7f0000000000), 0x4) (async) r10 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r10, &(0x7f0000e5c000)={0x2, 0x4e20, @dev}, 0x10) (async) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000100)=ANY=[@ANYBLOB="f6ff40030000000000000000", @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) (async) ioctl$sock_inet_SIOCGIFBRDADDR(r11, 0x8919, &(0x7f0000000140)={'macvlan1\x00', {0x2, 0x0, @multicast1}}) (async) socket$inet6(0xa, 0x1, 0x8) (async) sendto$inet(r10, &(0x7f0000000040)="41b20fe3c398f7d4869ecc9fbc3241ba27bb77ba839df833c4f161cfe11180e6f94c6a6e991c380d321745932a99b3503c126013f1225cd86d86e0ea55cdb370c71e72e52ba75cab7313737adc3d8e0e8eea", 0x52, 0x40, &(0x7f00000000c0)={0x2, 0x4e23, @multicast1}, 0x10) r12 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000240), 0x505800, 0x0) bind$inet6(r12, &(0x7f0000000280)={0xa, 0x4e24, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}, 0xf018}, 0x1c) (async) sendmsg$inet(r10, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) (async) close_range(r0, 0xffffffffffffffff, 0x0) 06:20:44 executing program 1: r0 = io_uring_setup(0xfc6, 0x0) creat(&(0x7f00000000c0)='./bus\x00', 0x0) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x1, 0x0, 0x0, 0x4, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x3) close_range(r0, 0xffffffffffffffff, 0x0) [ 3071.687129][T29411] netlink: 44335 bytes leftover after parsing attributes in process `syz-executor.4'. [ 3077.702285][T29431] ref_ctr going negative. vaddr: 0x20000004, curr val: -18737, delta: 1 [ 3077.710816][T29431] ref_ctr increment failed for inode: 0x48b offset: 0x0 ref_ctr_offset: 0x4 of mm: 0xffff888104cb2a80 06:20:51 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f0000000380)={0x3, 0x1, 0x7, 0x2, 0xb3, &(0x7f0000000500)}) ioctl$KDGKBLED(r0, 0x4b64, &(0x7f0000000040)) io_uring_setup(0xfc6, &(0x7f0000000180)) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000240)={0x9b0, 0x9, 0x1, 0x4, 0x3}) listen(r1, 0x400000001ffffffd) r2 = socket$inet_dccp(0x2, 0x6, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f0000000440)=@ipv4_newaddr={0x38, 0x14, 0x8, 0x70bd2d, 0x25dfdbfd, {0x2, 0x78, 0x40, 0xc8}, [@IFA_RT_PRIORITY={0x8, 0x9, 0x9}, @IFA_RT_PRIORITY={0x8, 0x9, 0x200}, @IFA_ADDRESS={0x8, 0x1, @loopback}, @IFA_ADDRESS={0x8, 0x1, @multicast2}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000090}, 0x8000) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev}, 0x10) r3 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$cgroup_subtree(r3, &(0x7f00000003c0)=ANY=[@ANYBLOB="88ed7c48cfb680c42f89f97a7def31f7c3754b660e634848a0626b48d0b96e39c051b0006e7ca14700d0"], 0x8) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x1, 0x0, 0x0, 0x4, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x3) socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r5, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r6, 0x0) 06:20:51 executing program 2: r0 = io_uring_setup(0xfc6, &(0x7f0000000180)) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) r2 = syz_io_uring_setup(0x30f3, &(0x7f0000000200), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000014c0), &(0x7f00000001c0)) io_uring_enter(r2, 0x1688, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/169, 0xa9}], 0x1) listen(r1, 0x400000001ffffffd) r3 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r3, &(0x7f0000e5c000)={0x2, 0x4e20, @dev}, 0x10) sendmsg$inet(r3, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 06:20:51 executing program 1: r0 = io_uring_setup(0xfc6, 0x0) creat(&(0x7f00000000c0)='./bus\x00', 0x0) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x1, 0x0, 0x0, 0x4, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x3) close_range(r0, 0xffffffffffffffff, 0x0) 06:20:51 executing program 5: r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e24, @local}, 0x10) writev(r0, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) recvmmsg(r0, &(0x7f0000003e40)=[{{&(0x7f0000000100)=@phonet, 0x80, 0x0, 0x0, &(0x7f00000024c0)=""/4096, 0x100a}}, {{0x0, 0x80100200, 0x0, 0x0, &(0x7f00000035c0)=""/241, 0xf1}}, {{&(0x7f00000036c0)=@un=@abs, 0x80, &(0x7f0000003780)=[{&(0x7f0000003740)=""/4, 0xfffffd07}], 0x1, &(0x7f00000037c0)=""/236, 0xec}}, {{&(0x7f00000038c0)=@l2tp6={0xa, 0x0, 0x0, @private1}, 0x80, &(0x7f0000003bc0)=[{0x0}, {&(0x7f0000003a00)=""/190, 0xbe}, {&(0x7f0000003ac0)=""/131, 0x83}, {0x0}], 0x4, &(0x7f0000003c00)=""/73, 0x49}}, {{&(0x7f0000003c80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, 0x0, 0x0, &(0x7f0000003e00)=""/48, 0x30}}], 0x5, 0x40000121, 0x0) 06:20:51 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000005c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e24, @local}, 0x10) writev(r0, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) recvmmsg(r0, &(0x7f0000003e40)=[{{&(0x7f0000000100)=@phonet, 0x80, 0x0, 0x0, &(0x7f00000024c0)=""/4096, 0x1034}}, {{0x0, 0x80100200, 0x0, 0x0, &(0x7f00000035c0)=""/241, 0xf1}}, {{&(0x7f00000036c0)=@un=@abs, 0x80, &(0x7f0000003780)=[{&(0x7f0000003740)=""/4, 0xfffffd07}], 0x1, &(0x7f00000037c0)=""/236, 0xec}}, {{&(0x7f00000038c0)=@l2tp6={0xa, 0x0, 0x0, @private1}, 0x80, &(0x7f0000003bc0)=[{0x0}, {&(0x7f0000003a00)=""/190, 0xbe}, {&(0x7f0000003ac0)=""/131, 0x83}, {0x0}], 0x4, &(0x7f0000003c00)=""/73, 0x49}}, {{&(0x7f0000003c80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, 0x0, 0x0, &(0x7f0000003e00)=""/48, 0x30}}], 0x5, 0x40000121, 0x0) 06:20:51 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) recvmsg(r0, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) (async) sendto$inet6(r0, &(0x7f00000001c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0) (async) recvmsg(r0, &(0x7f00000003c0)={0x0, 0x3, 0x0}, 0x0) recvmsg(r0, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x0) (async) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) (async) recvfrom$inet6(r0, &(0x7f0000000000)=""/114, 0xfffffffffffffd1b, 0x0, 0x0, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000040)) (async) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="00281c80", @ANYRES16=r0, @ANYBLOB="ff"], 0x34}}, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'bridge_slave_1\x00'}, @IFLA_MASTER={0x8, 0xa, r3}, @IFLA_MTU={0x8, 0x4, 0x1da}]}, 0x44}}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='GPL\x00', 0x0, 0xa8, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001540)={r4, 0x123, &(0x7f0000001480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000700)=r5, 0x4) (async) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x2, &(0x7f00000000c0)=@raw=[@call={0x85, 0x0, 0x0, 0x7b}, @exit={0x95, 0x0, 0x9fff}], &(0x7f0000000480)='GPL\x00', 0x4, 0xa0, &(0x7f00000002c0)=""/160, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r7 = memfd_secret(0x0) (async) r8 = socket$unix(0x1, 0x5, 0x0) bind$unix(r8, &(0x7f0000000380)=@file={0x1, './file0\x00'}, 0x6e) (async) listen(r8, 0x0) (async) r9 = dup(r8) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000680)={'trans=fd,', {'rfdno', 0x3d, r9}, 0x2c, {'wfdno', 0x3d, r8}, 0x2c, {[], [{@subj_user={'subj_user', 0x3d, 'trans=fd,'}}]}}) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@bloom_filter={0x1e, 0x3, 0x800, 0x1ff, 0x0, 0xffffffffffffffff, 0x4, '\x00', 0x0, r9, 0x2, 0x2, 0x2, 0x1}, 0x48) (async) r10 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000003c0), 0x21880, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x13, 0x0, &(0x7f0000000140), &(0x7f0000000180)='syzkaller\x00', 0xffffffff, 0x0, 0x0, 0x41000, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x3, 0x1}, 0x8, 0x10, &(0x7f0000000380)={0x0, 0x8, 0x401, 0x20}, 0x10, r5, r6, 0x0, &(0x7f0000000400)=[r7, 0xffffffffffffffff, 0xffffffffffffffff, r10, 0xffffffffffffffff, 0x1, 0xffffffffffffffff]}, 0x80) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x2, 0x3, &(0x7f00000000c0)=ANY=[@ANYRESHEX=r1], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r5}, 0x80) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="58ad000010", 0x5, 0x0, 0x0, 0x0) (async) r11 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r11, &(0x7f0000000000)='s', 0x10a73, 0x81e, 0x0, 0x4b6ae4f95a5de35b) 06:20:51 executing program 2: r0 = io_uring_setup(0xfc6, &(0x7f0000000180)) socket$inet6(0xa, 0x6, 0x0) (async) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) r2 = syz_io_uring_setup(0x30f3, &(0x7f0000000200), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000014c0), &(0x7f00000001c0)) io_uring_enter(r2, 0x1688, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/169, 0xa9}], 0x1) listen(r1, 0x400000001ffffffd) socket$inet_dccp(0x2, 0x6, 0x0) (async) r3 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r3, &(0x7f0000e5c000)={0x2, 0x4e20, @dev}, 0x10) (async) connect$inet(r3, &(0x7f0000e5c000)={0x2, 0x4e20, @dev}, 0x10) sendmsg$inet(r3, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 06:20:51 executing program 1: r0 = io_uring_setup(0xfc6, 0x0) creat(&(0x7f00000000c0)='./bus\x00', 0x0) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x1, 0x0, 0x0, 0x4, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x3) close_range(r0, 0xffffffffffffffff, 0x0) 06:20:51 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) recvmsg(r0, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) (async) sendto$inet6(r0, &(0x7f00000001c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0) (async) recvmsg(r0, &(0x7f00000003c0)={0x0, 0x3, 0x0}, 0x0) (async) recvmsg(r0, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x0) (async) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) (async) recvfrom$inet6(r0, &(0x7f0000000000)=""/114, 0xfffffffffffffd1b, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000040)) (async) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="00281c80", @ANYRES16=r0, @ANYBLOB="ff"], 0x34}}, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'bridge_slave_1\x00'}, @IFLA_MASTER={0x8, 0xa, r3}, @IFLA_MTU={0x8, 0x4, 0x1da}]}, 0x44}}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='GPL\x00', 0x0, 0xa8, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001540)={r4, 0x123, &(0x7f0000001480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000700)=r5, 0x4) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x2, &(0x7f00000000c0)=@raw=[@call={0x85, 0x0, 0x0, 0x7b}, @exit={0x95, 0x0, 0x9fff}], &(0x7f0000000480)='GPL\x00', 0x4, 0xa0, &(0x7f00000002c0)=""/160, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) r7 = memfd_secret(0x0) (async) r8 = socket$unix(0x1, 0x5, 0x0) bind$unix(r8, &(0x7f0000000380)=@file={0x1, './file0\x00'}, 0x6e) (async) listen(r8, 0x0) (async) r9 = dup(r8) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000680)={'trans=fd,', {'rfdno', 0x3d, r9}, 0x2c, {'wfdno', 0x3d, r8}, 0x2c, {[], [{@subj_user={'subj_user', 0x3d, 'trans=fd,'}}]}}) (async) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@bloom_filter={0x1e, 0x3, 0x800, 0x1ff, 0x0, 0xffffffffffffffff, 0x4, '\x00', 0x0, r9, 0x2, 0x2, 0x2, 0x1}, 0x48) r10 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000003c0), 0x21880, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x13, 0x0, &(0x7f0000000140), &(0x7f0000000180)='syzkaller\x00', 0xffffffff, 0x0, 0x0, 0x41000, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x3, 0x1}, 0x8, 0x10, &(0x7f0000000380)={0x0, 0x8, 0x401, 0x20}, 0x10, r5, r6, 0x0, &(0x7f0000000400)=[r7, 0xffffffffffffffff, 0xffffffffffffffff, r10, 0xffffffffffffffff, 0x1, 0xffffffffffffffff]}, 0x80) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x2, 0x3, &(0x7f00000000c0)=ANY=[@ANYRESHEX=r1], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r5}, 0x80) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="58ad000010", 0x5, 0x0, 0x0, 0x0) (async) r11 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r11, &(0x7f0000000000)='s', 0x10a73, 0x81e, 0x0, 0x4b6ae4f95a5de35b) 06:20:51 executing program 2: r0 = io_uring_setup(0xfc6, &(0x7f0000000180)) (async) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) (async) r2 = syz_io_uring_setup(0x30f3, &(0x7f0000000200), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000014c0), &(0x7f00000001c0)) io_uring_enter(r2, 0x1688, 0x0, 0x0, 0x0, 0x0) (async, rerun: 64) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/169, 0xa9}], 0x1) (async, rerun: 64) listen(r1, 0x400000001ffffffd) (async) r3 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r3, &(0x7f0000e5c000)={0x2, 0x4e20, @dev}, 0x10) (async) sendmsg$inet(r3, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) (async) close_range(r0, 0xffffffffffffffff, 0x0) 06:20:51 executing program 1: r0 = io_uring_setup(0xfc6, &(0x7f0000000180)) creat(0x0, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x1, 0x0, 0x0, 0x4, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x3) close_range(r0, 0xffffffffffffffff, 0x0) 06:20:51 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) recvmsg(r0, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) sendto$inet6(r0, &(0x7f00000001c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0) recvmsg(r0, &(0x7f00000003c0)={0x0, 0x3, 0x0}, 0x0) recvmsg(r0, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x120) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) recvfrom$inet6(r0, &(0x7f0000000000)=""/114, 0xfffffffffffffd1b, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000040)) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="00281c80", @ANYRES16=r0, @ANYBLOB="ff"], 0x34}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="b4c6018094"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="58ad000010", 0x5, 0x0, 0x0, 0x0) r1 = socket$inet6(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000006800)=[{{&(0x7f00000000c0), 0x80, &(0x7f00000006c0)=[{&(0x7f0000000140)}, {&(0x7f0000000200)=""/112, 0x70}, {&(0x7f0000000400)=""/199, 0xc7}, {&(0x7f0000000500)=""/102, 0x66}, {&(0x7f0000000580)=""/132, 0x84}, {&(0x7f0000000180)=""/11, 0xb}, {&(0x7f0000000680)=""/38, 0x26}], 0x7, &(0x7f0000000a40)=""/4096, 0x1000}, 0x1}, {{&(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x80, &(0x7f0000003b00)=[{&(0x7f00000007c0)=""/60, 0x3c}, {&(0x7f0000000800)=""/7, 0x7}, {&(0x7f0000000840)=""/24, 0x18}, {&(0x7f0000000880)=""/245, 0xf5}, {&(0x7f0000000980)=""/51, 0x33}, {&(0x7f0000001a40)=""/4096, 0x1000}, {&(0x7f00000009c0)=""/34, 0x22}, {&(0x7f0000002a40)=""/4096, 0x1000}, {&(0x7f0000003a40)=""/168, 0xa8}], 0x9, &(0x7f0000003bc0)=""/147, 0x93}, 0xd4}, {{&(0x7f0000003c80)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private0}}}, 0x80, &(0x7f0000006080)=[{&(0x7f0000003d00)=""/120, 0x78}, {&(0x7f0000003d80)=""/121, 0x79}, {&(0x7f0000003e00)=""/170, 0xaa}, {&(0x7f0000003ec0)=""/149, 0x95}, {&(0x7f0000003f80)=""/78, 0x4e}, {&(0x7f0000004000)=""/4096, 0x1000}, {&(0x7f0000005000)=""/4096, 0x1000}, {&(0x7f0000006000)=""/120, 0x78}], 0x8}, 0x10001}, {{0x0, 0x0, &(0x7f0000006680)=[{&(0x7f0000006100)=""/233, 0xe9}, {&(0x7f0000006200)=""/223, 0xdf}, {&(0x7f0000006300)=""/36, 0x24}, {&(0x7f0000006340)=""/48, 0x30}, {&(0x7f0000006380)=""/15, 0xf}, {&(0x7f00000063c0)=""/251, 0xfb}, {&(0x7f00000064c0)=""/172, 0xac}, {&(0x7f0000006580)=""/171, 0xab}, {&(0x7f0000006640)=""/41, 0x29}], 0x9, &(0x7f0000006740)=""/153, 0x99}, 0x200}], 0x4, 0x0, &(0x7f0000006900)={0x77359400}) sendto$inet6(r1, &(0x7f0000000000)='s', 0x10a73, 0x81e, 0x0, 0x4b6ae4f95a5de35b) [ 3078.674302][T29474] netlink: 'syz-executor.4': attribute type 41 has an invalid length. [ 3078.682627][T29474] netlink: 44123 bytes leftover after parsing attributes in process `syz-executor.4'. [ 3078.706641][T29474] A link change request failed with some changes committed already. Interface ip6tnl0 may have been left with an inconsistent configuration, please check. [ 3086.821190][T29478] ref_ctr going negative. vaddr: 0x20000004, curr val: -18737, delta: 1 [ 3086.829597][T29478] ref_ctr increment failed for inode: 0x48b offset: 0x0 ref_ctr_offset: 0x4 of mm: 0xffff888104cb2a80 06:21:00 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f0000000380)={0x3, 0x1, 0x7, 0x2, 0xb3, &(0x7f0000000500)}) ioctl$KDGKBLED(r0, 0x4b64, &(0x7f0000000040)) io_uring_setup(0xfc6, &(0x7f0000000180)) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000240)={0x9b0, 0x9, 0x1, 0x4, 0x3}) listen(r1, 0x400000001ffffffd) r2 = socket$inet_dccp(0x2, 0x6, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f0000000440)=@ipv4_newaddr={0x38, 0x14, 0x8, 0x70bd2d, 0x25dfdbfd, {0x2, 0x78, 0x40, 0xc8}, [@IFA_RT_PRIORITY={0x8, 0x9, 0x9}, @IFA_RT_PRIORITY={0x8, 0x9, 0x200}, @IFA_ADDRESS={0x8, 0x1, @loopback}, @IFA_ADDRESS={0x8, 0x1, @multicast2}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000090}, 0x8000) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev}, 0x10) r3 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$cgroup_subtree(r3, &(0x7f00000003c0)=ANY=[@ANYBLOB="88ed7c48cfb680c42f89f97a7def31f7c3754b660e634848a0626b48d0b96e39c051b0006e7ca14700d0"], 0x8) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x1, 0x0, 0x0, 0x4, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x3) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r4, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) 06:21:00 executing program 1: r0 = io_uring_setup(0xfc6, &(0x7f0000000180)) creat(0x0, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x1, 0x0, 0x0, 0x4, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x3) close_range(r0, 0xffffffffffffffff, 0x0) 06:21:00 executing program 2: setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0xc, &(0x7f0000000000)=0x3, 0x4) r0 = io_uring_setup(0xfc6, &(0x7f0000000180)) r1 = socket$inet6(0xa, 0x6, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) bind$inet6(r2, &(0x7f000047b000)={0xa, 0x404e20, 0x200001, @mcast2}, 0x1c) listen(r1, 0x400000001ffffffd) r3 = socket$inet_dccp(0x2, 0x6, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) getsockopt$inet_sctp_SCTP_STATUS(r3, 0x84, 0xe, &(0x7f0000000300)={0x0, 0x2, 0x100, 0x5, 0x1000, 0x8000, 0x5, 0x0, {0x0, @in6={{0xa, 0x4e22, 0x5, @private1={0xfc, 0x1, '\x00', 0x1}, 0x100}}, 0x4, 0x10001, 0x1f, 0x6, 0x7f00}}, &(0x7f00000000c0)=0xb0) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r4, 0x84, 0xa, &(0x7f0000000140)={0x0, 0x0, 0x3, 0x7, 0x41b, 0x2, 0x40000000, 0x8, r5}, 0x20) connect$inet(r3, &(0x7f0000e5c000)={0x2, 0x4e20, @dev}, 0x10) sendmsg$inet(r3, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) setsockopt$sock_timeval(r6, 0x1, 0x43, &(0x7f0000000040)={0x77359400}, 0x10) 06:21:00 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) recvmsg(r0, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) sendto$inet6(r0, &(0x7f00000001c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0) recvmsg(r0, &(0x7f00000003c0)={0x0, 0x3, 0x0}, 0x0) recvmsg(r0, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x120) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) recvfrom$inet6(r0, &(0x7f0000000000)=""/114, 0xfffffffffffffd1b, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000040)) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="00281c80", @ANYRES16=r0, @ANYBLOB="ff"], 0x34}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="b4c6018094"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="58ad000010", 0x5, 0x0, 0x0, 0x0) r1 = socket$inet6(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000006800)=[{{&(0x7f00000000c0), 0x80, &(0x7f00000006c0)=[{&(0x7f0000000140)}, {&(0x7f0000000200)=""/112, 0x70}, {&(0x7f0000000400)=""/199, 0xc7}, {&(0x7f0000000500)=""/102, 0x66}, {&(0x7f0000000580)=""/132, 0x84}, {&(0x7f0000000180)=""/11, 0xb}, {&(0x7f0000000680)=""/38, 0x26}], 0x7, &(0x7f0000000a40)=""/4096, 0x1000}, 0x1}, {{&(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x80, &(0x7f0000003b00)=[{&(0x7f00000007c0)=""/60, 0x3c}, {&(0x7f0000000800)=""/7, 0x7}, {&(0x7f0000000840)=""/24, 0x18}, {&(0x7f0000000880)=""/245, 0xf5}, {&(0x7f0000000980)=""/51, 0x33}, {&(0x7f0000001a40)=""/4096, 0x1000}, {&(0x7f00000009c0)=""/34, 0x22}, {&(0x7f0000002a40)=""/4096, 0x1000}, {&(0x7f0000003a40)=""/168, 0xa8}], 0x9, &(0x7f0000003bc0)=""/147, 0x93}, 0xd4}, {{&(0x7f0000003c80)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private0}}}, 0x80, &(0x7f0000006080)=[{&(0x7f0000003d00)=""/120, 0x78}, {&(0x7f0000003d80)=""/121, 0x79}, {&(0x7f0000003e00)=""/170, 0xaa}, {&(0x7f0000003ec0)=""/149, 0x95}, {&(0x7f0000003f80)=""/78, 0x4e}, {&(0x7f0000004000)=""/4096, 0x1000}, {&(0x7f0000005000)=""/4096, 0x1000}, {&(0x7f0000006000)=""/120, 0x78}], 0x8}, 0x10001}, {{0x0, 0x0, &(0x7f0000006680)=[{&(0x7f0000006100)=""/233, 0xe9}, {&(0x7f0000006200)=""/223, 0xdf}, {&(0x7f0000006300)=""/36, 0x24}, {&(0x7f0000006340)=""/48, 0x30}, {&(0x7f0000006380)=""/15, 0xf}, {&(0x7f00000063c0)=""/251, 0xfb}, {&(0x7f00000064c0)=""/172, 0xac}, {&(0x7f0000006580)=""/171, 0xab}, {&(0x7f0000006640)=""/41, 0x29}], 0x9, &(0x7f0000006740)=""/153, 0x99}, 0x200}], 0x4, 0x0, &(0x7f0000006900)={0x77359400}) sendto$inet6(r1, &(0x7f0000000000)='s', 0x10a73, 0x81e, 0x0, 0x4b6ae4f95a5de35b) socket$inet6(0x10, 0x3, 0x0) (async) recvmsg(r0, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) (async) sendto$inet6(r0, &(0x7f00000001c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0) (async) recvmsg(r0, &(0x7f00000003c0)={0x0, 0x3, 0x0}, 0x0) (async) recvmsg(r0, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x120) (async) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) (async) recvfrom$inet6(r0, &(0x7f0000000000)=""/114, 0xfffffffffffffd1b, 0x0, 0x0, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000040)) (async) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="00281c80", @ANYRES16=r0, @ANYBLOB="ff"], 0x34}}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="b4c6018094"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="58ad000010", 0x5, 0x0, 0x0, 0x0) (async) socket$inet6(0x10, 0x3, 0x0) (async) recvmmsg(r0, &(0x7f0000006800)=[{{&(0x7f00000000c0), 0x80, &(0x7f00000006c0)=[{&(0x7f0000000140)}, {&(0x7f0000000200)=""/112, 0x70}, {&(0x7f0000000400)=""/199, 0xc7}, {&(0x7f0000000500)=""/102, 0x66}, {&(0x7f0000000580)=""/132, 0x84}, {&(0x7f0000000180)=""/11, 0xb}, {&(0x7f0000000680)=""/38, 0x26}], 0x7, &(0x7f0000000a40)=""/4096, 0x1000}, 0x1}, {{&(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x80, &(0x7f0000003b00)=[{&(0x7f00000007c0)=""/60, 0x3c}, {&(0x7f0000000800)=""/7, 0x7}, {&(0x7f0000000840)=""/24, 0x18}, {&(0x7f0000000880)=""/245, 0xf5}, {&(0x7f0000000980)=""/51, 0x33}, {&(0x7f0000001a40)=""/4096, 0x1000}, {&(0x7f00000009c0)=""/34, 0x22}, {&(0x7f0000002a40)=""/4096, 0x1000}, {&(0x7f0000003a40)=""/168, 0xa8}], 0x9, &(0x7f0000003bc0)=""/147, 0x93}, 0xd4}, {{&(0x7f0000003c80)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private0}}}, 0x80, &(0x7f0000006080)=[{&(0x7f0000003d00)=""/120, 0x78}, {&(0x7f0000003d80)=""/121, 0x79}, {&(0x7f0000003e00)=""/170, 0xaa}, {&(0x7f0000003ec0)=""/149, 0x95}, {&(0x7f0000003f80)=""/78, 0x4e}, {&(0x7f0000004000)=""/4096, 0x1000}, {&(0x7f0000005000)=""/4096, 0x1000}, {&(0x7f0000006000)=""/120, 0x78}], 0x8}, 0x10001}, {{0x0, 0x0, &(0x7f0000006680)=[{&(0x7f0000006100)=""/233, 0xe9}, {&(0x7f0000006200)=""/223, 0xdf}, {&(0x7f0000006300)=""/36, 0x24}, {&(0x7f0000006340)=""/48, 0x30}, {&(0x7f0000006380)=""/15, 0xf}, {&(0x7f00000063c0)=""/251, 0xfb}, {&(0x7f00000064c0)=""/172, 0xac}, {&(0x7f0000006580)=""/171, 0xab}, {&(0x7f0000006640)=""/41, 0x29}], 0x9, &(0x7f0000006740)=""/153, 0x99}, 0x200}], 0x4, 0x0, &(0x7f0000006900)={0x77359400}) (async) sendto$inet6(r1, &(0x7f0000000000)='s', 0x10a73, 0x81e, 0x0, 0x4b6ae4f95a5de35b) (async) 06:21:00 executing program 5: r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e24, @local}, 0x10) writev(r0, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) recvmmsg(r0, &(0x7f0000003e40)=[{{&(0x7f0000000100)=@phonet, 0x80, 0x0, 0x0, &(0x7f00000024c0)=""/4096, 0x100f}}, {{0x0, 0x80100200, 0x0, 0x0, &(0x7f00000035c0)=""/241, 0xf1}}, {{&(0x7f00000036c0)=@un=@abs, 0x80, &(0x7f0000003780)=[{&(0x7f0000003740)=""/4, 0xfffffd07}], 0x1, &(0x7f00000037c0)=""/236, 0xec}}, {{&(0x7f00000038c0)=@l2tp6={0xa, 0x0, 0x0, @private1}, 0x80, &(0x7f0000003bc0)=[{0x0}, {&(0x7f0000003a00)=""/190, 0xbe}, {&(0x7f0000003ac0)=""/131, 0x83}, {0x0}], 0x4, &(0x7f0000003c00)=""/73, 0x49}}, {{&(0x7f0000003c80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, 0x0, 0x0, &(0x7f0000003e00)=""/48, 0x30}}], 0x5, 0x40000121, 0x0) 06:21:00 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000005c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e24, @local}, 0x10) writev(r0, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) recvmmsg(r0, &(0x7f0000003e40)=[{{&(0x7f0000000100)=@phonet, 0x80, 0x0, 0x0, &(0x7f00000024c0)=""/4096, 0x1400}}, {{0x0, 0x80100200, 0x0, 0x0, &(0x7f00000035c0)=""/241, 0xf1}}, {{&(0x7f00000036c0)=@un=@abs, 0x80, &(0x7f0000003780)=[{&(0x7f0000003740)=""/4, 0xfffffd07}], 0x1, &(0x7f00000037c0)=""/236, 0xec}}, {{&(0x7f00000038c0)=@l2tp6={0xa, 0x0, 0x0, @private1}, 0x80, &(0x7f0000003bc0)=[{0x0}, {&(0x7f0000003a00)=""/190, 0xbe}, {&(0x7f0000003ac0)=""/131, 0x83}, {0x0}], 0x4, &(0x7f0000003c00)=""/73, 0x49}}, {{&(0x7f0000003c80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, 0x0, 0x0, &(0x7f0000003e00)=""/48, 0x30}}], 0x5, 0x40000121, 0x0) 06:21:00 executing program 2: setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0xc, &(0x7f0000000000)=0x3, 0x4) (async) r0 = io_uring_setup(0xfc6, &(0x7f0000000180)) (async) r1 = socket$inet6(0xa, 0x6, 0x0) (async) pipe(&(0x7f0000000080)={0xffffffffffffffff}) bind$inet6(r2, &(0x7f000047b000)={0xa, 0x404e20, 0x200001, @mcast2}, 0x1c) (async) listen(r1, 0x400000001ffffffd) (async) r3 = socket$inet_dccp(0x2, 0x6, 0x0) (async) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) getsockopt$inet_sctp_SCTP_STATUS(r3, 0x84, 0xe, &(0x7f0000000300)={0x0, 0x2, 0x100, 0x5, 0x1000, 0x8000, 0x5, 0x0, {0x0, @in6={{0xa, 0x4e22, 0x5, @private1={0xfc, 0x1, '\x00', 0x1}, 0x100}}, 0x4, 0x10001, 0x1f, 0x6, 0x7f00}}, &(0x7f00000000c0)=0xb0) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r4, 0x84, 0xa, &(0x7f0000000140)={0x0, 0x0, 0x3, 0x7, 0x41b, 0x2, 0x40000000, 0x8, r5}, 0x20) connect$inet(r3, &(0x7f0000e5c000)={0x2, 0x4e20, @dev}, 0x10) sendmsg$inet(r3, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) (async) close_range(r0, 0xffffffffffffffff, 0x0) (async) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) (async) setsockopt$sock_timeval(r6, 0x1, 0x43, &(0x7f0000000040)={0x77359400}, 0x10) 06:21:00 executing program 1: r0 = io_uring_setup(0xfc6, &(0x7f0000000180)) creat(0x0, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x1, 0x0, 0x0, 0x4, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x3) close_range(r0, 0xffffffffffffffff, 0x0) 06:21:00 executing program 2: setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0xc, &(0x7f0000000000)=0x3, 0x4) r0 = io_uring_setup(0xfc6, &(0x7f0000000180)) (async) r1 = socket$inet6(0xa, 0x6, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) bind$inet6(r2, &(0x7f000047b000)={0xa, 0x404e20, 0x200001, @mcast2}, 0x1c) (async) listen(r1, 0x400000001ffffffd) (async) r3 = socket$inet_dccp(0x2, 0x6, 0x0) (async) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) (async) getsockopt$inet_sctp_SCTP_STATUS(r3, 0x84, 0xe, &(0x7f0000000300)={0x0, 0x2, 0x100, 0x5, 0x1000, 0x8000, 0x5, 0x0, {0x0, @in6={{0xa, 0x4e22, 0x5, @private1={0xfc, 0x1, '\x00', 0x1}, 0x100}}, 0x4, 0x10001, 0x1f, 0x6, 0x7f00}}, &(0x7f00000000c0)=0xb0) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r4, 0x84, 0xa, &(0x7f0000000140)={0x0, 0x0, 0x3, 0x7, 0x41b, 0x2, 0x40000000, 0x8, r5}, 0x20) (async) connect$inet(r3, &(0x7f0000e5c000)={0x2, 0x4e20, @dev}, 0x10) (async) sendmsg$inet(r3, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) (async) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) (async) setsockopt$sock_timeval(r6, 0x1, 0x43, &(0x7f0000000040)={0x77359400}, 0x10) 06:21:00 executing program 1: r0 = io_uring_setup(0xfc6, &(0x7f0000000180)) creat(&(0x7f00000000c0)='./bus\x00', 0x0) open(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x1, 0x0, 0x0, 0x4, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x3) close_range(r0, 0xffffffffffffffff, 0x0) 06:21:00 executing program 1: r0 = io_uring_setup(0xfc6, &(0x7f0000000180)) creat(&(0x7f00000000c0)='./bus\x00', 0x0) open(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x1, 0x0, 0x0, 0x4, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x3) close_range(r0, 0xffffffffffffffff, 0x0) [ 3087.685959][T29486] netlink: 'syz-executor.4': attribute type 41 has an invalid length. [ 3087.694184][T29486] netlink: 44123 bytes leftover after parsing attributes in process `syz-executor.4'. 06:21:00 executing program 2: r0 = io_uring_setup(0xfc6, &(0x7f0000000180)) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) syz_io_uring_setup(0x30f3, &(0x7f0000000200), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000014c0)=0x0, &(0x7f00000001c0)=0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) setsockopt$inet6_group_source_req(r5, 0x29, 0x2b, &(0x7f00000002c0)={0x3ff, {{0xa, 0x4e20, 0x5cec4186, @local, 0x10000}}, {{0xa, 0x4e21, 0x8, @loopback}}}, 0x108) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000100)=@l2={0x1f, 0x0, @fixed}}, 0x0) syz_io_uring_setup(0x30f3, &(0x7f0000000200), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000014c0)=0x0, &(0x7f00000001c0)=0x0) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r8, 0x80, &(0x7f0000000100)=@l2={0x1f, 0x0, @fixed}}, 0x0) syz_io_uring_submit(r2, r7, &(0x7f0000000000)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, 0xf}, 0x6) listen(r1, 0x400000001ffffffd) r9 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r9, &(0x7f0000e5c000)={0x2, 0x4e20, @dev}, 0x10) r10 = signalfd4(r0, &(0x7f0000000080)={[0x10000]}, 0x8, 0x0) getsockopt$bt_l2cap_L2CAP_LM(r10, 0x6, 0x3, &(0x7f00000000c0), &(0x7f0000000280)=0x4) sendmsg$inet(r9, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) [ 3087.746103][T29486] A link change request failed with some changes committed already. Interface ip6tnl0 may have been left with an inconsistent configuration, please check. [ 3093.862384][T29525] ref_ctr going negative. vaddr: 0x20000004, curr val: -18737, delta: 1 [ 3093.870768][T29525] ref_ctr increment failed for inode: 0x48b offset: 0x0 ref_ctr_offset: 0x4 of mm: 0xffff888139ec2580 06:21:07 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f0000000380)={0x3, 0x1, 0x7, 0x2, 0xb3, &(0x7f0000000500)}) ioctl$KDGKBLED(r0, 0x4b64, &(0x7f0000000040)) io_uring_setup(0xfc6, &(0x7f0000000180)) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000240)={0x9b0, 0x9, 0x1, 0x4, 0x3}) listen(r1, 0x400000001ffffffd) r2 = socket$inet_dccp(0x2, 0x6, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f0000000440)=@ipv4_newaddr={0x38, 0x14, 0x8, 0x70bd2d, 0x25dfdbfd, {0x2, 0x78, 0x40, 0xc8}, [@IFA_RT_PRIORITY={0x8, 0x9, 0x9}, @IFA_RT_PRIORITY={0x8, 0x9, 0x200}, @IFA_ADDRESS={0x8, 0x1, @loopback}, @IFA_ADDRESS={0x8, 0x1, @multicast2}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000090}, 0x8000) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev}, 0x10) r3 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$cgroup_subtree(r3, &(0x7f00000003c0)=ANY=[@ANYBLOB="88ed7c48cfb680c42f89f97a7def31f7c3754b660e634848a0626b48d0b96e39c051b0006e7ca14700d0"], 0x8) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x1, 0x0, 0x0, 0x4, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x3) socket$nl_route(0x10, 0x3, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r4, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) 06:21:07 executing program 1: r0 = io_uring_setup(0xfc6, &(0x7f0000000180)) creat(&(0x7f00000000c0)='./bus\x00', 0x0) open(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x1, 0x0, 0x0, 0x4, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x3) close_range(r0, 0xffffffffffffffff, 0x0) 06:21:07 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) recvmsg(r0, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) sendto$inet6(r0, &(0x7f00000001c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0) recvmsg(r0, &(0x7f00000003c0)={0x0, 0x3, 0x0}, 0x0) recvmsg(r0, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x120) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) recvfrom$inet6(r0, &(0x7f0000000000)=""/114, 0xfffffffffffffd1b, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000040)) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="00281c80", @ANYRES16=r0, @ANYBLOB="ff"], 0x34}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="b4c6018094"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="58ad000010", 0x5, 0x0, 0x0, 0x0) r1 = socket$inet6(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000006800)=[{{&(0x7f00000000c0), 0x80, &(0x7f00000006c0)=[{&(0x7f0000000140)}, {&(0x7f0000000200)=""/112, 0x70}, {&(0x7f0000000400)=""/199, 0xc7}, {&(0x7f0000000500)=""/102, 0x66}, {&(0x7f0000000580)=""/132, 0x84}, {&(0x7f0000000180)=""/11, 0xb}, {&(0x7f0000000680)=""/38, 0x26}], 0x7, &(0x7f0000000a40)=""/4096, 0x1000}, 0x1}, {{&(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x80, &(0x7f0000003b00)=[{&(0x7f00000007c0)=""/60, 0x3c}, {&(0x7f0000000800)=""/7, 0x7}, {&(0x7f0000000840)=""/24, 0x18}, {&(0x7f0000000880)=""/245, 0xf5}, {&(0x7f0000000980)=""/51, 0x33}, {&(0x7f0000001a40)=""/4096, 0x1000}, {&(0x7f00000009c0)=""/34, 0x22}, {&(0x7f0000002a40)=""/4096, 0x1000}, {&(0x7f0000003a40)=""/168, 0xa8}], 0x9, &(0x7f0000003bc0)=""/147, 0x93}, 0xd4}, {{&(0x7f0000003c80)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private0}}}, 0x80, &(0x7f0000006080)=[{&(0x7f0000003d00)=""/120, 0x78}, {&(0x7f0000003d80)=""/121, 0x79}, {&(0x7f0000003e00)=""/170, 0xaa}, {&(0x7f0000003ec0)=""/149, 0x95}, {&(0x7f0000003f80)=""/78, 0x4e}, {&(0x7f0000004000)=""/4096, 0x1000}, {&(0x7f0000005000)=""/4096, 0x1000}, {&(0x7f0000006000)=""/120, 0x78}], 0x8}, 0x10001}, {{0x0, 0x0, &(0x7f0000006680)=[{&(0x7f0000006100)=""/233, 0xe9}, {&(0x7f0000006200)=""/223, 0xdf}, {&(0x7f0000006300)=""/36, 0x24}, {&(0x7f0000006340)=""/48, 0x30}, {&(0x7f0000006380)=""/15, 0xf}, {&(0x7f00000063c0)=""/251, 0xfb}, {&(0x7f00000064c0)=""/172, 0xac}, {&(0x7f0000006580)=""/171, 0xab}, {&(0x7f0000006640)=""/41, 0x29}], 0x9, &(0x7f0000006740)=""/153, 0x99}, 0x200}], 0x4, 0x0, &(0x7f0000006900)={0x77359400}) sendto$inet6(r1, &(0x7f0000000000)='s', 0x10a73, 0x81e, 0x0, 0x4b6ae4f95a5de35b) socket$inet6(0x10, 0x3, 0x0) (async) recvmsg(r0, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) (async) sendto$inet6(r0, &(0x7f00000001c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0) (async) recvmsg(r0, &(0x7f00000003c0)={0x0, 0x3, 0x0}, 0x0) (async) recvmsg(r0, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x120) (async) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) (async) recvfrom$inet6(r0, &(0x7f0000000000)=""/114, 0xfffffffffffffd1b, 0x0, 0x0, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000040)) (async) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="00281c80", @ANYRES16=r0, @ANYBLOB="ff"], 0x34}}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="b4c6018094"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="58ad000010", 0x5, 0x0, 0x0, 0x0) (async) socket$inet6(0x10, 0x3, 0x0) (async) recvmmsg(r0, &(0x7f0000006800)=[{{&(0x7f00000000c0), 0x80, &(0x7f00000006c0)=[{&(0x7f0000000140)}, {&(0x7f0000000200)=""/112, 0x70}, {&(0x7f0000000400)=""/199, 0xc7}, {&(0x7f0000000500)=""/102, 0x66}, {&(0x7f0000000580)=""/132, 0x84}, {&(0x7f0000000180)=""/11, 0xb}, {&(0x7f0000000680)=""/38, 0x26}], 0x7, &(0x7f0000000a40)=""/4096, 0x1000}, 0x1}, {{&(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x80, &(0x7f0000003b00)=[{&(0x7f00000007c0)=""/60, 0x3c}, {&(0x7f0000000800)=""/7, 0x7}, {&(0x7f0000000840)=""/24, 0x18}, {&(0x7f0000000880)=""/245, 0xf5}, {&(0x7f0000000980)=""/51, 0x33}, {&(0x7f0000001a40)=""/4096, 0x1000}, {&(0x7f00000009c0)=""/34, 0x22}, {&(0x7f0000002a40)=""/4096, 0x1000}, {&(0x7f0000003a40)=""/168, 0xa8}], 0x9, &(0x7f0000003bc0)=""/147, 0x93}, 0xd4}, {{&(0x7f0000003c80)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private0}}}, 0x80, &(0x7f0000006080)=[{&(0x7f0000003d00)=""/120, 0x78}, {&(0x7f0000003d80)=""/121, 0x79}, {&(0x7f0000003e00)=""/170, 0xaa}, {&(0x7f0000003ec0)=""/149, 0x95}, {&(0x7f0000003f80)=""/78, 0x4e}, {&(0x7f0000004000)=""/4096, 0x1000}, {&(0x7f0000005000)=""/4096, 0x1000}, {&(0x7f0000006000)=""/120, 0x78}], 0x8}, 0x10001}, {{0x0, 0x0, &(0x7f0000006680)=[{&(0x7f0000006100)=""/233, 0xe9}, {&(0x7f0000006200)=""/223, 0xdf}, {&(0x7f0000006300)=""/36, 0x24}, {&(0x7f0000006340)=""/48, 0x30}, {&(0x7f0000006380)=""/15, 0xf}, {&(0x7f00000063c0)=""/251, 0xfb}, {&(0x7f00000064c0)=""/172, 0xac}, {&(0x7f0000006580)=""/171, 0xab}, {&(0x7f0000006640)=""/41, 0x29}], 0x9, &(0x7f0000006740)=""/153, 0x99}, 0x200}], 0x4, 0x0, &(0x7f0000006900)={0x77359400}) (async) sendto$inet6(r1, &(0x7f0000000000)='s', 0x10a73, 0x81e, 0x0, 0x4b6ae4f95a5de35b) (async) 06:21:07 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000005c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e24, @local}, 0x10) writev(r0, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) recvmmsg(r0, &(0x7f0000003e40)=[{{&(0x7f0000000100)=@phonet, 0x80, 0x0, 0x0, &(0x7f00000024c0)=""/4096, 0x5000}}, {{0x0, 0x80100200, 0x0, 0x0, &(0x7f00000035c0)=""/241, 0xf1}}, {{&(0x7f00000036c0)=@un=@abs, 0x80, &(0x7f0000003780)=[{&(0x7f0000003740)=""/4, 0xfffffd07}], 0x1, &(0x7f00000037c0)=""/236, 0xec}}, {{&(0x7f00000038c0)=@l2tp6={0xa, 0x0, 0x0, @private1}, 0x80, &(0x7f0000003bc0)=[{0x0}, {&(0x7f0000003a00)=""/190, 0xbe}, {&(0x7f0000003ac0)=""/131, 0x83}, {0x0}], 0x4, &(0x7f0000003c00)=""/73, 0x49}}, {{&(0x7f0000003c80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, 0x0, 0x0, &(0x7f0000003e00)=""/48, 0x30}}], 0x5, 0x40000121, 0x0) 06:21:07 executing program 2: r0 = io_uring_setup(0xfc6, &(0x7f0000000180)) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) syz_io_uring_setup(0x30f3, &(0x7f0000000200), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000014c0)=0x0, &(0x7f00000001c0)=0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) setsockopt$inet6_group_source_req(r5, 0x29, 0x2b, &(0x7f00000002c0)={0x3ff, {{0xa, 0x4e20, 0x5cec4186, @local, 0x10000}}, {{0xa, 0x4e21, 0x8, @loopback}}}, 0x108) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000100)=@l2={0x1f, 0x0, @fixed}}, 0x0) syz_io_uring_setup(0x30f3, &(0x7f0000000200), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000014c0)=0x0, &(0x7f00000001c0)=0x0) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r8, 0x80, &(0x7f0000000100)=@l2={0x1f, 0x0, @fixed}}, 0x0) syz_io_uring_submit(r2, r7, &(0x7f0000000000)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, 0xf}, 0x6) listen(r1, 0x400000001ffffffd) r9 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r9, &(0x7f0000e5c000)={0x2, 0x4e20, @dev}, 0x10) r10 = signalfd4(r0, &(0x7f0000000080)={[0x10000]}, 0x8, 0x0) getsockopt$bt_l2cap_L2CAP_LM(r10, 0x6, 0x3, &(0x7f00000000c0), &(0x7f0000000280)=0x4) sendmsg$inet(r9, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) io_uring_setup(0xfc6, &(0x7f0000000180)) (async) socket$inet6(0xa, 0x6, 0x0) (async) bind$inet6(r1, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) (async) syz_io_uring_setup(0x30f3, &(0x7f0000000200), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000014c0), &(0x7f00000001c0)) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) (async) socket(0x1, 0x803, 0x0) (async) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) (async) setsockopt$inet6_group_source_req(r5, 0x29, 0x2b, &(0x7f00000002c0)={0x3ff, {{0xa, 0x4e20, 0x5cec4186, @local, 0x10000}}, {{0xa, 0x4e21, 0x8, @loopback}}}, 0x108) (async) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000100)=@l2={0x1f, 0x0, @fixed}}, 0x0) (async) syz_io_uring_setup(0x30f3, &(0x7f0000000200), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000014c0), &(0x7f00000001c0)) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) (async) syz_io_uring_submit(r6, r7, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r8, 0x80, &(0x7f0000000100)=@l2={0x1f, 0x0, @fixed}}, 0x0) (async) syz_io_uring_submit(r2, r7, &(0x7f0000000000)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, 0xf}, 0x6) (async) listen(r1, 0x400000001ffffffd) (async) socket$inet_dccp(0x2, 0x6, 0x0) (async) connect$inet(r9, &(0x7f0000e5c000)={0x2, 0x4e20, @dev}, 0x10) (async) signalfd4(r0, &(0x7f0000000080)={[0x10000]}, 0x8, 0x0) (async) getsockopt$bt_l2cap_L2CAP_LM(r10, 0x6, 0x3, &(0x7f00000000c0), &(0x7f0000000280)=0x4) (async) sendmsg$inet(r9, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) (async) close_range(r0, 0xffffffffffffffff, 0x0) (async) 06:21:07 executing program 5: r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e24, @local}, 0x10) writev(r0, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) recvmmsg(r0, &(0x7f0000003e40)=[{{&(0x7f0000000100)=@phonet, 0x80, 0x0, 0x0, &(0x7f00000024c0)=""/4096, 0x1015}}, {{0x0, 0x80100200, 0x0, 0x0, &(0x7f00000035c0)=""/241, 0xf1}}, {{&(0x7f00000036c0)=@un=@abs, 0x80, &(0x7f0000003780)=[{&(0x7f0000003740)=""/4, 0xfffffd07}], 0x1, &(0x7f00000037c0)=""/236, 0xec}}, {{&(0x7f00000038c0)=@l2tp6={0xa, 0x0, 0x0, @private1}, 0x80, &(0x7f0000003bc0)=[{0x0}, {&(0x7f0000003a00)=""/190, 0xbe}, {&(0x7f0000003ac0)=""/131, 0x83}, {0x0}], 0x4, &(0x7f0000003c00)=""/73, 0x49}}, {{&(0x7f0000003c80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, 0x0, 0x0, &(0x7f0000003e00)=""/48, 0x30}}], 0x5, 0x40000121, 0x0) 06:21:07 executing program 1: r0 = io_uring_setup(0xfc6, &(0x7f0000000180)) creat(&(0x7f00000000c0)='./bus\x00', 0x0) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3) close_range(r0, 0xffffffffffffffff, 0x0) 06:21:07 executing program 2: r0 = io_uring_setup(0xfc6, &(0x7f0000000180)) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) syz_io_uring_setup(0x30f3, &(0x7f0000000200), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000014c0)=0x0, &(0x7f00000001c0)=0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) (async) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) (async) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) setsockopt$inet6_group_source_req(r5, 0x29, 0x2b, &(0x7f00000002c0)={0x3ff, {{0xa, 0x4e20, 0x5cec4186, @local, 0x10000}}, {{0xa, 0x4e21, 0x8, @loopback}}}, 0x108) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000100)=@l2={0x1f, 0x0, @fixed}}, 0x0) (async) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000100)=@l2={0x1f, 0x0, @fixed}}, 0x0) syz_io_uring_setup(0x30f3, &(0x7f0000000200), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000014c0)=0x0, &(0x7f00000001c0)=0x0) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r8, 0x80, &(0x7f0000000100)=@l2={0x1f, 0x0, @fixed}}, 0x0) syz_io_uring_submit(r2, r7, &(0x7f0000000000)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, 0xf}, 0x6) (async) syz_io_uring_submit(r2, r7, &(0x7f0000000000)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, 0xf}, 0x6) listen(r1, 0x400000001ffffffd) socket$inet_dccp(0x2, 0x6, 0x0) (async) r9 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r9, &(0x7f0000e5c000)={0x2, 0x4e20, @dev}, 0x10) (async) connect$inet(r9, &(0x7f0000e5c000)={0x2, 0x4e20, @dev}, 0x10) r10 = signalfd4(r0, &(0x7f0000000080)={[0x10000]}, 0x8, 0x0) getsockopt$bt_l2cap_L2CAP_LM(r10, 0x6, 0x3, &(0x7f00000000c0), &(0x7f0000000280)=0x4) sendmsg$inet(r9, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 06:21:07 executing program 2: r0 = io_uring_setup(0xfc6, &(0x7f0000000180)) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000440)={@local, 0x62}) listen(r1, 0x400000001ffffffd) r2 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x12, 0x8, &(0x7f0000000100)=ANY=[@ANYBLOB="851000040000000fbff03e8f", @ANYRES32=0x1, @ANYBLOB="000000000000000018580000070000000000000000000000183800000300000000000000000000005761fcff08000000"], &(0x7f0000000140)='GPL\x00', 0x8001, 0x97, &(0x7f0000000240)=""/151, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x6, 0x4}, 0x8, 0x10, &(0x7f0000000340)={0x5, 0xa, 0x9}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000380)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1]}, 0x80) close_range(r3, r2, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r4, 0x0, 0x484, &(0x7f0000000480)=""/8, &(0x7f00000004c0)=0x8) sendto$inet(r2, &(0x7f0000000000)="8f41f40666d2dd4e9a891ad008c85c13b5d7a6ebcb226e76b01a15fe0cf2ce3639544c69d8ec27cdd5584abacb53ee09acfeb43a51bb5438a1972b75d8509e8a55e9197ac948c9b1a12c28935c0880db2c10101a9cb5486e132e1f9775e4b53a7fa2b9eee7458e72fd329ea0f7b05a26906b220ff4cc36337d2ea9e69d7a4cfba5469544fcaaed1c8ceda00d0ba9c8487bd91629800c4ea211dc6efb28d0afae5133d873d592b8ec", 0xa8, 0x20004000, &(0x7f00000000c0)={0x2, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) sendmsg$inet(r2, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 06:21:07 executing program 1: r0 = io_uring_setup(0xfc6, &(0x7f0000000180)) creat(&(0x7f00000000c0)='./bus\x00', 0x0) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3) close_range(r0, 0xffffffffffffffff, 0x0) 06:21:07 executing program 1: r0 = io_uring_setup(0xfc6, &(0x7f0000000180)) creat(&(0x7f00000000c0)='./bus\x00', 0x0) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3) close_range(r0, 0xffffffffffffffff, 0x0) [ 3094.734187][T29534] netlink: 'syz-executor.4': attribute type 41 has an invalid length. [ 3094.742500][T29534] netlink: 44123 bytes leftover after parsing attributes in process `syz-executor.4'. 06:21:07 executing program 1: r0 = io_uring_setup(0xfc6, &(0x7f0000000180)) creat(&(0x7f00000000c0)='./bus\x00', 0x0) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x0, 0x1, 0x0, 0x0, 0x4, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x3) close_range(r0, 0xffffffffffffffff, 0x0) [ 3094.774843][T29534] A link change request failed with some changes committed already. Interface ip6tnl0 may have been left with an inconsistent configuration, please check. [ 3103.066064][T29587] ref_ctr going negative. vaddr: 0x20000004, curr val: -18737, delta: 1 [ 3103.074860][T29587] ref_ctr increment failed for inode: 0x48b offset: 0x0 ref_ctr_offset: 0x4 of mm: 0xffff888100c0ca40 06:21:16 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) recvmsg(r0, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) sendto$inet6(r0, &(0x7f00000001c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0) recvmsg(r0, &(0x7f00000003c0)={0x0, 0x3, 0x0}, 0x0) recvmsg(r0, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x0) sendmmsg(r0, &(0x7f0000000940)=[{{&(0x7f00000000c0)=@rc={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x2}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000400)="564c59b47e1bb09efd06d1b3035df6428d465f4214e02d6ff12bd64b138cc1feb923533060c45a6ae8be85d8b9c437e7d2e1658c8ad1f90cc5ee44297cbc7dfae777338e8ef0203c2b26eef286dcb4f18ca60e2e41f28baa5ba9c3b0afe3475ff3241618bf652a352f680921d8da0a48a56152f0e10e05db3b99316c916217b6714659ae42be4d427ad05aad52375ae8cc6edc765d92f25225e5dd", 0x9b}, {&(0x7f0000000140)="ea142cfc236ef7349f212fb1ab414fdfe2289de3f1bc85fff22b147daa62501a410a4f28d68a385e10fff58b145b701ad27aaf9236862160b2b221435d0424ac0ddd844f45df1eb24624f3254a0ddfd3e025421df130b060dac96bb0381703944833ed3229f4f36c029786d3df", 0x6d}, {&(0x7f00000004c0)="49f1d9eb689cab3e25f842b2db79cd47719510f1d9d271c62916261a8ed2f07dc81765bb4224d21709d01617fa2103e98f1092185784a38dd007f8fd366544b11fe00c1e3c755f5cd70edbafd05da7b1b6434bdef1b5025037a41df281a5f685a59a986fa9ac9994ce8a9a3e07ed7171dd962fe8d19341a83f5f41cb97b5d89f6e6644984efd054a25eb5971f8242f51c6c010c6aa8b63646fc26a6e98d3d861a64417702d5b913b079142845a5d26a0736cb07acbd21d420c4680e6b68f5297925f81c9546935f4dba5494bdae8424b5c6e80", 0xd3}], 0x3}}, {{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000005c0)="8ca31ae131f6403cc70ff62448e9d6358224da801dc7fbdbcb57ca8ecd5c2082f2b0b1c2b1b2878aabb881bb4e4fc620815c634eed2e6c51879afb747d1a86dcb81f42e2e3c9f30133d3d6ff50e4a68b7c89ec04a9ec657939fffdec98a07f212201fd0a6b989904c4", 0x69}], 0x1}}, {{&(0x7f0000000680)=@pppoe={0x18, 0x0, {0x1, @empty, 'ip6gretap0\x00'}}, 0x80, &(0x7f0000000900)=[{&(0x7f0000000700)="0ffad515ad63d4ba9df4438aaa2106952fbf29d0f33e9432b7845ebeeb9f0a71f3feb6492017c0b1a959af7794755c643bb5054d86f41372559a55de7727ddee2587501147647f01e34252661ef4eb7eee0ecb6b2d1e48b720c099692d89ecc1bb7037fa4ca6323831e919ce026bace1221d48e0b25248f1694e04a6db77972882365675a3f82c209c3428dc5cfeaa41", 0x90}, {&(0x7f00000007c0)="4f6a79fb4f1c0b6c38eb7ded58e70a06e72d652960ffef98bfbc144f8ec08834009d1302dcf2bcd7b38143b91a5e4ebbac96b8d469bfa81be4bd201cd52fcda8201624678ff0a6785178b2f5b1960999b0c796ccd88912a8972a2fad4d7269ebd25b18019fb4cc8736ed06283c75a8b7f23b68a89bdcca266195027ef9b6073d87f026311c2b330435647d92cdbf46e5435ec62f12fbcfe91a000f72217bc315cd44421baa41b9ebc8cf1818ea3543ad0284eb38c49136a7741aed8639c6346300e2a50c30b7268d3158d3f73bb5922cbeecd314ce5cba580813da23818f460b750139", 0xe3}, {&(0x7f00000008c0)="c818019f95ac5521825f1377682be860d0929df5d8", 0x15}], 0x3}}], 0x3, 0x20000000) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) recvfrom$inet6(r0, &(0x7f0000000000)=""/114, 0xfffffffffffffd1b, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000040)) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="00281c80", @ANYRES16=r0, @ANYBLOB="ff"], 0x34}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="f4997c3794"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="58ad000010", 0x5, 0x0, 0x0, 0x0) r1 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f0000000000)='s', 0x10a73, 0x81e, 0x0, 0x4b6ae4f95a5de35b) 06:21:16 executing program 2: r0 = io_uring_setup(0xfc6, &(0x7f0000000180)) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) (async) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000440)={@local, 0x62}) listen(r1, 0x400000001ffffffd) (async) r2 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x12, 0x8, &(0x7f0000000100)=ANY=[@ANYBLOB="851000040000000fbff03e8f", @ANYRES32=0x1, @ANYBLOB="000000000000000018580000070000000000000000000000183800000300000000000000000000005761fcff08000000"], &(0x7f0000000140)='GPL\x00', 0x8001, 0x97, &(0x7f0000000240)=""/151, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x6, 0x4}, 0x8, 0x10, &(0x7f0000000340)={0x5, 0xa, 0x9}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000380)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1]}, 0x80) close_range(r3, r2, 0x0) (async) r4 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r4, 0x0, 0x484, &(0x7f0000000480)=""/8, &(0x7f00000004c0)=0x8) (async) sendto$inet(r2, &(0x7f0000000000)="8f41f40666d2dd4e9a891ad008c85c13b5d7a6ebcb226e76b01a15fe0cf2ce3639544c69d8ec27cdd5584abacb53ee09acfeb43a51bb5438a1972b75d8509e8a55e9197ac948c9b1a12c28935c0880db2c10101a9cb5486e132e1f9775e4b53a7fa2b9eee7458e72fd329ea0f7b05a26906b220ff4cc36337d2ea9e69d7a4cfba5469544fcaaed1c8ceda00d0ba9c8487bd91629800c4ea211dc6efb28d0afae5133d873d592b8ec", 0xa8, 0x20004000, &(0x7f00000000c0)={0x2, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) (async) sendmsg$inet(r2, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 06:21:16 executing program 1: r0 = io_uring_setup(0xfc6, &(0x7f0000000180)) creat(&(0x7f00000000c0)='./bus\x00', 0x0) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x0, 0x1, 0x0, 0x0, 0x4, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x3) close_range(r0, 0xffffffffffffffff, 0x0) 06:21:16 executing program 5: r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e24, @local}, 0x10) writev(r0, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) recvmmsg(r0, &(0x7f0000003e40)=[{{&(0x7f0000000100)=@phonet, 0x80, 0x0, 0x0, &(0x7f00000024c0)=""/4096, 0x1034}}, {{0x0, 0x80100200, 0x0, 0x0, &(0x7f00000035c0)=""/241, 0xf1}}, {{&(0x7f00000036c0)=@un=@abs, 0x80, &(0x7f0000003780)=[{&(0x7f0000003740)=""/4, 0xfffffd07}], 0x1, &(0x7f00000037c0)=""/236, 0xec}}, {{&(0x7f00000038c0)=@l2tp6={0xa, 0x0, 0x0, @private1}, 0x80, &(0x7f0000003bc0)=[{0x0}, {&(0x7f0000003a00)=""/190, 0xbe}, {&(0x7f0000003ac0)=""/131, 0x83}, {0x0}], 0x4, &(0x7f0000003c00)=""/73, 0x49}}, {{&(0x7f0000003c80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, 0x0, 0x0, &(0x7f0000003e00)=""/48, 0x30}}], 0x5, 0x40000121, 0x0) 06:21:16 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f0000000380)={0x3, 0x1, 0x7, 0x2, 0xb3, &(0x7f0000000500)}) ioctl$KDGKBLED(r0, 0x4b64, &(0x7f0000000040)) io_uring_setup(0xfc6, &(0x7f0000000180)) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000240)={0x9b0, 0x9, 0x1, 0x4, 0x3}) listen(r1, 0x400000001ffffffd) r2 = socket$inet_dccp(0x2, 0x6, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f0000000440)=@ipv4_newaddr={0x38, 0x14, 0x8, 0x70bd2d, 0x25dfdbfd, {0x2, 0x78, 0x40, 0xc8}, [@IFA_RT_PRIORITY={0x8, 0x9, 0x9}, @IFA_RT_PRIORITY={0x8, 0x9, 0x200}, @IFA_ADDRESS={0x8, 0x1, @loopback}, @IFA_ADDRESS={0x8, 0x1, @multicast2}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000090}, 0x8000) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev}, 0x10) r3 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$cgroup_subtree(r3, &(0x7f00000003c0)=ANY=[@ANYBLOB="88ed7c48cfb680c42f89f97a7def31f7c3754b660e634848a0626b48d0b96e39c051b0006e7ca14700d0"], 0x8) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x1, 0x0, 0x0, 0x4, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x3) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r4, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) 06:21:16 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000005c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e24, @local}, 0x10) writev(r0, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) recvmmsg(r0, &(0x7f0000003e40)=[{{&(0x7f0000000100)=@phonet, 0x80, 0x0, 0x0, &(0x7f00000024c0)=""/4096, 0x7c80}}, {{0x0, 0x80100200, 0x0, 0x0, &(0x7f00000035c0)=""/241, 0xf1}}, {{&(0x7f00000036c0)=@un=@abs, 0x80, &(0x7f0000003780)=[{&(0x7f0000003740)=""/4, 0xfffffd07}], 0x1, &(0x7f00000037c0)=""/236, 0xec}}, {{&(0x7f00000038c0)=@l2tp6={0xa, 0x0, 0x0, @private1}, 0x80, &(0x7f0000003bc0)=[{0x0}, {&(0x7f0000003a00)=""/190, 0xbe}, {&(0x7f0000003ac0)=""/131, 0x83}, {0x0}], 0x4, &(0x7f0000003c00)=""/73, 0x49}}, {{&(0x7f0000003c80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, 0x0, 0x0, &(0x7f0000003e00)=""/48, 0x30}}], 0x5, 0x40000121, 0x0) 06:21:17 executing program 2: r0 = io_uring_setup(0xfc6, &(0x7f0000000180)) (async) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) (async) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000440)={@local, 0x62}) (async) listen(r1, 0x400000001ffffffd) (async) r2 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev}, 0x10) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x12, 0x8, &(0x7f0000000100)=ANY=[@ANYBLOB="851000040000000fbff03e8f", @ANYRES32=0x1, @ANYBLOB="000000000000000018580000070000000000000000000000183800000300000000000000000000005761fcff08000000"], &(0x7f0000000140)='GPL\x00', 0x8001, 0x97, &(0x7f0000000240)=""/151, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x6, 0x4}, 0x8, 0x10, &(0x7f0000000340)={0x5, 0xa, 0x9}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000380)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1]}, 0x80) close_range(r3, r2, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r4, 0x0, 0x484, &(0x7f0000000480)=""/8, &(0x7f00000004c0)=0x8) (async) sendto$inet(r2, &(0x7f0000000000)="8f41f40666d2dd4e9a891ad008c85c13b5d7a6ebcb226e76b01a15fe0cf2ce3639544c69d8ec27cdd5584abacb53ee09acfeb43a51bb5438a1972b75d8509e8a55e9197ac948c9b1a12c28935c0880db2c10101a9cb5486e132e1f9775e4b53a7fa2b9eee7458e72fd329ea0f7b05a26906b220ff4cc36337d2ea9e69d7a4cfba5469544fcaaed1c8ceda00d0ba9c8487bd91629800c4ea211dc6efb28d0afae5133d873d592b8ec", 0xa8, 0x20004000, &(0x7f00000000c0)={0x2, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) (async) sendmsg$inet(r2, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 06:21:17 executing program 1: r0 = io_uring_setup(0xfc6, &(0x7f0000000180)) creat(&(0x7f00000000c0)='./bus\x00', 0x0) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x0, 0x1, 0x0, 0x0, 0x4, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x3) close_range(r0, 0xffffffffffffffff, 0x0) 06:21:17 executing program 1: r0 = io_uring_setup(0xfc6, &(0x7f0000000180)) creat(&(0x7f00000000c0)='./bus\x00', 0x0) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x3) close_range(r0, 0xffffffffffffffff, 0x0) 06:21:17 executing program 2: r0 = io_uring_setup(0xfc6, &(0x7f0000000180)) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) socketpair(0xb, 0x3, 0x8, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e20, 0xffffffff, @rand_addr=' \x01\x00', 0x1}, 0x1c) listen(r1, 0x400000001ffffffd) r3 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r3, &(0x7f0000e5c000)={0x2, 0x4e20, @dev}, 0x10) sendmsg$inet(r3, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 06:21:17 executing program 1: r0 = io_uring_setup(0xfc6, &(0x7f0000000180)) creat(&(0x7f00000000c0)='./bus\x00', 0x0) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x3) close_range(r0, 0xffffffffffffffff, 0x0) 06:21:17 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) recvmsg(r0, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) (async) sendto$inet6(r0, &(0x7f00000001c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0) (async) recvmsg(r0, &(0x7f00000003c0)={0x0, 0x3, 0x0}, 0x0) (async) recvmsg(r0, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x0) (async) sendmmsg(r0, &(0x7f0000000940)=[{{&(0x7f00000000c0)=@rc={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x2}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000400)="564c59b47e1bb09efd06d1b3035df6428d465f4214e02d6ff12bd64b138cc1feb923533060c45a6ae8be85d8b9c437e7d2e1658c8ad1f90cc5ee44297cbc7dfae777338e8ef0203c2b26eef286dcb4f18ca60e2e41f28baa5ba9c3b0afe3475ff3241618bf652a352f680921d8da0a48a56152f0e10e05db3b99316c916217b6714659ae42be4d427ad05aad52375ae8cc6edc765d92f25225e5dd", 0x9b}, {&(0x7f0000000140)="ea142cfc236ef7349f212fb1ab414fdfe2289de3f1bc85fff22b147daa62501a410a4f28d68a385e10fff58b145b701ad27aaf9236862160b2b221435d0424ac0ddd844f45df1eb24624f3254a0ddfd3e025421df130b060dac96bb0381703944833ed3229f4f36c029786d3df", 0x6d}, {&(0x7f00000004c0)="49f1d9eb689cab3e25f842b2db79cd47719510f1d9d271c62916261a8ed2f07dc81765bb4224d21709d01617fa2103e98f1092185784a38dd007f8fd366544b11fe00c1e3c755f5cd70edbafd05da7b1b6434bdef1b5025037a41df281a5f685a59a986fa9ac9994ce8a9a3e07ed7171dd962fe8d19341a83f5f41cb97b5d89f6e6644984efd054a25eb5971f8242f51c6c010c6aa8b63646fc26a6e98d3d861a64417702d5b913b079142845a5d26a0736cb07acbd21d420c4680e6b68f5297925f81c9546935f4dba5494bdae8424b5c6e80", 0xd3}], 0x3}}, {{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000005c0)="8ca31ae131f6403cc70ff62448e9d6358224da801dc7fbdbcb57ca8ecd5c2082f2b0b1c2b1b2878aabb881bb4e4fc620815c634eed2e6c51879afb747d1a86dcb81f42e2e3c9f30133d3d6ff50e4a68b7c89ec04a9ec657939fffdec98a07f212201fd0a6b989904c4", 0x69}], 0x1}}, {{&(0x7f0000000680)=@pppoe={0x18, 0x0, {0x1, @empty, 'ip6gretap0\x00'}}, 0x80, &(0x7f0000000900)=[{&(0x7f0000000700)="0ffad515ad63d4ba9df4438aaa2106952fbf29d0f33e9432b7845ebeeb9f0a71f3feb6492017c0b1a959af7794755c643bb5054d86f41372559a55de7727ddee2587501147647f01e34252661ef4eb7eee0ecb6b2d1e48b720c099692d89ecc1bb7037fa4ca6323831e919ce026bace1221d48e0b25248f1694e04a6db77972882365675a3f82c209c3428dc5cfeaa41", 0x90}, {&(0x7f00000007c0)="4f6a79fb4f1c0b6c38eb7ded58e70a06e72d652960ffef98bfbc144f8ec08834009d1302dcf2bcd7b38143b91a5e4ebbac96b8d469bfa81be4bd201cd52fcda8201624678ff0a6785178b2f5b1960999b0c796ccd88912a8972a2fad4d7269ebd25b18019fb4cc8736ed06283c75a8b7f23b68a89bdcca266195027ef9b6073d87f026311c2b330435647d92cdbf46e5435ec62f12fbcfe91a000f72217bc315cd44421baa41b9ebc8cf1818ea3543ad0284eb38c49136a7741aed8639c6346300e2a50c30b7268d3158d3f73bb5922cbeecd314ce5cba580813da23818f460b750139", 0xe3}, {&(0x7f00000008c0)="c818019f95ac5521825f1377682be860d0929df5d8", 0x15}], 0x3}}], 0x3, 0x20000000) (async) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) (async, rerun: 32) recvfrom$inet6(r0, &(0x7f0000000000)=""/114, 0xfffffffffffffd1b, 0x0, 0x0, 0x0) (async, rerun: 32) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000040)) (async) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="00281c80", @ANYRES16=r0, @ANYBLOB="ff"], 0x34}}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="f4997c3794"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="58ad000010", 0x5, 0x0, 0x0, 0x0) r1 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f0000000000)='s', 0x10a73, 0x81e, 0x0, 0x4b6ae4f95a5de35b) [ 3103.925191][T29595] netlink: 'syz-executor.4': attribute type 41 has an invalid length. [ 3103.933402][T29595] netlink: 44123 bytes leftover after parsing attributes in process `syz-executor.4'. [ 3103.946029][T29595] A link change request failed with some changes committed already. Interface ip6tnl0 may have been left with an inconsistent configuration, please check. 06:21:17 executing program 1: r0 = io_uring_setup(0xfc6, &(0x7f0000000180)) creat(&(0x7f00000000c0)='./bus\x00', 0x0) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x3) close_range(r0, 0xffffffffffffffff, 0x0) 06:21:17 executing program 2: r0 = io_uring_setup(0xfc6, &(0x7f0000000180)) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) socketpair(0xb, 0x3, 0x8, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e20, 0xffffffff, @rand_addr=' \x01\x00', 0x1}, 0x1c) listen(r1, 0x400000001ffffffd) r3 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r3, &(0x7f0000e5c000)={0x2, 0x4e20, @dev}, 0x10) sendmsg$inet(r3, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) io_uring_setup(0xfc6, &(0x7f0000000180)) (async) socket$inet6(0xa, 0x6, 0x0) (async) bind$inet6(r1, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) (async) socketpair(0xb, 0x3, 0x8, &(0x7f0000000000)) (async) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e20, 0xffffffff, @rand_addr=' \x01\x00', 0x1}, 0x1c) (async) listen(r1, 0x400000001ffffffd) (async) socket$inet_dccp(0x2, 0x6, 0x0) (async) connect$inet(r3, &(0x7f0000e5c000)={0x2, 0x4e20, @dev}, 0x10) (async) sendmsg$inet(r3, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) (async) close_range(r0, 0xffffffffffffffff, 0x0) (async) 06:21:17 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) recvmsg(r0, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) (async) sendto$inet6(r0, &(0x7f00000001c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0) (async) recvmsg(r0, &(0x7f00000003c0)={0x0, 0x3, 0x0}, 0x0) recvmsg(r0, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x0) (async) sendmmsg(r0, &(0x7f0000000940)=[{{&(0x7f00000000c0)=@rc={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x2}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000400)="564c59b47e1bb09efd06d1b3035df6428d465f4214e02d6ff12bd64b138cc1feb923533060c45a6ae8be85d8b9c437e7d2e1658c8ad1f90cc5ee44297cbc7dfae777338e8ef0203c2b26eef286dcb4f18ca60e2e41f28baa5ba9c3b0afe3475ff3241618bf652a352f680921d8da0a48a56152f0e10e05db3b99316c916217b6714659ae42be4d427ad05aad52375ae8cc6edc765d92f25225e5dd", 0x9b}, {&(0x7f0000000140)="ea142cfc236ef7349f212fb1ab414fdfe2289de3f1bc85fff22b147daa62501a410a4f28d68a385e10fff58b145b701ad27aaf9236862160b2b221435d0424ac0ddd844f45df1eb24624f3254a0ddfd3e025421df130b060dac96bb0381703944833ed3229f4f36c029786d3df", 0x6d}, {&(0x7f00000004c0)="49f1d9eb689cab3e25f842b2db79cd47719510f1d9d271c62916261a8ed2f07dc81765bb4224d21709d01617fa2103e98f1092185784a38dd007f8fd366544b11fe00c1e3c755f5cd70edbafd05da7b1b6434bdef1b5025037a41df281a5f685a59a986fa9ac9994ce8a9a3e07ed7171dd962fe8d19341a83f5f41cb97b5d89f6e6644984efd054a25eb5971f8242f51c6c010c6aa8b63646fc26a6e98d3d861a64417702d5b913b079142845a5d26a0736cb07acbd21d420c4680e6b68f5297925f81c9546935f4dba5494bdae8424b5c6e80", 0xd3}], 0x3}}, {{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000005c0)="8ca31ae131f6403cc70ff62448e9d6358224da801dc7fbdbcb57ca8ecd5c2082f2b0b1c2b1b2878aabb881bb4e4fc620815c634eed2e6c51879afb747d1a86dcb81f42e2e3c9f30133d3d6ff50e4a68b7c89ec04a9ec657939fffdec98a07f212201fd0a6b989904c4", 0x69}], 0x1}}, {{&(0x7f0000000680)=@pppoe={0x18, 0x0, {0x1, @empty, 'ip6gretap0\x00'}}, 0x80, &(0x7f0000000900)=[{&(0x7f0000000700)="0ffad515ad63d4ba9df4438aaa2106952fbf29d0f33e9432b7845ebeeb9f0a71f3feb6492017c0b1a959af7794755c643bb5054d86f41372559a55de7727ddee2587501147647f01e34252661ef4eb7eee0ecb6b2d1e48b720c099692d89ecc1bb7037fa4ca6323831e919ce026bace1221d48e0b25248f1694e04a6db77972882365675a3f82c209c3428dc5cfeaa41", 0x90}, {&(0x7f00000007c0)="4f6a79fb4f1c0b6c38eb7ded58e70a06e72d652960ffef98bfbc144f8ec08834009d1302dcf2bcd7b38143b91a5e4ebbac96b8d469bfa81be4bd201cd52fcda8201624678ff0a6785178b2f5b1960999b0c796ccd88912a8972a2fad4d7269ebd25b18019fb4cc8736ed06283c75a8b7f23b68a89bdcca266195027ef9b6073d87f026311c2b330435647d92cdbf46e5435ec62f12fbcfe91a000f72217bc315cd44421baa41b9ebc8cf1818ea3543ad0284eb38c49136a7741aed8639c6346300e2a50c30b7268d3158d3f73bb5922cbeecd314ce5cba580813da23818f460b750139", 0xe3}, {&(0x7f00000008c0)="c818019f95ac5521825f1377682be860d0929df5d8", 0x15}], 0x3}}], 0x3, 0x20000000) (async) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) recvfrom$inet6(r0, &(0x7f0000000000)=""/114, 0xfffffffffffffd1b, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000040)) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="00281c80", @ANYRES16=r0, @ANYBLOB="ff"], 0x34}}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="f4997c3794"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="58ad000010", 0x5, 0x0, 0x0, 0x0) (async) r1 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f0000000000)='s', 0x10a73, 0x81e, 0x0, 0x4b6ae4f95a5de35b) [ 3104.059454][T29636] netlink: 'syz-executor.4': attribute type 41 has an invalid length. [ 3104.067721][T29636] netlink: 44123 bytes leftover after parsing attributes in process `syz-executor.4'. [ 3104.100154][T29636] A link change request failed with some changes committed already. Interface ip6tnl0 may have been left with an inconsistent configuration, please check. 06:21:17 executing program 2: r0 = io_uring_setup(0xfc6, &(0x7f0000000180)) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) (async) bind$inet6(r1, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) socketpair(0xb, 0x3, 0x8, &(0x7f0000000000)) (async) socketpair(0xb, 0x3, 0x8, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e20, 0xffffffff, @rand_addr=' \x01\x00', 0x1}, 0x1c) listen(r1, 0x400000001ffffffd) r3 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r3, &(0x7f0000e5c000)={0x2, 0x4e20, @dev}, 0x10) sendmsg$inet(r3, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) (async) sendmsg$inet(r3, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 06:21:26 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) recvmsg(r0, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) sendto$inet6(r0, &(0x7f00000001c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0) recvmsg(r0, &(0x7f00000003c0)={0x0, 0x3, 0x0, 0xfffffffffffffcb0}, 0x0) recvmsg(r0, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) recvfrom$inet6(r0, &(0x7f0000000000)=""/114, 0xfffffffffffffd1b, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000040)) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="00281c80", @ANYRES16=r0, @ANYBLOB="ff"], 0x34}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="f4997c3794"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="58ad000010", 0x5, 0x0, 0x0, 0x0) r1 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f0000000000)='s', 0x10a73, 0x81e, 0x0, 0x4b6ae4f95a5de35b) 06:21:26 executing program 5: r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e24, @local}, 0x10) writev(r0, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) recvmmsg(r0, &(0x7f0000003e40)=[{{&(0x7f0000000100)=@phonet, 0x80, 0x0, 0x0, &(0x7f00000024c0)=""/4096, 0x1400}}, {{0x0, 0x80100200, 0x0, 0x0, &(0x7f00000035c0)=""/241, 0xf1}}, {{&(0x7f00000036c0)=@un=@abs, 0x80, &(0x7f0000003780)=[{&(0x7f0000003740)=""/4, 0xfffffd07}], 0x1, &(0x7f00000037c0)=""/236, 0xec}}, {{&(0x7f00000038c0)=@l2tp6={0xa, 0x0, 0x0, @private1}, 0x80, &(0x7f0000003bc0)=[{0x0}, {&(0x7f0000003a00)=""/190, 0xbe}, {&(0x7f0000003ac0)=""/131, 0x83}, {0x0}], 0x4, &(0x7f0000003c00)=""/73, 0x49}}, {{&(0x7f0000003c80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, 0x0, 0x0, &(0x7f0000003e00)=""/48, 0x30}}], 0x5, 0x40000121, 0x0) 06:21:26 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000005c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e24, @local}, 0x10) writev(r0, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) recvmmsg(r0, &(0x7f0000003e40)=[{{&(0x7f0000000100)=@phonet, 0x80, 0x0, 0x0, &(0x7f00000024c0)=""/4096, 0x7e00}}, {{0x0, 0x80100200, 0x0, 0x0, &(0x7f00000035c0)=""/241, 0xf1}}, {{&(0x7f00000036c0)=@un=@abs, 0x80, &(0x7f0000003780)=[{&(0x7f0000003740)=""/4, 0xfffffd07}], 0x1, &(0x7f00000037c0)=""/236, 0xec}}, {{&(0x7f00000038c0)=@l2tp6={0xa, 0x0, 0x0, @private1}, 0x80, &(0x7f0000003bc0)=[{0x0}, {&(0x7f0000003a00)=""/190, 0xbe}, {&(0x7f0000003ac0)=""/131, 0x83}, {0x0}], 0x4, &(0x7f0000003c00)=""/73, 0x49}}, {{&(0x7f0000003c80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, 0x0, 0x0, &(0x7f0000003e00)=""/48, 0x30}}], 0x5, 0x40000121, 0x0) 06:21:26 executing program 1: r0 = io_uring_setup(0xfc6, &(0x7f0000000180)) creat(&(0x7f00000000c0)='./bus\x00', 0x0) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x3) close_range(r0, 0xffffffffffffffff, 0x0) 06:21:26 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f0000000380)={0x3, 0x1, 0x7, 0x2, 0xb3, &(0x7f0000000500)}) ioctl$KDGKBLED(r0, 0x4b64, &(0x7f0000000040)) io_uring_setup(0xfc6, &(0x7f0000000180)) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000240)={0x9b0, 0x9, 0x1, 0x4, 0x3}) listen(r1, 0x400000001ffffffd) r2 = socket$inet_dccp(0x2, 0x6, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f0000000440)=@ipv4_newaddr={0x38, 0x14, 0x8, 0x70bd2d, 0x25dfdbfd, {0x2, 0x78, 0x40, 0xc8}, [@IFA_RT_PRIORITY={0x8, 0x9, 0x9}, @IFA_RT_PRIORITY={0x8, 0x9, 0x200}, @IFA_ADDRESS={0x8, 0x1, @loopback}, @IFA_ADDRESS={0x8, 0x1, @multicast2}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000090}, 0x8000) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev}, 0x10) r3 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$cgroup_subtree(r3, &(0x7f00000003c0)=ANY=[@ANYBLOB="88ed7c48cfb680c42f89f97a7def31f7c3754b660e634848a0626b48d0b96e39c051b0006e7ca14700d0"], 0x8) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x1, 0x0, 0x0, 0x4, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x3) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r4, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) 06:21:26 executing program 2: r0 = io_uring_setup(0xfc6, &(0x7f0000000180)) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) listen(r1, 0x400000001ffffffd) r2 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev}, 0x10) sendmsg$inet(r2, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000000)=[@in6={0xa, 0x4e22, 0x80, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xcf}, @in6={0xa, 0x4e24, 0x80000001, @loopback, 0xdc5a}, @in6={0xa, 0x4e24, 0x1, @private2, 0x6}, @in={0x2, 0x4e21, @multicast2}, @in6={0xa, 0x4e20, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x4}, @in={0x2, 0x4e20, @multicast2}], 0x90) close_range(r0, 0xffffffffffffffff, 0x0) 06:21:26 executing program 1: r0 = io_uring_setup(0xfc6, &(0x7f0000000180)) creat(&(0x7f00000000c0)='./bus\x00', 0x0) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x3) close_range(r0, 0xffffffffffffffff, 0x0) 06:21:26 executing program 2: r0 = io_uring_setup(0xfc6, &(0x7f0000000180)) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) listen(r1, 0x400000001ffffffd) r2 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev}, 0x10) sendmsg$inet(r2, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000000)=[@in6={0xa, 0x4e22, 0x80, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xcf}, @in6={0xa, 0x4e24, 0x80000001, @loopback, 0xdc5a}, @in6={0xa, 0x4e24, 0x1, @private2, 0x6}, @in={0x2, 0x4e21, @multicast2}, @in6={0xa, 0x4e20, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x4}, @in={0x2, 0x4e20, @multicast2}], 0x90) close_range(r0, 0xffffffffffffffff, 0x0) io_uring_setup(0xfc6, &(0x7f0000000180)) (async) socket$inet6(0xa, 0x6, 0x0) (async) bind$inet6(r1, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) (async) listen(r1, 0x400000001ffffffd) (async) socket$inet_dccp(0x2, 0x6, 0x0) (async) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev}, 0x10) (async) sendmsg$inet(r2, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) (async) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000000)=[@in6={0xa, 0x4e22, 0x80, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xcf}, @in6={0xa, 0x4e24, 0x80000001, @loopback, 0xdc5a}, @in6={0xa, 0x4e24, 0x1, @private2, 0x6}, @in={0x2, 0x4e21, @multicast2}, @in6={0xa, 0x4e20, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x4}, @in={0x2, 0x4e20, @multicast2}], 0x90) (async) close_range(r0, 0xffffffffffffffff, 0x0) (async) 06:21:26 executing program 1: r0 = io_uring_setup(0xfc6, &(0x7f0000000180)) creat(&(0x7f00000000c0)='./bus\x00', 0x0) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x3) close_range(r0, 0xffffffffffffffff, 0x0) 06:21:26 executing program 2: r0 = io_uring_setup(0xfc6, &(0x7f0000000180)) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) (async) listen(r1, 0x400000001ffffffd) r2 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev}, 0x10) (async) sendmsg$inet(r2, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) (async) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000000)=[@in6={0xa, 0x4e22, 0x80, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xcf}, @in6={0xa, 0x4e24, 0x80000001, @loopback, 0xdc5a}, @in6={0xa, 0x4e24, 0x1, @private2, 0x6}, @in={0x2, 0x4e21, @multicast2}, @in6={0xa, 0x4e20, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x4}, @in={0x2, 0x4e20, @multicast2}], 0x90) close_range(r0, 0xffffffffffffffff, 0x0) 06:21:26 executing program 1: r0 = io_uring_setup(0xfc6, &(0x7f0000000180)) creat(&(0x7f00000000c0)='./bus\x00', 0x0) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 06:21:26 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) recvmsg(r0, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) sendto$inet6(r0, &(0x7f00000001c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0) (async) recvmsg(r0, &(0x7f00000003c0)={0x0, 0x3, 0x0, 0xfffffffffffffcb0}, 0x0) (async) recvmsg(r0, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x0) (async) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) (async) recvfrom$inet6(r0, &(0x7f0000000000)=""/114, 0xfffffffffffffd1b, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000040)) (async) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="00281c80", @ANYRES16=r0, @ANYBLOB="ff"], 0x34}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="f4997c3794"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="58ad000010", 0x5, 0x0, 0x0, 0x0) r1 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f0000000000)='s', 0x10a73, 0x81e, 0x0, 0x4b6ae4f95a5de35b) [ 3113.278242][T29664] netlink: 18367 bytes leftover after parsing attributes in process `syz-executor.4'. 06:21:26 executing program 2: r0 = io_uring_setup(0xfc6, &(0x7f00000000c0)={0x0, 0xffffffff, 0x20}) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x404e20, 0xfffffffe, @empty}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev}, 0x10) getsockopt$SO_COOKIE(r1, 0x1, 0x39, &(0x7f0000000000), &(0x7f0000000080)=0x8) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000140), 0x600, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'bridge_slave_1\x00'}, @IFLA_MASTER={0x8, 0xa, r6}, @IFLA_MTU={0x8, 0x4, 0x1da}]}, 0x44}}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000001c40)={'veth1_virt_wifi\x00', 0x0}) sendmmsg$inet6(r3, &(0x7f0000003580)=[{{0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000000180)="48613ca3c58ec781e907c59ee9364d4f423c8840444f8acf5d06d2f3a1242ff0ce3858b302b7054d5295b3390c01cca719bfbc2e490d2610098f4d9349436a13", 0x40}, {&(0x7f0000000240)="20b87b8e5f6a09844226b64fa59c50cb43a72121954a90e965dc81eaea517b88bac3160aa93e15b0cc3a43c9a776b7a20b57d8efbd5d0b45fd6a60d146289e3fbd70075d4d70efc7b14c592ef4c243ca1f8b3477b6e9dda39f30c313f233c6b0457a6d7f38a97b452b79464c9b56177df39a34475de3ae5d253396cebe208e914406317f", 0x84}, {&(0x7f0000000300)="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", 0x1000}, {&(0x7f0000001300)="bb2d6509bef7184fe029b885024ea131f325104fede00142bd225735e8fc8a19af5885a76eb104f7bcb7a40fc12721ebfd4397500e03c30fb3c080a80e1c244437e80d69f77c2de016cdc1a80c32fe97e817e4c80421c2fa26eb363dc5e384c5e73e3bbdb09c77f1adb8e29f804f5ccc01d391adafb2ddaf6c5dd985fc8370c91e494feb3a5f4957ba60d5071c905d4878b1", 0x92}, {&(0x7f00000001c0)="29d98848925d715d7f25978393db2fc9101b2281afd88cf28813d502c936b10fc6b326c9b3c4a7d16c437d", 0x2b}, {&(0x7f00000013c0)="b7699c6fc433cfba46452e30dc135106d52e6b10666b09ba381ab0e179a50dcf0797a4e4537c4acbf007d551cc3302b0f7115441b65a0c4c2ad4e91f4463190e24d60719daacd12f3b7bd78c", 0x4c}, {&(0x7f0000001440)="762f69d1b56a91a047ca5d80402cfe7388114d1f3237a1fffd7aaa18cf9b63c7f9d8f9d71b1db5ddc6844de947246e35fc4e93d7a4d9295f506162b4a6653ac4bd809dadbe79cde28ef5e081df5caad30160877a9849ee2aba704ef12c7cb447e289b296fd006edadcd69bc05c11b47afefb1a974fb958ccb8dd187e30ce9613455917418174c12443189fd840d9b9fea8cf49c6babaa3f34625eda83a8537ded2fc5a8ddf30858b0565b70ecd2cfd3a52e40b5137c802a2fa5bae7df34f85725e539bfb9c8d012dae5730351fbd98231a69697bf2ebad81c6808a5c565d5453f9f41bf01cf981d60f98dfac", 0xec}, {&(0x7f0000001540)="7da69e6dfd74c63ebc8ed43b24bd4ff9463f6f94d7cefed244e00063b286dd209a40225aff4054e5e9acae82299eef10fc302018194698e05906dfe23a23c2e34d9f9a4bc2f499f1fa7a684b33c54dc4a0599ae5df3d094eedeb4bb5be476292a0ce7b78b6fd9fa28567904381b3d381ba22ef4088bc566b465fa36dd90bdbd439ef513bb68ebab713ea9efebcac5a544bca0cfedea6037ad875c7f93cc267b6a37d3cd54522974282cc504b9d6f28f19ec6adf00bc1e0a5d9300b09716e22c3739b8298d27f8de8682b85b513dbcfff8ee80197e801a425dc28f6de1e461298d45e99b3e45256edd6", 0xe9}, {&(0x7f0000001640)="8e7d976fc601459242043a7d0af323ffb0f3daf03083c30437129da85a620220f2810b42202eb56521233d79026460407ea1904946fda90c039b01cd8d8a262f948f9a2f26706e8e6a66ab5e9f21c65e64a343fde003c8c5fc6cc3e3ac490eb5340757c49344b0ee8c794fa53d244f516b782966d3c530a2feb9e9da7d286622419ab24e09cf384d2d218e40e950c41083aeb1460acb700e72bf5e5569c109bb3d756fa2cd11e82857d443987e97378745e11a9051995de3a2b7cf62ca3ad87ca0a2fd2c73241aea93beef79d077acd12af919fcf2fe4d278954af0a604a7ffd35ed2269a6fd4d", 0xe7}, {&(0x7f0000001740)="ee68c53fc64611248f49fd890398e6a25a71deba41740eecdd25de2d75da3459137b31efd3a32768379518964b0b4cfda72dc330e0cb3a352bb8c22ddd50e4679829aebf1a10ee1f7f4695043a079de926e0735d13dd34ce2703a89998a4a9919d2f7ce4bb5b4e5228bd498fdaea8055132d2520ac22b5c1f797f6d51eb8e1f5ee99f24428babeadf0d56b32b2ad6352b70c34125f730fba716fa642590770fc8c2ebb7e8c19a91fbb4d8f2c2a378e820677ec98d3edae73bfae772be389550ba0b75b48a343dfff58bc41685dab1df0c53e", 0xd2}], 0xa, &(0x7f0000001900)=[@dontfrag={{0x14, 0x29, 0x3e, 0x73}}, @rthdrdstopts={{0x40, 0x29, 0x37, {0x87, 0x4, '\x00', [@hao={0xc9, 0x10, @remote}, @ra={0x5, 0x2, 0x81}, @pad1, @enc_lim={0x4, 0x1, 0x6}, @pad1, @ra={0x5, 0x2, 0xfbff}]}}}, @rthdrdstopts={{0x18, 0x29, 0x37, {0x3c}}}, @rthdrdstopts={{0x78, 0x29, 0x37, {0x6, 0xb, '\x00', [@generic={0x20, 0x52, "643d83f26b79db140a88e13fea1c32e6a6b47e3776a381a31a03bbfccb9c9647823a70135059d55cc58756cc2ca3815ecf39523a5cf99f5345c6b0cf7250005434742debbd1e0d2e969c2208410f03096a3b"}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}]}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x3}}, @hoplimit={{0x14, 0x29, 0x34, 0x800}}, @dstopts={{0x28, 0x29, 0x37, {0x1d, 0x1, '\x00', [@enc_lim={0x4, 0x1, 0x8}, @ra={0x5, 0x2, 0x7}, @enc_lim={0x4, 0x1, 0x2}]}}}, @pktinfo={{0x24, 0x29, 0x32, {@private2={0xfc, 0x2, '\x00', 0x1}, r6}}}, @tclass={{0x14, 0x29, 0x43, 0x200}}], 0x180}}, {{0x0, 0x0, &(0x7f0000001c00)=[{&(0x7f0000001a80)="d4173f955ebd69651d6538cb79129fc01cd132af0118e7c817ba5e78c7a4a62807de3d11be63a6d9e69ed7345642c98c05f3c226a6b3f00bf13078311409d509faa37cb1c40ae5389cafa20cbda2469320ff0711b3875836f38b920b5b36f7b6c23185cc7e9f88d59b160eff938201", 0x6f}, {&(0x7f0000001b00)="5ed47416e1b270646bf60cfb6c5c005d87167e0cad491ff847d73bc58c4ec788e9def4c4d18d29ee5f6a34a39dcdee53a13bdab78f924809a527582ff0fcefbea6b8c4986a15d9eda142cba10ace81be34b96ff190a8b6c03862e5ab0f6509e9dfeea589e9187072ee6cc79a06d94360821115cf37d8a9c982d7730bf942367822c2169c42193bb9e7ad5bb3ee5d077067761edb272a37fc85e3f39915ae31365ace1e9fab2183e0f33866e600b6f3947f605640e00419bc6181037a4b4cbc58291787daf2ecaeb2fa2d19c8ae4c071c8a78222c0c24fa80513aeab730bd4075c8", 0xe1}], 0x2, &(0x7f0000001c80)=[@tclass={{0x14, 0x29, 0x43, 0x1}}, @pktinfo={{0x24, 0x29, 0x32, {@loopback, r7}}}], 0x40}}, {{&(0x7f0000001cc0)={0xa, 0x4e24, 0x80000000, @loopback, 0x7}, 0x1c, &(0x7f00000021c0)=[{&(0x7f0000001d00)="52c784283c00e37a2f4adc5e8be1dd11de3b1fe5e5d59040ce3c373b65b383ab2a2f698cfffb8c3b6429fcf118da5f9556dc6857f1268d71790df6a5cc2066fcb9e171980f973bebba3f291d4a0699d2e2c614d0440fa0ac2df9de4b32c3f9a8e71c8003bd45489cd1c0ab66e883816e51e90c2a4a4e", 0x76}, {&(0x7f0000001d80)="4f2f1aac250c4fb7fd65aa0b9b216a6492ec4c3be9c9958806f896fdd95f68a5aa3f7322291741b012fec3666e87c3c2363715911d617c9a0032e3f1dc86c23874e0ae4d5e3f212f02453f1a2239bc9f4ea68d0f832e2c2667b05f73c8", 0x5d}, {&(0x7f0000001e00)="d1768bff912705d4800b2675d7acb45c8a42eabb7dd767ddba3de961d8e963f5dddae1d8bcf9abdc332df13237a2b3059458dd9e65317d6a14ee2bdc2d0bd5aaa87bf06860ebd8b45bece3f0cb0e2cef7048f4deac46a3aa31401c1358317fc6f73458270f9021c6", 0x68}, {&(0x7f0000001e80)="f679fc2988870c8a28cdb4e2de17b5e5aef04aac5026363618b663993069dc92dcf158bfa474d11910be11c131d1fa74c78ed3728a312adf0986516fc2f224e7e2dae190e20276874a9c21fb0d5db5294276b1fb5705d5b7ee45b84a54bcbf67878d821529de0c241f318f212a9000a34d5087f835b0a2feb097f7a5dc1d1148b229b52f8cbb4b53b947a1759a51c55bdb5d3b747587fb0240fde0359c8dddce3b9bf22d82eeb46a25153f583b2e4e29c620f9309450c3a8d1bc33cafc5c1a942a42dc031f575fdd5b2409b503054ab5cc2523506500c271a54cb2399af48d1058e8510655fc", 0xe6}, {&(0x7f0000001f80)="991e2c4e7c135a2b87c260a36019260b29b8ce31927a313e5f93b1e1df2b4b29cb0e873efaab39afc3e0b84d0ee3a82fa04407aa6240f2e5926b79f62c85c118f6c741d54f4fc2686d3126fbdcb036cc946a3bf09b5dfa6f54ca389c872243ba681ba74c2a4a160d6f4b5a9dd9a743a8b198dadc7ff6c4c17e626c3b81231fbe87189b10698d0477273aaf0f07293fe718da763dab94bee996ec58b8e1168b813106488fe8485b96", 0xa8}, {&(0x7f0000002040)="7fbbd6f779c5965872fffbd0f7fcc7a00762", 0x12}, {&(0x7f0000002080)="0a93693c9424dba89a0398d8c161d6943c56f06a3af2b5984de3bb66cc6654c63338cecb2e400c71b1041477ff05ad3c9a4538b8484465d705e2c39e0c8dd1f4d379d8a14a5401d84e6db9d8cc88e2f7d09ef2ac59a28831d83b1febe54bd4a4e39195886f7cdb0928c2888fbcc003082276ebba6bebde705276e54da6eb810e611eae1c988e1c1ff1671522721dee2204ce7b9dc233408d7799219743d08ee21337156d31b87053a1d4902fd0df49534b8ae283f511408f0a99d3e2a964cf105c9376f29264a5b50b2bb29371b83bd622204805edfb6af5d0e7df24e0213afdf8d90b4738205c4dbd08768a", 0xec}, {&(0x7f0000002180)="12d2a1c83bb4d02a36788be515f64321949ac1a4b627293e47a9f81ea6dc1ac1", 0x20}], 0x8, &(0x7f00000036c0)=ANY=[@ANYBLOB="1400000000000000290000000bfe0000008d73fa16ca2b00240000e7ffffff002900000032000000000000010000000000002017b458afe851393b7b302252108b781cfc64a5cd7a98d9466e2df9b9085c8ac0f9ff130b6bc640b625481d7839a62e8b6728e4748c5d1f5f3e5ab39aff740c9962dc0e3d976aa66019f88cc13f1a2d05025803c0a69c56ba271c927cf65d19702d5af709b42e1ffdd1cd4e42842406fc51e2efaebca9f01d11000000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x40}}, {{&(0x7f0000002280)={0xa, 0x4e24, 0x9, @private1, 0x8}, 0x1c, &(0x7f00000022c0), 0x0, &(0x7f0000002300)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0xfffffffb}}], 0x18}}, {{&(0x7f0000002340)={0xa, 0x4e21, 0x7, @private2, 0x7}, 0x1c, &(0x7f0000002480)=[{&(0x7f0000002380)="70af8e1c90d7ae8df2a204a61de52be2dfee991c2811d87af00520b80494a2dbe6101790cdc09bb8a2a9a8e60571f8bd1205d8c58740301cf8b01c5ec750d83d81b06adcb79ae169a8e762f6d0e652b6705a1c081461d2c8dc2f2fc10370c2e6e1c552946f54633dd932844a37208521df1932d0329e64f69754b064d727f6e2bbd416eece6834caa7a5338fb017f5a5fdac267b892d7aeef386cadd9a81d328bfbc39ebd22d759e24aceceabcaa1533a0c9fcd94994406551b30074d3a3d9bf34a024cd99e3999b2c1529c8d6f278fe", 0xd0}], 0x1, &(0x7f00000024c0)=[@hopopts={{0x10c0, 0x29, 0x36, {0x5c, 0x214, '\x00', [@generic={0x1, 0x4c, "a6bbcd858b3582df854e9c1c89b381b91ed0fad8623e45ab8a5ac029a06454b10a63caea4e28931413b01bb68ce56e9dd603544fc9a579bc32ae755721faa3e2e59cd5b66e4990c3356af8bd"}, @hao={0xc9, 0x10, @local}, @generic={0x38, 0x3, "f7aa81"}, @jumbo={0xc2, 0x4, 0x5}, @padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @generic={0x9, 0x1000, "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"}, @enc_lim={0x4, 0x1, 0x3f}, @generic={0x86, 0x12, "8f37b2e4afe770f22d27098c4bc19886cf59"}, @hao={0xc9, 0x10, @private0={0xfc, 0x0, '\x00', 0x1}}, @padn={0x1, 0x1, [0x0]}]}}}], 0x10c0}}], 0x5, 0x40) sendmsg$inet(r2, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) [ 3121.622009][T29693] ref_ctr going negative. vaddr: 0x20000004, curr val: -18737, delta: 1 [ 3121.630396][T29693] ref_ctr increment failed for inode: 0x48b offset: 0x0 ref_ctr_offset: 0x4 of mm: 0xffff888139ec2a40 06:21:35 executing program 1: io_uring_setup(0xfc6, &(0x7f0000000180)) creat(&(0x7f00000000c0)='./bus\x00', 0x0) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 06:21:35 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) recvmsg(r0, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) (async) sendto$inet6(r0, &(0x7f00000001c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0) (async) recvmsg(r0, &(0x7f00000003c0)={0x0, 0x3, 0x0, 0xfffffffffffffcb0}, 0x0) (async) recvmsg(r0, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x0) (async) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) (async) recvfrom$inet6(r0, &(0x7f0000000000)=""/114, 0xfffffffffffffd1b, 0x0, 0x0, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000040)) (async) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="00281c80", @ANYRES16=r0, @ANYBLOB="ff"], 0x34}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="f4997c3794"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="58ad000010", 0x5, 0x0, 0x0, 0x0) (async) r1 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f0000000000)='s', 0x10a73, 0x81e, 0x0, 0x4b6ae4f95a5de35b) 06:21:35 executing program 2: r0 = io_uring_setup(0xfc6, &(0x7f00000000c0)={0x0, 0xffffffff, 0x20}) (async) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x404e20, 0xfffffffe, @empty}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev}, 0x10) (async) getsockopt$SO_COOKIE(r1, 0x1, 0x39, &(0x7f0000000000), &(0x7f0000000080)=0x8) (async) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000140), 0x600, 0x0) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) (async) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'bridge_slave_1\x00'}, @IFLA_MASTER={0x8, 0xa, r6}, @IFLA_MTU={0x8, 0x4, 0x1da}]}, 0x44}}, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000001c40)={'veth1_virt_wifi\x00', 0x0}) sendmmsg$inet6(r3, &(0x7f0000003580)=[{{0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000000180)="48613ca3c58ec781e907c59ee9364d4f423c8840444f8acf5d06d2f3a1242ff0ce3858b302b7054d5295b3390c01cca719bfbc2e490d2610098f4d9349436a13", 0x40}, {&(0x7f0000000240)="20b87b8e5f6a09844226b64fa59c50cb43a72121954a90e965dc81eaea517b88bac3160aa93e15b0cc3a43c9a776b7a20b57d8efbd5d0b45fd6a60d146289e3fbd70075d4d70efc7b14c592ef4c243ca1f8b3477b6e9dda39f30c313f233c6b0457a6d7f38a97b452b79464c9b56177df39a34475de3ae5d253396cebe208e914406317f", 0x84}, {&(0x7f0000000300)="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", 0x1000}, {&(0x7f0000001300)="bb2d6509bef7184fe029b885024ea131f325104fede00142bd225735e8fc8a19af5885a76eb104f7bcb7a40fc12721ebfd4397500e03c30fb3c080a80e1c244437e80d69f77c2de016cdc1a80c32fe97e817e4c80421c2fa26eb363dc5e384c5e73e3bbdb09c77f1adb8e29f804f5ccc01d391adafb2ddaf6c5dd985fc8370c91e494feb3a5f4957ba60d5071c905d4878b1", 0x92}, {&(0x7f00000001c0)="29d98848925d715d7f25978393db2fc9101b2281afd88cf28813d502c936b10fc6b326c9b3c4a7d16c437d", 0x2b}, {&(0x7f00000013c0)="b7699c6fc433cfba46452e30dc135106d52e6b10666b09ba381ab0e179a50dcf0797a4e4537c4acbf007d551cc3302b0f7115441b65a0c4c2ad4e91f4463190e24d60719daacd12f3b7bd78c", 0x4c}, {&(0x7f0000001440)="762f69d1b56a91a047ca5d80402cfe7388114d1f3237a1fffd7aaa18cf9b63c7f9d8f9d71b1db5ddc6844de947246e35fc4e93d7a4d9295f506162b4a6653ac4bd809dadbe79cde28ef5e081df5caad30160877a9849ee2aba704ef12c7cb447e289b296fd006edadcd69bc05c11b47afefb1a974fb958ccb8dd187e30ce9613455917418174c12443189fd840d9b9fea8cf49c6babaa3f34625eda83a8537ded2fc5a8ddf30858b0565b70ecd2cfd3a52e40b5137c802a2fa5bae7df34f85725e539bfb9c8d012dae5730351fbd98231a69697bf2ebad81c6808a5c565d5453f9f41bf01cf981d60f98dfac", 0xec}, {&(0x7f0000001540)="7da69e6dfd74c63ebc8ed43b24bd4ff9463f6f94d7cefed244e00063b286dd209a40225aff4054e5e9acae82299eef10fc302018194698e05906dfe23a23c2e34d9f9a4bc2f499f1fa7a684b33c54dc4a0599ae5df3d094eedeb4bb5be476292a0ce7b78b6fd9fa28567904381b3d381ba22ef4088bc566b465fa36dd90bdbd439ef513bb68ebab713ea9efebcac5a544bca0cfedea6037ad875c7f93cc267b6a37d3cd54522974282cc504b9d6f28f19ec6adf00bc1e0a5d9300b09716e22c3739b8298d27f8de8682b85b513dbcfff8ee80197e801a425dc28f6de1e461298d45e99b3e45256edd6", 0xe9}, {&(0x7f0000001640)="8e7d976fc601459242043a7d0af323ffb0f3daf03083c30437129da85a620220f2810b42202eb56521233d79026460407ea1904946fda90c039b01cd8d8a262f948f9a2f26706e8e6a66ab5e9f21c65e64a343fde003c8c5fc6cc3e3ac490eb5340757c49344b0ee8c794fa53d244f516b782966d3c530a2feb9e9da7d286622419ab24e09cf384d2d218e40e950c41083aeb1460acb700e72bf5e5569c109bb3d756fa2cd11e82857d443987e97378745e11a9051995de3a2b7cf62ca3ad87ca0a2fd2c73241aea93beef79d077acd12af919fcf2fe4d278954af0a604a7ffd35ed2269a6fd4d", 0xe7}, {&(0x7f0000001740)="ee68c53fc64611248f49fd890398e6a25a71deba41740eecdd25de2d75da3459137b31efd3a32768379518964b0b4cfda72dc330e0cb3a352bb8c22ddd50e4679829aebf1a10ee1f7f4695043a079de926e0735d13dd34ce2703a89998a4a9919d2f7ce4bb5b4e5228bd498fdaea8055132d2520ac22b5c1f797f6d51eb8e1f5ee99f24428babeadf0d56b32b2ad6352b70c34125f730fba716fa642590770fc8c2ebb7e8c19a91fbb4d8f2c2a378e820677ec98d3edae73bfae772be389550ba0b75b48a343dfff58bc41685dab1df0c53e", 0xd2}], 0xa, &(0x7f0000001900)=[@dontfrag={{0x14, 0x29, 0x3e, 0x73}}, @rthdrdstopts={{0x40, 0x29, 0x37, {0x87, 0x4, '\x00', [@hao={0xc9, 0x10, @remote}, @ra={0x5, 0x2, 0x81}, @pad1, @enc_lim={0x4, 0x1, 0x6}, @pad1, @ra={0x5, 0x2, 0xfbff}]}}}, @rthdrdstopts={{0x18, 0x29, 0x37, {0x3c}}}, @rthdrdstopts={{0x78, 0x29, 0x37, {0x6, 0xb, '\x00', [@generic={0x20, 0x52, "643d83f26b79db140a88e13fea1c32e6a6b47e3776a381a31a03bbfccb9c9647823a70135059d55cc58756cc2ca3815ecf39523a5cf99f5345c6b0cf7250005434742debbd1e0d2e969c2208410f03096a3b"}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}]}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x3}}, @hoplimit={{0x14, 0x29, 0x34, 0x800}}, @dstopts={{0x28, 0x29, 0x37, {0x1d, 0x1, '\x00', [@enc_lim={0x4, 0x1, 0x8}, @ra={0x5, 0x2, 0x7}, @enc_lim={0x4, 0x1, 0x2}]}}}, @pktinfo={{0x24, 0x29, 0x32, {@private2={0xfc, 0x2, '\x00', 0x1}, r6}}}, @tclass={{0x14, 0x29, 0x43, 0x200}}], 0x180}}, {{0x0, 0x0, &(0x7f0000001c00)=[{&(0x7f0000001a80)="d4173f955ebd69651d6538cb79129fc01cd132af0118e7c817ba5e78c7a4a62807de3d11be63a6d9e69ed7345642c98c05f3c226a6b3f00bf13078311409d509faa37cb1c40ae5389cafa20cbda2469320ff0711b3875836f38b920b5b36f7b6c23185cc7e9f88d59b160eff938201", 0x6f}, {&(0x7f0000001b00)="5ed47416e1b270646bf60cfb6c5c005d87167e0cad491ff847d73bc58c4ec788e9def4c4d18d29ee5f6a34a39dcdee53a13bdab78f924809a527582ff0fcefbea6b8c4986a15d9eda142cba10ace81be34b96ff190a8b6c03862e5ab0f6509e9dfeea589e9187072ee6cc79a06d94360821115cf37d8a9c982d7730bf942367822c2169c42193bb9e7ad5bb3ee5d077067761edb272a37fc85e3f39915ae31365ace1e9fab2183e0f33866e600b6f3947f605640e00419bc6181037a4b4cbc58291787daf2ecaeb2fa2d19c8ae4c071c8a78222c0c24fa80513aeab730bd4075c8", 0xe1}], 0x2, &(0x7f0000001c80)=[@tclass={{0x14, 0x29, 0x43, 0x1}}, @pktinfo={{0x24, 0x29, 0x32, {@loopback, r7}}}], 0x40}}, {{&(0x7f0000001cc0)={0xa, 0x4e24, 0x80000000, @loopback, 0x7}, 0x1c, &(0x7f00000021c0)=[{&(0x7f0000001d00)="52c784283c00e37a2f4adc5e8be1dd11de3b1fe5e5d59040ce3c373b65b383ab2a2f698cfffb8c3b6429fcf118da5f9556dc6857f1268d71790df6a5cc2066fcb9e171980f973bebba3f291d4a0699d2e2c614d0440fa0ac2df9de4b32c3f9a8e71c8003bd45489cd1c0ab66e883816e51e90c2a4a4e", 0x76}, {&(0x7f0000001d80)="4f2f1aac250c4fb7fd65aa0b9b216a6492ec4c3be9c9958806f896fdd95f68a5aa3f7322291741b012fec3666e87c3c2363715911d617c9a0032e3f1dc86c23874e0ae4d5e3f212f02453f1a2239bc9f4ea68d0f832e2c2667b05f73c8", 0x5d}, {&(0x7f0000001e00)="d1768bff912705d4800b2675d7acb45c8a42eabb7dd767ddba3de961d8e963f5dddae1d8bcf9abdc332df13237a2b3059458dd9e65317d6a14ee2bdc2d0bd5aaa87bf06860ebd8b45bece3f0cb0e2cef7048f4deac46a3aa31401c1358317fc6f73458270f9021c6", 0x68}, {&(0x7f0000001e80)="f679fc2988870c8a28cdb4e2de17b5e5aef04aac5026363618b663993069dc92dcf158bfa474d11910be11c131d1fa74c78ed3728a312adf0986516fc2f224e7e2dae190e20276874a9c21fb0d5db5294276b1fb5705d5b7ee45b84a54bcbf67878d821529de0c241f318f212a9000a34d5087f835b0a2feb097f7a5dc1d1148b229b52f8cbb4b53b947a1759a51c55bdb5d3b747587fb0240fde0359c8dddce3b9bf22d82eeb46a25153f583b2e4e29c620f9309450c3a8d1bc33cafc5c1a942a42dc031f575fdd5b2409b503054ab5cc2523506500c271a54cb2399af48d1058e8510655fc", 0xe6}, {&(0x7f0000001f80)="991e2c4e7c135a2b87c260a36019260b29b8ce31927a313e5f93b1e1df2b4b29cb0e873efaab39afc3e0b84d0ee3a82fa04407aa6240f2e5926b79f62c85c118f6c741d54f4fc2686d3126fbdcb036cc946a3bf09b5dfa6f54ca389c872243ba681ba74c2a4a160d6f4b5a9dd9a743a8b198dadc7ff6c4c17e626c3b81231fbe87189b10698d0477273aaf0f07293fe718da763dab94bee996ec58b8e1168b813106488fe8485b96", 0xa8}, {&(0x7f0000002040)="7fbbd6f779c5965872fffbd0f7fcc7a00762", 0x12}, {&(0x7f0000002080)="0a93693c9424dba89a0398d8c161d6943c56f06a3af2b5984de3bb66cc6654c63338cecb2e400c71b1041477ff05ad3c9a4538b8484465d705e2c39e0c8dd1f4d379d8a14a5401d84e6db9d8cc88e2f7d09ef2ac59a28831d83b1febe54bd4a4e39195886f7cdb0928c2888fbcc003082276ebba6bebde705276e54da6eb810e611eae1c988e1c1ff1671522721dee2204ce7b9dc233408d7799219743d08ee21337156d31b87053a1d4902fd0df49534b8ae283f511408f0a99d3e2a964cf105c9376f29264a5b50b2bb29371b83bd622204805edfb6af5d0e7df24e0213afdf8d90b4738205c4dbd08768a", 0xec}, {&(0x7f0000002180)="12d2a1c83bb4d02a36788be515f64321949ac1a4b627293e47a9f81ea6dc1ac1", 0x20}], 0x8, &(0x7f00000036c0)=ANY=[@ANYBLOB="1400000000000000290000000bfe0000008d73fa16ca2b00240000e7ffffff002900000032000000000000010000000000002017b458afe851393b7b302252108b781cfc64a5cd7a98d9466e2df9b9085c8ac0f9ff130b6bc640b625481d7839a62e8b6728e4748c5d1f5f3e5ab39aff740c9962dc0e3d976aa66019f88cc13f1a2d05025803c0a69c56ba271c927cf65d19702d5af709b42e1ffdd1cd4e42842406fc51e2efaebca9f01d11000000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x40}}, {{&(0x7f0000002280)={0xa, 0x4e24, 0x9, @private1, 0x8}, 0x1c, &(0x7f00000022c0), 0x0, &(0x7f0000002300)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0xfffffffb}}], 0x18}}, {{&(0x7f0000002340)={0xa, 0x4e21, 0x7, @private2, 0x7}, 0x1c, &(0x7f0000002480)=[{&(0x7f0000002380)="70af8e1c90d7ae8df2a204a61de52be2dfee991c2811d87af00520b80494a2dbe6101790cdc09bb8a2a9a8e60571f8bd1205d8c58740301cf8b01c5ec750d83d81b06adcb79ae169a8e762f6d0e652b6705a1c081461d2c8dc2f2fc10370c2e6e1c552946f54633dd932844a37208521df1932d0329e64f69754b064d727f6e2bbd416eece6834caa7a5338fb017f5a5fdac267b892d7aeef386cadd9a81d328bfbc39ebd22d759e24aceceabcaa1533a0c9fcd94994406551b30074d3a3d9bf34a024cd99e3999b2c1529c8d6f278fe", 0xd0}], 0x1, &(0x7f00000024c0)=[@hopopts={{0x10c0, 0x29, 0x36, {0x5c, 0x214, '\x00', [@generic={0x1, 0x4c, "a6bbcd858b3582df854e9c1c89b381b91ed0fad8623e45ab8a5ac029a06454b10a63caea4e28931413b01bb68ce56e9dd603544fc9a579bc32ae755721faa3e2e59cd5b66e4990c3356af8bd"}, @hao={0xc9, 0x10, @local}, @generic={0x38, 0x3, "f7aa81"}, @jumbo={0xc2, 0x4, 0x5}, @padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @generic={0x9, 0x1000, "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"}, @enc_lim={0x4, 0x1, 0x3f}, @generic={0x86, 0x12, "8f37b2e4afe770f22d27098c4bc19886cf59"}, @hao={0xc9, 0x10, @private0={0xfc, 0x0, '\x00', 0x1}}, @padn={0x1, 0x1, [0x0]}]}}}], 0x10c0}}], 0x5, 0x40) sendmsg$inet(r2, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 06:21:35 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f0000000380)={0x3, 0x1, 0x7, 0x2, 0xb3, &(0x7f0000000500)}) ioctl$KDGKBLED(r0, 0x4b64, &(0x7f0000000040)) io_uring_setup(0xfc6, &(0x7f0000000180)) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000240)={0x9b0, 0x9, 0x1, 0x4, 0x3}) listen(r1, 0x400000001ffffffd) r2 = socket$inet_dccp(0x2, 0x6, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f0000000440)=@ipv4_newaddr={0x38, 0x14, 0x8, 0x70bd2d, 0x25dfdbfd, {0x2, 0x78, 0x40, 0xc8}, [@IFA_RT_PRIORITY={0x8, 0x9, 0x9}, @IFA_RT_PRIORITY={0x8, 0x9, 0x200}, @IFA_ADDRESS={0x8, 0x1, @loopback}, @IFA_ADDRESS={0x8, 0x1, @multicast2}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000090}, 0x8000) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev}, 0x10) r3 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$cgroup_subtree(r3, &(0x7f00000003c0)=ANY=[@ANYBLOB="88ed7c48cfb680c42f89f97a7def31f7c3754b660e634848a0626b48d0b96e39c051b0006e7ca14700d0"], 0x8) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r4, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) 06:21:35 executing program 5: r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e24, @local}, 0x10) writev(r0, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) recvmmsg(r0, &(0x7f0000003e40)=[{{&(0x7f0000000100)=@phonet, 0x80, 0x0, 0x0, &(0x7f00000024c0)=""/4096, 0x5000}}, {{0x0, 0x80100200, 0x0, 0x0, &(0x7f00000035c0)=""/241, 0xf1}}, {{&(0x7f00000036c0)=@un=@abs, 0x80, &(0x7f0000003780)=[{&(0x7f0000003740)=""/4, 0xfffffd07}], 0x1, &(0x7f00000037c0)=""/236, 0xec}}, {{&(0x7f00000038c0)=@l2tp6={0xa, 0x0, 0x0, @private1}, 0x80, &(0x7f0000003bc0)=[{0x0}, {&(0x7f0000003a00)=""/190, 0xbe}, {&(0x7f0000003ac0)=""/131, 0x83}, {0x0}], 0x4, &(0x7f0000003c00)=""/73, 0x49}}, {{&(0x7f0000003c80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, 0x0, 0x0, &(0x7f0000003e00)=""/48, 0x30}}], 0x5, 0x40000121, 0x0) 06:21:35 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000005c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e24, @local}, 0x10) writev(r0, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) recvmmsg(r0, &(0x7f0000003e40)=[{{&(0x7f0000000100)=@phonet, 0x80, 0x0, 0x0, &(0x7f00000024c0)=""/4096, 0xff00}}, {{0x0, 0x80100200, 0x0, 0x0, &(0x7f00000035c0)=""/241, 0xf1}}, {{&(0x7f00000036c0)=@un=@abs, 0x80, &(0x7f0000003780)=[{&(0x7f0000003740)=""/4, 0xfffffd07}], 0x1, &(0x7f00000037c0)=""/236, 0xec}}, {{&(0x7f00000038c0)=@l2tp6={0xa, 0x0, 0x0, @private1}, 0x80, &(0x7f0000003bc0)=[{0x0}, {&(0x7f0000003a00)=""/190, 0xbe}, {&(0x7f0000003ac0)=""/131, 0x83}, {0x0}], 0x4, &(0x7f0000003c00)=""/73, 0x49}}, {{&(0x7f0000003c80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, 0x0, 0x0, &(0x7f0000003e00)=""/48, 0x30}}], 0x5, 0x40000121, 0x0) 06:21:35 executing program 1: io_uring_setup(0xfc6, &(0x7f0000000180)) creat(&(0x7f00000000c0)='./bus\x00', 0x0) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 06:21:35 executing program 2: r0 = io_uring_setup(0xfc6, &(0x7f00000000c0)={0x0, 0xffffffff, 0x20}) socket$inet6(0xa, 0x6, 0x0) (async) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x404e20, 0xfffffffe, @empty}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev}, 0x10) getsockopt$SO_COOKIE(r1, 0x1, 0x39, &(0x7f0000000000), &(0x7f0000000080)=0x8) (async) getsockopt$SO_COOKIE(r1, 0x1, 0x39, &(0x7f0000000000), &(0x7f0000000080)=0x8) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000140), 0x600, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) (async) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'bridge_slave_1\x00'}, @IFLA_MASTER={0x8, 0xa, r6}, @IFLA_MTU={0x8, 0x4, 0x1da}]}, 0x44}}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000001c40)={'veth1_virt_wifi\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000001c40)={'veth1_virt_wifi\x00', 0x0}) sendmmsg$inet6(r3, &(0x7f0000003580)=[{{0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000000180)="48613ca3c58ec781e907c59ee9364d4f423c8840444f8acf5d06d2f3a1242ff0ce3858b302b7054d5295b3390c01cca719bfbc2e490d2610098f4d9349436a13", 0x40}, {&(0x7f0000000240)="20b87b8e5f6a09844226b64fa59c50cb43a72121954a90e965dc81eaea517b88bac3160aa93e15b0cc3a43c9a776b7a20b57d8efbd5d0b45fd6a60d146289e3fbd70075d4d70efc7b14c592ef4c243ca1f8b3477b6e9dda39f30c313f233c6b0457a6d7f38a97b452b79464c9b56177df39a34475de3ae5d253396cebe208e914406317f", 0x84}, {&(0x7f0000000300)="dadb8e9e3b4702a9b79aafb7b22819f3db462065090d3e3eaaab6e200de391c69b5a39bedaca3de70c005ed611cda0880f6aa93f9ce50b7d46f5acb6aee280dd5975f1ea2ab648903d4c63b6cc5760a88762d253598b55c3840be22a47aac7d34acd7e2385d37f1b27a1a5663187938e2d4364c1c1b71f2dffb5a968edfbe8b4cc215374a92bbc247019fa4f2ca5cb9a85e47c2b14d12014a2707240aaaf6d7b901db42a6793cad0327ccca6414f602bcb5af342d33983344f5fc6514afb0775151bd1a6140d48ad813e84bb23a02c17acdec2cf2162091f86c651b267606ad0e1996a4e88225ae8a2e1848c7e53aa729abef2c2d5d1adeb349eb6c8695b552ee5829c039a739b04329537483b2630ad94fd17610ba3e9ce5c52b2cd89959e4a188f2252cdbfafb21db6704a0077a2c32d8d760fe8ad149520e18d0d28545a3df64e9140b6d92fb17b0f651f3935ebbf23e132b09ce91b94d4c3493f32f7884c72b0c64e3756de84c4d9dd26221b38ba715e77b8f71a50823da9a2830a440830c7860f23353601db99b00b2c912248eee2aad238b5f28df9c836a7c2d115ac91386f1aca7b570da955e7c0fc0f07b6406f3142e31b36cb22833433d1f393e41365d85cbfeaecf84063996ded61548b54095f5e3bb90411cdcd3ab9121a8eaab05ad2941274bdb3d5632de77247b2f05436bd1b5439d99de2a366f88f35bd695a3fd501bb694b894ff78b76a685c6669a2b4fe26d49c212dbc2a29c9595ab15f85fe1564656cee7b3ede8872983727341e94852354500855ff79823ef82a9f2e7eea7d4c3ab3fc49288ba15d56a0b03b86229e560ffd668c1f68141e55c1757c69bb2806df79f92d32e847afb674beb63939315d05c7694893033faea0ab3e1d415ab1c528334015d839b7fb351abcc189b71c6ac0940b347d14567ba0f1200a263d395fdeffd82ca462bec741a31be33f30bc27455d11a92b5371207a7d7db000eed55c7b79b51f2c3299b655886211256ca9a1d770a1af8f60c025be84a0858765cd40867762982e6c889e5b7e5282f95d6fea9e395d25546d56e9221b52e8172eae883e803aacf5f6f0c39df95e935b53217d5f4ec80d8afbedcc1a18d3c7cb6fdf6f77b926f9419465ec035c1c3c1d621b077a860ed6d793e9aee89ee4354da5497db589fe927417c24a1432c1c8da5e169aa94582bf8303e837e30c039e83bfe2d7fd49adb9a572dc97c0b8cc5ebc3b3148b10e06def26e0510491069603f3b5e6e3900b28b23fa07dfa61ac770f618bbb05ff97c9213e10a8a708ace8c3672db27c8538f22e573765a0effad22384968331e70a91578e8f6a1f6ca27e31e4ba5afaca3455df6b925e3423e0924d5e86a64ce1081d8e9b66ada6a961b7e99865edcf5379e5b3a80139937d3138ea02499589faf56ff2b88e8a5bfb6476619fafa07a01f03f273d06d27e9ad8f59db2b4ce03b9b3262d04934000cdc4a84e0e11f201c1ed2de3721cab3e162ce245db1538affb8d5f3dced259784edf721d946b3325355b36519b61b0e1a17a427a12f6a8d0b4f5828c8e3a0c595fac875b62a79dd2f61da82283a7e50945975b65381d6c7641e6759d3df3c35f28218524cd1afa6a59f7945ad8ad0ad57705477f4c46eb2be4156b204a629000a4549366b6364f6744c32a52dc53e513b20b654bed4c8db152eefae9b0981cc1b847c16ed604037bd07adec0dc098ad26b570611c4fa8bb6705fbd8512667c68e805b4a7f87bd82981e365a0291a1afe51767a525b5f12f61007c0b6f90fbc48a67ed49cbe984684867dc0b51ea503a48cb9986a6c6124f64b1b82f45e500e795575d8038b087c859e0aa5ea57a0f89987eed6ff18a82f6a0cdbe523f0747793891e8458a2af1da025250f460558b8115e770f07f4931516bb07b17c2609f3d296cffbb564fa7991d45ec5e1fc9a74ebef48e13c8d797c92bf77f658e060698696811311622e14e809b07b8ee49bb4f821ebe35c457d91a2cb47650d99729c93c4ba5a22d3e32143cace3dac9c6f04d32cc0e139481fe0e3bf6fbc5a9160d216d3ecf4a04a1acb614c2e8951177a15284e7d328421ea8f145b3e6a05a12e0d1cd8015bf9c7aadd1bc29911fd269061de1560151633b480d8c14b04a4b1d2c222aa3a39e17f0ddb972f033618ee5fb0ab4378a1583242c92e8f18d54e4489c56f470bea7d25c65cee2aa0fbee87bd84325ae7c2378a31545e8ebc9841500446a2fa3ed86f65067883e3f18f8e252908f5c5c10987a1373918959517c7d58fb3b476d5d8aeb7940d1606fa2eef82f9878dab8c6cae6932fe3244fb8cca743c9b41b09896ef4e807b3e80ed5a69758c9f7fb378c7ef279bdd107568ed49613d1402d8940978c779a3c7fe0198006e4a543e0d07346c187cb4d5394d5bcbe7a8c96380b31c43e1e6f2d60168924002766918ad2f522cbdb7910d48c1cbc645dada3e49d4a1ff9e1c55e90bef9942b2ab0484222080a73fb3d6c2312eb95c5fb6900532a9c7cb4c821bc59ceb9de1f897e6742e1086272e0cbf2e8629ece6b10a2068f204e6785d36bd9aa86dd8b257cf5b30c64d1daf77b07dcd4de7260e5403266d370e8fbbb3625ad641f45dc25c6a029818759033ce77fd898aa4a8889ee172ae73995ec720e8bbbf96554b356dd834406d0e3f4510db8b583289ef8d3f9173dd038490f8b6e6b89d3deae5e36a6dd622308697af987dea871966104bddec20289e38d0699f443b033584aff2a21a4f7279e79cfd0bdc8f5eceb07dbf09621deb0d09bc9967920d8934ff2e57665b94b8ab61f0aabd5d78b14df8c073a06bfcff99c141b55ad29f9abdc350b062f9d2fb2a2c30e77d30bf203170fd32b54f3ec83f7c42548a60f6a0906edb56cb648abdc613e210eb2c65db3558452e41caaeba6122b0d141fa6e0b5c0f7b0361c6326fe625890862ed4a18d8137279e065ec34312247e55a54cc40665fe54d9fb6e13bce4c25c270343b1b2146980f951e8dadd352571041aa0f2c8cc1bc97e84f8db52715f29109e9164bd86ca38fbe32477b4b588b640c6ccab5f92d77764ac4c3cdc5c6bb1a290b444659d62c36e7b10fd16008f6fcb61000ce79a9f43575e5e2e5eaa7c072a1d85dd1984c4c848255cec5485295539218f39659fca000b891f0c8787ab725cc66c45284c0c9a394029c445042513e2a389bf89fa86135ff40ebb07861b1685038e21502ab0db1ed77fcaa9033a4f76020f8be21ca706c7d098d4ccf74e95bd13f362feeec3ac2fe95c80a71e257c3f6de036744c89848a4abe25ce9b34e6e88d207b7cd28d6c0dd3b047b4387252824b7d6560872552525e5e90e54b2c986983017fd6e20bc44042fbc14e4951871448bf9d707be2890a67b93bbbd5a79851d01d8955678a86ea108b880ba0d8d4fc7c784bfb8b01efb5f1a630ec969080315893a179d203ccc7a7132fbdc54826e7d84e1853ab79988a0ea4a2846f13bc473b3998b7222329217e793567f486fe05a5d98f327e481ba5db6963cd48797a62f1d71251f4889e0912c6ff34c09726d0c8403023d69a434116a24cccae7f2e9bb15c0b55eaff33e221f6889e849cb51ac8c3c1899b29eafcb3dea75922c31afd4ef7fc66e9e897ace9af59b558b0e50eddec86b2e1c43a11d924d746c618c14216e90505f043b39b4a1ab7c1e2a69a940286cc57b1dd838bab0362ea8736ea259e4d708c605a50a7563ad298b970754e78ed1a76b497687a98eed8228c7a5049eaa672f304ded6a5a5436f5de6e2bbb7f8c0d35a4d17b0935d4789ea54416f03c11df5dd22b2aff604c4e9530104e6357e1caa177826ddb825bac00480117f2a2b9a002ccd3c62ea72e981d7b9d027d6f83e0254c2fb91ae2a49dba6b71d979c971a87060cb7340eda432e29560eca412fad36a5297bfd4a455f935ba07239c7950cb5dd869a08ce6203b85d4c1e4a8fabbe33a5f53e5682305055331a8bb6c2a0a5ed564e63621059a0232c8287fc3c8c785d8c30f9f420cbf626d150db1dab7b2314c2bf8c0d7a3bad79eb6be9fb74dbd672ff9c03a3b7a9f5123decf92b9e2233d6f7188cfc6b0b75ac7624c6bcfc351a2f9d23772221403b07d9e74f3d8931ebebf94a60c751d71995e657f8b9be2a111abf7c99591153db11fa92dddb48d8643da5e7a9259443a50bb26cb6d3ba71367e8cf28514fe44a5ba348fa97e6946ede39c133c7710a3e6f919561725b7e9c90a7c1f4636caa3be95678f5221f7e4818369ef49d5b239a2457c8f9c1a0404e3061217ec6d35a50b3fc4b9d63022e4c12708a8e643945d651d58a3c76a1205ad6061471f24077304981761086575c9446565d91e6fd50b75b849ba18816c9c2fe85b9e6a093d89cd6d7ba60ceafe13aeca5214def316e7bb2af76887bbd5fbab46eb6d02dd142c886a285a9a75bcd0d73c6deedfe5d5be229396da9213f461e3bd7210f389b039a2dedf393fc3fbe421810975cb240bc099e0609acc5e0b75b89eddcd74729086ae606bff293ac0a72f271b033024932c0bacf4a12d61edcfa4bbef836b34d097b69f82f946ec61f7f1b2eee7433c6b39273e63b4f4e7f7466164a8338bb7000f8c197583b651106e5cbc1f4ae5ebec1e131c8c5a3b0a2ab8b7dbd0819fed32f9b38ca9cdfe9fdb220ab038c4b7d2720a9e5e30d9901bbe3f8ee89f3f86ae794f2d799d6a12e195bc15ca2dadaa09a6f0f4ec41e788ef5da3cb9938616abc8a1ed72c7f5751a528772335e502d278d380b7e6b37a704e1a9b4a53f3de021948668b06db79a24f40e2b188dd8565d13f27d4d5b636951a216b148d219c456226360355be129164b4aa4f4a0bd58313e3506cdf5157357c507441bdb20379fbeff1f77b413bb867c92e8a8b5e59dafebe4df089dc45faae16971a1ec31eb6e7ce984e4989eddccb9411a69bc46c7fd63046442cb459b643118c178ed66609648c9630f115b2e27e29d3226aaf08faed8e299562717e3d747b31891c38a8a4073fb7201daf5a2573d28ee66db379b72420d7f575e95091b91101a097a2cdd9a62717b4d2ddea47f9529c231afbcba69742604836dfa49fdadb5eb691e963d474bd55966c6b941980c3df37357872472cf62c6453bc1b7165aa0b8d355dc170081ddeb07c9099aa9322ebb252fcea119676bd73d3ba92d3c454ee4322dfeca97d4433bffc46ce9c1ad365d07a563ffc1a6dabfe5d1fc6a3fdf0e482aad875eec09da0cdd8755e32239fff3ea3c280f680e3ab2ceed3d8e78e53747575e86136ef2b36a828e466cba77efdd3880d93049ca5f13bd5142c01d12d87df18bcc7f6200fe3151355f41da227430d2104a18a15351686918be200fdf3d2720028238b9b742c9a01519ab90e1baa68941f68dd47334b6414beccbc0343874ad5e12ebe97cbe767787f303cf3a112c48f7ee5fa44ef4e561887d2d23f4fb400cb4e8782b696de79cdca8605b039281ad5eccf5fb092c06212b696ae34397bbb07c7185f7a16a9b90e11aabb4c87b4bbb60a05a3f202ac3cf14630a568d2a1c4518283889ae59427114dcd8469706ab870c079f6406e391001e3cfadf9ceaf0f08dbc0fc863934d86db4616bcc65242a67bdaaeeb24145877142e59c4cceea533271c49a3ee76eb2085876282871150d42fb5e326616f00c6e5f8980ed12837af51442f53ac2b956e9f7a580b67b7cc1eafe3fdbd9807cb2766a9b707e267900bf247e9d7a172c81d7dd3449da2c7e6dc06a032239d964b666575c48cfa", 0x1000}, {&(0x7f0000001300)="bb2d6509bef7184fe029b885024ea131f325104fede00142bd225735e8fc8a19af5885a76eb104f7bcb7a40fc12721ebfd4397500e03c30fb3c080a80e1c244437e80d69f77c2de016cdc1a80c32fe97e817e4c80421c2fa26eb363dc5e384c5e73e3bbdb09c77f1adb8e29f804f5ccc01d391adafb2ddaf6c5dd985fc8370c91e494feb3a5f4957ba60d5071c905d4878b1", 0x92}, {&(0x7f00000001c0)="29d98848925d715d7f25978393db2fc9101b2281afd88cf28813d502c936b10fc6b326c9b3c4a7d16c437d", 0x2b}, {&(0x7f00000013c0)="b7699c6fc433cfba46452e30dc135106d52e6b10666b09ba381ab0e179a50dcf0797a4e4537c4acbf007d551cc3302b0f7115441b65a0c4c2ad4e91f4463190e24d60719daacd12f3b7bd78c", 0x4c}, {&(0x7f0000001440)="762f69d1b56a91a047ca5d80402cfe7388114d1f3237a1fffd7aaa18cf9b63c7f9d8f9d71b1db5ddc6844de947246e35fc4e93d7a4d9295f506162b4a6653ac4bd809dadbe79cde28ef5e081df5caad30160877a9849ee2aba704ef12c7cb447e289b296fd006edadcd69bc05c11b47afefb1a974fb958ccb8dd187e30ce9613455917418174c12443189fd840d9b9fea8cf49c6babaa3f34625eda83a8537ded2fc5a8ddf30858b0565b70ecd2cfd3a52e40b5137c802a2fa5bae7df34f85725e539bfb9c8d012dae5730351fbd98231a69697bf2ebad81c6808a5c565d5453f9f41bf01cf981d60f98dfac", 0xec}, {&(0x7f0000001540)="7da69e6dfd74c63ebc8ed43b24bd4ff9463f6f94d7cefed244e00063b286dd209a40225aff4054e5e9acae82299eef10fc302018194698e05906dfe23a23c2e34d9f9a4bc2f499f1fa7a684b33c54dc4a0599ae5df3d094eedeb4bb5be476292a0ce7b78b6fd9fa28567904381b3d381ba22ef4088bc566b465fa36dd90bdbd439ef513bb68ebab713ea9efebcac5a544bca0cfedea6037ad875c7f93cc267b6a37d3cd54522974282cc504b9d6f28f19ec6adf00bc1e0a5d9300b09716e22c3739b8298d27f8de8682b85b513dbcfff8ee80197e801a425dc28f6de1e461298d45e99b3e45256edd6", 0xe9}, {&(0x7f0000001640)="8e7d976fc601459242043a7d0af323ffb0f3daf03083c30437129da85a620220f2810b42202eb56521233d79026460407ea1904946fda90c039b01cd8d8a262f948f9a2f26706e8e6a66ab5e9f21c65e64a343fde003c8c5fc6cc3e3ac490eb5340757c49344b0ee8c794fa53d244f516b782966d3c530a2feb9e9da7d286622419ab24e09cf384d2d218e40e950c41083aeb1460acb700e72bf5e5569c109bb3d756fa2cd11e82857d443987e97378745e11a9051995de3a2b7cf62ca3ad87ca0a2fd2c73241aea93beef79d077acd12af919fcf2fe4d278954af0a604a7ffd35ed2269a6fd4d", 0xe7}, {&(0x7f0000001740)="ee68c53fc64611248f49fd890398e6a25a71deba41740eecdd25de2d75da3459137b31efd3a32768379518964b0b4cfda72dc330e0cb3a352bb8c22ddd50e4679829aebf1a10ee1f7f4695043a079de926e0735d13dd34ce2703a89998a4a9919d2f7ce4bb5b4e5228bd498fdaea8055132d2520ac22b5c1f797f6d51eb8e1f5ee99f24428babeadf0d56b32b2ad6352b70c34125f730fba716fa642590770fc8c2ebb7e8c19a91fbb4d8f2c2a378e820677ec98d3edae73bfae772be389550ba0b75b48a343dfff58bc41685dab1df0c53e", 0xd2}], 0xa, &(0x7f0000001900)=[@dontfrag={{0x14, 0x29, 0x3e, 0x73}}, @rthdrdstopts={{0x40, 0x29, 0x37, {0x87, 0x4, '\x00', [@hao={0xc9, 0x10, @remote}, @ra={0x5, 0x2, 0x81}, @pad1, @enc_lim={0x4, 0x1, 0x6}, @pad1, @ra={0x5, 0x2, 0xfbff}]}}}, @rthdrdstopts={{0x18, 0x29, 0x37, {0x3c}}}, @rthdrdstopts={{0x78, 0x29, 0x37, {0x6, 0xb, '\x00', [@generic={0x20, 0x52, "643d83f26b79db140a88e13fea1c32e6a6b47e3776a381a31a03bbfccb9c9647823a70135059d55cc58756cc2ca3815ecf39523a5cf99f5345c6b0cf7250005434742debbd1e0d2e969c2208410f03096a3b"}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}]}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x3}}, @hoplimit={{0x14, 0x29, 0x34, 0x800}}, @dstopts={{0x28, 0x29, 0x37, {0x1d, 0x1, '\x00', [@enc_lim={0x4, 0x1, 0x8}, @ra={0x5, 0x2, 0x7}, @enc_lim={0x4, 0x1, 0x2}]}}}, @pktinfo={{0x24, 0x29, 0x32, {@private2={0xfc, 0x2, '\x00', 0x1}, r6}}}, @tclass={{0x14, 0x29, 0x43, 0x200}}], 0x180}}, {{0x0, 0x0, &(0x7f0000001c00)=[{&(0x7f0000001a80)="d4173f955ebd69651d6538cb79129fc01cd132af0118e7c817ba5e78c7a4a62807de3d11be63a6d9e69ed7345642c98c05f3c226a6b3f00bf13078311409d509faa37cb1c40ae5389cafa20cbda2469320ff0711b3875836f38b920b5b36f7b6c23185cc7e9f88d59b160eff938201", 0x6f}, {&(0x7f0000001b00)="5ed47416e1b270646bf60cfb6c5c005d87167e0cad491ff847d73bc58c4ec788e9def4c4d18d29ee5f6a34a39dcdee53a13bdab78f924809a527582ff0fcefbea6b8c4986a15d9eda142cba10ace81be34b96ff190a8b6c03862e5ab0f6509e9dfeea589e9187072ee6cc79a06d94360821115cf37d8a9c982d7730bf942367822c2169c42193bb9e7ad5bb3ee5d077067761edb272a37fc85e3f39915ae31365ace1e9fab2183e0f33866e600b6f3947f605640e00419bc6181037a4b4cbc58291787daf2ecaeb2fa2d19c8ae4c071c8a78222c0c24fa80513aeab730bd4075c8", 0xe1}], 0x2, &(0x7f0000001c80)=[@tclass={{0x14, 0x29, 0x43, 0x1}}, @pktinfo={{0x24, 0x29, 0x32, {@loopback, r7}}}], 0x40}}, {{&(0x7f0000001cc0)={0xa, 0x4e24, 0x80000000, @loopback, 0x7}, 0x1c, &(0x7f00000021c0)=[{&(0x7f0000001d00)="52c784283c00e37a2f4adc5e8be1dd11de3b1fe5e5d59040ce3c373b65b383ab2a2f698cfffb8c3b6429fcf118da5f9556dc6857f1268d71790df6a5cc2066fcb9e171980f973bebba3f291d4a0699d2e2c614d0440fa0ac2df9de4b32c3f9a8e71c8003bd45489cd1c0ab66e883816e51e90c2a4a4e", 0x76}, {&(0x7f0000001d80)="4f2f1aac250c4fb7fd65aa0b9b216a6492ec4c3be9c9958806f896fdd95f68a5aa3f7322291741b012fec3666e87c3c2363715911d617c9a0032e3f1dc86c23874e0ae4d5e3f212f02453f1a2239bc9f4ea68d0f832e2c2667b05f73c8", 0x5d}, {&(0x7f0000001e00)="d1768bff912705d4800b2675d7acb45c8a42eabb7dd767ddba3de961d8e963f5dddae1d8bcf9abdc332df13237a2b3059458dd9e65317d6a14ee2bdc2d0bd5aaa87bf06860ebd8b45bece3f0cb0e2cef7048f4deac46a3aa31401c1358317fc6f73458270f9021c6", 0x68}, {&(0x7f0000001e80)="f679fc2988870c8a28cdb4e2de17b5e5aef04aac5026363618b663993069dc92dcf158bfa474d11910be11c131d1fa74c78ed3728a312adf0986516fc2f224e7e2dae190e20276874a9c21fb0d5db5294276b1fb5705d5b7ee45b84a54bcbf67878d821529de0c241f318f212a9000a34d5087f835b0a2feb097f7a5dc1d1148b229b52f8cbb4b53b947a1759a51c55bdb5d3b747587fb0240fde0359c8dddce3b9bf22d82eeb46a25153f583b2e4e29c620f9309450c3a8d1bc33cafc5c1a942a42dc031f575fdd5b2409b503054ab5cc2523506500c271a54cb2399af48d1058e8510655fc", 0xe6}, {&(0x7f0000001f80)="991e2c4e7c135a2b87c260a36019260b29b8ce31927a313e5f93b1e1df2b4b29cb0e873efaab39afc3e0b84d0ee3a82fa04407aa6240f2e5926b79f62c85c118f6c741d54f4fc2686d3126fbdcb036cc946a3bf09b5dfa6f54ca389c872243ba681ba74c2a4a160d6f4b5a9dd9a743a8b198dadc7ff6c4c17e626c3b81231fbe87189b10698d0477273aaf0f07293fe718da763dab94bee996ec58b8e1168b813106488fe8485b96", 0xa8}, {&(0x7f0000002040)="7fbbd6f779c5965872fffbd0f7fcc7a00762", 0x12}, {&(0x7f0000002080)="0a93693c9424dba89a0398d8c161d6943c56f06a3af2b5984de3bb66cc6654c63338cecb2e400c71b1041477ff05ad3c9a4538b8484465d705e2c39e0c8dd1f4d379d8a14a5401d84e6db9d8cc88e2f7d09ef2ac59a28831d83b1febe54bd4a4e39195886f7cdb0928c2888fbcc003082276ebba6bebde705276e54da6eb810e611eae1c988e1c1ff1671522721dee2204ce7b9dc233408d7799219743d08ee21337156d31b87053a1d4902fd0df49534b8ae283f511408f0a99d3e2a964cf105c9376f29264a5b50b2bb29371b83bd622204805edfb6af5d0e7df24e0213afdf8d90b4738205c4dbd08768a", 0xec}, {&(0x7f0000002180)="12d2a1c83bb4d02a36788be515f64321949ac1a4b627293e47a9f81ea6dc1ac1", 0x20}], 0x8, &(0x7f00000036c0)=ANY=[@ANYBLOB="1400000000000000290000000bfe0000008d73fa16ca2b00240000e7ffffff002900000032000000000000010000000000002017b458afe851393b7b302252108b781cfc64a5cd7a98d9466e2df9b9085c8ac0f9ff130b6bc640b625481d7839a62e8b6728e4748c5d1f5f3e5ab39aff740c9962dc0e3d976aa66019f88cc13f1a2d05025803c0a69c56ba271c927cf65d19702d5af709b42e1ffdd1cd4e42842406fc51e2efaebca9f01d11000000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x40}}, {{&(0x7f0000002280)={0xa, 0x4e24, 0x9, @private1, 0x8}, 0x1c, &(0x7f00000022c0), 0x0, &(0x7f0000002300)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0xfffffffb}}], 0x18}}, {{&(0x7f0000002340)={0xa, 0x4e21, 0x7, @private2, 0x7}, 0x1c, &(0x7f0000002480)=[{&(0x7f0000002380)="70af8e1c90d7ae8df2a204a61de52be2dfee991c2811d87af00520b80494a2dbe6101790cdc09bb8a2a9a8e60571f8bd1205d8c58740301cf8b01c5ec750d83d81b06adcb79ae169a8e762f6d0e652b6705a1c081461d2c8dc2f2fc10370c2e6e1c552946f54633dd932844a37208521df1932d0329e64f69754b064d727f6e2bbd416eece6834caa7a5338fb017f5a5fdac267b892d7aeef386cadd9a81d328bfbc39ebd22d759e24aceceabcaa1533a0c9fcd94994406551b30074d3a3d9bf34a024cd99e3999b2c1529c8d6f278fe", 0xd0}], 0x1, &(0x7f00000024c0)=[@hopopts={{0x10c0, 0x29, 0x36, {0x5c, 0x214, '\x00', [@generic={0x1, 0x4c, "a6bbcd858b3582df854e9c1c89b381b91ed0fad8623e45ab8a5ac029a06454b10a63caea4e28931413b01bb68ce56e9dd603544fc9a579bc32ae755721faa3e2e59cd5b66e4990c3356af8bd"}, @hao={0xc9, 0x10, @local}, @generic={0x38, 0x3, "f7aa81"}, @jumbo={0xc2, 0x4, 0x5}, @padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @generic={0x9, 0x1000, "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"}, @enc_lim={0x4, 0x1, 0x3f}, @generic={0x86, 0x12, "8f37b2e4afe770f22d27098c4bc19886cf59"}, @hao={0xc9, 0x10, @private0={0xfc, 0x0, '\x00', 0x1}}, @padn={0x1, 0x1, [0x0]}]}}}], 0x10c0}}], 0x5, 0x40) sendmsg$inet(r2, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) (async) close_range(r0, 0xffffffffffffffff, 0x0) 06:21:35 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) recvmsg(r0, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) sendto$inet6(r0, &(0x7f00000001c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0) recvmsg(r0, &(0x7f00000003c0)={0x0, 0x3, 0x0}, 0x0) recvmsg(r0, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) recvfrom$inet6(r0, &(0x7f0000000000)=""/114, 0xfffffffffffffd1b, 0x0, 0x0, 0x0) fstat(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setxattr$system_posix_acl(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000200)={{}, {0x1, 0x4}, [{0x2, 0x3}], {0x4, 0x2}, [{0x8, 0x2, 0xee01}, {0x8, 0x2, 0xffffffffffffffff}, {0x8, 0x4, r1}, {0x8, 0x7, 0xffffffffffffffff}], {0x10, 0x1}, {0x20, 0x4}}, 0x4c, 0x2) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000040)) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="00281c80", @ANYRES16=r0, @ANYBLOB="ff"], 0x34}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="f4997c3794"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="58ad000010", 0x5, 0x0, 0x0, 0x0) r2 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r2, &(0x7f0000000000)='s', 0x10a73, 0x81e, 0x0, 0x4b6ae4f95a5de35b) 06:21:35 executing program 1: io_uring_setup(0xfc6, &(0x7f0000000180)) creat(&(0x7f00000000c0)='./bus\x00', 0x0) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 06:21:35 executing program 2: r0 = io_uring_setup(0xfc2, &(0x7f0000000180)) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) listen(r1, 0x400000001ffffffd) r2 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev}, 0x10) sendmsg$inet(r2, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 06:21:35 executing program 1: r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e24, @local}, 0x10) writev(r0, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) recvmmsg(r0, &(0x7f0000003e40)=[{{&(0x7f0000000100)=@phonet, 0x80, 0x0, 0x0, &(0x7f00000024c0)=""/4096, 0x1015}}, {{0x0, 0x80100200, 0x0, 0x0, &(0x7f00000035c0)=""/241, 0xf1}}, {{&(0x7f00000036c0)=@un=@abs, 0x80, &(0x7f0000003780)=[{&(0x7f0000003740)=""/4, 0xfffffd07}], 0x1, &(0x7f00000037c0)=""/236, 0xec}}, {{&(0x7f00000038c0)=@l2tp6={0xa, 0x0, 0x0, @private1}, 0x80, &(0x7f0000003bc0)=[{0x0}, {&(0x7f0000003a00)=""/190, 0xbe}, {&(0x7f0000003ac0)=""/131, 0x83}, {0x0}], 0x4, &(0x7f0000003c00)=""/73, 0x49}}, {{&(0x7f0000003c80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, 0x0, 0x0, &(0x7f0000003e00)=""/48, 0x30}}], 0x5, 0x40000121, 0x0) 06:21:35 executing program 2: r0 = io_uring_setup(0xfc2, &(0x7f0000000180)) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) listen(r1, 0x400000001ffffffd) r2 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev}, 0x10) sendmsg$inet(r2, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) io_uring_setup(0xfc2, &(0x7f0000000180)) (async) socket$inet6(0xa, 0x6, 0x0) (async) bind$inet6(r1, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) (async) listen(r1, 0x400000001ffffffd) (async) socket$inet_dccp(0x2, 0x6, 0x0) (async) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev}, 0x10) (async) sendmsg$inet(r2, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) (async) close_range(r0, 0xffffffffffffffff, 0x0) (async) [ 3122.535294][T29721] netlink: 'syz-executor.4': attribute type 41 has an invalid length. [ 3122.543602][T29721] netlink: 44123 bytes leftover after parsing attributes in process `syz-executor.4'. 06:21:35 executing program 2: r0 = io_uring_setup(0xfc2, &(0x7f0000000180)) (async) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) (async) listen(r1, 0x400000001ffffffd) (async) r2 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev}, 0x10) sendmsg$inet(r2, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 06:21:35 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) recvmsg(r0, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) sendto$inet6(r0, &(0x7f00000001c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0) recvmsg(r0, &(0x7f00000003c0)={0x0, 0x3, 0x0}, 0x0) recvmsg(r0, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) recvfrom$inet6(r0, &(0x7f0000000000)=""/114, 0xfffffffffffffd1b, 0x0, 0x0, 0x0) fstat(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setxattr$system_posix_acl(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000200)={{}, {0x1, 0x4}, [{0x2, 0x3}], {0x4, 0x2}, [{0x8, 0x2, 0xee01}, {0x8, 0x2, 0xffffffffffffffff}, {0x8, 0x4, r1}, {0x8, 0x7, 0xffffffffffffffff}], {0x10, 0x1}, {0x20, 0x4}}, 0x4c, 0x2) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000040)) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="00281c80", @ANYRES16=r0, @ANYBLOB="ff"], 0x34}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="f4997c3794"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="58ad000010", 0x5, 0x0, 0x0, 0x0) r2 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r2, &(0x7f0000000000)='s', 0x10a73, 0x81e, 0x0, 0x4b6ae4f95a5de35b) socket$inet6(0x10, 0x3, 0x0) (async) recvmsg(r0, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) (async) sendto$inet6(r0, &(0x7f00000001c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0) (async) recvmsg(r0, &(0x7f00000003c0)={0x0, 0x3, 0x0}, 0x0) (async) recvmsg(r0, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x0) (async) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) (async) recvfrom$inet6(r0, &(0x7f0000000000)=""/114, 0xfffffffffffffd1b, 0x0, 0x0, 0x0) (async) fstat(r0, &(0x7f0000000140)) (async) setxattr$system_posix_acl(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000200)={{}, {0x1, 0x4}, [{0x2, 0x3}], {0x4, 0x2}, [{0x8, 0x2, 0xee01}, {0x8, 0x2, 0xffffffffffffffff}, {0x8, 0x4, r1}, {0x8, 0x7, 0xffffffffffffffff}], {0x10, 0x1}, {0x20, 0x4}}, 0x4c, 0x2) (async) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000040)) (async) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="00281c80", @ANYRES16=r0, @ANYBLOB="ff"], 0x34}}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="f4997c3794"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="58ad000010", 0x5, 0x0, 0x0, 0x0) (async) socket$inet6(0x10, 0x3, 0x0) (async) sendto$inet6(r2, &(0x7f0000000000)='s', 0x10a73, 0x81e, 0x0, 0x4b6ae4f95a5de35b) (async) [ 3122.577184][T29721] A link change request failed with some changes committed already. Interface ip6tnl0 may have been left with an inconsistent configuration, please check. [ 3122.705699][T29749] netlink: 'syz-executor.4': attribute type 41 has an invalid length. [ 3122.713906][T29749] netlink: 44123 bytes leftover after parsing attributes in process `syz-executor.4'. [ 3122.723595][T29749] A link change request failed with some changes committed already. Interface ip6tnl0 may have been left with an inconsistent configuration, please check. 06:21:44 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f0000000380)={0x3, 0x1, 0x7, 0x2, 0xb3, &(0x7f0000000500)}) ioctl$KDGKBLED(r0, 0x4b64, &(0x7f0000000040)) io_uring_setup(0xfc6, &(0x7f0000000180)) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000240)={0x9b0, 0x9, 0x1, 0x4, 0x3}) listen(r1, 0x400000001ffffffd) r2 = socket$inet_dccp(0x2, 0x6, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f0000000440)=@ipv4_newaddr={0x38, 0x14, 0x8, 0x70bd2d, 0x25dfdbfd, {0x2, 0x78, 0x40, 0xc8}, [@IFA_RT_PRIORITY={0x8, 0x9, 0x9}, @IFA_RT_PRIORITY={0x8, 0x9, 0x200}, @IFA_ADDRESS={0x8, 0x1, @loopback}, @IFA_ADDRESS={0x8, 0x1, @multicast2}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000090}, 0x8000) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev}, 0x10) r3 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$cgroup_subtree(r3, &(0x7f00000003c0)=ANY=[@ANYBLOB="88ed7c48cfb680c42f89f97a7def31f7c3754b660e634848a0626b48d0b96e39c051b0006e7ca14700d0"], 0x8) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r4, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) 06:21:44 executing program 2: r0 = io_uring_setup(0x5cec, &(0x7f0000000180)={0x0, 0x3d33, 0x20, 0x4000}) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) listen(r1, 0x400000001ffffffd) r2 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev}, 0x10) sendmsg$inet(r2, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 06:21:44 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) recvmsg(r0, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) sendto$inet6(r0, &(0x7f00000001c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0) recvmsg(r0, &(0x7f00000003c0)={0x0, 0x3, 0x0}, 0x0) (async) recvmsg(r0, &(0x7f00000003c0)={0x0, 0x3, 0x0}, 0x0) recvmsg(r0, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x0) (async) recvmsg(r0, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) recvfrom$inet6(r0, &(0x7f0000000000)=""/114, 0xfffffffffffffd1b, 0x0, 0x0, 0x0) fstat(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setxattr$system_posix_acl(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000200)={{}, {0x1, 0x4}, [{0x2, 0x3}], {0x4, 0x2}, [{0x8, 0x2, 0xee01}, {0x8, 0x2, 0xffffffffffffffff}, {0x8, 0x4, r1}, {0x8, 0x7, 0xffffffffffffffff}], {0x10, 0x1}, {0x20, 0x4}}, 0x4c, 0x2) (async) setxattr$system_posix_acl(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000200)={{}, {0x1, 0x4}, [{0x2, 0x3}], {0x4, 0x2}, [{0x8, 0x2, 0xee01}, {0x8, 0x2, 0xffffffffffffffff}, {0x8, 0x4, r1}, {0x8, 0x7, 0xffffffffffffffff}], {0x10, 0x1}, {0x20, 0x4}}, 0x4c, 0x2) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000040)) (async) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000040)) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="00281c80", @ANYRES16=r0, @ANYBLOB="ff"], 0x34}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="f4997c3794"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="58ad000010", 0x5, 0x0, 0x0, 0x0) socket$inet6(0x10, 0x3, 0x0) (async) r2 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r2, &(0x7f0000000000)='s', 0x10a73, 0x81e, 0x0, 0x4b6ae4f95a5de35b) 06:21:44 executing program 5: r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e24, @local}, 0x10) writev(r0, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) recvmmsg(r0, &(0x7f0000003e40)=[{{&(0x7f0000000100)=@phonet, 0x80, 0x0, 0x0, &(0x7f00000024c0)=""/4096, 0x7c80}}, {{0x0, 0x80100200, 0x0, 0x0, &(0x7f00000035c0)=""/241, 0xf1}}, {{&(0x7f00000036c0)=@un=@abs, 0x80, &(0x7f0000003780)=[{&(0x7f0000003740)=""/4, 0xfffffd07}], 0x1, &(0x7f00000037c0)=""/236, 0xec}}, {{&(0x7f00000038c0)=@l2tp6={0xa, 0x0, 0x0, @private1}, 0x80, &(0x7f0000003bc0)=[{0x0}, {&(0x7f0000003a00)=""/190, 0xbe}, {&(0x7f0000003ac0)=""/131, 0x83}, {0x0}], 0x4, &(0x7f0000003c00)=""/73, 0x49}}, {{&(0x7f0000003c80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, 0x0, 0x0, &(0x7f0000003e00)=""/48, 0x30}}], 0x5, 0x40000121, 0x0) 06:21:44 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000005c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e24, @local}, 0x10) writev(r0, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) recvmmsg(r0, &(0x7f0000003e40)=[{{&(0x7f0000000100)=@phonet, 0x80, 0x0, 0x0, &(0x7f00000024c0)=""/4096, 0x1000000}}, {{0x0, 0x80100200, 0x0, 0x0, &(0x7f00000035c0)=""/241, 0xf1}}, {{&(0x7f00000036c0)=@un=@abs, 0x80, &(0x7f0000003780)=[{&(0x7f0000003740)=""/4, 0xfffffd07}], 0x1, &(0x7f00000037c0)=""/236, 0xec}}, {{&(0x7f00000038c0)=@l2tp6={0xa, 0x0, 0x0, @private1}, 0x80, &(0x7f0000003bc0)=[{0x0}, {&(0x7f0000003a00)=""/190, 0xbe}, {&(0x7f0000003ac0)=""/131, 0x83}, {0x0}], 0x4, &(0x7f0000003c00)=""/73, 0x49}}, {{&(0x7f0000003c80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, 0x0, 0x0, &(0x7f0000003e00)=""/48, 0x30}}], 0x5, 0x40000121, 0x0) 06:21:44 executing program 1: r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e24, @local}, 0x10) writev(r0, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) recvmmsg(r0, &(0x7f0000003e40)=[{{&(0x7f0000000100)=@phonet, 0x80, 0x0, 0x0, &(0x7f00000024c0)=""/4096, 0x1015}}, {{0x0, 0x80100200, 0x0, 0x0, &(0x7f00000035c0)=""/241, 0xf1}}, {{&(0x7f00000036c0)=@un=@abs, 0x80, &(0x7f0000003780)=[{&(0x7f0000003740)=""/4, 0xfffffd07}], 0x1, &(0x7f00000037c0)=""/236, 0xec}}, {{&(0x7f00000038c0)=@l2tp6={0xa, 0x0, 0x0, @private1}, 0x80, &(0x7f0000003bc0)=[{0x0}, {&(0x7f0000003a00)=""/190, 0xbe}, {&(0x7f0000003ac0)=""/131, 0x83}, {0x0}], 0x4, &(0x7f0000003c00)=""/73, 0x49}}, {{&(0x7f0000003c80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, 0x0, 0x0, &(0x7f0000003e00)=""/48, 0x30}}], 0x5, 0x40000121, 0x0) 06:21:44 executing program 2: r0 = io_uring_setup(0x5cec, &(0x7f0000000180)={0x0, 0x3d33, 0x20, 0x4000}) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) listen(r1, 0x400000001ffffffd) r2 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev}, 0x10) sendmsg$inet(r2, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) io_uring_setup(0x5cec, &(0x7f0000000180)={0x0, 0x3d33, 0x20, 0x4000}) (async) socket$inet6(0xa, 0x6, 0x0) (async) bind$inet6(r1, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) (async) listen(r1, 0x400000001ffffffd) (async) socket$inet_dccp(0x2, 0x6, 0x0) (async) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev}, 0x10) (async) sendmsg$inet(r2, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) (async) close_range(r0, 0xffffffffffffffff, 0x0) (async) 06:21:44 executing program 2: r0 = io_uring_setup(0x5cec, &(0x7f0000000180)={0x0, 0x3d33, 0x20, 0x4000}) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) (async, rerun: 64) listen(r1, 0x400000001ffffffd) (rerun: 64) r2 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev}, 0x10) sendmsg$inet(r2, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 06:21:44 executing program 2: r0 = io_uring_setup(0xfc6, &(0x7f0000000180)) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendto$inet6(r2, &(0x7f0000000000)="886e4489fb2ffa4ee2903ef9e0171136f02727b51a178a99e90ebec63bc2a3a78b886bb57d878e964b795a08b7f1dca022024b089d37308b6866c4034d9b877da5bacc2cdf0c059c1db82e39937cb9b41c85dbdebe7bca444bd14a403daac3aa008d200c5455fe47ccb43d064a66c30406e0c18240a5fcafbfca89cd200b171f0063be7fe30e2090501458c2784dfb3921b5af3bd6ef91e63b68ada30433a712c5811d1b54fcde83a1ba1ed319a810d9a88fd0236fb851119a79c37d48e47d3a20601418fa8fa5519f4228fdc02183733cf948606e7a42b6e9", 0xd9, 0x8041, &(0x7f0000000100)={0xa, 0x4e21, 0x9, @dev={0xfe, 0x80, '\x00', 0x1d}, 0x4}, 0x1c) listen(r1, 0x400000001ffffffd) r3 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r3, &(0x7f0000e5c000)={0x2, 0x4e20, @dev}, 0x10) sendmsg$inet(r3, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000140)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff, 0xee00}}, './file0\x00'}) ioctl$sock_SIOCGIFCONF(r4, 0x8912, &(0x7f0000000300)=@buf={0x51, &(0x7f0000000240)="76799b863b922b2496384231667a1b955303e7535c68ac9df220a05942b8a3025f24bf9bf99f01a0d41627b1a7f749c2438750b51f35d9a9a88096a9703d195264390b125f0523d06acf4f8cbb36329264"}) close_range(r0, 0xffffffffffffffff, 0x0) [ 3131.683018][T29773] netlink: 'syz-executor.4': attribute type 41 has an invalid length. [ 3131.691365][T29773] netlink: 44123 bytes leftover after parsing attributes in process `syz-executor.4'. [ 3131.712210][T29773] A link change request failed with some changes committed already. Interface vcan0 may have been left with an inconsistent configuration, please check. 06:21:44 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) recvmsg(r0, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) sendto$inet6(r0, &(0x7f00000001c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0) recvmsg(r0, &(0x7f00000003c0)={0x0, 0x3, 0x0}, 0x0) recvmsg(r0, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) recvfrom$inet6(r0, &(0x7f0000000000)=""/114, 0xfffffffffffffd1b, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000040)) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="00281c80", @ANYRES16=r0, @ANYBLOB="ff"], 0x34}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x9) sendmsg$TCPDIAG_GETSOCK(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x10, 0x12, 0x0, 0x0, 0x0, {0x10, 0x0, 0x0, 0x0, {0xe903}}}, 0x4c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="f4997c3794"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="58ad000010", 0x5, 0x0, 0x0, 0x0) r2 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r2, &(0x7f0000000000)='s', 0x10a73, 0x81e, 0x0, 0x4b6ae4f95a5de35b) 06:21:44 executing program 2: r0 = io_uring_setup(0xfc6, &(0x7f0000000180)) (async) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) (async) sendto$inet6(r2, &(0x7f0000000000)="886e4489fb2ffa4ee2903ef9e0171136f02727b51a178a99e90ebec63bc2a3a78b886bb57d878e964b795a08b7f1dca022024b089d37308b6866c4034d9b877da5bacc2cdf0c059c1db82e39937cb9b41c85dbdebe7bca444bd14a403daac3aa008d200c5455fe47ccb43d064a66c30406e0c18240a5fcafbfca89cd200b171f0063be7fe30e2090501458c2784dfb3921b5af3bd6ef91e63b68ada30433a712c5811d1b54fcde83a1ba1ed319a810d9a88fd0236fb851119a79c37d48e47d3a20601418fa8fa5519f4228fdc02183733cf948606e7a42b6e9", 0xd9, 0x8041, &(0x7f0000000100)={0xa, 0x4e21, 0x9, @dev={0xfe, 0x80, '\x00', 0x1d}, 0x4}, 0x1c) listen(r1, 0x400000001ffffffd) (async, rerun: 64) r3 = socket$inet_dccp(0x2, 0x6, 0x0) (rerun: 64) connect$inet(r3, &(0x7f0000e5c000)={0x2, 0x4e20, @dev}, 0x10) sendmsg$inet(r3, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000140)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff, 0xee00}}, './file0\x00'}) ioctl$sock_SIOCGIFCONF(r4, 0x8912, &(0x7f0000000300)=@buf={0x51, &(0x7f0000000240)="76799b863b922b2496384231667a1b955303e7535c68ac9df220a05942b8a3025f24bf9bf99f01a0d41627b1a7f749c2438750b51f35d9a9a88096a9703d195264390b125f0523d06acf4f8cbb36329264"}) (async) close_range(r0, 0xffffffffffffffff, 0x0) 06:21:44 executing program 2: io_uring_setup(0xfc6, &(0x7f0000000180)) (async) r0 = io_uring_setup(0xfc6, &(0x7f0000000180)) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) socket(0x1, 0x803, 0x0) (async) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendto$inet6(r2, &(0x7f0000000000)="886e4489fb2ffa4ee2903ef9e0171136f02727b51a178a99e90ebec63bc2a3a78b886bb57d878e964b795a08b7f1dca022024b089d37308b6866c4034d9b877da5bacc2cdf0c059c1db82e39937cb9b41c85dbdebe7bca444bd14a403daac3aa008d200c5455fe47ccb43d064a66c30406e0c18240a5fcafbfca89cd200b171f0063be7fe30e2090501458c2784dfb3921b5af3bd6ef91e63b68ada30433a712c5811d1b54fcde83a1ba1ed319a810d9a88fd0236fb851119a79c37d48e47d3a20601418fa8fa5519f4228fdc02183733cf948606e7a42b6e9", 0xd9, 0x8041, &(0x7f0000000100)={0xa, 0x4e21, 0x9, @dev={0xfe, 0x80, '\x00', 0x1d}, 0x4}, 0x1c) listen(r1, 0x400000001ffffffd) r3 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r3, &(0x7f0000e5c000)={0x2, 0x4e20, @dev}, 0x10) (async) connect$inet(r3, &(0x7f0000e5c000)={0x2, 0x4e20, @dev}, 0x10) sendmsg$inet(r3, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) (async) sendmsg$inet(r3, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000140)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff, 0xee00}}, './file0\x00'}) ioctl$sock_SIOCGIFCONF(r4, 0x8912, &(0x7f0000000300)=@buf={0x51, &(0x7f0000000240)="76799b863b922b2496384231667a1b955303e7535c68ac9df220a05942b8a3025f24bf9bf99f01a0d41627b1a7f749c2438750b51f35d9a9a88096a9703d195264390b125f0523d06acf4f8cbb36329264"}) close_range(r0, 0xffffffffffffffff, 0x0) [ 3131.860424][T29801] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=18 sclass=netlink_audit_socket pid=29801 comm=syz-executor.4 [ 3131.880514][T29801] netlink: 44335 bytes leftover after parsing attributes in process `syz-executor.4'. 06:21:53 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) recvmsg(r0, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) sendto$inet6(r0, &(0x7f00000001c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0) (async) recvmsg(r0, &(0x7f00000003c0)={0x0, 0x3, 0x0}, 0x0) (async) recvmsg(r0, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) recvfrom$inet6(r0, &(0x7f0000000000)=""/114, 0xfffffffffffffd1b, 0x0, 0x0, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000040)) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="00281c80", @ANYRES16=r0, @ANYBLOB="ff"], 0x34}}, 0x0) (async) r1 = socket$netlink(0x10, 0x3, 0x9) sendmsg$TCPDIAG_GETSOCK(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x10, 0x12, 0x0, 0x0, 0x0, {0x10, 0x0, 0x0, 0x0, {0xe903}}}, 0x4c}}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="f4997c3794"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="58ad000010", 0x5, 0x0, 0x0, 0x0) (async) r2 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r2, &(0x7f0000000000)='s', 0x10a73, 0x81e, 0x0, 0x4b6ae4f95a5de35b) 06:21:53 executing program 2: r0 = io_uring_setup(0xfc6, &(0x7f0000000180)) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000440)={@local, 0x62}) listen(r1, 0x400000001ffffffd) r2 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x12, 0x8, &(0x7f0000000100)=ANY=[@ANYBLOB="851000040000000fbff03e8f", @ANYRES32=0x1, @ANYBLOB="000000000000000018580000070000000000000000000000183800000300000000000000000000005761fcff08000000"], &(0x7f0000000140)='GPL\x00', 0x8001, 0x97, &(0x7f0000000240)=""/151, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x6, 0x4}, 0x8, 0x10, &(0x7f0000000340)={0x5, 0xa, 0x9}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000380)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1]}, 0x80) close_range(r3, r2, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r4, 0x0, 0x484, &(0x7f0000000480)=""/8, &(0x7f00000004c0)=0x8) sendto$inet(r2, &(0x7f0000000000)="8f41f40666d2dd4e9a891ad008c85c13b5d7a6ebcb226e76b01a15fe0cf2ce3639544c69d8ec27cdd5584abacb53ee09acfeb43a51bb5438a1972b75d8509e8a55e9197ac948c9b1a12c28935c0880db2c10101a9cb5486e132e1f9775e4b53a7fa2b9eee7458e72fd329ea0f7b05a26906b220ff4cc36337d2ea9e69d7a4cfba5469544fcaaed1c8ceda00d0ba9c8487bd91629800c4ea211dc6efb28d0afae5133d873d592b8ec", 0xa8, 0x20004000, &(0x7f00000000c0)={0x2, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) sendmsg$inet(r2, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 06:21:53 executing program 1: r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e24, @local}, 0x10) writev(r0, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) recvmmsg(r0, &(0x7f0000003e40)=[{{&(0x7f0000000100)=@phonet, 0x80, 0x0, 0x0, &(0x7f00000024c0)=""/4096, 0x1015}}, {{0x0, 0x80100200, 0x0, 0x0, &(0x7f00000035c0)=""/241, 0xf1}}, {{&(0x7f00000036c0)=@un=@abs, 0x80, &(0x7f0000003780)=[{&(0x7f0000003740)=""/4, 0xfffffd07}], 0x1, &(0x7f00000037c0)=""/236, 0xec}}, {{&(0x7f00000038c0)=@l2tp6={0xa, 0x0, 0x0, @private1}, 0x80, &(0x7f0000003bc0)=[{0x0}, {&(0x7f0000003a00)=""/190, 0xbe}, {&(0x7f0000003ac0)=""/131, 0x83}, {0x0}], 0x4, &(0x7f0000003c00)=""/73, 0x49}}, {{&(0x7f0000003c80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, 0x0, 0x0, &(0x7f0000003e00)=""/48, 0x30}}], 0x5, 0x40000121, 0x0) 06:21:53 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f0000000380)={0x3, 0x1, 0x7, 0x2, 0xb3, &(0x7f0000000500)}) ioctl$KDGKBLED(r0, 0x4b64, &(0x7f0000000040)) io_uring_setup(0xfc6, &(0x7f0000000180)) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000240)={0x9b0, 0x9, 0x1, 0x4, 0x3}) listen(r1, 0x400000001ffffffd) r2 = socket$inet_dccp(0x2, 0x6, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f0000000440)=@ipv4_newaddr={0x38, 0x14, 0x8, 0x70bd2d, 0x25dfdbfd, {0x2, 0x78, 0x40, 0xc8}, [@IFA_RT_PRIORITY={0x8, 0x9, 0x9}, @IFA_RT_PRIORITY={0x8, 0x9, 0x200}, @IFA_ADDRESS={0x8, 0x1, @loopback}, @IFA_ADDRESS={0x8, 0x1, @multicast2}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000090}, 0x8000) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev}, 0x10) r3 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$cgroup_subtree(r3, &(0x7f00000003c0)=ANY=[@ANYBLOB="88ed7c48cfb680c42f89f97a7def31f7c3754b660e634848a0626b48d0b96e39c051b0006e7ca14700d0"], 0x8) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r4, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) 06:21:53 executing program 5: r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e24, @local}, 0x10) writev(r0, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) recvmmsg(r0, &(0x7f0000003e40)=[{{&(0x7f0000000100)=@phonet, 0x80, 0x0, 0x0, &(0x7f00000024c0)=""/4096, 0x7e00}}, {{0x0, 0x80100200, 0x0, 0x0, &(0x7f00000035c0)=""/241, 0xf1}}, {{&(0x7f00000036c0)=@un=@abs, 0x80, &(0x7f0000003780)=[{&(0x7f0000003740)=""/4, 0xfffffd07}], 0x1, &(0x7f00000037c0)=""/236, 0xec}}, {{&(0x7f00000038c0)=@l2tp6={0xa, 0x0, 0x0, @private1}, 0x80, &(0x7f0000003bc0)=[{0x0}, {&(0x7f0000003a00)=""/190, 0xbe}, {&(0x7f0000003ac0)=""/131, 0x83}, {0x0}], 0x4, &(0x7f0000003c00)=""/73, 0x49}}, {{&(0x7f0000003c80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, 0x0, 0x0, &(0x7f0000003e00)=""/48, 0x30}}], 0x5, 0x40000121, 0x0) 06:21:53 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000005c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e24, @local}, 0x10) writev(r0, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) recvmmsg(r0, &(0x7f0000003e40)=[{{&(0x7f0000000100)=@phonet, 0x80, 0x0, 0x0, &(0x7f00000024c0)=""/4096, 0x1000}}, {{0x0, 0x80100200, 0x0, 0x0, &(0x7f00000035c0)=""/241, 0xf1}}, {{&(0x7f00000036c0)=@un=@abs, 0x80, &(0x7f0000003780)=[{&(0x7f0000003740)=""/4, 0xfffffd07}], 0x1, &(0x7f00000037c0)=""/236, 0xec}}, {{&(0x7f00000038c0)=@l2tp6={0xa, 0x0, 0x0, @private1}, 0x80, &(0x7f0000003bc0)=[{0x0}, {&(0x7f0000003a00)=""/190, 0xbe}, {&(0x7f0000003ac0)=""/131, 0x83}, {0x0}], 0x4, &(0x7f0000003c00)=""/73, 0x49}}, {{&(0x7f0000003c80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, 0x0, 0x0, &(0x7f0000003e00)=""/48, 0x30}}], 0x5, 0x40000121, 0x0) 06:21:53 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f0000000380)={0x3, 0x1, 0x7, 0x2, 0xb3, &(0x7f0000000500)}) ioctl$KDGKBLED(r0, 0x4b64, &(0x7f0000000040)) io_uring_setup(0xfc6, &(0x7f0000000180)) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000240)={0x9b0, 0x9, 0x1, 0x4, 0x3}) listen(r1, 0x400000001ffffffd) r2 = socket$inet_dccp(0x2, 0x6, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f0000000440)=@ipv4_newaddr={0x38, 0x14, 0x8, 0x70bd2d, 0x25dfdbfd, {0x2, 0x78, 0x40, 0xc8}, [@IFA_RT_PRIORITY={0x8, 0x9, 0x9}, @IFA_RT_PRIORITY={0x8, 0x9, 0x200}, @IFA_ADDRESS={0x8, 0x1, @loopback}, @IFA_ADDRESS={0x8, 0x1, @multicast2}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000090}, 0x8000) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev}, 0x10) r3 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$cgroup_subtree(r3, &(0x7f00000003c0)=ANY=[@ANYBLOB="88ed7c48cfb680c42f89f97a7def31f7c3754b660e634848a0626b48d0b96e39c051b0006e7ca14700d0"], 0x8) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x1, 0x0, 0x0, 0x4, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x3) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000a00)=ANY=[@ANYBLOB="c42c6e2932282e6645da1d10791c92f43389bef4b185c4d1dacc3cfc8ecc0bf814f6dcdac6841be3bdbc710f350e80317fc828caee7984f2d0a503e8bd1d5277b9bd46fd855e5dddb9448b81ed681d262d5ac040d91bacd3562e16ee197e09907921748069c7421aa5ff99e8153f597070a04ff23f0a45ebf48370445ff6d239d848a6fb317608b13f2399485571d6524f3e9adb4c75b74d486603018a2a804528c63b0669ffd7a2ce6a73a5533c00e5af296b09bb560a761e76021df7", @ANYRES32=0x0, @ANYBLOB="0000000000140003006272696467655f736c6176655f3100000800020023f841841cfce752e51d7e5a869002947c29d84327aa016caefa3f43d42afa4d29e0d98cd04dc3f8dae1de642f0f38fb6e668992d5b914aa79bfc89fc05fa6913e85925d3d29e5652e807b0230392c1ba73de7cbf221788773d2b8f006ed6d957f35b9b76537357388083c178c120c", @ANYRES32=r6, @ANYBLOB="08000400da010000"], 0x44}}, 0x0) getpgid(0xffffffffffffffff) r7 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r7, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r8, 0x0) 06:21:53 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) recvmsg(r0, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) sendto$inet6(r0, &(0x7f00000001c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0) recvmsg(r0, &(0x7f00000003c0)={0x0, 0x3, 0x0}, 0x0) recvmsg(r0, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) recvfrom$inet6(r0, &(0x7f0000000000)=""/114, 0xfffffffffffffd1b, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000040)) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="00281c80", @ANYRES16=r0, @ANYBLOB="ff"], 0x34}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x9) sendmsg$TCPDIAG_GETSOCK(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x10, 0x12, 0x0, 0x0, 0x0, {0x10, 0x0, 0x0, 0x0, {0xe903}}}, 0x4c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="f4997c3794"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="58ad000010", 0x5, 0x0, 0x0, 0x0) r2 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r2, &(0x7f0000000000)='s', 0x10a73, 0x81e, 0x0, 0x4b6ae4f95a5de35b) socket$inet6(0x10, 0x3, 0x0) (async) recvmsg(r0, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) (async) sendto$inet6(r0, &(0x7f00000001c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0) (async) recvmsg(r0, &(0x7f00000003c0)={0x0, 0x3, 0x0}, 0x0) (async) recvmsg(r0, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x0) (async) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) (async) recvfrom$inet6(r0, &(0x7f0000000000)=""/114, 0xfffffffffffffd1b, 0x0, 0x0, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000040)) (async) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="00281c80", @ANYRES16=r0, @ANYBLOB="ff"], 0x34}}, 0x0) (async) socket$netlink(0x10, 0x3, 0x9) (async) sendmsg$TCPDIAG_GETSOCK(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x10, 0x12, 0x0, 0x0, 0x0, {0x10, 0x0, 0x0, 0x0, {0xe903}}}, 0x4c}}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="f4997c3794"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="58ad000010", 0x5, 0x0, 0x0, 0x0) (async) socket$inet6(0x10, 0x3, 0x0) (async) sendto$inet6(r2, &(0x7f0000000000)='s', 0x10a73, 0x81e, 0x0, 0x4b6ae4f95a5de35b) (async) [ 3140.782017][T29823] ref_ctr going negative. vaddr: 0x20000004, curr val: -18737, delta: 1 [ 3140.790793][T29823] ref_ctr increment failed for inode: 0x49b offset: 0x0 ref_ctr_offset: 0x4 of mm: 0xffff8881046c1140 06:21:53 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f0000000380)={0x3, 0x1, 0x7, 0x2, 0xb3, &(0x7f0000000500)}) ioctl$KDGKBLED(r0, 0x4b64, &(0x7f0000000040)) io_uring_setup(0xfc6, &(0x7f0000000180)) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000240)={0x9b0, 0x9, 0x1, 0x4, 0x3}) listen(r1, 0x400000001ffffffd) r2 = socket$inet_dccp(0x2, 0x6, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f0000000440)=@ipv4_newaddr={0x38, 0x14, 0x8, 0x70bd2d, 0x25dfdbfd, {0x2, 0x78, 0x40, 0xc8}, [@IFA_RT_PRIORITY={0x8, 0x9, 0x9}, @IFA_RT_PRIORITY={0x8, 0x9, 0x200}, @IFA_ADDRESS={0x8, 0x1, @loopback}, @IFA_ADDRESS={0x8, 0x1, @multicast2}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000090}, 0x8000) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev}, 0x10) r3 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$cgroup_subtree(r3, &(0x7f00000003c0)=ANY=[@ANYBLOB="88ed7c48cfb680c42f89f97a7def31f7c3754b660e634848a0626b48d0b96e39c051b0006e7ca14700d0"], 0x8) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x1, 0x0, 0x0, 0x4, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x3) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000a00)=ANY=[@ANYBLOB="c42c6e2932282e6645da1d10791c92f43389bef4b185c4d1dacc3cfc8ecc0bf814f6dcdac6841be3bdbc710f350e80317fc828caee7984f2d0a503e8bd1d5277b9bd46fd855e5dddb9448b81ed681d262d5ac040d91bacd3562e16ee197e09907921748069c7421aa5ff99e8153f597070a04ff23f0a45ebf48370445ff6d239d848a6fb317608b13f2399485571d6524f3e9adb4c75b74d486603018a2a804528c63b0669ffd7a2ce6a73a5533c00e5af296b09bb560a761e76021df7", @ANYRES32=0x0, @ANYBLOB="0000000000140003006272696467655f736c6176655f3100000800020023f841841cfce752e51d7e5a869002947c29d84327aa016caefa3f43d42afa4d29e0d98cd04dc3f8dae1de642f0f38fb6e668992d5b914aa79bfc89fc05fa6913e85925d3d29e5652e807b0230392c1ba73de7cbf221788773d2b8f006ed6d957f35b9b76537357388083c178c120c", @ANYRES32=r6, @ANYBLOB="08000400da010000"], 0x44}}, 0x0) getpgid(0xffffffffffffffff) r7 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r7, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r8, 0x0) 06:21:54 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f0000000380)={0x3, 0x1, 0x7, 0x2, 0xb3, &(0x7f0000000500)}) ioctl$KDGKBLED(r0, 0x4b64, &(0x7f0000000040)) io_uring_setup(0xfc6, &(0x7f0000000180)) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000240)={0x9b0, 0x9, 0x1, 0x4, 0x3}) listen(r1, 0x400000001ffffffd) r2 = socket$inet_dccp(0x2, 0x6, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f0000000440)=@ipv4_newaddr={0x38, 0x14, 0x8, 0x70bd2d, 0x25dfdbfd, {0x2, 0x78, 0x40, 0xc8}, [@IFA_RT_PRIORITY={0x8, 0x9, 0x9}, @IFA_RT_PRIORITY={0x8, 0x9, 0x200}, @IFA_ADDRESS={0x8, 0x1, @loopback}, @IFA_ADDRESS={0x8, 0x1, @multicast2}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000090}, 0x8000) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev}, 0x10) r3 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$cgroup_subtree(r3, &(0x7f00000003c0)=ANY=[@ANYBLOB="88ed7c48cfb680c42f89f97a7def31f7c3754b660e634848a0626b48d0b96e39c051b0006e7ca14700d0"], 0x8) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x1, 0x0, 0x0, 0x4, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x3) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000a00)=ANY=[@ANYBLOB="c42c6e2932282e6645da1d10791c92f43389bef4b185c4d1dacc3cfc8ecc0bf814f6dcdac6841be3bdbc710f350e80317fc828caee7984f2d0a503e8bd1d5277b9bd46fd855e5dddb9448b81ed681d262d5ac040d91bacd3562e16ee197e09907921748069c7421aa5ff99e8153f597070a04ff23f0a45ebf48370445ff6d239d848a6fb317608b13f2399485571d6524f3e9adb4c75b74d486603018a2a804528c63b0669ffd7a2ce6a73a5533c00e5af296b09bb560a761e76021df7", @ANYRES32=0x0, @ANYBLOB="0000000000140003006272696467655f736c6176655f3100000800020023f841841cfce752e51d7e5a869002947c29d84327aa016caefa3f43d42afa4d29e0d98cd04dc3f8dae1de642f0f38fb6e668992d5b914aa79bfc89fc05fa6913e85925d3d29e5652e807b0230392c1ba73de7cbf221788773d2b8f006ed6d957f35b9b76537357388083c178c120c", @ANYRES32=r6, @ANYBLOB="08000400da010000"], 0x44}}, 0x0) getpgid(0xffffffffffffffff) r7 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r7, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r8, 0x0) [ 3140.866107][T29834] ref_ctr going negative. vaddr: 0x20000004, curr val: -18737, delta: 1 [ 3140.874583][T29834] ref_ctr increment failed for inode: 0x49b offset: 0x0 ref_ctr_offset: 0x4 of mm: 0xffff888139ec2a40 [ 3140.913207][T29833] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=18 sclass=netlink_audit_socket pid=29833 comm=syz-executor.4 [ 3140.936924][T29837] ref_ctr going negative. vaddr: 0x20000004, curr val: -18737, delta: 1 [ 3140.945318][T29833] netlink: 44335 bytes leftover after parsing attributes in process `syz-executor.4'. 06:21:54 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f0000000380)={0x3, 0x1, 0x7, 0x2, 0xb3, &(0x7f0000000500)}) ioctl$KDGKBLED(r0, 0x4b64, &(0x7f0000000040)) io_uring_setup(0xfc6, &(0x7f0000000180)) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000240)={0x9b0, 0x9, 0x1, 0x4, 0x3}) listen(r1, 0x400000001ffffffd) r2 = socket$inet_dccp(0x2, 0x6, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f0000000440)=@ipv4_newaddr={0x38, 0x14, 0x8, 0x70bd2d, 0x25dfdbfd, {0x2, 0x78, 0x40, 0xc8}, [@IFA_RT_PRIORITY={0x8, 0x9, 0x9}, @IFA_RT_PRIORITY={0x8, 0x9, 0x200}, @IFA_ADDRESS={0x8, 0x1, @loopback}, @IFA_ADDRESS={0x8, 0x1, @multicast2}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000090}, 0x8000) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev}, 0x10) r3 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$cgroup_subtree(r3, &(0x7f00000003c0)=ANY=[@ANYBLOB="88ed7c48cfb680c42f89f97a7def31f7c3754b660e634848a0626b48d0b96e39c051b0006e7ca14700d0"], 0x8) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x1, 0x0, 0x0, 0x4, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x3) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000a00)=ANY=[@ANYBLOB="c42c6e2932282e6645da1d10791c92f43389bef4b185c4d1dacc3cfc8ecc0bf814f6dcdac6841be3bdbc710f350e80317fc828caee7984f2d0a503e8bd1d5277b9bd46fd855e5dddb9448b81ed681d262d5ac040d91bacd3562e16ee197e09907921748069c7421aa5ff99e8153f597070a04ff23f0a45ebf48370445ff6d239d848a6fb317608b13f2399485571d6524f3e9adb4c75b74d486603018a2a804528c63b0669ffd7a2ce6a73a5533c00e5af296b09bb560a761e76021df7", @ANYRES32=0x0, @ANYBLOB="0000000000140003006272696467655f736c6176655f3100000800020023f841841cfce752e51d7e5a869002947c29d84327aa016caefa3f43d42afa4d29e0d98cd04dc3f8dae1de642f0f38fb6e668992d5b914aa79bfc89fc05fa6913e85925d3d29e5652e807b0230392c1ba73de7cbf221788773d2b8f006ed6d957f35b9b76537357388083c178c120c", @ANYRES32=r6, @ANYBLOB="08000400da010000"], 0x44}}, 0x0) getpgid(0xffffffffffffffff) r7 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r7, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) [ 3140.945393][T29837] ref_ctr increment failed for inode: 0x49b offset: 0x0 ref_ctr_offset: 0x4 of mm: 0xffff888103795540 [ 3140.953690][T29835] netlink: 44335 bytes leftover after parsing attributes in process `syz-executor.4'. 06:21:54 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) recvmsg(r0, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) sendto$inet6(r0, &(0x7f00000001c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0) recvmsg(r0, &(0x7f00000003c0)={0x0, 0x3, 0x0}, 0x0) recvmsg(r0, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) recvfrom$inet6(r0, &(0x7f0000000000)=""/114, 0xfffffffffffffd1b, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000040)) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="00281c80", @ANYRES16=r0, @ANYBLOB="ff"], 0x34}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="f4995e3794"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) getgroups(0x1, &(0x7f0000000140)=[0xffffffffffffffff]) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r3, @ANYBLOB=',dfltgid=', @ANYRESHEX=r5]) setxattr$system_posix_acl(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000180)={{}, {0x1, 0x7}, [], {}, [{0x8, 0x6, r1}, {0x8, 0x2, r5}], {0x10, 0x1}}, 0x34, 0x5) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="58ad000010", 0x5, 0x0, 0x0, 0x0) r6 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r6, &(0x7f0000000000)='s', 0x10a73, 0x81e, 0x0, 0x4b6ae4f95a5de35b) 06:21:54 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f0000000380)={0x3, 0x1, 0x7, 0x2, 0xb3, &(0x7f0000000500)}) ioctl$KDGKBLED(r0, 0x4b64, &(0x7f0000000040)) io_uring_setup(0xfc6, &(0x7f0000000180)) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000240)={0x9b0, 0x9, 0x1, 0x4, 0x3}) listen(r1, 0x400000001ffffffd) r2 = socket$inet_dccp(0x2, 0x6, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f0000000440)=@ipv4_newaddr={0x38, 0x14, 0x8, 0x70bd2d, 0x25dfdbfd, {0x2, 0x78, 0x40, 0xc8}, [@IFA_RT_PRIORITY={0x8, 0x9, 0x9}, @IFA_RT_PRIORITY={0x8, 0x9, 0x200}, @IFA_ADDRESS={0x8, 0x1, @loopback}, @IFA_ADDRESS={0x8, 0x1, @multicast2}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000090}, 0x8000) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev}, 0x10) r3 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$cgroup_subtree(r3, &(0x7f00000003c0)=ANY=[@ANYBLOB="88ed7c48cfb680c42f89f97a7def31f7c3754b660e634848a0626b48d0b96e39c051b0006e7ca14700d0"], 0x8) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x1, 0x0, 0x0, 0x4, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x3) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000a00)=ANY=[@ANYBLOB="c42c6e2932282e6645da1d10791c92f43389bef4b185c4d1dacc3cfc8ecc0bf814f6dcdac6841be3bdbc710f350e80317fc828caee7984f2d0a503e8bd1d5277b9bd46fd855e5dddb9448b81ed681d262d5ac040d91bacd3562e16ee197e09907921748069c7421aa5ff99e8153f597070a04ff23f0a45ebf48370445ff6d239d848a6fb317608b13f2399485571d6524f3e9adb4c75b74d486603018a2a804528c63b0669ffd7a2ce6a73a5533c00e5af296b09bb560a761e76021df7", @ANYRES32=0x0, @ANYBLOB="0000000000140003006272696467655f736c6176655f3100000800020023f841841cfce752e51d7e5a869002947c29d84327aa016caefa3f43d42afa4d29e0d98cd04dc3f8dae1de642f0f38fb6e668992d5b914aa79bfc89fc05fa6913e85925d3d29e5652e807b0230392c1ba73de7cbf221788773d2b8f006ed6d957f35b9b76537357388083c178c120c", @ANYRES32=r6, @ANYBLOB="08000400da010000"], 0x44}}, 0x0) getpgid(0xffffffffffffffff) r7 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r7, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) 06:21:54 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f0000000380)={0x3, 0x1, 0x7, 0x2, 0xb3, &(0x7f0000000500)}) ioctl$KDGKBLED(r0, 0x4b64, &(0x7f0000000040)) io_uring_setup(0xfc6, &(0x7f0000000180)) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000240)={0x9b0, 0x9, 0x1, 0x4, 0x3}) listen(r1, 0x400000001ffffffd) r2 = socket$inet_dccp(0x2, 0x6, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f0000000440)=@ipv4_newaddr={0x38, 0x14, 0x8, 0x70bd2d, 0x25dfdbfd, {0x2, 0x78, 0x40, 0xc8}, [@IFA_RT_PRIORITY={0x8, 0x9, 0x9}, @IFA_RT_PRIORITY={0x8, 0x9, 0x200}, @IFA_ADDRESS={0x8, 0x1, @loopback}, @IFA_ADDRESS={0x8, 0x1, @multicast2}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000090}, 0x8000) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev}, 0x10) r3 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$cgroup_subtree(r3, &(0x7f00000003c0)=ANY=[@ANYBLOB="88ed7c48cfb680c42f89f97a7def31f7c3754b660e634848a0626b48d0b96e39c051b0006e7ca14700d0"], 0x8) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x1, 0x0, 0x0, 0x4, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x3) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000a00)=ANY=[@ANYBLOB="c42c6e2932282e6645da1d10791c92f43389bef4b185c4d1dacc3cfc8ecc0bf814f6dcdac6841be3bdbc710f350e80317fc828caee7984f2d0a503e8bd1d5277b9bd46fd855e5dddb9448b81ed681d262d5ac040d91bacd3562e16ee197e09907921748069c7421aa5ff99e8153f597070a04ff23f0a45ebf48370445ff6d239d848a6fb317608b13f2399485571d6524f3e9adb4c75b74d486603018a2a804528c63b0669ffd7a2ce6a73a5533c00e5af296b09bb560a761e76021df7", @ANYRES32=0x0, @ANYBLOB="0000000000140003006272696467655f736c6176655f3100000800020023f841841cfce752e51d7e5a869002947c29d84327aa016caefa3f43d42afa4d29e0d98cd04dc3f8dae1de642f0f38fb6e668992d5b914aa79bfc89fc05fa6913e85925d3d29e5652e807b0230392c1ba73de7cbf221788773d2b8f006ed6d957f35b9b76537357388083c178c120c", @ANYRES32=r6, @ANYBLOB="08000400da010000"], 0x44}}, 0x0) getpgid(0xffffffffffffffff) r7 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r7, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) [ 3141.096379][T29852] netlink: 44335 bytes leftover after parsing attributes in process `syz-executor.4'. 06:21:54 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f0000000380)={0x3, 0x1, 0x7, 0x2, 0xb3, &(0x7f0000000500)}) ioctl$KDGKBLED(r0, 0x4b64, &(0x7f0000000040)) r1 = io_uring_setup(0xfc6, &(0x7f0000000180)) socket$inet6(0xa, 0x6, 0x0) creat(&(0x7f00000000c0)='./bus\x00', 0x0) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x1, 0x0, 0x0, 0x4, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x3) close_range(r1, 0xffffffffffffffff, 0x0) 06:21:58 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f0000000380)={0x3, 0x1, 0x7, 0x2, 0xb3, &(0x7f0000000500)}) ioctl$KDGKBLED(r0, 0x4b64, &(0x7f0000000040)) io_uring_setup(0xfc6, &(0x7f0000000180)) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000240)={0x9b0, 0x9, 0x1, 0x4, 0x3}) listen(r1, 0x400000001ffffffd) r2 = socket$inet_dccp(0x2, 0x6, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f0000000440)=@ipv4_newaddr={0x38, 0x14, 0x8, 0x70bd2d, 0x25dfdbfd, {0x2, 0x78, 0x40, 0xc8}, [@IFA_RT_PRIORITY={0x8, 0x9, 0x9}, @IFA_RT_PRIORITY={0x8, 0x9, 0x200}, @IFA_ADDRESS={0x8, 0x1, @loopback}, @IFA_ADDRESS={0x8, 0x1, @multicast2}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000090}, 0x8000) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev}, 0x10) r3 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$cgroup_subtree(r3, &(0x7f00000003c0)=ANY=[@ANYBLOB="88ed7c48cfb680c42f89f97a7def31f7c3754b660e634848a0626b48d0b96e39c051b0006e7ca14700d0"], 0x8) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x1, 0x0, 0x0, 0x4, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x3) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r4, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) 06:21:58 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f0000000380)={0x3, 0x1, 0x7, 0x2, 0xb3, &(0x7f0000000500)}) ioctl$KDGKBLED(r0, 0x4b64, &(0x7f0000000040)) io_uring_setup(0xfc6, &(0x7f0000000180)) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000240)={0x9b0, 0x9, 0x1, 0x4, 0x3}) listen(r1, 0x400000001ffffffd) r2 = socket$inet_dccp(0x2, 0x6, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f0000000440)=@ipv4_newaddr={0x38, 0x14, 0x8, 0x70bd2d, 0x25dfdbfd, {0x2, 0x78, 0x40, 0xc8}, [@IFA_RT_PRIORITY={0x8, 0x9, 0x9}, @IFA_RT_PRIORITY={0x8, 0x9, 0x200}, @IFA_ADDRESS={0x8, 0x1, @loopback}, @IFA_ADDRESS={0x8, 0x1, @multicast2}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000090}, 0x8000) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev}, 0x10) r3 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$cgroup_subtree(r3, &(0x7f00000003c0)=ANY=[@ANYBLOB="88ed7c48cfb680c42f89f97a7def31f7c3754b660e634848a0626b48d0b96e39c051b0006e7ca14700d0"], 0x8) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x1, 0x0, 0x0, 0x4, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x3) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000a00)=ANY=[@ANYBLOB="c42c6e2932282e6645da1d10791c92f43389bef4b185c4d1dacc3cfc8ecc0bf814f6dcdac6841be3bdbc710f350e80317fc828caee7984f2d0a503e8bd1d5277b9bd46fd855e5dddb9448b81ed681d262d5ac040d91bacd3562e16ee197e09907921748069c7421aa5ff99e8153f597070a04ff23f0a45ebf48370445ff6d239d848a6fb317608b13f2399485571d6524f3e9adb4c75b74d486603018a2a804528c63b0669ffd7a2ce6a73a5533c00e5af296b09bb560a761e76021df7", @ANYRES32=0x0, @ANYBLOB="0000000000140003006272696467655f736c6176655f3100000800020023f841841cfce752e51d7e5a869002947c29d84327aa016caefa3f43d42afa4d29e0d98cd04dc3f8dae1de642f0f38fb6e668992d5b914aa79bfc89fc05fa6913e85925d3d29e5652e807b0230392c1ba73de7cbf221788773d2b8f006ed6d957f35b9b76537357388083c178c120c", @ANYRES32=r6, @ANYBLOB="08000400da010000"], 0x44}}, 0x0) getpgid(0xffffffffffffffff) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r7, 0x0) 06:21:58 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) recvmsg(r0, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) sendto$inet6(r0, &(0x7f00000001c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0) recvmsg(r0, &(0x7f00000003c0)={0x0, 0x3, 0x0}, 0x0) recvmsg(r0, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) recvfrom$inet6(r0, &(0x7f0000000000)=""/114, 0xfffffffffffffd1b, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000040)) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="00281c80", @ANYRES16=r0, @ANYBLOB="ff"], 0x34}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="f4995e3794"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) getgroups(0x1, &(0x7f0000000140)=[0xffffffffffffffff]) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r3, @ANYBLOB=',dfltgid=', @ANYRESHEX=r5]) setxattr$system_posix_acl(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000180)={{}, {0x1, 0x7}, [], {}, [{0x8, 0x6, r1}, {0x8, 0x2, r5}], {0x10, 0x1}}, 0x34, 0x5) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="58ad000010", 0x5, 0x0, 0x0, 0x0) r6 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r6, &(0x7f0000000000)='s', 0x10a73, 0x81e, 0x0, 0x4b6ae4f95a5de35b) socket$inet6(0x10, 0x3, 0x0) (async) recvmsg(r0, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) (async) sendto$inet6(r0, &(0x7f00000001c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0) (async) recvmsg(r0, &(0x7f00000003c0)={0x0, 0x3, 0x0}, 0x0) (async) recvmsg(r0, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x0) (async) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) (async) recvfrom$inet6(r0, &(0x7f0000000000)=""/114, 0xfffffffffffffd1b, 0x0, 0x0, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000040)) (async) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="00281c80", @ANYRES16=r0, @ANYBLOB="ff"], 0x34}}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="f4995e3794"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) getgroups(0x1, &(0x7f0000000140)=[0xffffffffffffffff]) (async) pipe2$9p(&(0x7f0000000240), 0x0) (async) socket(0x10, 0x2, 0x0) (async) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000cab000)=0xc) (async) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r3, @ANYBLOB=',dfltgid=', @ANYRESHEX=r5]) (async) setxattr$system_posix_acl(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000180)={{}, {0x1, 0x7}, [], {}, [{0x8, 0x6, r1}, {0x8, 0x2, r5}], {0x10, 0x1}}, 0x34, 0x5) (async) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="58ad000010", 0x5, 0x0, 0x0, 0x0) (async) socket$inet6(0x10, 0x3, 0x0) (async) sendto$inet6(r6, &(0x7f0000000000)='s', 0x10a73, 0x81e, 0x0, 0x4b6ae4f95a5de35b) (async) 06:21:58 executing program 5: r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e24, @local}, 0x10) writev(r0, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) recvmmsg(r0, &(0x7f0000003e40)=[{{&(0x7f0000000100)=@phonet, 0x80, 0x0, 0x0, &(0x7f00000024c0)=""/4096, 0xff00}}, {{0x0, 0x80100200, 0x0, 0x0, &(0x7f00000035c0)=""/241, 0xf1}}, {{&(0x7f00000036c0)=@un=@abs, 0x80, &(0x7f0000003780)=[{&(0x7f0000003740)=""/4, 0xfffffd07}], 0x1, &(0x7f00000037c0)=""/236, 0xec}}, {{&(0x7f00000038c0)=@l2tp6={0xa, 0x0, 0x0, @private1}, 0x80, &(0x7f0000003bc0)=[{0x0}, {&(0x7f0000003a00)=""/190, 0xbe}, {&(0x7f0000003ac0)=""/131, 0x83}, {0x0}], 0x4, &(0x7f0000003c00)=""/73, 0x49}}, {{&(0x7f0000003c80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, 0x0, 0x0, &(0x7f0000003e00)=""/48, 0x30}}], 0x5, 0x40000121, 0x0) 06:21:58 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000005c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e24, @local}, 0x10) writev(r0, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) recvmmsg(r0, &(0x7f0000003e40)=[{{&(0x7f0000000100)=@phonet, 0x80, 0x0, 0x0, &(0x7f00000024c0)=""/4096, 0x1000, 0x2}}, {{0x0, 0x80100200, 0x0, 0x0, &(0x7f00000035c0)=""/241, 0xf1}}, {{&(0x7f00000036c0)=@un=@abs, 0x80, &(0x7f0000003780)=[{&(0x7f0000003740)=""/4, 0xfffffd07}], 0x1, &(0x7f00000037c0)=""/236, 0xec}}, {{&(0x7f00000038c0)=@l2tp6={0xa, 0x0, 0x0, @private1}, 0x80, &(0x7f0000003bc0)=[{0x0}, {&(0x7f0000003a00)=""/190, 0xbe}, {&(0x7f0000003ac0)=""/131, 0x83}, {0x0}], 0x4, &(0x7f0000003c00)=""/73, 0x49}}, {{&(0x7f0000003c80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, 0x0, 0x0, &(0x7f0000003e00)=""/48, 0x30}}], 0x5, 0x40000121, 0x0) 06:21:58 executing program 1: unshare(0x40600) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000200)='/sys/fs/cgroup', 0x0, 0x0) flistxattr(r0, 0x0, 0x0) r1 = socket$inet6(0x10, 0x3, 0x1fb) recvmsg(r1, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) sendto$inet6(r1, &(0x7f00000001c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0) recvmsg(r1, &(0x7f00000003c0)={0x0, 0x3, 0x0}, 0x0) recvmsg(r1, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x0) recvmsg(r1, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) recvfrom$inet6(r1, &(0x7f0000000000)=""/114, 0xfffffffffffffd1b, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000040)) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="00281c80", @ANYRES16=r1, @ANYBLOB="ff"], 0x34}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="f4997c3794"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="58ad000010", 0x5, 0x0, 0x0, 0x0) r2 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r2, &(0x7f0000000000)='s', 0x10a73, 0x81e, 0x0, 0x4b6ae4f95a5de35b) 06:21:58 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f0000000380)={0x3, 0x1, 0x7, 0x2, 0xb3, &(0x7f0000000500)}) ioctl$KDGKBLED(r0, 0x4b64, &(0x7f0000000040)) r1 = io_uring_setup(0xfc6, &(0x7f0000000180)) r2 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r2, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000240)={0x9b0, 0x9, 0x1, 0x4, 0x3}) listen(r2, 0x400000001ffffffd) r3 = socket$inet_dccp(0x2, 0x6, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f0000000440)=@ipv4_newaddr={0x38, 0x14, 0x8, 0x70bd2d, 0x25dfdbfd, {0x2, 0x78, 0x40, 0xc8}, [@IFA_RT_PRIORITY={0x8, 0x9, 0x9}, @IFA_RT_PRIORITY={0x8, 0x9, 0x200}, @IFA_ADDRESS={0x8, 0x1, @loopback}, @IFA_ADDRESS={0x8, 0x1, @multicast2}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000090}, 0x8000) connect$inet(r3, &(0x7f0000e5c000)={0x2, 0x4e20, @dev}, 0x10) r4 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$cgroup_subtree(r4, &(0x7f00000003c0)=ANY=[@ANYBLOB="88ed7c48cfb680c42f89f97a7def31f7c3754b660e634848a0626b48d0b96e39c051b0006e7ca14700d0"], 0x8) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x1, 0x0, 0x0, 0x4, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x3) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000a00)=ANY=[@ANYBLOB="c42c6e2932282e6645da1d10791c92f43389bef4b185c4d1dacc3cfc8ecc0bf814f6dcdac6841be3bdbc710f350e80317fc828caee7984f2d0a503e8bd1d5277b9bd46fd855e5dddb9448b81ed681d262d5ac040d91bacd3562e16ee197e09907921748069c7421aa5ff99e8153f597070a04ff23f0a45ebf48370445ff6d239d848a6fb317608b13f2399485571d6524f3e9adb4c75b74d486603018a2a804528c63b0669ffd7a2ce6a73a5533c00e5af296b09bb560a761e76021df7", @ANYRES32=0x0, @ANYBLOB="0000000000140003006272696467655f736c6176655f3100000800020023f841841cfce752e51d7e5a869002947c29d84327aa016caefa3f43d42afa4d29e0d98cd04dc3f8dae1de642f0f38fb6e668992d5b914aa79bfc89fc05fa6913e85925d3d29e5652e807b0230392c1ba73de7cbf221788773d2b8f006ed6d957f35b9b76537357388083c178c120c", @ANYRES32=r7, @ANYBLOB="08000400da010000"], 0x44}}, 0x0) r8 = getpgid(0xffffffffffffffff) sendmsg$nl_route(r5, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@RTM_GETNSID={0x1c, 0x5a, 0x19, 0x70bd2d, 0x25dfdbfe, {}, [@NETNSA_PID={0x8, 0x2, r8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x811}, 0x4000001) r9 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r9, 0x0) r10 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r10, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 06:21:58 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f0000000380)={0x3, 0x1, 0x7, 0x2, 0xb3, &(0x7f0000000500)}) ioctl$KDGKBLED(r0, 0x4b64, &(0x7f0000000040)) io_uring_setup(0xfc6, &(0x7f0000000180)) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000240)={0x9b0, 0x9, 0x1, 0x4, 0x3}) listen(r1, 0x400000001ffffffd) r2 = socket$inet_dccp(0x2, 0x6, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f0000000440)=@ipv4_newaddr={0x38, 0x14, 0x8, 0x70bd2d, 0x25dfdbfd, {0x2, 0x78, 0x40, 0xc8}, [@IFA_RT_PRIORITY={0x8, 0x9, 0x9}, @IFA_RT_PRIORITY={0x8, 0x9, 0x200}, @IFA_ADDRESS={0x8, 0x1, @loopback}, @IFA_ADDRESS={0x8, 0x1, @multicast2}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000090}, 0x8000) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev}, 0x10) r3 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$cgroup_subtree(r3, &(0x7f00000003c0)=ANY=[@ANYBLOB="88ed7c48cfb680c42f89f97a7def31f7c3754b660e634848a0626b48d0b96e39c051b0006e7ca14700d0"], 0x8) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x1, 0x0, 0x0, 0x4, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x3) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000a00)=ANY=[@ANYBLOB="c42c6e2932282e6645da1d10791c92f43389bef4b185c4d1dacc3cfc8ecc0bf814f6dcdac6841be3bdbc710f350e80317fc828caee7984f2d0a503e8bd1d5277b9bd46fd855e5dddb9448b81ed681d262d5ac040d91bacd3562e16ee197e09907921748069c7421aa5ff99e8153f597070a04ff23f0a45ebf48370445ff6d239d848a6fb317608b13f2399485571d6524f3e9adb4c75b74d486603018a2a804528c63b0669ffd7a2ce6a73a5533c00e5af296b09bb560a761e76021df7", @ANYRES32=0x0, @ANYBLOB="0000000000140003006272696467655f736c6176655f3100000800020023f841841cfce752e51d7e5a869002947c29d84327aa016caefa3f43d42afa4d29e0d98cd04dc3f8dae1de642f0f38fb6e668992d5b914aa79bfc89fc05fa6913e85925d3d29e5652e807b0230392c1ba73de7cbf221788773d2b8f006ed6d957f35b9b76537357388083c178c120c", @ANYRES32=r6, @ANYBLOB="08000400da010000"], 0x44}}, 0x0) getpgid(0xffffffffffffffff) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r7, 0x0) [ 3145.711632][T29874] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65296 sclass=netlink_route_socket pid=29874 comm=syz-executor.1 06:21:58 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) recvmsg(r0, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) sendto$inet6(r0, &(0x7f00000001c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0) recvmsg(r0, &(0x7f00000003c0)={0x0, 0x3, 0x0}, 0x0) (async) recvmsg(r0, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x0) (async) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) (async) recvfrom$inet6(r0, &(0x7f0000000000)=""/114, 0xfffffffffffffd1b, 0x0, 0x0, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000040)) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="00281c80", @ANYRES16=r0, @ANYBLOB="ff"], 0x34}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="f4995e3794"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) getgroups(0x1, &(0x7f0000000140)=[0xffffffffffffffff]) (async) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r3, @ANYBLOB=',dfltgid=', @ANYRESHEX=r5]) setxattr$system_posix_acl(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000180)={{}, {0x1, 0x7}, [], {}, [{0x8, 0x6, r1}, {0x8, 0x2, r5}], {0x10, 0x1}}, 0x34, 0x5) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="58ad000010", 0x5, 0x0, 0x0, 0x0) r6 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r6, &(0x7f0000000000)='s', 0x10a73, 0x81e, 0x0, 0x4b6ae4f95a5de35b) 06:21:58 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f0000000380)={0x3, 0x1, 0x7, 0x2, 0xb3, &(0x7f0000000500)}) ioctl$KDGKBLED(r0, 0x4b64, &(0x7f0000000040)) io_uring_setup(0xfc6, &(0x7f0000000180)) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000240)={0x9b0, 0x9, 0x1, 0x4, 0x3}) listen(r1, 0x400000001ffffffd) r2 = socket$inet_dccp(0x2, 0x6, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f0000000440)=@ipv4_newaddr={0x38, 0x14, 0x8, 0x70bd2d, 0x25dfdbfd, {0x2, 0x78, 0x40, 0xc8}, [@IFA_RT_PRIORITY={0x8, 0x9, 0x9}, @IFA_RT_PRIORITY={0x8, 0x9, 0x200}, @IFA_ADDRESS={0x8, 0x1, @loopback}, @IFA_ADDRESS={0x8, 0x1, @multicast2}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000090}, 0x8000) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev}, 0x10) r3 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$cgroup_subtree(r3, &(0x7f00000003c0)=ANY=[@ANYBLOB="88ed7c48cfb680c42f89f97a7def31f7c3754b660e634848a0626b48d0b96e39c051b0006e7ca14700d0"], 0x8) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x1, 0x0, 0x0, 0x4, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x3) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000a00)=ANY=[@ANYBLOB="c42c6e2932282e6645da1d10791c92f43389bef4b185c4d1dacc3cfc8ecc0bf814f6dcdac6841be3bdbc710f350e80317fc828caee7984f2d0a503e8bd1d5277b9bd46fd855e5dddb9448b81ed681d262d5ac040d91bacd3562e16ee197e09907921748069c7421aa5ff99e8153f597070a04ff23f0a45ebf48370445ff6d239d848a6fb317608b13f2399485571d6524f3e9adb4c75b74d486603018a2a804528c63b0669ffd7a2ce6a73a5533c00e5af296b09bb560a761e76021df7", @ANYRES32=0x0, @ANYBLOB="0000000000140003006272696467655f736c6176655f3100000800020023f841841cfce752e51d7e5a869002947c29d84327aa016caefa3f43d42afa4d29e0d98cd04dc3f8dae1de642f0f38fb6e668992d5b914aa79bfc89fc05fa6913e85925d3d29e5652e807b0230392c1ba73de7cbf221788773d2b8f006ed6d957f35b9b76537357388083c178c120c", @ANYRES32=r6, @ANYBLOB="08000400da010000"], 0x44}}, 0x0) getpgid(0xffffffffffffffff) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r7, 0x0) [ 3145.763280][T29875] netlink: 44335 bytes leftover after parsing attributes in process `syz-executor.4'. 06:21:58 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f0000000380)={0x3, 0x1, 0x7, 0x2, 0xb3, &(0x7f0000000500)}) ioctl$KDGKBLED(r0, 0x4b64, &(0x7f0000000040)) io_uring_setup(0xfc6, &(0x7f0000000180)) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000240)={0x9b0, 0x9, 0x1, 0x4, 0x3}) listen(r1, 0x400000001ffffffd) r2 = socket$inet_dccp(0x2, 0x6, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f0000000440)=@ipv4_newaddr={0x38, 0x14, 0x8, 0x70bd2d, 0x25dfdbfd, {0x2, 0x78, 0x40, 0xc8}, [@IFA_RT_PRIORITY={0x8, 0x9, 0x9}, @IFA_RT_PRIORITY={0x8, 0x9, 0x200}, @IFA_ADDRESS={0x8, 0x1, @loopback}, @IFA_ADDRESS={0x8, 0x1, @multicast2}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000090}, 0x8000) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev}, 0x10) r3 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$cgroup_subtree(r3, &(0x7f00000003c0)=ANY=[@ANYBLOB="88ed7c48cfb680c42f89f97a7def31f7c3754b660e634848a0626b48d0b96e39c051b0006e7ca14700d0"], 0x8) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x1, 0x0, 0x0, 0x4, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x3) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000a00)=ANY=[@ANYBLOB="c42c6e2932282e6645da1d10791c92f43389bef4b185c4d1dacc3cfc8ecc0bf814f6dcdac6841be3bdbc710f350e80317fc828caee7984f2d0a503e8bd1d5277b9bd46fd855e5dddb9448b81ed681d262d5ac040d91bacd3562e16ee197e09907921748069c7421aa5ff99e8153f597070a04ff23f0a45ebf48370445ff6d239d848a6fb317608b13f2399485571d6524f3e9adb4c75b74d486603018a2a804528c63b0669ffd7a2ce6a73a5533c00e5af296b09bb560a761e76021df7", @ANYRES32=0x0, @ANYBLOB="0000000000140003006272696467655f736c6176655f3100000800020023f841841cfce752e51d7e5a869002947c29d84327aa016caefa3f43d42afa4d29e0d98cd04dc3f8dae1de642f0f38fb6e668992d5b914aa79bfc89fc05fa6913e85925d3d29e5652e807b0230392c1ba73de7cbf221788773d2b8f006ed6d957f35b9b76537357388083c178c120c", @ANYRES32=r6, @ANYBLOB="08000400da010000"], 0x44}}, 0x0) getpgid(0xffffffffffffffff) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, 0xffffffffffffffff, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r7, 0x0) 06:21:59 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) recvmsg(r0, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) sendto$inet6(r0, &(0x7f00000001c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0) recvmsg(r0, &(0x7f00000003c0)={0x0, 0x3, 0x0}, 0x0) recvmsg(r0, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={0xffffffffffffffff, 0x58, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000180)={'syztnl0\x00', &(0x7f0000000200)={'syztnl2\x00', r2, 0x29, 0xff, 0x8, 0x1, 0xb, @empty, @loopback, 0x10, 0x8, 0x200, 0x9}}) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) recvfrom$inet6(r0, &(0x7f0000000000)=""/114, 0xfffffffffffffd1b, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000040)) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="00281c80", @ANYRES16=r0, @ANYBLOB="ff"], 0x34}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0x3, &(0x7f0000000400)=ANY=[@ANYRESOCT=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="58ad000010", 0x5, 0x0, 0x0, 0x0) r3 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r3, &(0x7f0000000000)='s', 0x10a73, 0x81e, 0x0, 0x4b6ae4f95a5de35b) [ 3145.837521][T29906] ref_ctr going negative. vaddr: 0x20000004, curr val: -18737, delta: 1 [ 3145.846389][T29906] ref_ctr increment failed for inode: 0x49c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0xffff888104e9ba80 06:22:03 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f0000000380)={0x3, 0x1, 0x7, 0x2, 0xb3, &(0x7f0000000500)}) ioctl$KDGKBLED(r0, 0x4b64, &(0x7f0000000040)) io_uring_setup(0xfc6, &(0x7f0000000180)) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000240)={0x9b0, 0x9, 0x1, 0x4, 0x3}) listen(r1, 0x400000001ffffffd) r2 = socket$inet_dccp(0x2, 0x6, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f0000000440)=@ipv4_newaddr={0x38, 0x14, 0x8, 0x70bd2d, 0x25dfdbfd, {0x2, 0x78, 0x40, 0xc8}, [@IFA_RT_PRIORITY={0x8, 0x9, 0x9}, @IFA_RT_PRIORITY={0x8, 0x9, 0x200}, @IFA_ADDRESS={0x8, 0x1, @loopback}, @IFA_ADDRESS={0x8, 0x1, @multicast2}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000090}, 0x8000) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev}, 0x10) r3 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$cgroup_subtree(r3, &(0x7f00000003c0)=ANY=[@ANYBLOB="88ed7c48cfb680c42f89f97a7def31f7c3754b660e634848a0626b48d0b96e39c051b0006e7ca14700d0"], 0x8) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x1, 0x0, 0x0, 0x4, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x3) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r4, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) 06:22:03 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f0000000380)={0x3, 0x1, 0x7, 0x2, 0xb3, &(0x7f0000000500)}) ioctl$KDGKBLED(r0, 0x4b64, &(0x7f0000000040)) r1 = io_uring_setup(0xfc6, &(0x7f0000000180)) r2 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r2, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000240)={0x9b0, 0x9, 0x1, 0x4, 0x3}) listen(r2, 0x400000001ffffffd) r3 = socket$inet_dccp(0x2, 0x6, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f0000000440)=@ipv4_newaddr={0x38, 0x14, 0x8, 0x70bd2d, 0x25dfdbfd, {0x2, 0x78, 0x40, 0xc8}, [@IFA_RT_PRIORITY={0x8, 0x9, 0x9}, @IFA_RT_PRIORITY={0x8, 0x9, 0x200}, @IFA_ADDRESS={0x8, 0x1, @loopback}, @IFA_ADDRESS={0x8, 0x1, @multicast2}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000090}, 0x8000) connect$inet(r3, &(0x7f0000e5c000)={0x2, 0x4e20, @dev}, 0x10) r4 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$cgroup_subtree(r4, &(0x7f00000003c0)=ANY=[@ANYBLOB="88ed7c48cfb680c42f89f97a7def31f7c3754b660e634848a0626b48d0b96e39c051b0006e7ca14700d0"], 0x8) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x1, 0x0, 0x0, 0x4, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x3) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000a00)=ANY=[@ANYBLOB="c42c6e2932282e6645da1d10791c92f43389bef4b185c4d1dacc3cfc8ecc0bf814f6dcdac6841be3bdbc710f350e80317fc828caee7984f2d0a503e8bd1d5277b9bd46fd855e5dddb9448b81ed681d262d5ac040d91bacd3562e16ee197e09907921748069c7421aa5ff99e8153f597070a04ff23f0a45ebf48370445ff6d239d848a6fb317608b13f2399485571d6524f3e9adb4c75b74d486603018a2a804528c63b0669ffd7a2ce6a73a5533c00e5af296b09bb560a761e76021df7", @ANYRES32=0x0, @ANYBLOB="0000000000140003006272696467655f736c6176655f3100000800020023f841841cfce752e51d7e5a869002947c29d84327aa016caefa3f43d42afa4d29e0d98cd04dc3f8dae1de642f0f38fb6e668992d5b914aa79bfc89fc05fa6913e85925d3d29e5652e807b0230392c1ba73de7cbf221788773d2b8f006ed6d957f35b9b76537357388083c178c120c", @ANYRES32=r7, @ANYBLOB="08000400da010000"], 0x44}}, 0x0) r8 = getpgid(0xffffffffffffffff) sendmsg$nl_route(r5, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@RTM_GETNSID={0x1c, 0x5a, 0x19, 0x70bd2d, 0x25dfdbfe, {}, [@NETNSA_PID={0x8, 0x2, r8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x811}, 0x4000001) r9 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r9, 0x0) r10 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r10, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 06:22:03 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f0000000380)={0x3, 0x1, 0x7, 0x2, 0xb3, &(0x7f0000000500)}) ioctl$KDGKBLED(r0, 0x4b64, &(0x7f0000000040)) io_uring_setup(0xfc6, &(0x7f0000000180)) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000240)={0x9b0, 0x9, 0x1, 0x4, 0x3}) listen(r1, 0x400000001ffffffd) r2 = socket$inet_dccp(0x2, 0x6, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f0000000440)=@ipv4_newaddr={0x38, 0x14, 0x8, 0x70bd2d, 0x25dfdbfd, {0x2, 0x78, 0x40, 0xc8}, [@IFA_RT_PRIORITY={0x8, 0x9, 0x9}, @IFA_RT_PRIORITY={0x8, 0x9, 0x200}, @IFA_ADDRESS={0x8, 0x1, @loopback}, @IFA_ADDRESS={0x8, 0x1, @multicast2}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000090}, 0x8000) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev}, 0x10) r3 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$cgroup_subtree(r3, &(0x7f00000003c0)=ANY=[@ANYBLOB="88ed7c48cfb680c42f89f97a7def31f7c3754b660e634848a0626b48d0b96e39c051b0006e7ca14700d0"], 0x8) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x1, 0x0, 0x0, 0x4, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x3) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000a00)=ANY=[@ANYBLOB="c42c6e2932282e6645da1d10791c92f43389bef4b185c4d1dacc3cfc8ecc0bf814f6dcdac6841be3bdbc710f350e80317fc828caee7984f2d0a503e8bd1d5277b9bd46fd855e5dddb9448b81ed681d262d5ac040d91bacd3562e16ee197e09907921748069c7421aa5ff99e8153f597070a04ff23f0a45ebf48370445ff6d239d848a6fb317608b13f2399485571d6524f3e9adb4c75b74d486603018a2a804528c63b0669ffd7a2ce6a73a5533c00e5af296b09bb560a761e76021df7", @ANYRES32=0x0, @ANYBLOB="0000000000140003006272696467655f736c6176655f3100000800020023f841841cfce752e51d7e5a869002947c29d84327aa016caefa3f43d42afa4d29e0d98cd04dc3f8dae1de642f0f38fb6e668992d5b914aa79bfc89fc05fa6913e85925d3d29e5652e807b0230392c1ba73de7cbf221788773d2b8f006ed6d957f35b9b76537357388083c178c120c", @ANYRES32=r6, @ANYBLOB="08000400da010000"], 0x44}}, 0x0) getpgid(0xffffffffffffffff) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, 0xffffffffffffffff, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r7, 0x0) 06:22:03 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) recvmsg(r0, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) sendto$inet6(r0, &(0x7f00000001c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0) (async) recvmsg(r0, &(0x7f00000003c0)={0x0, 0x3, 0x0}, 0x0) (async) recvmsg(r0, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x0) (async, rerun: 32) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={0xffffffffffffffff, 0x58, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) (rerun: 32) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000180)={'syztnl0\x00', &(0x7f0000000200)={'syztnl2\x00', r2, 0x29, 0xff, 0x8, 0x1, 0xb, @empty, @loopback, 0x10, 0x8, 0x200, 0x9}}) (async) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) (async) recvfrom$inet6(r0, &(0x7f0000000000)=""/114, 0xfffffffffffffd1b, 0x0, 0x0, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000040)) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="00281c80", @ANYRES16=r0, @ANYBLOB="ff"], 0x34}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0x3, &(0x7f0000000400)=ANY=[@ANYRESOCT=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="58ad000010", 0x5, 0x0, 0x0, 0x0) (async) r3 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r3, &(0x7f0000000000)='s', 0x10a73, 0x81e, 0x0, 0x4b6ae4f95a5de35b) 06:22:03 executing program 5: r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e24, @local}, 0x10) writev(r0, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) recvmmsg(r0, &(0x7f0000003e40)=[{{&(0x7f0000000100)=@phonet, 0x80, 0x0, 0x0, &(0x7f00000024c0)=""/4096, 0x1000000}}, {{0x0, 0x80100200, 0x0, 0x0, &(0x7f00000035c0)=""/241, 0xf1}}, {{&(0x7f00000036c0)=@un=@abs, 0x80, &(0x7f0000003780)=[{&(0x7f0000003740)=""/4, 0xfffffd07}], 0x1, &(0x7f00000037c0)=""/236, 0xec}}, {{&(0x7f00000038c0)=@l2tp6={0xa, 0x0, 0x0, @private1}, 0x80, &(0x7f0000003bc0)=[{0x0}, {&(0x7f0000003a00)=""/190, 0xbe}, {&(0x7f0000003ac0)=""/131, 0x83}, {0x0}], 0x4, &(0x7f0000003c00)=""/73, 0x49}}, {{&(0x7f0000003c80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, 0x0, 0x0, &(0x7f0000003e00)=""/48, 0x30}}], 0x5, 0x40000121, 0x0) 06:22:03 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000005c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e24, @local}, 0x10) writev(r0, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) recvmmsg(r0, &(0x7f0000003e40)=[{{&(0x7f0000000100)=@phonet, 0x80, 0x0, 0x0, &(0x7f00000024c0)=""/4096, 0x1000, 0x3}}, {{0x0, 0x80100200, 0x0, 0x0, &(0x7f00000035c0)=""/241, 0xf1}}, {{&(0x7f00000036c0)=@un=@abs, 0x80, &(0x7f0000003780)=[{&(0x7f0000003740)=""/4, 0xfffffd07}], 0x1, &(0x7f00000037c0)=""/236, 0xec}}, {{&(0x7f00000038c0)=@l2tp6={0xa, 0x0, 0x0, @private1}, 0x80, &(0x7f0000003bc0)=[{0x0}, {&(0x7f0000003a00)=""/190, 0xbe}, {&(0x7f0000003ac0)=""/131, 0x83}, {0x0}], 0x4, &(0x7f0000003c00)=""/73, 0x49}}, {{&(0x7f0000003c80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, 0x0, 0x0, &(0x7f0000003e00)=""/48, 0x30}}], 0x5, 0x40000121, 0x0) 06:22:03 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f0000000380)={0x3, 0x1, 0x7, 0x2, 0xb3, &(0x7f0000000500)}) ioctl$KDGKBLED(r0, 0x4b64, &(0x7f0000000040)) io_uring_setup(0xfc6, &(0x7f0000000180)) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000240)={0x9b0, 0x9, 0x1, 0x4, 0x3}) listen(r1, 0x400000001ffffffd) r2 = socket$inet_dccp(0x2, 0x6, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f0000000440)=@ipv4_newaddr={0x38, 0x14, 0x8, 0x70bd2d, 0x25dfdbfd, {0x2, 0x78, 0x40, 0xc8}, [@IFA_RT_PRIORITY={0x8, 0x9, 0x9}, @IFA_RT_PRIORITY={0x8, 0x9, 0x200}, @IFA_ADDRESS={0x8, 0x1, @loopback}, @IFA_ADDRESS={0x8, 0x1, @multicast2}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000090}, 0x8000) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev}, 0x10) r3 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$cgroup_subtree(r3, &(0x7f00000003c0)=ANY=[@ANYBLOB="88ed7c48cfb680c42f89f97a7def31f7c3754b660e634848a0626b48d0b96e39c051b0006e7ca14700d0"], 0x8) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x1, 0x0, 0x0, 0x4, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x3) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000a00)=ANY=[@ANYBLOB="c42c6e2932282e6645da1d10791c92f43389bef4b185c4d1dacc3cfc8ecc0bf814f6dcdac6841be3bdbc710f350e80317fc828caee7984f2d0a503e8bd1d5277b9bd46fd855e5dddb9448b81ed681d262d5ac040d91bacd3562e16ee197e09907921748069c7421aa5ff99e8153f597070a04ff23f0a45ebf48370445ff6d239d848a6fb317608b13f2399485571d6524f3e9adb4c75b74d486603018a2a804528c63b0669ffd7a2ce6a73a5533c00e5af296b09bb560a761e76021df7", @ANYRES32=0x0, @ANYBLOB="0000000000140003006272696467655f736c6176655f3100000800020023f841841cfce752e51d7e5a869002947c29d84327aa016caefa3f43d42afa4d29e0d98cd04dc3f8dae1de642f0f38fb6e668992d5b914aa79bfc89fc05fa6913e85925d3d29e5652e807b0230392c1ba73de7cbf221788773d2b8f006ed6d957f35b9b76537357388083c178c120c", @ANYRES32=r6, @ANYBLOB="08000400da010000"], 0x44}}, 0x0) getpgid(0xffffffffffffffff) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, 0xffffffffffffffff, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r7, 0x0) 06:22:03 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f0000000380)={0x3, 0x1, 0x7, 0x2, 0xb3, &(0x7f0000000500)}) ioctl$KDGKBLED(r0, 0x4b64, &(0x7f0000000040)) io_uring_setup(0xfc6, &(0x7f0000000180)) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000240)={0x9b0, 0x9, 0x1, 0x4, 0x3}) listen(r1, 0x400000001ffffffd) r2 = socket$inet_dccp(0x2, 0x6, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f0000000440)=@ipv4_newaddr={0x38, 0x14, 0x8, 0x70bd2d, 0x25dfdbfd, {0x2, 0x78, 0x40, 0xc8}, [@IFA_RT_PRIORITY={0x8, 0x9, 0x9}, @IFA_RT_PRIORITY={0x8, 0x9, 0x200}, @IFA_ADDRESS={0x8, 0x1, @loopback}, @IFA_ADDRESS={0x8, 0x1, @multicast2}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000090}, 0x8000) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev}, 0x10) r3 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$cgroup_subtree(r3, &(0x7f00000003c0)=ANY=[@ANYBLOB="88ed7c48cfb680c42f89f97a7def31f7c3754b660e634848a0626b48d0b96e39c051b0006e7ca14700d0"], 0x8) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x1, 0x0, 0x0, 0x4, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x3) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000a00)=ANY=[@ANYBLOB="c42c6e2932282e6645da1d10791c92f43389bef4b185c4d1dacc3cfc8ecc0bf814f6dcdac6841be3bdbc710f350e80317fc828caee7984f2d0a503e8bd1d5277b9bd46fd855e5dddb9448b81ed681d262d5ac040d91bacd3562e16ee197e09907921748069c7421aa5ff99e8153f597070a04ff23f0a45ebf48370445ff6d239d848a6fb317608b13f2399485571d6524f3e9adb4c75b74d486603018a2a804528c63b0669ffd7a2ce6a73a5533c00e5af296b09bb560a761e76021df7", @ANYRES32=0x0, @ANYBLOB="0000000000140003006272696467655f736c6176655f3100000800020023f841841cfce752e51d7e5a869002947c29d84327aa016caefa3f43d42afa4d29e0d98cd04dc3f8dae1de642f0f38fb6e668992d5b914aa79bfc89fc05fa6913e85925d3d29e5652e807b0230392c1ba73de7cbf221788773d2b8f006ed6d957f35b9b76537357388083c178c120c", @ANYRES32=r6, @ANYBLOB="08000400da010000"], 0x44}}, 0x0) r7 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r7, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r8, 0x0) 06:22:03 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) recvmsg(r0, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) (async) sendto$inet6(r0, &(0x7f00000001c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0) recvmsg(r0, &(0x7f00000003c0)={0x0, 0x3, 0x0}, 0x0) (async, rerun: 32) recvmsg(r0, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x0) (async, rerun: 32) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={0xffffffffffffffff, 0x58, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000180)={'syztnl0\x00', &(0x7f0000000200)={'syztnl2\x00', r2, 0x29, 0xff, 0x8, 0x1, 0xb, @empty, @loopback, 0x10, 0x8, 0x200, 0x9}}) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) (async, rerun: 32) recvfrom$inet6(r0, &(0x7f0000000000)=""/114, 0xfffffffffffffd1b, 0x0, 0x0, 0x0) (async, rerun: 32) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000040)) (async) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="00281c80", @ANYRES16=r0, @ANYBLOB="ff"], 0x34}}, 0x0) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0x3, &(0x7f0000000400)=ANY=[@ANYRESOCT=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (rerun: 32) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="58ad000010", 0x5, 0x0, 0x0, 0x0) (async, rerun: 32) r3 = socket$inet6(0x10, 0x3, 0x0) (rerun: 32) sendto$inet6(r3, &(0x7f0000000000)='s', 0x10a73, 0x81e, 0x0, 0x4b6ae4f95a5de35b) 06:22:03 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) recvmsg(r0, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) sendto$inet6(r0, &(0x7f00000001c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0) recvmsg(r0, &(0x7f00000003c0)={0x0, 0x3, 0x0}, 0x0) recvmsg(r0, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) recvfrom$inet6(r0, &(0x7f0000000000)=""/114, 0xfffffffffffffd1b, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000040)) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="5c3e65d3774b0d8d3fab8d00640974aa24d0b2e7fe0c40e5cf6de27eb546ed62658dfa18f01409066c16be803f001b57b424c335e636728cf2f30221361f77a38deb1a15e8013dbed399ac27a7e1ca12ad4a140485c60b2b14723bdc69dd7b367d15cc0dc3f2de9b842e40ec6e807a97486e0013570cc57b5a2aef65a901928c3e0ba24cdc406aac7a89110e95c4b1d02edb5e2d64c6cd7dd5c2a7a3d18f48dfb2c45c20c718be3e78b8747544c4cb37b56d1f2e46254d3a225f1e5cd837908d", @ANYRES16=r0, @ANYBLOB="ff"], 0x34}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="f4997c3794"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="58ad000010", 0x5, 0x0, 0x0, 0x0) r1 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f0000000000)='s', 0x10a73, 0x81e, 0x0, 0x4b6ae4f95a5de35b) [ 3150.729070][T29939] ref_ctr going negative. vaddr: 0x20000004, curr val: -18737, delta: 1 [ 3150.737590][T29939] ref_ctr increment failed for inode: 0x49b offset: 0x0 ref_ctr_offset: 0x4 of mm: 0xffff888139feca40 [ 3150.749552][T29940] ref_ctr going negative. vaddr: 0x20000004, curr val: -18737, delta: 1 [ 3150.758159][T29940] ref_ctr increment failed for inode: 0x48c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0xffff888139fec0c0 06:22:03 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f0000000380)={0x3, 0x1, 0x7, 0x2, 0xb3, &(0x7f0000000500)}) ioctl$KDGKBLED(r0, 0x4b64, &(0x7f0000000040)) io_uring_setup(0xfc6, &(0x7f0000000180)) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000240)={0x9b0, 0x9, 0x1, 0x4, 0x3}) listen(r1, 0x400000001ffffffd) r2 = socket$inet_dccp(0x2, 0x6, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f0000000440)=@ipv4_newaddr={0x38, 0x14, 0x8, 0x70bd2d, 0x25dfdbfd, {0x2, 0x78, 0x40, 0xc8}, [@IFA_RT_PRIORITY={0x8, 0x9, 0x9}, @IFA_RT_PRIORITY={0x8, 0x9, 0x200}, @IFA_ADDRESS={0x8, 0x1, @loopback}, @IFA_ADDRESS={0x8, 0x1, @multicast2}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000090}, 0x8000) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev}, 0x10) r3 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$cgroup_subtree(r3, &(0x7f00000003c0)=ANY=[@ANYBLOB="88ed7c48cfb680c42f89f97a7def31f7c3754b660e634848a0626b48d0b96e39c051b0006e7ca14700d0"], 0x8) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x1, 0x0, 0x0, 0x4, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x3) socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r5, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r6, 0x0) 06:22:03 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f0000000380)={0x3, 0x1, 0x7, 0x2, 0xb3, &(0x7f0000000500)}) ioctl$KDGKBLED(r0, 0x4b64, &(0x7f0000000040)) r1 = io_uring_setup(0xfc6, &(0x7f0000000180)) r2 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r2, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000240)={0x9b0, 0x9, 0x1, 0x4, 0x3}) listen(r2, 0x400000001ffffffd) r3 = socket$inet_dccp(0x2, 0x6, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f0000000440)=@ipv4_newaddr={0x38, 0x14, 0x8, 0x70bd2d, 0x25dfdbfd, {0x2, 0x78, 0x40, 0xc8}, [@IFA_RT_PRIORITY={0x8, 0x9, 0x9}, @IFA_RT_PRIORITY={0x8, 0x9, 0x200}, @IFA_ADDRESS={0x8, 0x1, @loopback}, @IFA_ADDRESS={0x8, 0x1, @multicast2}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000090}, 0x8000) connect$inet(r3, &(0x7f0000e5c000)={0x2, 0x4e20, @dev}, 0x10) r4 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$cgroup_subtree(r4, &(0x7f00000003c0)=ANY=[@ANYBLOB="88ed7c48cfb680c42f89f97a7def31f7c3754b660e634848a0626b48d0b96e39c051b0006e7ca14700d0"], 0x8) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x1, 0x0, 0x0, 0x4, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x3) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000a00)=ANY=[@ANYBLOB="c42c6e2932282e6645da1d10791c92f43389bef4b185c4d1dacc3cfc8ecc0bf814f6dcdac6841be3bdbc710f350e80317fc828caee7984f2d0a503e8bd1d5277b9bd46fd855e5dddb9448b81ed681d262d5ac040d91bacd3562e16ee197e09907921748069c7421aa5ff99e8153f597070a04ff23f0a45ebf48370445ff6d239d848a6fb317608b13f2399485571d6524f3e9adb4c75b74d486603018a2a804528c63b0669ffd7a2ce6a73a5533c00e5af296b09bb560a761e76021df7", @ANYRES32=0x0, @ANYBLOB="0000000000140003006272696467655f736c6176655f3100000800020023f841841cfce752e51d7e5a869002947c29d84327aa016caefa3f43d42afa4d29e0d98cd04dc3f8dae1de642f0f38fb6e668992d5b914aa79bfc89fc05fa6913e85925d3d29e5652e807b0230392c1ba73de7cbf221788773d2b8f006ed6d957f35b9b76537357388083c178c120c", @ANYRES32=r7, @ANYBLOB="08000400da010000"], 0x44}}, 0x0) r8 = getpgid(0xffffffffffffffff) sendmsg$nl_route(r5, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@RTM_GETNSID={0x1c, 0x5a, 0x19, 0x70bd2d, 0x25dfdbfe, {}, [@NETNSA_PID={0x8, 0x2, r8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x811}, 0x4000001) r9 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r9, 0x0) r10 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r10, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) [ 3150.855185][T29951] ref_ctr going negative. vaddr: 0x20000004, curr val: -18737, delta: 1 [ 3150.863950][T29951] ref_ctr increment failed for inode: 0x49a offset: 0x0 ref_ctr_offset: 0x4 of mm: 0xffff88813fefe080 [ 3150.909314][T29956] ref_ctr going negative. vaddr: 0x20000004, curr val: -18737, delta: 1 [ 3150.917742][T29956] ref_ctr increment failed for inode: 0x49c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0xffff888139fec580 06:22:10 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f0000000380)={0x3, 0x1, 0x7, 0x2, 0xb3, &(0x7f0000000500)}) ioctl$KDGKBLED(r0, 0x4b64, &(0x7f0000000040)) io_uring_setup(0xfc6, &(0x7f0000000180)) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000240)={0x9b0, 0x9, 0x1, 0x4, 0x3}) listen(r1, 0x400000001ffffffd) r2 = socket$inet_dccp(0x2, 0x6, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f0000000440)=@ipv4_newaddr={0x38, 0x14, 0x8, 0x70bd2d, 0x25dfdbfd, {0x2, 0x78, 0x40, 0xc8}, [@IFA_RT_PRIORITY={0x8, 0x9, 0x9}, @IFA_RT_PRIORITY={0x8, 0x9, 0x200}, @IFA_ADDRESS={0x8, 0x1, @loopback}, @IFA_ADDRESS={0x8, 0x1, @multicast2}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000090}, 0x8000) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev}, 0x10) r3 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$cgroup_subtree(r3, &(0x7f00000003c0)=ANY=[@ANYBLOB="88ed7c48cfb680c42f89f97a7def31f7c3754b660e634848a0626b48d0b96e39c051b0006e7ca14700d0"], 0x8) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x1, 0x0, 0x0, 0x4, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x3) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r4, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) 06:22:10 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) recvmsg(r0, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) sendto$inet6(r0, &(0x7f00000001c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0) (async) recvmsg(r0, &(0x7f00000003c0)={0x0, 0x3, 0x0}, 0x0) recvmsg(r0, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x0) (async) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) (async) recvfrom$inet6(r0, &(0x7f0000000000)=""/114, 0xfffffffffffffd1b, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000040)) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="5c3e65d3774b0d8d3fab8d00640974aa24d0b2e7fe0c40e5cf6de27eb546ed62658dfa18f01409066c16be803f001b57b424c335e636728cf2f30221361f77a38deb1a15e8013dbed399ac27a7e1ca12ad4a140485c60b2b14723bdc69dd7b367d15cc0dc3f2de9b842e40ec6e807a97486e0013570cc57b5a2aef65a901928c3e0ba24cdc406aac7a89110e95c4b1d02edb5e2d64c6cd7dd5c2a7a3d18f48dfb2c45c20c718be3e78b8747544c4cb37b56d1f2e46254d3a225f1e5cd837908d", @ANYRES16=r0, @ANYBLOB="ff"], 0x34}}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="f4997c3794"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="58ad000010", 0x5, 0x0, 0x0, 0x0) r1 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f0000000000)='s', 0x10a73, 0x81e, 0x0, 0x4b6ae4f95a5de35b) 06:22:10 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f0000000380)={0x3, 0x1, 0x7, 0x2, 0xb3, &(0x7f0000000500)}) ioctl$KDGKBLED(r0, 0x4b64, &(0x7f0000000040)) io_uring_setup(0xfc6, &(0x7f0000000180)) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000240)={0x9b0, 0x9, 0x1, 0x4, 0x3}) listen(r1, 0x400000001ffffffd) r2 = socket$inet_dccp(0x2, 0x6, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f0000000440)=@ipv4_newaddr={0x38, 0x14, 0x8, 0x70bd2d, 0x25dfdbfd, {0x2, 0x78, 0x40, 0xc8}, [@IFA_RT_PRIORITY={0x8, 0x9, 0x9}, @IFA_RT_PRIORITY={0x8, 0x9, 0x200}, @IFA_ADDRESS={0x8, 0x1, @loopback}, @IFA_ADDRESS={0x8, 0x1, @multicast2}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000090}, 0x8000) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev}, 0x10) r3 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$cgroup_subtree(r3, &(0x7f00000003c0)=ANY=[@ANYBLOB="88ed7c48cfb680c42f89f97a7def31f7c3754b660e634848a0626b48d0b96e39c051b0006e7ca14700d0"], 0x8) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x1, 0x0, 0x0, 0x4, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x3) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r4, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) 06:22:10 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f0000000380)={0x3, 0x1, 0x7, 0x2, 0xb3, &(0x7f0000000500)}) ioctl$KDGKBLED(r0, 0x4b64, &(0x7f0000000040)) io_uring_setup(0xfc6, &(0x7f0000000180)) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000240)={0x9b0, 0x9, 0x1, 0x4, 0x3}) listen(r1, 0x400000001ffffffd) r2 = socket$inet_dccp(0x2, 0x6, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f0000000440)=@ipv4_newaddr={0x38, 0x14, 0x8, 0x70bd2d, 0x25dfdbfd, {0x2, 0x78, 0x40, 0xc8}, [@IFA_RT_PRIORITY={0x8, 0x9, 0x9}, @IFA_RT_PRIORITY={0x8, 0x9, 0x200}, @IFA_ADDRESS={0x8, 0x1, @loopback}, @IFA_ADDRESS={0x8, 0x1, @multicast2}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000090}, 0x8000) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev}, 0x10) r3 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$cgroup_subtree(r3, &(0x7f00000003c0)=ANY=[@ANYBLOB="88ed7c48cfb680c42f89f97a7def31f7c3754b660e634848a0626b48d0b96e39c051b0006e7ca14700d0"], 0x8) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x1, 0x0, 0x0, 0x4, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x3) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000a00)=ANY=[@ANYBLOB="c42c6e2932282e6645da1d10791c92f43389bef4b185c4d1dacc3cfc8ecc0bf814f6dcdac6841be3bdbc710f350e80317fc828caee7984f2d0a503e8bd1d5277b9bd46fd855e5dddb9448b81ed681d262d5ac040d91bacd3562e16ee197e09907921748069c7421aa5ff99e8153f597070a04ff23f0a45ebf48370445ff6d239d848a6fb317608b13f2399485571d6524f3e9adb4c75b74d486603018a2a804528c63b0669ffd7a2ce6a73a5533c00e5af296b09bb560a761e76021df7", @ANYRES32=0x0, @ANYBLOB="0000000000140003006272696467655f736c6176655f3100000800020023f841841cfce752e51d7e5a869002947c29d84327aa016caefa3f43d42afa4d29e0d98cd04dc3f8dae1de642f0f38fb6e668992d5b914aa79bfc89fc05fa6913e85925d3d29e5652e807b0230392c1ba73de7cbf221788773d2b8f006ed6d957f35b9b76537357388083c178c120c", @ANYRES32=r6, @ANYBLOB="08000400da010000"], 0x44}}, 0x0) r7 = getpgid(0xffffffffffffffff) sendmsg$nl_route(r4, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@RTM_GETNSID={0x1c, 0x5a, 0x19, 0x70bd2d, 0x25dfdbfe, {}, [@NETNSA_PID={0x8, 0x2, r7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x811}, 0x4000001) r8 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r8, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r9, 0x0) 06:22:10 executing program 5: r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e24, @local}, 0x10) writev(r0, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) recvmmsg(r0, &(0x7f0000003e40)=[{{&(0x7f0000000100)=@phonet, 0x80, 0x0, 0x0, &(0x7f00000024c0)=""/4096, 0x1000}}, {{0x0, 0x80100200, 0x0, 0x0, &(0x7f00000035c0)=""/241, 0xf1}}, {{&(0x7f00000036c0)=@un=@abs, 0x80, &(0x7f0000003780)=[{&(0x7f0000003740)=""/4, 0xfffffd07}], 0x1, &(0x7f00000037c0)=""/236, 0xec}}, {{&(0x7f00000038c0)=@l2tp6={0xa, 0x0, 0x0, @private1}, 0x80, &(0x7f0000003bc0)=[{0x0}, {&(0x7f0000003a00)=""/190, 0xbe}, {&(0x7f0000003ac0)=""/131, 0x83}, {0x0}], 0x4, &(0x7f0000003c00)=""/73, 0x49}}, {{&(0x7f0000003c80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, 0x0, 0x0, &(0x7f0000003e00)=""/48, 0x30}}], 0x5, 0x40000121, 0x0) 06:22:10 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000005c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e24, @local}, 0x10) writev(r0, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) recvmmsg(r0, &(0x7f0000003e40)=[{{&(0x7f0000000100)=@phonet, 0x80, 0x0, 0x0, &(0x7f00000024c0)=""/4096, 0x1000, 0x4}}, {{0x0, 0x80100200, 0x0, 0x0, &(0x7f00000035c0)=""/241, 0xf1}}, {{&(0x7f00000036c0)=@un=@abs, 0x80, &(0x7f0000003780)=[{&(0x7f0000003740)=""/4, 0xfffffd07}], 0x1, &(0x7f00000037c0)=""/236, 0xec}}, {{&(0x7f00000038c0)=@l2tp6={0xa, 0x0, 0x0, @private1}, 0x80, &(0x7f0000003bc0)=[{0x0}, {&(0x7f0000003a00)=""/190, 0xbe}, {&(0x7f0000003ac0)=""/131, 0x83}, {0x0}], 0x4, &(0x7f0000003c00)=""/73, 0x49}}, {{&(0x7f0000003c80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, 0x0, 0x0, &(0x7f0000003e00)=""/48, 0x30}}], 0x5, 0x40000121, 0x0) 06:22:10 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f0000000380)={0x3, 0x1, 0x7, 0x2, 0xb3, &(0x7f0000000500)}) ioctl$KDGKBLED(r0, 0x4b64, &(0x7f0000000040)) io_uring_setup(0xfc6, &(0x7f0000000180)) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000240)={0x9b0, 0x9, 0x1, 0x4, 0x3}) listen(r1, 0x400000001ffffffd) r2 = socket$inet_dccp(0x2, 0x6, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f0000000440)=@ipv4_newaddr={0x38, 0x14, 0x8, 0x70bd2d, 0x25dfdbfd, {0x2, 0x78, 0x40, 0xc8}, [@IFA_RT_PRIORITY={0x8, 0x9, 0x9}, @IFA_RT_PRIORITY={0x8, 0x9, 0x200}, @IFA_ADDRESS={0x8, 0x1, @loopback}, @IFA_ADDRESS={0x8, 0x1, @multicast2}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000090}, 0x8000) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev}, 0x10) r3 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$cgroup_subtree(r3, &(0x7f00000003c0)=ANY=[@ANYBLOB="88ed7c48cfb680c42f89f97a7def31f7c3754b660e634848a0626b48d0b96e39c051b0006e7ca14700d0"], 0x8) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x1, 0x0, 0x0, 0x4, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x3) socket$nl_route(0x10, 0x3, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r4, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) [ 3157.709801][T29965] ref_ctr going negative. vaddr: 0x20000004, curr val: -18737, delta: 1 [ 3157.718263][T29965] ref_ctr increment failed for inode: 0x4a0 offset: 0x0 ref_ctr_offset: 0x4 of mm: 0xffff88813fefe540 06:22:10 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) recvmsg(r0, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) (async) sendto$inet6(r0, &(0x7f00000001c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0) recvmsg(r0, &(0x7f00000003c0)={0x0, 0x3, 0x0}, 0x0) (async, rerun: 64) recvmsg(r0, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x0) (async, rerun: 64) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) (async) recvfrom$inet6(r0, &(0x7f0000000000)=""/114, 0xfffffffffffffd1b, 0x0, 0x0, 0x0) (async, rerun: 32) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000040)) (rerun: 32) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="5c3e65d3774b0d8d3fab8d00640974aa24d0b2e7fe0c40e5cf6de27eb546ed62658dfa18f01409066c16be803f001b57b424c335e636728cf2f30221361f77a38deb1a15e8013dbed399ac27a7e1ca12ad4a140485c60b2b14723bdc69dd7b367d15cc0dc3f2de9b842e40ec6e807a97486e0013570cc57b5a2aef65a901928c3e0ba24cdc406aac7a89110e95c4b1d02edb5e2d64c6cd7dd5c2a7a3d18f48dfb2c45c20c718be3e78b8747544c4cb37b56d1f2e46254d3a225f1e5cd837908d", @ANYRES16=r0, @ANYBLOB="ff"], 0x34}}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="f4997c3794"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="58ad000010", 0x5, 0x0, 0x0, 0x0) (async) r1 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f0000000000)='s', 0x10a73, 0x81e, 0x0, 0x4b6ae4f95a5de35b) 06:22:10 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f0000000380)={0x3, 0x1, 0x7, 0x2, 0xb3, &(0x7f0000000500)}) ioctl$KDGKBLED(r0, 0x4b64, &(0x7f0000000040)) io_uring_setup(0xfc6, &(0x7f0000000180)) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000240)={0x9b0, 0x9, 0x1, 0x4, 0x3}) listen(r1, 0x400000001ffffffd) r2 = socket$inet_dccp(0x2, 0x6, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f0000000440)=@ipv4_newaddr={0x38, 0x14, 0x8, 0x70bd2d, 0x25dfdbfd, {0x2, 0x78, 0x40, 0xc8}, [@IFA_RT_PRIORITY={0x8, 0x9, 0x9}, @IFA_RT_PRIORITY={0x8, 0x9, 0x200}, @IFA_ADDRESS={0x8, 0x1, @loopback}, @IFA_ADDRESS={0x8, 0x1, @multicast2}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000090}, 0x8000) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev}, 0x10) r3 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$cgroup_subtree(r3, &(0x7f00000003c0)=ANY=[@ANYBLOB="88ed7c48cfb680c42f89f97a7def31f7c3754b660e634848a0626b48d0b96e39c051b0006e7ca14700d0"], 0x8) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x1, 0x0, 0x0, 0x4, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x3) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r4, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) [ 3157.751649][T29972] ref_ctr going negative. vaddr: 0x20000004, curr val: -18737, delta: 1 [ 3157.760127][T29972] ref_ctr increment failed for inode: 0x4a0 offset: 0x0 ref_ctr_offset: 0x4 of mm: 0xffff888139ec2580 [ 3157.771636][T29975] ref_ctr going negative. vaddr: 0x20000004, curr val: -18737, delta: 1 [ 3157.780093][T29975] ref_ctr increment failed for inode: 0x4a1 offset: 0x0 ref_ctr_offset: 0x4 of mm: 0xffff888139ec2a40 06:22:10 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) recvmsg(r0, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) sendto$inet6(r0, &(0x7f00000001c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0) recvmsg(r0, &(0x7f00000003c0)={0x0, 0x3, 0x0}, 0x0) recvmsg(r0, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0xc0601, 0x42) r1 = socket(0x1, 0x5, 0x4) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f00000000c0)={0x7, 0x0, 0x8, 0x0, 0x8}) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) recvfrom$inet6(r0, &(0x7f0000000000)=""/114, 0xfffffffffffffd1b, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000040)) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="ed271c00", @ANYRES16=r0, @ANYBLOB="ff"], 0x34}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="f4997c3794"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="58ad000010", 0x5, 0x0, 0x0, 0x0) r2 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r2, &(0x7f0000000000)='s', 0x10a73, 0x81e, 0x0, 0x4b6ae4f95a5de35b) 06:22:11 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f0000000380)={0x3, 0x1, 0x7, 0x2, 0xb3, &(0x7f0000000500)}) ioctl$KDGKBLED(r0, 0x4b64, &(0x7f0000000040)) io_uring_setup(0xfc6, &(0x7f0000000180)) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000240)={0x9b0, 0x9, 0x1, 0x4, 0x3}) listen(r1, 0x400000001ffffffd) r2 = socket$inet_dccp(0x2, 0x6, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f0000000440)=@ipv4_newaddr={0x38, 0x14, 0x8, 0x70bd2d, 0x25dfdbfd, {0x2, 0x78, 0x40, 0xc8}, [@IFA_RT_PRIORITY={0x8, 0x9, 0x9}, @IFA_RT_PRIORITY={0x8, 0x9, 0x200}, @IFA_ADDRESS={0x8, 0x1, @loopback}, @IFA_ADDRESS={0x8, 0x1, @multicast2}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000090}, 0x8000) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev}, 0x10) r3 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$cgroup_subtree(r3, &(0x7f00000003c0)=ANY=[@ANYBLOB="88ed7c48cfb680c42f89f97a7def31f7c3754b660e634848a0626b48d0b96e39c051b0006e7ca14700d0"], 0x8) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r4, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) [ 3157.874289][T29987] ref_ctr going negative. vaddr: 0x20000004, curr val: -18737, delta: 1 [ 3157.882749][T29987] ref_ctr increment failed for inode: 0x4a0 offset: 0x0 ref_ctr_offset: 0x4 of mm: 0xffff88813fefea00 [ 3157.909932][T29986] netlink: 'syz-executor.4': attribute type 41 has an invalid length. 06:22:11 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f0000000380)={0x3, 0x1, 0x7, 0x2, 0xb3, &(0x7f0000000500)}) ioctl$KDGKBLED(r0, 0x4b64, &(0x7f0000000040)) io_uring_setup(0xfc6, &(0x7f0000000180)) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000240)={0x9b0, 0x9, 0x1, 0x4, 0x3}) listen(r1, 0x400000001ffffffd) r2 = socket$inet_dccp(0x2, 0x6, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f0000000440)=@ipv4_newaddr={0x38, 0x14, 0x8, 0x70bd2d, 0x25dfdbfd, {0x2, 0x78, 0x40, 0xc8}, [@IFA_RT_PRIORITY={0x8, 0x9, 0x9}, @IFA_RT_PRIORITY={0x8, 0x9, 0x200}, @IFA_ADDRESS={0x8, 0x1, @loopback}, @IFA_ADDRESS={0x8, 0x1, @multicast2}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000090}, 0x8000) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev}, 0x10) r3 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$cgroup_subtree(r3, &(0x7f00000003c0)=ANY=[@ANYBLOB="88ed7c48cfb680c42f89f97a7def31f7c3754b660e634848a0626b48d0b96e39c051b0006e7ca14700d0"], 0x8) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r4, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) [ 3157.918232][T29986] netlink: 44123 bytes leftover after parsing attributes in process `syz-executor.4'. [ 3157.934673][T29986] A link change request failed with some changes committed already. Interface ip6tnl0 may have been left with an inconsistent configuration, please check. 06:22:17 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f0000000380)={0x3, 0x1, 0x7, 0x2, 0xb3, &(0x7f0000000500)}) ioctl$KDGKBLED(r0, 0x4b64, &(0x7f0000000040)) io_uring_setup(0xfc6, &(0x7f0000000180)) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000240)={0x9b0, 0x9, 0x1, 0x4, 0x3}) listen(r1, 0x400000001ffffffd) r2 = socket$inet_dccp(0x2, 0x6, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f0000000440)=@ipv4_newaddr={0x38, 0x14, 0x8, 0x70bd2d, 0x25dfdbfd, {0x2, 0x78, 0x40, 0xc8}, [@IFA_RT_PRIORITY={0x8, 0x9, 0x9}, @IFA_RT_PRIORITY={0x8, 0x9, 0x200}, @IFA_ADDRESS={0x8, 0x1, @loopback}, @IFA_ADDRESS={0x8, 0x1, @multicast2}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000090}, 0x8000) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev}, 0x10) creat(&(0x7f00000000c0)='./bus\x00', 0x0) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x1, 0x0, 0x0, 0x4, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x3) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r3, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) 06:22:17 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) recvmsg(r0, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) (async) sendto$inet6(r0, &(0x7f00000001c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0) recvmsg(r0, &(0x7f00000003c0)={0x0, 0x3, 0x0}, 0x0) (async) recvmsg(r0, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x0) (async) openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0xc0601, 0x42) r1 = socket(0x1, 0x5, 0x4) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) (async) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f00000000c0)={0x7, 0x0, 0x8, 0x0, 0x8}) (async) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) (async) recvfrom$inet6(r0, &(0x7f0000000000)=""/114, 0xfffffffffffffd1b, 0x0, 0x0, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000040)) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="ed271c00", @ANYRES16=r0, @ANYBLOB="ff"], 0x34}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="f4997c3794"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="58ad000010", 0x5, 0x0, 0x0, 0x0) (async) r2 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r2, &(0x7f0000000000)='s', 0x10a73, 0x81e, 0x0, 0x4b6ae4f95a5de35b) 06:22:17 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f0000000380)={0x3, 0x1, 0x7, 0x2, 0xb3, &(0x7f0000000500)}) ioctl$KDGKBLED(r0, 0x4b64, &(0x7f0000000040)) io_uring_setup(0xfc6, &(0x7f0000000180)) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000240)={0x9b0, 0x9, 0x1, 0x4, 0x3}) listen(r1, 0x400000001ffffffd) r2 = socket$inet_dccp(0x2, 0x6, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f0000000440)=@ipv4_newaddr={0x38, 0x14, 0x8, 0x70bd2d, 0x25dfdbfd, {0x2, 0x78, 0x40, 0xc8}, [@IFA_RT_PRIORITY={0x8, 0x9, 0x9}, @IFA_RT_PRIORITY={0x8, 0x9, 0x200}, @IFA_ADDRESS={0x8, 0x1, @loopback}, @IFA_ADDRESS={0x8, 0x1, @multicast2}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000090}, 0x8000) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev}, 0x10) r3 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$cgroup_subtree(r3, &(0x7f00000003c0)=ANY=[@ANYBLOB="88ed7c48cfb680c42f89f97a7def31f7c3754b660e634848a0626b48d0b96e39c051b0006e7ca14700d0"], 0x8) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r4, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) 06:22:17 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f0000000380)={0x3, 0x1, 0x7, 0x2, 0xb3, &(0x7f0000000500)}) ioctl$KDGKBLED(r0, 0x4b64, &(0x7f0000000040)) io_uring_setup(0xfc6, &(0x7f0000000180)) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000240)={0x9b0, 0x9, 0x1, 0x4, 0x3}) listen(r1, 0x400000001ffffffd) r2 = socket$inet_dccp(0x2, 0x6, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f0000000440)=@ipv4_newaddr={0x38, 0x14, 0x8, 0x70bd2d, 0x25dfdbfd, {0x2, 0x78, 0x40, 0xc8}, [@IFA_RT_PRIORITY={0x8, 0x9, 0x9}, @IFA_RT_PRIORITY={0x8, 0x9, 0x200}, @IFA_ADDRESS={0x8, 0x1, @loopback}, @IFA_ADDRESS={0x8, 0x1, @multicast2}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000090}, 0x8000) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev}, 0x10) r3 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$cgroup_subtree(r3, &(0x7f00000003c0)=ANY=[@ANYBLOB="88ed7c48cfb680c42f89f97a7def31f7c3754b660e634848a0626b48d0b96e39c051b0006e7ca14700d0"], 0x8) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x1, 0x0, 0x0, 0x4, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x3) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000a00)=ANY=[@ANYBLOB="c42c6e2932282e6645da1d10791c92f43389bef4b185c4d1dacc3cfc8ecc0bf814f6dcdac6841be3bdbc710f350e80317fc828caee7984f2d0a503e8bd1d5277b9bd46fd855e5dddb9448b81ed681d262d5ac040d91bacd3562e16ee197e09907921748069c7421aa5ff99e8153f597070a04ff23f0a45ebf48370445ff6d239d848a6fb317608b13f2399485571d6524f3e9adb4c75b74d486603018a2a804528c63b0669ffd7a2ce6a73a5533c00e5af296b09bb560a761e76021df7", @ANYRES32=0x0, @ANYBLOB="0000000000140003006272696467655f736c6176655f3100000800020023f841841cfce752e51d7e5a869002947c29d84327aa016caefa3f43d42afa4d29e0d98cd04dc3f8dae1de642f0f38fb6e668992d5b914aa79bfc89fc05fa6913e85925d3d29e5652e807b0230392c1ba73de7cbf221788773d2b8f006ed6d957f35b9b76537357388083c178c120c", @ANYRES32=r6, @ANYBLOB="08000400da010000"], 0x44}}, 0x0) r7 = getpgid(0xffffffffffffffff) sendmsg$nl_route(r4, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@RTM_GETNSID={0x1c, 0x5a, 0x19, 0x70bd2d, 0x25dfdbfe, {}, [@NETNSA_PID={0x8, 0x2, r7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x811}, 0x4000001) r8 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r8, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r9, 0x0) 06:22:17 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000005c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e24, @local}, 0x10) writev(r0, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) recvmmsg(r0, &(0x7f0000003e40)=[{{&(0x7f0000000100)=@phonet, 0x80, 0x0, 0x0, &(0x7f00000024c0)=""/4096, 0x1000, 0x5}}, {{0x0, 0x80100200, 0x0, 0x0, &(0x7f00000035c0)=""/241, 0xf1}}, {{&(0x7f00000036c0)=@un=@abs, 0x80, &(0x7f0000003780)=[{&(0x7f0000003740)=""/4, 0xfffffd07}], 0x1, &(0x7f00000037c0)=""/236, 0xec}}, {{&(0x7f00000038c0)=@l2tp6={0xa, 0x0, 0x0, @private1}, 0x80, &(0x7f0000003bc0)=[{0x0}, {&(0x7f0000003a00)=""/190, 0xbe}, {&(0x7f0000003ac0)=""/131, 0x83}, {0x0}], 0x4, &(0x7f0000003c00)=""/73, 0x49}}, {{&(0x7f0000003c80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, 0x0, 0x0, &(0x7f0000003e00)=""/48, 0x30}}], 0x5, 0x40000121, 0x0) 06:22:17 executing program 5: r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e24, @local}, 0x10) writev(r0, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) recvmmsg(r0, &(0x7f0000003e40)=[{{&(0x7f0000000100)=@phonet, 0x80, 0x0, 0x0, &(0x7f00000024c0)=""/4096, 0x1000, 0x2}}, {{0x0, 0x80100200, 0x0, 0x0, &(0x7f00000035c0)=""/241, 0xf1}}, {{&(0x7f00000036c0)=@un=@abs, 0x80, &(0x7f0000003780)=[{&(0x7f0000003740)=""/4, 0xfffffd07}], 0x1, &(0x7f00000037c0)=""/236, 0xec}}, {{&(0x7f00000038c0)=@l2tp6={0xa, 0x0, 0x0, @private1}, 0x80, &(0x7f0000003bc0)=[{0x0}, {&(0x7f0000003a00)=""/190, 0xbe}, {&(0x7f0000003ac0)=""/131, 0x83}, {0x0}], 0x4, &(0x7f0000003c00)=""/73, 0x49}}, {{&(0x7f0000003c80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, 0x0, 0x0, &(0x7f0000003e00)=""/48, 0x30}}], 0x5, 0x40000121, 0x0) 06:22:17 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) recvmsg(r0, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) (async) sendto$inet6(r0, &(0x7f00000001c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0) recvmsg(r0, &(0x7f00000003c0)={0x0, 0x3, 0x0}, 0x0) (async) recvmsg(r0, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x0) (async, rerun: 32) openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0xc0601, 0x42) (rerun: 32) r1 = socket(0x1, 0x5, 0x4) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) (async) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f00000000c0)={0x7, 0x0, 0x8, 0x0, 0x8}) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) (async) recvfrom$inet6(r0, &(0x7f0000000000)=""/114, 0xfffffffffffffd1b, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000040)) (async) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="ed271c00", @ANYRES16=r0, @ANYBLOB="ff"], 0x34}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="f4997c3794"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="58ad000010", 0x5, 0x0, 0x0, 0x0) (async) r2 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r2, &(0x7f0000000000)='s', 0x10a73, 0x81e, 0x0, 0x4b6ae4f95a5de35b) 06:22:17 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f0000000380)={0x3, 0x1, 0x7, 0x2, 0xb3, &(0x7f0000000500)}) ioctl$KDGKBLED(r0, 0x4b64, &(0x7f0000000040)) io_uring_setup(0xfc6, &(0x7f0000000180)) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000240)={0x9b0, 0x9, 0x1, 0x4, 0x3}) listen(r1, 0x400000001ffffffd) r2 = socket$inet_dccp(0x2, 0x6, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f0000000440)=@ipv4_newaddr={0x38, 0x14, 0x8, 0x70bd2d, 0x25dfdbfd, {0x2, 0x78, 0x40, 0xc8}, [@IFA_RT_PRIORITY={0x8, 0x9, 0x9}, @IFA_RT_PRIORITY={0x8, 0x9, 0x200}, @IFA_ADDRESS={0x8, 0x1, @loopback}, @IFA_ADDRESS={0x8, 0x1, @multicast2}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000090}, 0x8000) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev}, 0x10) r3 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$cgroup_subtree(r3, &(0x7f00000003c0)=ANY=[@ANYBLOB="88ed7c48cfb680c42f89f97a7def31f7c3754b660e634848a0626b48d0b96e39c051b0006e7ca14700d0"], 0x8) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x1, 0x0, 0x0, 0x4, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x3) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r4, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) 06:22:17 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f0000000380)={0x3, 0x1, 0x7, 0x2, 0xb3, &(0x7f0000000500)}) ioctl$KDGKBLED(r0, 0x4b64, &(0x7f0000000040)) io_uring_setup(0xfc6, &(0x7f0000000180)) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000240)={0x9b0, 0x9, 0x1, 0x4, 0x3}) listen(r1, 0x400000001ffffffd) r2 = socket$inet_dccp(0x2, 0x6, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f0000000440)=@ipv4_newaddr={0x38, 0x14, 0x8, 0x70bd2d, 0x25dfdbfd, {0x2, 0x78, 0x40, 0xc8}, [@IFA_RT_PRIORITY={0x8, 0x9, 0x9}, @IFA_RT_PRIORITY={0x8, 0x9, 0x200}, @IFA_ADDRESS={0x8, 0x1, @loopback}, @IFA_ADDRESS={0x8, 0x1, @multicast2}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000090}, 0x8000) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev}, 0x10) r3 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$cgroup_subtree(r3, &(0x7f00000003c0)=ANY=[@ANYBLOB="88ed7c48cfb680c42f89f97a7def31f7c3754b660e634848a0626b48d0b96e39c051b0006e7ca14700d0"], 0x8) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x1, 0x0, 0x0, 0x4, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x3) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r4, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) 06:22:17 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) recvmsg(r0, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) sendto$inet6(r0, &(0x7f00000001c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0) recvmsg(r0, &(0x7f00000003c0)={0x0, 0x3, 0x0}, 0x0) recvmsg(r0, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) recvfrom$inet6(r0, &(0x7f0000000000)=""/114, 0x72, 0x40, 0x0, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f00000000c0)={'wg2\x00'}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000040)) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="00281c80", @ANYRES16=r0, @ANYBLOB="ff"], 0x34}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="f4997c3794"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="58ad000010", 0x5, 0x0, 0x0, 0x0) r2 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r2, &(0x7f0000000000)='s', 0x10a73, 0x81e, 0x0, 0x4b6ae4f95a5de35b) 06:22:17 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f0000000380)={0x3, 0x1, 0x7, 0x2, 0xb3, &(0x7f0000000500)}) ioctl$KDGKBLED(r0, 0x4b64, &(0x7f0000000040)) io_uring_setup(0xfc6, &(0x7f0000000180)) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000240)={0x9b0, 0x9, 0x1, 0x4, 0x3}) listen(r1, 0x400000001ffffffd) r2 = socket$inet_dccp(0x2, 0x6, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f0000000440)=@ipv4_newaddr={0x38, 0x14, 0x8, 0x70bd2d, 0x25dfdbfd, {0x2, 0x78, 0x40, 0xc8}, [@IFA_RT_PRIORITY={0x8, 0x9, 0x9}, @IFA_RT_PRIORITY={0x8, 0x9, 0x200}, @IFA_ADDRESS={0x8, 0x1, @loopback}, @IFA_ADDRESS={0x8, 0x1, @multicast2}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000090}, 0x8000) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev}, 0x10) r3 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$cgroup_subtree(r3, &(0x7f00000003c0)=ANY=[@ANYBLOB="88ed7c48cfb680c42f89f97a7def31f7c3754b660e634848a0626b48d0b96e39c051b0006e7ca14700d0"], 0x8) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x1, 0x0, 0x0, 0x4, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x3) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r4, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) [ 3164.808982][T30020] ref_ctr going negative. vaddr: 0x20000004, curr val: -18737, delta: 1 [ 3164.817615][T30020] ref_ctr increment failed for inode: 0x48d offset: 0x0 ref_ctr_offset: 0x4 of mm: 0xffff88813fefe080 06:22:18 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f0000000380)={0x3, 0x1, 0x7, 0x2, 0xb3, &(0x7f0000000500)}) ioctl$KDGKBLED(r0, 0x4b64, &(0x7f0000000040)) io_uring_setup(0xfc6, &(0x7f0000000180)) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000240)={0x9b0, 0x9, 0x1, 0x4, 0x3}) listen(r1, 0x400000001ffffffd) r2 = socket$inet_dccp(0x2, 0x6, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f0000000440)=@ipv4_newaddr={0x38, 0x14, 0x8, 0x70bd2d, 0x25dfdbfd, {0x2, 0x78, 0x40, 0xc8}, [@IFA_RT_PRIORITY={0x8, 0x9, 0x9}, @IFA_RT_PRIORITY={0x8, 0x9, 0x200}, @IFA_ADDRESS={0x8, 0x1, @loopback}, @IFA_ADDRESS={0x8, 0x1, @multicast2}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000090}, 0x8000) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev}, 0x10) creat(&(0x7f00000000c0)='./bus\x00', 0x0) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x1, 0x0, 0x0, 0x4, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x3) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r3, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) [ 3164.902825][T30024] netlink: 44287 bytes leftover after parsing attributes in process `syz-executor.4'. 06:22:26 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f0000000380)={0x3, 0x1, 0x7, 0x2, 0xb3, &(0x7f0000000500)}) ioctl$KDGKBLED(r0, 0x4b64, &(0x7f0000000040)) io_uring_setup(0xfc6, &(0x7f0000000180)) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000240)={0x9b0, 0x9, 0x1, 0x4, 0x3}) listen(r1, 0x400000001ffffffd) r2 = socket$inet_dccp(0x2, 0x6, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f0000000440)=@ipv4_newaddr={0x38, 0x14, 0x8, 0x70bd2d, 0x25dfdbfd, {0x2, 0x78, 0x40, 0xc8}, [@IFA_RT_PRIORITY={0x8, 0x9, 0x9}, @IFA_RT_PRIORITY={0x8, 0x9, 0x200}, @IFA_ADDRESS={0x8, 0x1, @loopback}, @IFA_ADDRESS={0x8, 0x1, @multicast2}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000090}, 0x8000) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev}, 0x10) creat(&(0x7f00000000c0)='./bus\x00', 0x0) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x1, 0x0, 0x0, 0x4, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x3) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r3, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) 06:22:26 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f0000000380)={0x3, 0x1, 0x7, 0x2, 0xb3, &(0x7f0000000500)}) ioctl$KDGKBLED(r0, 0x4b64, &(0x7f0000000040)) io_uring_setup(0xfc6, &(0x7f0000000180)) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000240)={0x9b0, 0x9, 0x1, 0x4, 0x3}) listen(r1, 0x400000001ffffffd) r2 = socket$inet_dccp(0x2, 0x6, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f0000000440)=@ipv4_newaddr={0x38, 0x14, 0x8, 0x70bd2d, 0x25dfdbfd, {0x2, 0x78, 0x40, 0xc8}, [@IFA_RT_PRIORITY={0x8, 0x9, 0x9}, @IFA_RT_PRIORITY={0x8, 0x9, 0x200}, @IFA_ADDRESS={0x8, 0x1, @loopback}, @IFA_ADDRESS={0x8, 0x1, @multicast2}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000090}, 0x8000) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev}, 0x10) creat(&(0x7f00000000c0)='./bus\x00', 0x0) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x1, 0x0, 0x0, 0x4, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x3) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r3, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) 06:22:26 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) recvmsg(r0, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) sendto$inet6(r0, &(0x7f00000001c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0) (async) recvmsg(r0, &(0x7f00000003c0)={0x0, 0x3, 0x0}, 0x0) (async) recvmsg(r0, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x0) (async) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) recvfrom$inet6(r0, &(0x7f0000000000)=""/114, 0x72, 0x40, 0x0, 0x0) (async) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f00000000c0)={'wg2\x00'}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000040)) (async) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="00281c80", @ANYRES16=r0, @ANYBLOB="ff"], 0x34}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="f4997c3794"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="58ad000010", 0x5, 0x0, 0x0, 0x0) (async) r2 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r2, &(0x7f0000000000)='s', 0x10a73, 0x81e, 0x0, 0x4b6ae4f95a5de35b) 06:22:26 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f0000000380)={0x3, 0x1, 0x7, 0x2, 0xb3, &(0x7f0000000500)}) ioctl$KDGKBLED(r0, 0x4b64, &(0x7f0000000040)) io_uring_setup(0xfc6, &(0x7f0000000180)) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000240)={0x9b0, 0x9, 0x1, 0x4, 0x3}) listen(r1, 0x400000001ffffffd) r2 = socket$inet_dccp(0x2, 0x6, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f0000000440)=@ipv4_newaddr={0x38, 0x14, 0x8, 0x70bd2d, 0x25dfdbfd, {0x2, 0x78, 0x40, 0xc8}, [@IFA_RT_PRIORITY={0x8, 0x9, 0x9}, @IFA_RT_PRIORITY={0x8, 0x9, 0x200}, @IFA_ADDRESS={0x8, 0x1, @loopback}, @IFA_ADDRESS={0x8, 0x1, @multicast2}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000090}, 0x8000) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev}, 0x10) r3 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$cgroup_subtree(r3, &(0x7f00000003c0)=ANY=[@ANYBLOB="88ed7c48cfb680c42f89f97a7def31f7c3754b660e634848a0626b48d0b96e39c051b0006e7ca14700d0"], 0x8) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x1, 0x0, 0x0, 0x4, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x3) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000a00)=ANY=[@ANYBLOB="c42c6e2932282e6645da1d10791c92f43389bef4b185c4d1dacc3cfc8ecc0bf814f6dcdac6841be3bdbc710f350e80317fc828caee7984f2d0a503e8bd1d5277b9bd46fd855e5dddb9448b81ed681d262d5ac040d91bacd3562e16ee197e09907921748069c7421aa5ff99e8153f597070a04ff23f0a45ebf48370445ff6d239d848a6fb317608b13f2399485571d6524f3e9adb4c75b74d486603018a2a804528c63b0669ffd7a2ce6a73a5533c00e5af296b09bb560a761e76021df7", @ANYRES32=0x0, @ANYBLOB="0000000000140003006272696467655f736c6176655f3100000800020023f841841cfce752e51d7e5a869002947c29d84327aa016caefa3f43d42afa4d29e0d98cd04dc3f8dae1de642f0f38fb6e668992d5b914aa79bfc89fc05fa6913e85925d3d29e5652e807b0230392c1ba73de7cbf221788773d2b8f006ed6d957f35b9b76537357388083c178c120c", @ANYRES32=r6, @ANYBLOB="08000400da010000"], 0x44}}, 0x0) r7 = getpgid(0xffffffffffffffff) sendmsg$nl_route(r4, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@RTM_GETNSID={0x1c, 0x5a, 0x19, 0x70bd2d, 0x25dfdbfe, {}, [@NETNSA_PID={0x8, 0x2, r7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x811}, 0x4000001) r8 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r8, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) 06:22:26 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000005c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e24, @local}, 0x10) writev(r0, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) recvmmsg(r0, &(0x7f0000003e40)=[{{&(0x7f0000000100)=@phonet, 0x80, 0x0, 0x0, &(0x7f00000024c0)=""/4096, 0x1000, 0x6}}, {{0x0, 0x80100200, 0x0, 0x0, &(0x7f00000035c0)=""/241, 0xf1}}, {{&(0x7f00000036c0)=@un=@abs, 0x80, &(0x7f0000003780)=[{&(0x7f0000003740)=""/4, 0xfffffd07}], 0x1, &(0x7f00000037c0)=""/236, 0xec}}, {{&(0x7f00000038c0)=@l2tp6={0xa, 0x0, 0x0, @private1}, 0x80, &(0x7f0000003bc0)=[{0x0}, {&(0x7f0000003a00)=""/190, 0xbe}, {&(0x7f0000003ac0)=""/131, 0x83}, {0x0}], 0x4, &(0x7f0000003c00)=""/73, 0x49}}, {{&(0x7f0000003c80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, 0x0, 0x0, &(0x7f0000003e00)=""/48, 0x30}}], 0x5, 0x40000121, 0x0) 06:22:26 executing program 5: r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e24, @local}, 0x10) writev(r0, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) recvmmsg(r0, &(0x7f0000003e40)=[{{&(0x7f0000000100)=@phonet, 0x80, 0x0, 0x0, &(0x7f00000024c0)=""/4096, 0x1000, 0x3}}, {{0x0, 0x80100200, 0x0, 0x0, &(0x7f00000035c0)=""/241, 0xf1}}, {{&(0x7f00000036c0)=@un=@abs, 0x80, &(0x7f0000003780)=[{&(0x7f0000003740)=""/4, 0xfffffd07}], 0x1, &(0x7f00000037c0)=""/236, 0xec}}, {{&(0x7f00000038c0)=@l2tp6={0xa, 0x0, 0x0, @private1}, 0x80, &(0x7f0000003bc0)=[{0x0}, {&(0x7f0000003a00)=""/190, 0xbe}, {&(0x7f0000003ac0)=""/131, 0x83}, {0x0}], 0x4, &(0x7f0000003c00)=""/73, 0x49}}, {{&(0x7f0000003c80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, 0x0, 0x0, &(0x7f0000003e00)=""/48, 0x30}}], 0x5, 0x40000121, 0x0) 06:22:27 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f0000000380)={0x3, 0x1, 0x7, 0x2, 0xb3, &(0x7f0000000500)}) ioctl$KDGKBLED(r0, 0x4b64, &(0x7f0000000040)) io_uring_setup(0xfc6, &(0x7f0000000180)) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000240)={0x9b0, 0x9, 0x1, 0x4, 0x3}) listen(r1, 0x400000001ffffffd) r2 = socket$inet_dccp(0x2, 0x6, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f0000000440)=@ipv4_newaddr={0x38, 0x14, 0x8, 0x70bd2d, 0x25dfdbfd, {0x2, 0x78, 0x40, 0xc8}, [@IFA_RT_PRIORITY={0x8, 0x9, 0x9}, @IFA_RT_PRIORITY={0x8, 0x9, 0x200}, @IFA_ADDRESS={0x8, 0x1, @loopback}, @IFA_ADDRESS={0x8, 0x1, @multicast2}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000090}, 0x8000) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev}, 0x10) creat(&(0x7f00000000c0)='./bus\x00', 0x0) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x1, 0x0, 0x0, 0x4, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x3) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r3, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) 06:22:27 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f0000000380)={0x3, 0x1, 0x7, 0x2, 0xb3, &(0x7f0000000500)}) ioctl$KDGKBLED(r0, 0x4b64, &(0x7f0000000040)) io_uring_setup(0xfc6, &(0x7f0000000180)) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000240)={0x9b0, 0x9, 0x1, 0x4, 0x3}) listen(r1, 0x400000001ffffffd) r2 = socket$inet_dccp(0x2, 0x6, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f0000000440)=@ipv4_newaddr={0x38, 0x14, 0x8, 0x70bd2d, 0x25dfdbfd, {0x2, 0x78, 0x40, 0xc8}, [@IFA_RT_PRIORITY={0x8, 0x9, 0x9}, @IFA_RT_PRIORITY={0x8, 0x9, 0x200}, @IFA_ADDRESS={0x8, 0x1, @loopback}, @IFA_ADDRESS={0x8, 0x1, @multicast2}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000090}, 0x8000) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev}, 0x10) write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[@ANYBLOB="88ed7c48cfb680c42f89f97a7def31f7c3754b660e634848a0626b48d0b96e39c051b0006e7ca14700d0"], 0x8) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x1, 0x0, 0x0, 0x4, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x3) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r3, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) 06:22:27 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) recvmsg(r0, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) (async) sendto$inet6(r0, &(0x7f00000001c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0) recvmsg(r0, &(0x7f00000003c0)={0x0, 0x3, 0x0}, 0x0) recvmsg(r0, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x0) (async) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) recvfrom$inet6(r0, &(0x7f0000000000)=""/114, 0x72, 0x40, 0x0, 0x0) (async) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f00000000c0)={'wg2\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000040)) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="00281c80", @ANYRES16=r0, @ANYBLOB="ff"], 0x34}}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="f4997c3794"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="58ad000010", 0x5, 0x0, 0x0, 0x0) r2 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r2, &(0x7f0000000000)='s', 0x10a73, 0x81e, 0x0, 0x4b6ae4f95a5de35b) 06:22:27 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f0000000380)={0x3, 0x1, 0x7, 0x2, 0xb3, &(0x7f0000000500)}) ioctl$KDGKBLED(r0, 0x4b64, &(0x7f0000000040)) io_uring_setup(0xfc6, &(0x7f0000000180)) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000240)={0x9b0, 0x9, 0x1, 0x4, 0x3}) listen(r1, 0x400000001ffffffd) r2 = socket$inet_dccp(0x2, 0x6, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f0000000440)=@ipv4_newaddr={0x38, 0x14, 0x8, 0x70bd2d, 0x25dfdbfd, {0x2, 0x78, 0x40, 0xc8}, [@IFA_RT_PRIORITY={0x8, 0x9, 0x9}, @IFA_RT_PRIORITY={0x8, 0x9, 0x200}, @IFA_ADDRESS={0x8, 0x1, @loopback}, @IFA_ADDRESS={0x8, 0x1, @multicast2}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000090}, 0x8000) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev}, 0x10) write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[@ANYBLOB="88ed7c48cfb680c42f89f97a7def31f7c3754b660e634848a0626b48d0b96e39c051b0006e7ca14700d0"], 0x8) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x1, 0x0, 0x0, 0x4, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x3) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r3, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) 06:22:27 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f0000000380)={0x3, 0x1, 0x7, 0x2, 0xb3, &(0x7f0000000500)}) ioctl$KDGKBLED(r0, 0x4b64, &(0x7f0000000040)) io_uring_setup(0xfc6, &(0x7f0000000180)) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000240)={0x9b0, 0x9, 0x1, 0x4, 0x3}) listen(r1, 0x400000001ffffffd) r2 = socket$inet_dccp(0x2, 0x6, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f0000000440)=@ipv4_newaddr={0x38, 0x14, 0x8, 0x70bd2d, 0x25dfdbfd, {0x2, 0x78, 0x40, 0xc8}, [@IFA_RT_PRIORITY={0x8, 0x9, 0x9}, @IFA_RT_PRIORITY={0x8, 0x9, 0x200}, @IFA_ADDRESS={0x8, 0x1, @loopback}, @IFA_ADDRESS={0x8, 0x1, @multicast2}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000090}, 0x8000) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev}, 0x10) write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[@ANYBLOB="88ed7c48cfb680c42f89f97a7def31f7c3754b660e634848a0626b48d0b96e39c051b0006e7ca14700d0"], 0x8) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x1, 0x0, 0x0, 0x4, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x3) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r3, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) 06:22:27 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) recvmsg(r0, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) sendto$inet6(r0, &(0x7f00000001c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0) recvmsg(r0, &(0x7f00000003c0)={0x0, 0x3, 0x0}, 0x0) recvmsg(r0, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) recvfrom$inet6(r0, &(0x7f0000000000)=""/114, 0xfffffffffffffd1b, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000040)) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="00281c80", @ANYRES16=r0, @ANYBLOB="ec2093c405cb4f4abdf335148c9e084d4016bf3bc104afa6c301f37d576430d05a05add507989d5046477aa3835757ea34785a53da9581a23103005aa8cbb3310a1060d2fa950f483f36d859401f9c754772c319901715000000"], 0x34}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="f4997c3794"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="58ad000010", 0x5, 0x0, 0x0, 0x0) r1 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f0000000000)='s', 0x10a73, 0x81e, 0x0, 0x4b6ae4f95a5de35b) [ 3173.977211][T30057] netlink: 44287 bytes leftover after parsing attributes in process `syz-executor.4'. 06:22:34 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f0000000380)={0x3, 0x1, 0x7, 0x2, 0xb3, &(0x7f0000000500)}) ioctl$KDGKBLED(r0, 0x4b64, &(0x7f0000000040)) io_uring_setup(0xfc6, &(0x7f0000000180)) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000240)={0x9b0, 0x9, 0x1, 0x4, 0x3}) listen(r1, 0x400000001ffffffd) r2 = socket$inet_dccp(0x2, 0x6, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f0000000440)=@ipv4_newaddr={0x38, 0x14, 0x8, 0x70bd2d, 0x25dfdbfd, {0x2, 0x78, 0x40, 0xc8}, [@IFA_RT_PRIORITY={0x8, 0x9, 0x9}, @IFA_RT_PRIORITY={0x8, 0x9, 0x200}, @IFA_ADDRESS={0x8, 0x1, @loopback}, @IFA_ADDRESS={0x8, 0x1, @multicast2}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000090}, 0x8000) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev}, 0x10) creat(&(0x7f00000000c0)='./bus\x00', 0x0) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x1, 0x0, 0x0, 0x4, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x3) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r3, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) 06:22:34 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f0000000380)={0x3, 0x1, 0x7, 0x2, 0xb3, &(0x7f0000000500)}) ioctl$KDGKBLED(r0, 0x4b64, &(0x7f0000000040)) io_uring_setup(0xfc6, &(0x7f0000000180)) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000240)={0x9b0, 0x9, 0x1, 0x4, 0x3}) listen(r1, 0x400000001ffffffd) socket$inet_dccp(0x2, 0x6, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f0000000440)=@ipv4_newaddr={0x38, 0x14, 0x8, 0x70bd2d, 0x25dfdbfd, {0x2, 0x78, 0x40, 0xc8}, [@IFA_RT_PRIORITY={0x8, 0x9, 0x9}, @IFA_RT_PRIORITY={0x8, 0x9, 0x200}, @IFA_ADDRESS={0x8, 0x1, @loopback}, @IFA_ADDRESS={0x8, 0x1, @multicast2}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000090}, 0x8000) r2 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$cgroup_subtree(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="88ed7c48cfb680c42f89f97a7def31f7c3754b660e634848a0626b48d0b96e39c051b0006e7ca14700d0"], 0x8) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x1, 0x0, 0x0, 0x4, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x3) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r3, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) 06:22:34 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) recvmsg(r0, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) sendto$inet6(r0, &(0x7f00000001c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0) recvmsg(r0, &(0x7f00000003c0)={0x0, 0x3, 0x0}, 0x0) recvmsg(r0, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x0) (async) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) recvfrom$inet6(r0, &(0x7f0000000000)=""/114, 0xfffffffffffffd1b, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000040)) (async) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="00281c80", @ANYRES16=r0, @ANYBLOB="ec2093c405cb4f4abdf335148c9e084d4016bf3bc104afa6c301f37d576430d05a05add507989d5046477aa3835757ea34785a53da9581a23103005aa8cbb3310a1060d2fa950f483f36d859401f9c754772c319901715000000"], 0x34}}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="f4997c3794"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="58ad000010", 0x5, 0x0, 0x0, 0x0) r1 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f0000000000)='s', 0x10a73, 0x81e, 0x0, 0x4b6ae4f95a5de35b) 06:22:34 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000005c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e24, @local}, 0x10) writev(r0, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) recvmmsg(r0, &(0x7f0000003e40)=[{{&(0x7f0000000100)=@phonet, 0x80, 0x0, 0x0, &(0x7f00000024c0)=""/4096, 0x1000, 0x7}}, {{0x0, 0x80100200, 0x0, 0x0, &(0x7f00000035c0)=""/241, 0xf1}}, {{&(0x7f00000036c0)=@un=@abs, 0x80, &(0x7f0000003780)=[{&(0x7f0000003740)=""/4, 0xfffffd07}], 0x1, &(0x7f00000037c0)=""/236, 0xec}}, {{&(0x7f00000038c0)=@l2tp6={0xa, 0x0, 0x0, @private1}, 0x80, &(0x7f0000003bc0)=[{0x0}, {&(0x7f0000003a00)=""/190, 0xbe}, {&(0x7f0000003ac0)=""/131, 0x83}, {0x0}], 0x4, &(0x7f0000003c00)=""/73, 0x49}}, {{&(0x7f0000003c80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, 0x0, 0x0, &(0x7f0000003e00)=""/48, 0x30}}], 0x5, 0x40000121, 0x0) 06:22:34 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f0000000380)={0x3, 0x1, 0x7, 0x2, 0xb3, &(0x7f0000000500)}) ioctl$KDGKBLED(r0, 0x4b64, &(0x7f0000000040)) io_uring_setup(0xfc6, &(0x7f0000000180)) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000240)={0x9b0, 0x9, 0x1, 0x4, 0x3}) listen(r1, 0x400000001ffffffd) r2 = socket$inet_dccp(0x2, 0x6, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f0000000440)=@ipv4_newaddr={0x38, 0x14, 0x8, 0x70bd2d, 0x25dfdbfd, {0x2, 0x78, 0x40, 0xc8}, [@IFA_RT_PRIORITY={0x8, 0x9, 0x9}, @IFA_RT_PRIORITY={0x8, 0x9, 0x200}, @IFA_ADDRESS={0x8, 0x1, @loopback}, @IFA_ADDRESS={0x8, 0x1, @multicast2}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000090}, 0x8000) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev}, 0x10) r3 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$cgroup_subtree(r3, &(0x7f00000003c0)=ANY=[@ANYBLOB="88ed7c48cfb680c42f89f97a7def31f7c3754b660e634848a0626b48d0b96e39c051b0006e7ca14700d0"], 0x8) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x1, 0x0, 0x0, 0x4, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x3) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000a00)=ANY=[@ANYBLOB="c42c6e2932282e6645da1d10791c92f43389bef4b185c4d1dacc3cfc8ecc0bf814f6dcdac6841be3bdbc710f350e80317fc828caee7984f2d0a503e8bd1d5277b9bd46fd855e5dddb9448b81ed681d262d5ac040d91bacd3562e16ee197e09907921748069c7421aa5ff99e8153f597070a04ff23f0a45ebf48370445ff6d239d848a6fb317608b13f2399485571d6524f3e9adb4c75b74d486603018a2a804528c63b0669ffd7a2ce6a73a5533c00e5af296b09bb560a761e76021df7", @ANYRES32=0x0, @ANYBLOB="0000000000140003006272696467655f736c6176655f3100000800020023f841841cfce752e51d7e5a869002947c29d84327aa016caefa3f43d42afa4d29e0d98cd04dc3f8dae1de642f0f38fb6e668992d5b914aa79bfc89fc05fa6913e85925d3d29e5652e807b0230392c1ba73de7cbf221788773d2b8f006ed6d957f35b9b76537357388083c178c120c", @ANYRES32=r6, @ANYBLOB="08000400da010000"], 0x44}}, 0x0) r7 = getpgid(0xffffffffffffffff) sendmsg$nl_route(r4, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@RTM_GETNSID={0x1c, 0x5a, 0x19, 0x70bd2d, 0x25dfdbfe, {}, [@NETNSA_PID={0x8, 0x2, r7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x811}, 0x4000001) r8 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r8, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) 06:22:34 executing program 5: r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e24, @local}, 0x10) writev(r0, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) recvmmsg(r0, &(0x7f0000003e40)=[{{&(0x7f0000000100)=@phonet, 0x80, 0x0, 0x0, &(0x7f00000024c0)=""/4096, 0x1000, 0x4}}, {{0x0, 0x80100200, 0x0, 0x0, &(0x7f00000035c0)=""/241, 0xf1}}, {{&(0x7f00000036c0)=@un=@abs, 0x80, &(0x7f0000003780)=[{&(0x7f0000003740)=""/4, 0xfffffd07}], 0x1, &(0x7f00000037c0)=""/236, 0xec}}, {{&(0x7f00000038c0)=@l2tp6={0xa, 0x0, 0x0, @private1}, 0x80, &(0x7f0000003bc0)=[{0x0}, {&(0x7f0000003a00)=""/190, 0xbe}, {&(0x7f0000003ac0)=""/131, 0x83}, {0x0}], 0x4, &(0x7f0000003c00)=""/73, 0x49}}, {{&(0x7f0000003c80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, 0x0, 0x0, &(0x7f0000003e00)=""/48, 0x30}}], 0x5, 0x40000121, 0x0) 06:22:34 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f0000000380)={0x3, 0x1, 0x7, 0x2, 0xb3, &(0x7f0000000500)}) ioctl$KDGKBLED(r0, 0x4b64, &(0x7f0000000040)) io_uring_setup(0xfc6, &(0x7f0000000180)) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000240)={0x9b0, 0x9, 0x1, 0x4, 0x3}) listen(r1, 0x400000001ffffffd) socket$inet_dccp(0x2, 0x6, 0x0) r2 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$cgroup_subtree(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="88ed7c48cfb680c42f89f97a7def31f7c3754b660e634848a0626b48d0b96e39c051b0006e7ca14700d0"], 0x8) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x1, 0x0, 0x0, 0x4, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x3) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r3, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) [ 3180.983628][T30075] ref_ctr going negative. vaddr: 0x20000004, curr val: -18737, delta: 1 [ 3180.992160][T30075] ref_ctr increment failed for inode: 0x49f offset: 0x0 ref_ctr_offset: 0x4 of mm: 0xffff88813fefe080 06:22:34 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) recvmsg(r0, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) (async, rerun: 32) sendto$inet6(r0, &(0x7f00000001c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0) (async, rerun: 32) recvmsg(r0, &(0x7f00000003c0)={0x0, 0x3, 0x0}, 0x0) (async) recvmsg(r0, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x0) (async) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) recvfrom$inet6(r0, &(0x7f0000000000)=""/114, 0xfffffffffffffd1b, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000040)) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="00281c80", @ANYRES16=r0, @ANYBLOB="ec2093c405cb4f4abdf335148c9e084d4016bf3bc104afa6c301f37d576430d05a05add507989d5046477aa3835757ea34785a53da9581a23103005aa8cbb3310a1060d2fa950f483f36d859401f9c754772c319901715000000"], 0x34}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="f4997c3794"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="58ad000010", 0x5, 0x0, 0x0, 0x0) (async, rerun: 32) r1 = socket$inet6(0x10, 0x3, 0x0) (rerun: 32) sendto$inet6(r1, &(0x7f0000000000)='s', 0x10a73, 0x81e, 0x0, 0x4b6ae4f95a5de35b) 06:22:34 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f0000000380)={0x3, 0x1, 0x7, 0x2, 0xb3, &(0x7f0000000500)}) ioctl$KDGKBLED(r0, 0x4b64, &(0x7f0000000040)) io_uring_setup(0xfc6, &(0x7f0000000180)) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000240)={0x9b0, 0x9, 0x1, 0x4, 0x3}) listen(r1, 0x400000001ffffffd) r2 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$cgroup_subtree(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="88ed7c48cfb680c42f89f97a7def31f7c3754b660e634848a0626b48d0b96e39c051b0006e7ca14700d0"], 0x8) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x1, 0x0, 0x0, 0x4, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x3) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r3, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) [ 3181.029730][T30080] ref_ctr going negative. vaddr: 0x20000004, curr val: -18737, delta: 1 [ 3181.038199][T30080] ref_ctr increment failed for inode: 0x49a offset: 0x0 ref_ctr_offset: 0x4 of mm: 0xffff888139dd8ac0 06:22:34 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) recvmsg(r0, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) sendto$inet6(r0, &(0x7f00000001c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0) recvmsg(r0, &(0x7f00000003c0)={0x0, 0x3, 0x0}, 0x0) recvmsg(r0, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) recvfrom$inet6(r0, &(0x7f0000000000)=""/114, 0xfffffffffffffd1b, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000040)) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000a40)=""/4096, 0x1000, 0x40002040, &(0x7f00000000c0)={0xa, 0x4e20, 0x5, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x7}, 0x1c) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=ANY=[@ANYBLOB="00281c80", @ANYRES16=r0, @ANYBLOB="fa86c1b42842b700010000000000acffcf0e4606830739a9c3da0e8f1dde63d66f4b38a3adad50aaa462c8b88f2651b1c225ae98839252669cdd71ccdbe544e8a96e0e086e4468bfecd4362248c2a7f46c51322c27d1"], 0x34}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="f4997c3794"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="58ad000010", 0x5, 0x0, 0x0, 0x0) r1 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f0000000000)='s', 0x10a73, 0x81e, 0x0, 0x4b6ae4f95a5de35b) [ 3181.119153][T30092] ref_ctr going negative. vaddr: 0x20000004, curr val: -18737, delta: 1 [ 3181.127614][T30092] ref_ctr increment failed for inode: 0x49b offset: 0x0 ref_ctr_offset: 0x4 of mm: 0xffff88813fefe540 06:22:34 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f0000000380)={0x3, 0x1, 0x7, 0x2, 0xb3, &(0x7f0000000500)}) ioctl$KDGKBLED(r0, 0x4b64, &(0x7f0000000040)) io_uring_setup(0xfc6, &(0x7f0000000180)) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000240)={0x9b0, 0x9, 0x1, 0x4, 0x3}) listen(r1, 0x400000001ffffffd) r2 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$cgroup_subtree(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="88ed7c48cfb680c42f89f97a7def31f7c3754b660e634848a0626b48d0b96e39c051b0006e7ca14700d0"], 0x8) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x1, 0x0, 0x0, 0x4, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x3) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r3, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) 06:22:34 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) recvmsg(r0, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) sendto$inet6(r0, &(0x7f00000001c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0) recvmsg(r0, &(0x7f00000003c0)={0x0, 0x3, 0x0}, 0x0) recvmsg(r0, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) recvfrom$inet6(r0, &(0x7f0000000000)=""/114, 0xfffffffffffffd1b, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000040)) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000a40)=""/4096, 0x1000, 0x40002040, &(0x7f00000000c0)={0xa, 0x4e20, 0x5, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x7}, 0x1c) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=ANY=[@ANYBLOB="00281c80", @ANYRES16=r0, @ANYBLOB="fa86c1b42842b700010000000000acffcf0e4606830739a9c3da0e8f1dde63d66f4b38a3adad50aaa462c8b88f2651b1c225ae98839252669cdd71ccdbe544e8a96e0e086e4468bfecd4362248c2a7f46c51322c27d1"], 0x34}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="f4997c3794"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="58ad000010", 0x5, 0x0, 0x0, 0x0) r1 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f0000000000)='s', 0x10a73, 0x81e, 0x0, 0x4b6ae4f95a5de35b) socket$inet6(0x10, 0x3, 0x0) (async) recvmsg(r0, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) (async) sendto$inet6(r0, &(0x7f00000001c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0) (async) recvmsg(r0, &(0x7f00000003c0)={0x0, 0x3, 0x0}, 0x0) (async) recvmsg(r0, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x0) (async) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) (async) recvfrom$inet6(r0, &(0x7f0000000000)=""/114, 0xfffffffffffffd1b, 0x0, 0x0, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000040)) (async) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000a40)=""/4096, 0x1000, 0x40002040, &(0x7f00000000c0)={0xa, 0x4e20, 0x5, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x7}, 0x1c) (async) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=ANY=[@ANYBLOB="00281c80", @ANYRES16=r0, @ANYBLOB="fa86c1b42842b700010000000000acffcf0e4606830739a9c3da0e8f1dde63d66f4b38a3adad50aaa462c8b88f2651b1c225ae98839252669cdd71ccdbe544e8a96e0e086e4468bfecd4362248c2a7f46c51322c27d1"], 0x34}}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="f4997c3794"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="58ad000010", 0x5, 0x0, 0x0, 0x0) (async) socket$inet6(0x10, 0x3, 0x0) (async) sendto$inet6(r1, &(0x7f0000000000)='s', 0x10a73, 0x81e, 0x0, 0x4b6ae4f95a5de35b) (async) [ 3181.224426][T30098] ref_ctr going negative. vaddr: 0x20000004, curr val: -18737, delta: 1 [ 3181.232816][T30098] ref_ctr increment failed for inode: 0x49b offset: 0x0 ref_ctr_offset: 0x4 of mm: 0xffff8881046c1140 06:22:41 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f0000000380)={0x3, 0x1, 0x7, 0x2, 0xb3, &(0x7f0000000500)}) ioctl$KDGKBLED(r0, 0x4b64, &(0x7f0000000040)) io_uring_setup(0xfc6, &(0x7f0000000180)) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000240)={0x9b0, 0x9, 0x1, 0x4, 0x3}) listen(r1, 0x400000001ffffffd) r2 = socket$inet_dccp(0x2, 0x6, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f0000000440)=@ipv4_newaddr={0x38, 0x14, 0x8, 0x70bd2d, 0x25dfdbfd, {0x2, 0x78, 0x40, 0xc8}, [@IFA_RT_PRIORITY={0x8, 0x9, 0x9}, @IFA_RT_PRIORITY={0x8, 0x9, 0x200}, @IFA_ADDRESS={0x8, 0x1, @loopback}, @IFA_ADDRESS={0x8, 0x1, @multicast2}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000090}, 0x8000) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev}, 0x10) write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[@ANYBLOB="88ed7c48cfb680c42f89f97a7def31f7c3754b660e634848a0626b48d0b96e39c051b0006e7ca14700d0"], 0x8) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x1, 0x0, 0x0, 0x4, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x3) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r3, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) 06:22:41 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f0000000380)={0x3, 0x1, 0x7, 0x2, 0xb3, &(0x7f0000000500)}) ioctl$KDGKBLED(r0, 0x4b64, &(0x7f0000000040)) io_uring_setup(0xfc6, &(0x7f0000000180)) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000240)={0x9b0, 0x9, 0x1, 0x4, 0x3}) r2 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$cgroup_subtree(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="88ed7c48cfb680c42f89f97a7def31f7c3754b660e634848a0626b48d0b96e39c051b0006e7ca14700d0"], 0x8) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x1, 0x0, 0x0, 0x4, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x3) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r3, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) 06:22:41 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) recvmsg(r0, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) (async) sendto$inet6(r0, &(0x7f00000001c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0) recvmsg(r0, &(0x7f00000003c0)={0x0, 0x3, 0x0}, 0x0) (async) recvmsg(r0, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) recvfrom$inet6(r0, &(0x7f0000000000)=""/114, 0xfffffffffffffd1b, 0x0, 0x0, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000040)) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000a40)=""/4096, 0x1000, 0x40002040, &(0x7f00000000c0)={0xa, 0x4e20, 0x5, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x7}, 0x1c) (async) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=ANY=[@ANYBLOB="00281c80", @ANYRES16=r0, @ANYBLOB="fa86c1b42842b700010000000000acffcf0e4606830739a9c3da0e8f1dde63d66f4b38a3adad50aaa462c8b88f2651b1c225ae98839252669cdd71ccdbe544e8a96e0e086e4468bfecd4362248c2a7f46c51322c27d1"], 0x34}}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="f4997c3794"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="58ad000010", 0x5, 0x0, 0x0, 0x0) (async) r1 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f0000000000)='s', 0x10a73, 0x81e, 0x0, 0x4b6ae4f95a5de35b) 06:22:41 executing program 5: r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e24, @local}, 0x10) writev(r0, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) recvmmsg(r0, &(0x7f0000003e40)=[{{&(0x7f0000000100)=@phonet, 0x80, 0x0, 0x0, &(0x7f00000024c0)=""/4096, 0x1000, 0x5}}, {{0x0, 0x80100200, 0x0, 0x0, &(0x7f00000035c0)=""/241, 0xf1}}, {{&(0x7f00000036c0)=@un=@abs, 0x80, &(0x7f0000003780)=[{&(0x7f0000003740)=""/4, 0xfffffd07}], 0x1, &(0x7f00000037c0)=""/236, 0xec}}, {{&(0x7f00000038c0)=@l2tp6={0xa, 0x0, 0x0, @private1}, 0x80, &(0x7f0000003bc0)=[{0x0}, {&(0x7f0000003a00)=""/190, 0xbe}, {&(0x7f0000003ac0)=""/131, 0x83}, {0x0}], 0x4, &(0x7f0000003c00)=""/73, 0x49}}, {{&(0x7f0000003c80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, 0x0, 0x0, &(0x7f0000003e00)=""/48, 0x30}}], 0x5, 0x40000121, 0x0) 06:22:41 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000005c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e24, @local}, 0x10) writev(r0, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) recvmmsg(r0, &(0x7f0000003e40)=[{{&(0x7f0000000100)=@phonet, 0x80, 0x0, 0x0, &(0x7f00000024c0)=""/4096, 0x1000, 0x8}}, {{0x0, 0x80100200, 0x0, 0x0, &(0x7f00000035c0)=""/241, 0xf1}}, {{&(0x7f00000036c0)=@un=@abs, 0x80, &(0x7f0000003780)=[{&(0x7f0000003740)=""/4, 0xfffffd07}], 0x1, &(0x7f00000037c0)=""/236, 0xec}}, {{&(0x7f00000038c0)=@l2tp6={0xa, 0x0, 0x0, @private1}, 0x80, &(0x7f0000003bc0)=[{0x0}, {&(0x7f0000003a00)=""/190, 0xbe}, {&(0x7f0000003ac0)=""/131, 0x83}, {0x0}], 0x4, &(0x7f0000003c00)=""/73, 0x49}}, {{&(0x7f0000003c80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, 0x0, 0x0, &(0x7f0000003e00)=""/48, 0x30}}], 0x5, 0x40000121, 0x0) 06:22:41 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f0000000380)={0x3, 0x1, 0x7, 0x2, 0xb3, &(0x7f0000000500)}) ioctl$KDGKBLED(r0, 0x4b64, &(0x7f0000000040)) io_uring_setup(0xfc6, &(0x7f0000000180)) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000240)={0x9b0, 0x9, 0x1, 0x4, 0x3}) listen(r1, 0x400000001ffffffd) r2 = socket$inet_dccp(0x2, 0x6, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f0000000440)=@ipv4_newaddr={0x38, 0x14, 0x8, 0x70bd2d, 0x25dfdbfd, {0x2, 0x78, 0x40, 0xc8}, [@IFA_RT_PRIORITY={0x8, 0x9, 0x9}, @IFA_RT_PRIORITY={0x8, 0x9, 0x200}, @IFA_ADDRESS={0x8, 0x1, @loopback}, @IFA_ADDRESS={0x8, 0x1, @multicast2}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000090}, 0x8000) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev}, 0x10) r3 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$cgroup_subtree(r3, &(0x7f00000003c0)=ANY=[@ANYBLOB="88ed7c48cfb680c42f89f97a7def31f7c3754b660e634848a0626b48d0b96e39c051b0006e7ca14700d0"], 0x8) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x1, 0x0, 0x0, 0x4, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x3) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000a00)=ANY=[@ANYBLOB="c42c6e2932282e6645da1d10791c92f43389bef4b185c4d1dacc3cfc8ecc0bf814f6dcdac6841be3bdbc710f350e80317fc828caee7984f2d0a503e8bd1d5277b9bd46fd855e5dddb9448b81ed681d262d5ac040d91bacd3562e16ee197e09907921748069c7421aa5ff99e8153f597070a04ff23f0a45ebf48370445ff6d239d848a6fb317608b13f2399485571d6524f3e9adb4c75b74d486603018a2a804528c63b0669ffd7a2ce6a73a5533c00e5af296b09bb560a761e76021df7", @ANYRES32=0x0, @ANYBLOB="0000000000140003006272696467655f736c6176655f3100000800020023f841841cfce752e51d7e5a869002947c29d84327aa016caefa3f43d42afa4d29e0d98cd04dc3f8dae1de642f0f38fb6e668992d5b914aa79bfc89fc05fa6913e85925d3d29e5652e807b0230392c1ba73de7cbf221788773d2b8f006ed6d957f35b9b76537357388083c178c120c", @ANYRES32=r6, @ANYBLOB="08000400da010000"], 0x44}}, 0x0) r7 = getpgid(0xffffffffffffffff) sendmsg$nl_route(r4, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@RTM_GETNSID={0x1c, 0x5a, 0x19, 0x70bd2d, 0x25dfdbfe, {}, [@NETNSA_PID={0x8, 0x2, r7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x811}, 0x4000001) r8 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r8, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) 06:22:41 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) recvmsg(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) sendto$inet6(r0, &(0x7f00000001c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0) recvmsg(r0, &(0x7f00000003c0)={0x0, 0x3, 0x0}, 0x0) recvmsg(r0, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) recvfrom$inet6(r0, &(0x7f0000000000)=""/114, 0xfffffffffffffd1b, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000040)) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="00281c80", @ANYRES16=r0, @ANYBLOB="ff"], 0x34}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="f4997c3794"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="58ad000010", 0x5, 0x0, 0x0, 0x0) r1 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f0000000000)='s', 0x10a73, 0x81e, 0x0, 0x4b6ae4f95a5de35b) 06:22:41 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f0000000380)={0x3, 0x1, 0x7, 0x2, 0xb3, &(0x7f0000000500)}) ioctl$KDGKBLED(r0, 0x4b64, &(0x7f0000000040)) io_uring_setup(0xfc6, &(0x7f0000000180)) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) r2 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$cgroup_subtree(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="88ed7c48cfb680c42f89f97a7def31f7c3754b660e634848a0626b48d0b96e39c051b0006e7ca14700d0"], 0x8) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x1, 0x0, 0x0, 0x4, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x3) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r3, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) [ 3188.034289][T30122] ref_ctr going negative. vaddr: 0x20000004, curr val: -18737, delta: 1 [ 3188.042778][T30122] ref_ctr increment failed for inode: 0x49a offset: 0x0 ref_ctr_offset: 0x4 of mm: 0xffff88813c3bfac0 06:22:41 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f0000000380)={0x3, 0x1, 0x7, 0x2, 0xb3, &(0x7f0000000500)}) ioctl$KDGKBLED(r0, 0x4b64, &(0x7f0000000040)) io_uring_setup(0xfc6, &(0x7f0000000180)) socket$inet6(0xa, 0x6, 0x0) r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$cgroup_subtree(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="88ed7c48cfb680c42f89f97a7def31f7c3754b660e634848a0626b48d0b96e39c051b0006e7ca14700d0"], 0x8) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x1, 0x0, 0x0, 0x4, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x3) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) [ 3188.105483][T30134] ref_ctr going negative. vaddr: 0x20000004, curr val: -18737, delta: 1 [ 3188.113891][T30134] ref_ctr increment failed for inode: 0x49b offset: 0x0 ref_ctr_offset: 0x4 of mm: 0xffff888139dd8140 [ 3188.120712][T30129] netlink: 'syz-executor.4': attribute type 41 has an invalid length. [ 3188.133229][T30129] netlink: 44123 bytes leftover after parsing attributes in process `syz-executor.4'. [ 3188.157551][T30129] A link change request failed with some changes committed already. Interface ip6tnl0 may have been left with an inconsistent configuration, please check. [ 3188.190241][T30137] ref_ctr going negative. vaddr: 0x20000004, curr val: -18737, delta: 1 06:22:41 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) recvmsg(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) (async) sendto$inet6(r0, &(0x7f00000001c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0) (async, rerun: 32) recvmsg(r0, &(0x7f00000003c0)={0x0, 0x3, 0x0}, 0x0) (async, rerun: 32) recvmsg(r0, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x0) (async, rerun: 32) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) (rerun: 32) recvfrom$inet6(r0, &(0x7f0000000000)=""/114, 0xfffffffffffffd1b, 0x0, 0x0, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000040)) (async) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="00281c80", @ANYRES16=r0, @ANYBLOB="ff"], 0x34}}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="f4997c3794"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async, rerun: 64) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="58ad000010", 0x5, 0x0, 0x0, 0x0) (async, rerun: 64) r1 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f0000000000)='s', 0x10a73, 0x81e, 0x0, 0x4b6ae4f95a5de35b) 06:22:41 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) recvmsg(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) (async) sendto$inet6(r0, &(0x7f00000001c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0) (async) recvmsg(r0, &(0x7f00000003c0)={0x0, 0x3, 0x0}, 0x0) (async) recvmsg(r0, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x0) (async) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) recvfrom$inet6(r0, &(0x7f0000000000)=""/114, 0xfffffffffffffd1b, 0x0, 0x0, 0x0) (async, rerun: 64) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000040)) (rerun: 64) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="00281c80", @ANYRES16=r0, @ANYBLOB="ff"], 0x34}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="f4997c3794"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="58ad000010", 0x5, 0x0, 0x0, 0x0) r1 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f0000000000)='s', 0x10a73, 0x81e, 0x0, 0x4b6ae4f95a5de35b) [ 3188.198666][T30137] ref_ctr increment failed for inode: 0x49b offset: 0x0 ref_ctr_offset: 0x4 of mm: 0xffff88813c3bfac0 06:22:41 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f0000000380)={0x3, 0x1, 0x7, 0x2, 0xb3, &(0x7f0000000500)}) ioctl$KDGKBLED(r0, 0x4b64, &(0x7f0000000040)) io_uring_setup(0xfc6, &(0x7f0000000180)) r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$cgroup_subtree(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="88ed7c48cfb680c42f89f97a7def31f7c3754b660e634848a0626b48d0b96e39c051b0006e7ca14700d0"], 0x8) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x1, 0x0, 0x0, 0x4, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x3) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) [ 3188.279696][T30151] ref_ctr going negative. vaddr: 0x20000004, curr val: -18737, delta: 1 [ 3188.288174][T30151] ref_ctr increment failed for inode: 0x49b offset: 0x0 ref_ctr_offset: 0x4 of mm: 0xffff888139dd8ac0 06:22:52 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f0000000380)={0x3, 0x1, 0x7, 0x2, 0xb3, &(0x7f0000000500)}) ioctl$KDGKBLED(r0, 0x4b64, &(0x7f0000000040)) io_uring_setup(0xfc6, &(0x7f0000000180)) r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$cgroup_subtree(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="88ed7c48cfb680c42f89f97a7def31f7c3754b660e634848a0626b48d0b96e39c051b0006e7ca14700d0"], 0x8) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x1, 0x0, 0x0, 0x4, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x3) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) 06:22:52 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) recvmsg(r0, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) sendto$inet6(r0, &(0x7f00000001c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0) recvmsg(r0, &(0x7f00000003c0)={0x0, 0x3, 0x0}, 0x0) recvmsg(r0, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) recvfrom$inet6(r0, &(0x7f0000000000)=""/114, 0xfffffffffffffd1b, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000040)) sendto$inet6(0xffffffffffffffff, &(0x7f00000000c0)="2f6e6fbb66ff28aea7d8c25256155bcce6b9b8140239b4f364d0fa37a378bd81c13a4510a92f61aaa3bd242ffb95e4935a7aa449b595b92e", 0x38, 0x1, &(0x7f0000000100)={0xa, 0x4e23, 0x8000, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7}, 0x1c) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="00281c80", @ANYRES16=r0, @ANYBLOB="ff"], 0x34}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="f4997c3794"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="58ad000010", 0x5, 0x0, 0x0, 0x0) r1 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f0000000000)='s', 0x10a73, 0x81e, 0x0, 0x4b6ae4f95a5de35b) 06:22:52 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f0000000380)={0x3, 0x1, 0x7, 0x2, 0xb3, &(0x7f0000000500)}) ioctl$KDGKBLED(r0, 0x4b64, &(0x7f0000000040)) io_uring_setup(0xfc6, &(0x7f0000000180)) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000240)={0x9b0, 0x9, 0x1, 0x4, 0x3}) listen(r1, 0x400000001ffffffd) r2 = socket$inet_dccp(0x2, 0x6, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f0000000440)=@ipv4_newaddr={0x38, 0x14, 0x8, 0x70bd2d, 0x25dfdbfd, {0x2, 0x78, 0x40, 0xc8}, [@IFA_RT_PRIORITY={0x8, 0x9, 0x9}, @IFA_RT_PRIORITY={0x8, 0x9, 0x200}, @IFA_ADDRESS={0x8, 0x1, @loopback}, @IFA_ADDRESS={0x8, 0x1, @multicast2}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000090}, 0x8000) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev}, 0x10) write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[@ANYBLOB="88ed7c48cfb680c42f89f97a7def31f7c3754b660e634848a0626b48d0b96e39c051b0006e7ca14700d0"], 0x8) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x1, 0x0, 0x0, 0x4, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x3) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r3, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) 06:22:52 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000005c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e24, @local}, 0x10) writev(r0, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) recvmmsg(r0, &(0x7f0000003e40)=[{{&(0x7f0000000100)=@phonet, 0x80, 0x0, 0x0, &(0x7f00000024c0)=""/4096, 0x1000, 0xa}}, {{0x0, 0x80100200, 0x0, 0x0, &(0x7f00000035c0)=""/241, 0xf1}}, {{&(0x7f00000036c0)=@un=@abs, 0x80, &(0x7f0000003780)=[{&(0x7f0000003740)=""/4, 0xfffffd07}], 0x1, &(0x7f00000037c0)=""/236, 0xec}}, {{&(0x7f00000038c0)=@l2tp6={0xa, 0x0, 0x0, @private1}, 0x80, &(0x7f0000003bc0)=[{0x0}, {&(0x7f0000003a00)=""/190, 0xbe}, {&(0x7f0000003ac0)=""/131, 0x83}, {0x0}], 0x4, &(0x7f0000003c00)=""/73, 0x49}}, {{&(0x7f0000003c80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, 0x0, 0x0, &(0x7f0000003e00)=""/48, 0x30}}], 0x5, 0x40000121, 0x0) 06:22:52 executing program 5: r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e24, @local}, 0x10) writev(r0, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) recvmmsg(r0, &(0x7f0000003e40)=[{{&(0x7f0000000100)=@phonet, 0x80, 0x0, 0x0, &(0x7f00000024c0)=""/4096, 0x1000, 0x6}}, {{0x0, 0x80100200, 0x0, 0x0, &(0x7f00000035c0)=""/241, 0xf1}}, {{&(0x7f00000036c0)=@un=@abs, 0x80, &(0x7f0000003780)=[{&(0x7f0000003740)=""/4, 0xfffffd07}], 0x1, &(0x7f00000037c0)=""/236, 0xec}}, {{&(0x7f00000038c0)=@l2tp6={0xa, 0x0, 0x0, @private1}, 0x80, &(0x7f0000003bc0)=[{0x0}, {&(0x7f0000003a00)=""/190, 0xbe}, {&(0x7f0000003ac0)=""/131, 0x83}, {0x0}], 0x4, &(0x7f0000003c00)=""/73, 0x49}}, {{&(0x7f0000003c80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, 0x0, 0x0, &(0x7f0000003e00)=""/48, 0x30}}], 0x5, 0x40000121, 0x0) 06:22:52 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f0000000380)={0x3, 0x1, 0x7, 0x2, 0xb3, &(0x7f0000000500)}) ioctl$KDGKBLED(r0, 0x4b64, &(0x7f0000000040)) io_uring_setup(0xfc6, &(0x7f0000000180)) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000240)={0x9b0, 0x9, 0x1, 0x4, 0x3}) listen(r1, 0x400000001ffffffd) r2 = socket$inet_dccp(0x2, 0x6, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f0000000440)=@ipv4_newaddr={0x38, 0x14, 0x8, 0x70bd2d, 0x25dfdbfd, {0x2, 0x78, 0x40, 0xc8}, [@IFA_RT_PRIORITY={0x8, 0x9, 0x9}, @IFA_RT_PRIORITY={0x8, 0x9, 0x200}, @IFA_ADDRESS={0x8, 0x1, @loopback}, @IFA_ADDRESS={0x8, 0x1, @multicast2}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000090}, 0x8000) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev}, 0x10) r3 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$cgroup_subtree(r3, &(0x7f00000003c0)=ANY=[@ANYBLOB="88ed7c48cfb680c42f89f97a7def31f7c3754b660e634848a0626b48d0b96e39c051b0006e7ca14700d0"], 0x8) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x1, 0x0, 0x0, 0x4, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x3) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000a00)=ANY=[@ANYBLOB="c42c6e2932282e6645da1d10791c92f43389bef4b185c4d1dacc3cfc8ecc0bf814f6dcdac6841be3bdbc710f350e80317fc828caee7984f2d0a503e8bd1d5277b9bd46fd855e5dddb9448b81ed681d262d5ac040d91bacd3562e16ee197e09907921748069c7421aa5ff99e8153f597070a04ff23f0a45ebf48370445ff6d239d848a6fb317608b13f2399485571d6524f3e9adb4c75b74d486603018a2a804528c63b0669ffd7a2ce6a73a5533c00e5af296b09bb560a761e76021df7", @ANYRES32=0x0, @ANYBLOB="0000000000140003006272696467655f736c6176655f3100000800020023f841841cfce752e51d7e5a869002947c29d84327aa016caefa3f43d42afa4d29e0d98cd04dc3f8dae1de642f0f38fb6e668992d5b914aa79bfc89fc05fa6913e85925d3d29e5652e807b0230392c1ba73de7cbf221788773d2b8f006ed6d957f35b9b76537357388083c178c120c", @ANYRES32=r6, @ANYBLOB="08000400da010000"], 0x44}}, 0x0) r7 = getpgid(0xffffffffffffffff) sendmsg$nl_route(r4, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@RTM_GETNSID={0x1c, 0x5a, 0x19, 0x70bd2d, 0x25dfdbfe, {}, [@NETNSA_PID={0x8, 0x2, r7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x811}, 0x4000001) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r8, 0x0) 06:22:52 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) recvmsg(r0, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) (async) sendto$inet6(r0, &(0x7f00000001c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0) recvmsg(r0, &(0x7f00000003c0)={0x0, 0x3, 0x0}, 0x0) recvmsg(r0, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x0) (async, rerun: 64) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) (async, rerun: 64) recvfrom$inet6(r0, &(0x7f0000000000)=""/114, 0xfffffffffffffd1b, 0x0, 0x0, 0x0) (async, rerun: 64) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000040)) (rerun: 64) sendto$inet6(0xffffffffffffffff, &(0x7f00000000c0)="2f6e6fbb66ff28aea7d8c25256155bcce6b9b8140239b4f364d0fa37a378bd81c13a4510a92f61aaa3bd242ffb95e4935a7aa449b595b92e", 0x38, 0x1, &(0x7f0000000100)={0xa, 0x4e23, 0x8000, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7}, 0x1c) (async) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="00281c80", @ANYRES16=r0, @ANYBLOB="ff"], 0x34}}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="f4997c3794"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="58ad000010", 0x5, 0x0, 0x0, 0x0) (async, rerun: 64) r1 = socket$inet6(0x10, 0x3, 0x0) (rerun: 64) sendto$inet6(r1, &(0x7f0000000000)='s', 0x10a73, 0x81e, 0x0, 0x4b6ae4f95a5de35b) [ 3199.356093][T30162] netlink: 'syz-executor.4': attribute type 41 has an invalid length. [ 3199.364373][T30162] netlink: 44115 bytes leftover after parsing attributes in process `syz-executor.4'. [ 3199.375583][T30162] A link change request failed with some changes committed already. Interface ip6tnl0 may have been left with an inconsistent configuration, please check. 06:22:53 executing program 5: r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e24, @local}, 0x10) writev(r0, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) recvmmsg(r0, &(0x7f0000003e40)=[{{&(0x7f0000000100)=@phonet, 0x80, 0x0, 0x0, &(0x7f00000024c0)=""/4096, 0x1000, 0x7}}, {{0x0, 0x80100200, 0x0, 0x0, &(0x7f00000035c0)=""/241, 0xf1}}, {{&(0x7f00000036c0)=@un=@abs, 0x80, &(0x7f0000003780)=[{&(0x7f0000003740)=""/4, 0xfffffd07}], 0x1, &(0x7f00000037c0)=""/236, 0xec}}, {{&(0x7f00000038c0)=@l2tp6={0xa, 0x0, 0x0, @private1}, 0x80, &(0x7f0000003bc0)=[{0x0}, {&(0x7f0000003a00)=""/190, 0xbe}, {&(0x7f0000003ac0)=""/131, 0x83}, {0x0}], 0x4, &(0x7f0000003c00)=""/73, 0x49}}, {{&(0x7f0000003c80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, 0x0, 0x0, &(0x7f0000003e00)=""/48, 0x30}}], 0x5, 0x40000121, 0x0) 06:22:53 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000005c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e24, @local}, 0x10) writev(r0, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) recvmmsg(r0, &(0x7f0000003e40)=[{{&(0x7f0000000100)=@phonet, 0x80, 0x0, 0x0, &(0x7f00000024c0)=""/4096, 0x1000, 0xf}}, {{0x0, 0x80100200, 0x0, 0x0, &(0x7f00000035c0)=""/241, 0xf1}}, {{&(0x7f00000036c0)=@un=@abs, 0x80, &(0x7f0000003780)=[{&(0x7f0000003740)=""/4, 0xfffffd07}], 0x1, &(0x7f00000037c0)=""/236, 0xec}}, {{&(0x7f00000038c0)=@l2tp6={0xa, 0x0, 0x0, @private1}, 0x80, &(0x7f0000003bc0)=[{0x0}, {&(0x7f0000003a00)=""/190, 0xbe}, {&(0x7f0000003ac0)=""/131, 0x83}, {0x0}], 0x4, &(0x7f0000003c00)=""/73, 0x49}}, {{&(0x7f0000003c80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, 0x0, 0x0, &(0x7f0000003e00)=""/48, 0x30}}], 0x5, 0x40000121, 0x0) 06:22:54 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f0000000380)={0x3, 0x1, 0x7, 0x2, 0xb3, &(0x7f0000000500)}) ioctl$KDGKBLED(r0, 0x4b64, &(0x7f0000000040)) io_uring_setup(0xfc6, &(0x7f0000000180)) r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$cgroup_subtree(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="88ed7c48cfb680c42f89f97a7def31f7c3754b660e634848a0626b48d0b96e39c051b0006e7ca14700d0"], 0x8) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x1, 0x0, 0x0, 0x4, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x3) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) 06:22:54 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f0000000380)={0x3, 0x1, 0x7, 0x2, 0xb3, &(0x7f0000000500)}) ioctl$KDGKBLED(r0, 0x4b64, &(0x7f0000000040)) io_uring_setup(0xfc6, &(0x7f0000000180)) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000240)={0x9b0, 0x9, 0x1, 0x4, 0x3}) listen(r1, 0x400000001ffffffd) r2 = socket$inet_dccp(0x2, 0x6, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f0000000440)=@ipv4_newaddr={0x38, 0x14, 0x8, 0x70bd2d, 0x25dfdbfd, {0x2, 0x78, 0x40, 0xc8}, [@IFA_RT_PRIORITY={0x8, 0x9, 0x9}, @IFA_RT_PRIORITY={0x8, 0x9, 0x200}, @IFA_ADDRESS={0x8, 0x1, @loopback}, @IFA_ADDRESS={0x8, 0x1, @multicast2}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000090}, 0x8000) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev}, 0x10) r3 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$cgroup_subtree(r3, &(0x7f00000003c0)=ANY=[@ANYBLOB="88ed7c48cfb680c42f89f97a7def31f7c3754b660e634848a0626b48d0b96e39c051b0006e7ca14700d0"], 0x8) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x1, 0x0, 0x0, 0x4, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x3) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000a00)=ANY=[@ANYBLOB="c42c6e2932282e6645da1d10791c92f43389bef4b185c4d1dacc3cfc8ecc0bf814f6dcdac6841be3bdbc710f350e80317fc828caee7984f2d0a503e8bd1d5277b9bd46fd855e5dddb9448b81ed681d262d5ac040d91bacd3562e16ee197e09907921748069c7421aa5ff99e8153f597070a04ff23f0a45ebf48370445ff6d239d848a6fb317608b13f2399485571d6524f3e9adb4c75b74d486603018a2a804528c63b0669ffd7a2ce6a73a5533c00e5af296b09bb560a761e76021df7", @ANYRES32=0x0, @ANYBLOB="0000000000140003006272696467655f736c6176655f3100000800020023f841841cfce752e51d7e5a869002947c29d84327aa016caefa3f43d42afa4d29e0d98cd04dc3f8dae1de642f0f38fb6e668992d5b914aa79bfc89fc05fa6913e85925d3d29e5652e807b0230392c1ba73de7cbf221788773d2b8f006ed6d957f35b9b76537357388083c178c120c", @ANYRES32=r6, @ANYBLOB="08000400da010000"], 0x44}}, 0x0) r7 = getpgid(0xffffffffffffffff) sendmsg$nl_route(r4, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@RTM_GETNSID={0x1c, 0x5a, 0x19, 0x70bd2d, 0x25dfdbfe, {}, [@NETNSA_PID={0x8, 0x2, r7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x811}, 0x4000001) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r8, 0x0) 06:22:54 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) recvmsg(r0, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) (async) sendto$inet6(r0, &(0x7f00000001c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0) recvmsg(r0, &(0x7f00000003c0)={0x0, 0x3, 0x0}, 0x0) (async) recvmsg(r0, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x0) (async) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) recvfrom$inet6(r0, &(0x7f0000000000)=""/114, 0xfffffffffffffd1b, 0x0, 0x0, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000040)) (async) sendto$inet6(0xffffffffffffffff, &(0x7f00000000c0)="2f6e6fbb66ff28aea7d8c25256155bcce6b9b8140239b4f364d0fa37a378bd81c13a4510a92f61aaa3bd242ffb95e4935a7aa449b595b92e", 0x38, 0x1, &(0x7f0000000100)={0xa, 0x4e23, 0x8000, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7}, 0x1c) (async) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="00281c80", @ANYRES16=r0, @ANYBLOB="ff"], 0x34}}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="f4997c3794"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="58ad000010", 0x5, 0x0, 0x0, 0x0) (async) r1 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f0000000000)='s', 0x10a73, 0x81e, 0x0, 0x4b6ae4f95a5de35b) 06:22:54 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) recvmsg(r0, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) sendto$inet6(r0, &(0x7f00000001c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0) recvmsg(r0, &(0x7f00000003c0)={0x0, 0x3, 0x0}, 0x0) recvmsg(r0, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) recvfrom$inet6(r0, &(0x7f0000000000)=""/114, 0xfffffffffffffd1b, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000040)) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="00281c80", @ANYRES16=r0, @ANYBLOB="ff"], 0x34}}, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0), 0x200043, 0x0) recvmsg(r1, &(0x7f0000000800)={&(0x7f0000000100)=@in={0x2, 0x0, @multicast1}, 0x80, &(0x7f0000000740)=[{&(0x7f0000000180)=""/53, 0x35}, {&(0x7f0000000400)=""/177, 0xb1}, {&(0x7f00000004c0)=""/163, 0xa3}, {&(0x7f0000000580)=""/183, 0xb7}, {&(0x7f0000000680)=""/141, 0x8d}, {&(0x7f0000000200)=""/3, 0x3}, {&(0x7f0000000240)=""/4, 0x4}], 0x7, &(0x7f00000007c0)}, 0x400000e3) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="f4997c3794"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="58ad000010", 0x5, 0x0, 0x0, 0x0) r2 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r2, &(0x7f0000000000)='s', 0x10a73, 0x81e, 0x0, 0x4b6ae4f95a5de35b) [ 3201.382143][T30185] ref_ctr going negative. vaddr: 0x20000004, curr val: -18737, delta: 1 [ 3201.390608][T30185] ref_ctr increment failed for inode: 0x48e offset: 0x0 ref_ctr_offset: 0x4 of mm: 0xffff88813a1ed640 06:22:54 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f0000000380)={0x3, 0x1, 0x7, 0x2, 0xb3, &(0x7f0000000500)}) ioctl$KDGKBLED(r0, 0x4b64, &(0x7f0000000040)) r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$cgroup_subtree(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="88ed7c48cfb680c42f89f97a7def31f7c3754b660e634848a0626b48d0b96e39c051b0006e7ca14700d0"], 0x8) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x1, 0x0, 0x0, 0x4, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x3) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) [ 3201.477950][T30201] ref_ctr going negative. vaddr: 0x20000004, curr val: -18737, delta: 1 [ 3201.486599][T30201] ref_ctr increment failed for inode: 0x49c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0xffff888104cb25c0 [ 3201.515319][T30199] netlink: 'syz-executor.4': attribute type 41 has an invalid length. [ 3201.523534][T30199] netlink: 44123 bytes leftover after parsing attributes in process `syz-executor.4'. [ 3201.579051][T30199] A link change request failed with some changes committed already. Interface ip6tnl0 may have been left with an inconsistent configuration, please check. 06:23:01 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f0000000380)={0x3, 0x1, 0x7, 0x2, 0xb3, &(0x7f0000000500)}) ioctl$KDGKBLED(r0, 0x4b64, &(0x7f0000000040)) io_uring_setup(0xfc6, &(0x7f0000000180)) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000240)={0x9b0, 0x9, 0x1, 0x4, 0x3}) listen(r1, 0x400000001ffffffd) r2 = socket$inet_dccp(0x2, 0x6, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f0000000440)=@ipv4_newaddr={0x38, 0x14, 0x8, 0x70bd2d, 0x25dfdbfd, {0x2, 0x78, 0x40, 0xc8}, [@IFA_RT_PRIORITY={0x8, 0x9, 0x9}, @IFA_RT_PRIORITY={0x8, 0x9, 0x200}, @IFA_ADDRESS={0x8, 0x1, @loopback}, @IFA_ADDRESS={0x8, 0x1, @multicast2}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000090}, 0x8000) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev}, 0x10) write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[@ANYBLOB="88ed7c48cfb680c42f89f97a7def31f7c3754b660e634848a0626b48d0b96e39c051b0006e7ca14700d0"], 0x8) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x1, 0x0, 0x0, 0x4, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x3) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r3, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) 06:23:01 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) recvmsg(r0, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) sendto$inet6(r0, &(0x7f00000001c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0) recvmsg(r0, &(0x7f00000003c0)={0x0, 0x3, 0x0}, 0x0) recvmsg(r0, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) recvfrom$inet6(r0, &(0x7f0000000000)=""/114, 0xfffffffffffffd1b, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000040)) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="00281c80", @ANYRES16=r0, @ANYBLOB="ff"], 0x34}}, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0), 0x200043, 0x0) recvmsg(r1, &(0x7f0000000800)={&(0x7f0000000100)=@in={0x2, 0x0, @multicast1}, 0x80, &(0x7f0000000740)=[{&(0x7f0000000180)=""/53, 0x35}, {&(0x7f0000000400)=""/177, 0xb1}, {&(0x7f00000004c0)=""/163, 0xa3}, {&(0x7f0000000580)=""/183, 0xb7}, {&(0x7f0000000680)=""/141, 0x8d}, {&(0x7f0000000200)=""/3, 0x3}, {&(0x7f0000000240)=""/4, 0x4}], 0x7, &(0x7f00000007c0)}, 0x400000e3) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="f4997c3794"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="58ad000010", 0x5, 0x0, 0x0, 0x0) r2 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r2, &(0x7f0000000000)='s', 0x10a73, 0x81e, 0x0, 0x4b6ae4f95a5de35b) socket$inet6(0x10, 0x3, 0x0) (async) recvmsg(r0, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) (async) sendto$inet6(r0, &(0x7f00000001c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0) (async) recvmsg(r0, &(0x7f00000003c0)={0x0, 0x3, 0x0}, 0x0) (async) recvmsg(r0, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x0) (async) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) (async) recvfrom$inet6(r0, &(0x7f0000000000)=""/114, 0xfffffffffffffd1b, 0x0, 0x0, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000040)) (async) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="00281c80", @ANYRES16=r0, @ANYBLOB="ff"], 0x34}}, 0x0) (async) openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0), 0x200043, 0x0) (async) recvmsg(r1, &(0x7f0000000800)={&(0x7f0000000100)=@in={0x2, 0x0, @multicast1}, 0x80, &(0x7f0000000740)=[{&(0x7f0000000180)=""/53, 0x35}, {&(0x7f0000000400)=""/177, 0xb1}, {&(0x7f00000004c0)=""/163, 0xa3}, {&(0x7f0000000580)=""/183, 0xb7}, {&(0x7f0000000680)=""/141, 0x8d}, {&(0x7f0000000200)=""/3, 0x3}, {&(0x7f0000000240)=""/4, 0x4}], 0x7, &(0x7f00000007c0)}, 0x400000e3) (async) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="f4997c3794"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="58ad000010", 0x5, 0x0, 0x0, 0x0) (async) socket$inet6(0x10, 0x3, 0x0) (async) sendto$inet6(r2, &(0x7f0000000000)='s', 0x10a73, 0x81e, 0x0, 0x4b6ae4f95a5de35b) (async) 06:23:01 executing program 5: r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e24, @local}, 0x10) writev(r0, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) recvmmsg(r0, &(0x7f0000003e40)=[{{&(0x7f0000000100)=@phonet, 0x80, 0x0, 0x0, &(0x7f00000024c0)=""/4096, 0x1000, 0x8}}, {{0x0, 0x80100200, 0x0, 0x0, &(0x7f00000035c0)=""/241, 0xf1}}, {{&(0x7f00000036c0)=@un=@abs, 0x80, &(0x7f0000003780)=[{&(0x7f0000003740)=""/4, 0xfffffd07}], 0x1, &(0x7f00000037c0)=""/236, 0xec}}, {{&(0x7f00000038c0)=@l2tp6={0xa, 0x0, 0x0, @private1}, 0x80, &(0x7f0000003bc0)=[{0x0}, {&(0x7f0000003a00)=""/190, 0xbe}, {&(0x7f0000003ac0)=""/131, 0x83}, {0x0}], 0x4, &(0x7f0000003c00)=""/73, 0x49}}, {{&(0x7f0000003c80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, 0x0, 0x0, &(0x7f0000003e00)=""/48, 0x30}}], 0x5, 0x40000121, 0x0) 06:23:01 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f0000000380)={0x3, 0x1, 0x7, 0x2, 0xb3, &(0x7f0000000500)}) ioctl$KDGKBLED(r0, 0x4b64, &(0x7f0000000040)) r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$cgroup_subtree(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="88ed7c48cfb680c42f89f97a7def31f7c3754b660e634848a0626b48d0b96e39c051b0006e7ca14700d0"], 0x8) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x1, 0x0, 0x0, 0x4, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x3) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) 06:23:01 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000005c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e24, @local}, 0x10) writev(r0, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) recvmmsg(r0, &(0x7f0000003e40)=[{{&(0x7f0000000100)=@phonet, 0x80, 0x0, 0x0, &(0x7f00000024c0)=""/4096, 0x1000, 0x15}}, {{0x0, 0x80100200, 0x0, 0x0, &(0x7f00000035c0)=""/241, 0xf1}}, {{&(0x7f00000036c0)=@un=@abs, 0x80, &(0x7f0000003780)=[{&(0x7f0000003740)=""/4, 0xfffffd07}], 0x1, &(0x7f00000037c0)=""/236, 0xec}}, {{&(0x7f00000038c0)=@l2tp6={0xa, 0x0, 0x0, @private1}, 0x80, &(0x7f0000003bc0)=[{0x0}, {&(0x7f0000003a00)=""/190, 0xbe}, {&(0x7f0000003ac0)=""/131, 0x83}, {0x0}], 0x4, &(0x7f0000003c00)=""/73, 0x49}}, {{&(0x7f0000003c80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, 0x0, 0x0, &(0x7f0000003e00)=""/48, 0x30}}], 0x5, 0x40000121, 0x0) 06:23:01 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f0000000380)={0x3, 0x1, 0x7, 0x2, 0xb3, &(0x7f0000000500)}) ioctl$KDGKBLED(r0, 0x4b64, &(0x7f0000000040)) io_uring_setup(0xfc6, &(0x7f0000000180)) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000240)={0x9b0, 0x9, 0x1, 0x4, 0x3}) listen(r1, 0x400000001ffffffd) r2 = socket$inet_dccp(0x2, 0x6, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f0000000440)=@ipv4_newaddr={0x38, 0x14, 0x8, 0x70bd2d, 0x25dfdbfd, {0x2, 0x78, 0x40, 0xc8}, [@IFA_RT_PRIORITY={0x8, 0x9, 0x9}, @IFA_RT_PRIORITY={0x8, 0x9, 0x200}, @IFA_ADDRESS={0x8, 0x1, @loopback}, @IFA_ADDRESS={0x8, 0x1, @multicast2}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000090}, 0x8000) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev}, 0x10) r3 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$cgroup_subtree(r3, &(0x7f00000003c0)=ANY=[@ANYBLOB="88ed7c48cfb680c42f89f97a7def31f7c3754b660e634848a0626b48d0b96e39c051b0006e7ca14700d0"], 0x8) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x1, 0x0, 0x0, 0x4, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x3) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000a00)=ANY=[@ANYBLOB="c42c6e2932282e6645da1d10791c92f43389bef4b185c4d1dacc3cfc8ecc0bf814f6dcdac6841be3bdbc710f350e80317fc828caee7984f2d0a503e8bd1d5277b9bd46fd855e5dddb9448b81ed681d262d5ac040d91bacd3562e16ee197e09907921748069c7421aa5ff99e8153f597070a04ff23f0a45ebf48370445ff6d239d848a6fb317608b13f2399485571d6524f3e9adb4c75b74d486603018a2a804528c63b0669ffd7a2ce6a73a5533c00e5af296b09bb560a761e76021df7", @ANYRES32=0x0, @ANYBLOB="0000000000140003006272696467655f736c6176655f3100000800020023f841841cfce752e51d7e5a869002947c29d84327aa016caefa3f43d42afa4d29e0d98cd04dc3f8dae1de642f0f38fb6e668992d5b914aa79bfc89fc05fa6913e85925d3d29e5652e807b0230392c1ba73de7cbf221788773d2b8f006ed6d957f35b9b76537357388083c178c120c", @ANYRES32=r6, @ANYBLOB="08000400da010000"], 0x44}}, 0x0) r7 = getpgid(0xffffffffffffffff) sendmsg$nl_route(r4, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@RTM_GETNSID={0x1c, 0x5a, 0x19, 0x70bd2d, 0x25dfdbfe, {}, [@NETNSA_PID={0x8, 0x2, r7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x811}, 0x4000001) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r8, 0x0) 06:23:01 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f0000000380)={0x3, 0x1, 0x7, 0x2, 0xb3, &(0x7f0000000500)}) r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$cgroup_subtree(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="88ed7c48cfb680c42f89f97a7def31f7c3754b660e634848a0626b48d0b96e39c051b0006e7ca14700d0"], 0x8) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x1, 0x0, 0x0, 0x4, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x3) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) [ 3208.444913][T30212] ref_ctr going negative. vaddr: 0x20000004, curr val: -18737, delta: 1 [ 3208.453330][T30212] ref_ctr increment failed for inode: 0x49b offset: 0x0 ref_ctr_offset: 0x4 of mm: 0xffff888139dd8140 [ 3208.486406][T30214] netlink: 'syz-executor.4': attribute type 41 has an invalid length. [ 3208.494692][T30214] netlink: 44123 bytes leftover after parsing attributes in process `syz-executor.4'. [ 3208.512961][T30214] A link change request failed with some changes committed already. Interface ip6tnl0 may have been left with an inconsistent configuration, please check. 06:23:01 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f0000000380)={0x3, 0x1, 0x7, 0x2, 0xb3, &(0x7f0000000500)}) r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$cgroup_subtree(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="88ed7c48cfb680c42f89f97a7def31f7c3754b660e634848a0626b48d0b96e39c051b0006e7ca14700d0"], 0x8) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x1, 0x0, 0x0, 0x4, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x3) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) [ 3208.529013][T30220] ref_ctr going negative. vaddr: 0x20000004, curr val: -18737, delta: 1 [ 3208.537468][T30220] ref_ctr increment failed for inode: 0x49c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0xffff888139dd8140 [ 3208.558969][T30214] netlink: 'syz-executor.4': attribute type 41 has an invalid length. [ 3208.567369][T30214] netlink: 44123 bytes leftover after parsing attributes in process `syz-executor.4'. 06:23:01 executing program 4: socket$inet6(0x10, 0x3, 0x0) (async) r0 = socket$inet6(0x10, 0x3, 0x0) recvmsg(r0, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) sendto$inet6(r0, &(0x7f00000001c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0) (async) sendto$inet6(r0, &(0x7f00000001c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0) recvmsg(r0, &(0x7f00000003c0)={0x0, 0x3, 0x0}, 0x0) recvmsg(r0, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) recvfrom$inet6(r0, &(0x7f0000000000)=""/114, 0xfffffffffffffd1b, 0x0, 0x0, 0x0) (async) recvfrom$inet6(r0, &(0x7f0000000000)=""/114, 0xfffffffffffffd1b, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000040)) (async) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000040)) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="00281c80", @ANYRES16=r0, @ANYBLOB="ff"], 0x34}}, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0), 0x200043, 0x0) recvmsg(r1, &(0x7f0000000800)={&(0x7f0000000100)=@in={0x2, 0x0, @multicast1}, 0x80, &(0x7f0000000740)=[{&(0x7f0000000180)=""/53, 0x35}, {&(0x7f0000000400)=""/177, 0xb1}, {&(0x7f00000004c0)=""/163, 0xa3}, {&(0x7f0000000580)=""/183, 0xb7}, {&(0x7f0000000680)=""/141, 0x8d}, {&(0x7f0000000200)=""/3, 0x3}, {&(0x7f0000000240)=""/4, 0x4}], 0x7, &(0x7f00000007c0)}, 0x400000e3) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="f4997c3794"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="58ad000010", 0x5, 0x0, 0x0, 0x0) (async) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="58ad000010", 0x5, 0x0, 0x0, 0x0) r2 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r2, &(0x7f0000000000)='s', 0x10a73, 0x81e, 0x0, 0x4b6ae4f95a5de35b) 06:23:01 executing program 2: syz_open_dev$tty20(0xc, 0x4, 0x0) r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$cgroup_subtree(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="88ed7c48cfb680c42f89f97a7def31f7c3754b660e634848a0626b48d0b96e39c051b0006e7ca14700d0"], 0x8) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x1, 0x0, 0x0, 0x4, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x3) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) [ 3208.597587][T30214] A link change request failed with some changes committed already. Interface ip6tnl0 may have been left with an inconsistent configuration, please check. [ 3208.606824][T30223] ref_ctr going negative. vaddr: 0x20000004, curr val: -18737, delta: 1 [ 3208.621926][T30223] ref_ctr increment failed for inode: 0x49c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0xffff888139dd8140 06:23:01 executing program 2: syz_open_dev$tty20(0xc, 0x4, 0x0) r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$cgroup_subtree(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="88ed7c48cfb680c42f89f97a7def31f7c3754b660e634848a0626b48d0b96e39c051b0006e7ca14700d0"], 0x8) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x1, 0x0, 0x0, 0x4, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x3) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) [ 3208.682054][T30228] ref_ctr going negative. vaddr: 0x20000004, curr val: -18737, delta: 1 [ 3208.690642][T30228] ref_ctr increment failed for inode: 0x49c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0xffff888139dd8140 06:23:01 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) recvmsg(r0, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) sendto$inet6(r0, &(0x7f00000001c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0) recvmsg(r0, &(0x7f00000003c0)={0x0, 0x3, 0x0}, 0x0) recvmsg(r0, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) recvfrom$inet6(r0, &(0x7f0000000000)=""/114, 0xfffffffffffffd1b, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000040)) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="00281c80", @ANYRES16=r0, @ANYBLOB="ff"], 0x34}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="f4997c3794"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="58ad000010", 0x5, 0x0, 0x0, 0x0) r1 = socket$inet6(0x10, 0x3, 0x9) sendto$inet6(r1, &(0x7f0000000000)='s', 0x10a73, 0x81e, 0x0, 0x4b6ae4f95a5de35b) 06:23:01 executing program 2: r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$cgroup_subtree(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="88ed7c48cfb680c42f89f97a7def31f7c3754b660e634848a0626b48d0b96e39c051b0006e7ca14700d0"], 0x8) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x1, 0x0, 0x0, 0x4, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x3) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) [ 3208.742687][T30231] ref_ctr going negative. vaddr: 0x20000004, curr val: -18737, delta: 1 [ 3208.751189][T30231] ref_ctr increment failed for inode: 0x488 offset: 0x0 ref_ctr_offset: 0x4 of mm: 0xffff888139dd8140 [ 3208.783128][T30235] ref_ctr going negative. vaddr: 0x20000004, curr val: -18737, delta: 1 [ 3208.791581][T30235] ref_ctr increment failed for inode: 0x49a offset: 0x0 ref_ctr_offset: 0x4 of mm: 0xffff888139dd8140 [ 3208.812869][T30233] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=30233 comm=syz-executor.4 06:23:08 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f0000000380)={0x3, 0x1, 0x7, 0x2, 0xb3, &(0x7f0000000500)}) ioctl$KDGKBLED(r0, 0x4b64, &(0x7f0000000040)) io_uring_setup(0xfc6, &(0x7f0000000180)) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000240)={0x9b0, 0x9, 0x1, 0x4, 0x3}) listen(r1, 0x400000001ffffffd) socket$inet_dccp(0x2, 0x6, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f0000000440)=@ipv4_newaddr={0x38, 0x14, 0x8, 0x70bd2d, 0x25dfdbfd, {0x2, 0x78, 0x40, 0xc8}, [@IFA_RT_PRIORITY={0x8, 0x9, 0x9}, @IFA_RT_PRIORITY={0x8, 0x9, 0x200}, @IFA_ADDRESS={0x8, 0x1, @loopback}, @IFA_ADDRESS={0x8, 0x1, @multicast2}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000090}, 0x8000) r2 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$cgroup_subtree(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="88ed7c48cfb680c42f89f97a7def31f7c3754b660e634848a0626b48d0b96e39c051b0006e7ca14700d0"], 0x8) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x1, 0x0, 0x0, 0x4, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x3) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r3, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) 06:23:08 executing program 2: r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$cgroup_subtree(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="88ed7c48cfb680c42f89f97a7def31f7c3754b660e634848a0626b48d0b96e39c051b0006e7ca14700d0"], 0x8) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x1, 0x0, 0x0, 0x4, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x3) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) 06:23:08 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) recvmsg(r0, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) (async) sendto$inet6(r0, &(0x7f00000001c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0) (async) recvmsg(r0, &(0x7f00000003c0)={0x0, 0x3, 0x0}, 0x0) (async) recvmsg(r0, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x0) (async) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) (async) recvfrom$inet6(r0, &(0x7f0000000000)=""/114, 0xfffffffffffffd1b, 0x0, 0x0, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000040)) (async) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="00281c80", @ANYRES16=r0, @ANYBLOB="ff"], 0x34}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="f4997c3794"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="58ad000010", 0x5, 0x0, 0x0, 0x0) (async) r1 = socket$inet6(0x10, 0x3, 0x9) sendto$inet6(r1, &(0x7f0000000000)='s', 0x10a73, 0x81e, 0x0, 0x4b6ae4f95a5de35b) 06:23:08 executing program 5: r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e24, @local}, 0x10) writev(r0, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) recvmmsg(r0, &(0x7f0000003e40)=[{{&(0x7f0000000100)=@phonet, 0x80, 0x0, 0x0, &(0x7f00000024c0)=""/4096, 0x1000, 0xa}}, {{0x0, 0x80100200, 0x0, 0x0, &(0x7f00000035c0)=""/241, 0xf1}}, {{&(0x7f00000036c0)=@un=@abs, 0x80, &(0x7f0000003780)=[{&(0x7f0000003740)=""/4, 0xfffffd07}], 0x1, &(0x7f00000037c0)=""/236, 0xec}}, {{&(0x7f00000038c0)=@l2tp6={0xa, 0x0, 0x0, @private1}, 0x80, &(0x7f0000003bc0)=[{0x0}, {&(0x7f0000003a00)=""/190, 0xbe}, {&(0x7f0000003ac0)=""/131, 0x83}, {0x0}], 0x4, &(0x7f0000003c00)=""/73, 0x49}}, {{&(0x7f0000003c80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, 0x0, 0x0, &(0x7f0000003e00)=""/48, 0x30}}], 0x5, 0x40000121, 0x0) 06:23:08 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f0000000380)={0x3, 0x1, 0x7, 0x2, 0xb3, &(0x7f0000000500)}) ioctl$KDGKBLED(r0, 0x4b64, &(0x7f0000000040)) io_uring_setup(0xfc6, &(0x7f0000000180)) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000240)={0x9b0, 0x9, 0x1, 0x4, 0x3}) listen(r1, 0x400000001ffffffd) r2 = socket$inet_dccp(0x2, 0x6, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f0000000440)=@ipv4_newaddr={0x38, 0x14, 0x8, 0x70bd2d, 0x25dfdbfd, {0x2, 0x78, 0x40, 0xc8}, [@IFA_RT_PRIORITY={0x8, 0x9, 0x9}, @IFA_RT_PRIORITY={0x8, 0x9, 0x200}, @IFA_ADDRESS={0x8, 0x1, @loopback}, @IFA_ADDRESS={0x8, 0x1, @multicast2}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000090}, 0x8000) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev}, 0x10) r3 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$cgroup_subtree(r3, &(0x7f00000003c0)=ANY=[@ANYBLOB="88ed7c48cfb680c42f89f97a7def31f7c3754b660e634848a0626b48d0b96e39c051b0006e7ca14700d0"], 0x8) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x1, 0x0, 0x0, 0x4, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x3) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000a00)=ANY=[@ANYBLOB="c42c6e2932282e6645da1d10791c92f43389bef4b185c4d1dacc3cfc8ecc0bf814f6dcdac6841be3bdbc710f350e80317fc828caee7984f2d0a503e8bd1d5277b9bd46fd855e5dddb9448b81ed681d262d5ac040d91bacd3562e16ee197e09907921748069c7421aa5ff99e8153f597070a04ff23f0a45ebf48370445ff6d239d848a6fb317608b13f2399485571d6524f3e9adb4c75b74d486603018a2a804528c63b0669ffd7a2ce6a73a5533c00e5af296b09bb560a761e76021df7", @ANYRES32=0x0, @ANYBLOB="0000000000140003006272696467655f736c6176655f3100000800020023f841841cfce752e51d7e5a869002947c29d84327aa016caefa3f43d42afa4d29e0d98cd04dc3f8dae1de642f0f38fb6e668992d5b914aa79bfc89fc05fa6913e85925d3d29e5652e807b0230392c1ba73de7cbf221788773d2b8f006ed6d957f35b9b76537357388083c178c120c", @ANYRES32=r6, @ANYBLOB="08000400da010000"], 0x44}}, 0x0) r7 = getpgid(0xffffffffffffffff) sendmsg$nl_route(r4, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@RTM_GETNSID={0x1c, 0x5a, 0x19, 0x70bd2d, 0x25dfdbfe, {}, [@NETNSA_PID={0x8, 0x2, r7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x811}, 0x4000001) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, 0xffffffffffffffff, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r8, 0x0) 06:23:08 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000005c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e24, @local}, 0x10) writev(r0, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) recvmmsg(r0, &(0x7f0000003e40)=[{{&(0x7f0000000100)=@phonet, 0x80, 0x0, 0x0, &(0x7f00000024c0)=""/4096, 0x1000, 0x34}}, {{0x0, 0x80100200, 0x0, 0x0, &(0x7f00000035c0)=""/241, 0xf1}}, {{&(0x7f00000036c0)=@un=@abs, 0x80, &(0x7f0000003780)=[{&(0x7f0000003740)=""/4, 0xfffffd07}], 0x1, &(0x7f00000037c0)=""/236, 0xec}}, {{&(0x7f00000038c0)=@l2tp6={0xa, 0x0, 0x0, @private1}, 0x80, &(0x7f0000003bc0)=[{0x0}, {&(0x7f0000003a00)=""/190, 0xbe}, {&(0x7f0000003ac0)=""/131, 0x83}, {0x0}], 0x4, &(0x7f0000003c00)=""/73, 0x49}}, {{&(0x7f0000003c80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, 0x0, 0x0, &(0x7f0000003e00)=""/48, 0x30}}], 0x5, 0x40000121, 0x0) 06:23:08 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) recvmsg(r0, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) sendto$inet6(r0, &(0x7f00000001c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0) recvmsg(r0, &(0x7f00000003c0)={0x0, 0x3, 0x0}, 0x0) recvmsg(r0, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) recvfrom$inet6(r0, &(0x7f0000000000)=""/114, 0xfffffffffffffd1b, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000040)) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="00281c80", @ANYRES16=r0, @ANYBLOB="ff"], 0x34}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="f4997c3794"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="58ad000010", 0x5, 0x0, 0x0, 0x0) r1 = socket$inet6(0x10, 0x3, 0x9) sendto$inet6(r1, &(0x7f0000000000)='s', 0x10a73, 0x81e, 0x0, 0x4b6ae4f95a5de35b) socket$inet6(0x10, 0x3, 0x0) (async) recvmsg(r0, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) (async) sendto$inet6(r0, &(0x7f00000001c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0) (async) recvmsg(r0, &(0x7f00000003c0)={0x0, 0x3, 0x0}, 0x0) (async) recvmsg(r0, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x0) (async) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) (async) recvfrom$inet6(r0, &(0x7f0000000000)=""/114, 0xfffffffffffffd1b, 0x0, 0x0, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000040)) (async) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="00281c80", @ANYRES16=r0, @ANYBLOB="ff"], 0x34}}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="f4997c3794"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="58ad000010", 0x5, 0x0, 0x0, 0x0) (async) socket$inet6(0x10, 0x3, 0x9) (async) sendto$inet6(r1, &(0x7f0000000000)='s', 0x10a73, 0x81e, 0x0, 0x4b6ae4f95a5de35b) (async) 06:23:08 executing program 2: r0 = creat(0x0, 0x0) write$cgroup_subtree(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="88ed7c48cfb680c42f89f97a7def31f7c3754b660e634848a0626b48d0b96e39c051b0006e7ca14700d0"], 0x8) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x1, 0x0, 0x0, 0x4, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x3) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) 06:23:08 executing program 2: r0 = creat(0x0, 0x0) write$cgroup_subtree(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="88ed7c48cfb680c42f89f97a7def31f7c3754b660e634848a0626b48d0b96e39c051b0006e7ca14700d0"], 0x8) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x1, 0x0, 0x0, 0x4, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x3) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) [ 3215.558270][T30251] ref_ctr going negative. vaddr: 0x20000004, curr val: -18737, delta: 1 [ 3215.566745][T30251] ref_ctr increment failed for inode: 0x494 offset: 0x0 ref_ctr_offset: 0x4 of mm: 0xffff888104cb25c0 06:23:08 executing program 2: r0 = creat(0x0, 0x0) write$cgroup_subtree(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="88ed7c48cfb680c42f89f97a7def31f7c3754b660e634848a0626b48d0b96e39c051b0006e7ca14700d0"], 0x8) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x1, 0x0, 0x0, 0x4, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x3) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) 06:23:08 executing program 2: creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[@ANYBLOB="88ed7c48cfb680c42f89f97a7def31f7c3754b660e634848a0626b48d0b96e39c051b0006e7ca14700d0"], 0x8) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x1, 0x0, 0x0, 0x4, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x3) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) 06:23:08 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) recvmsg(r0, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) sendto$inet6(r0, &(0x7f00000001c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0) recvmsg(r0, &(0x7f00000003c0)={0x0, 0x3, 0x0}, 0x0) recvmsg(r0, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='net/softnet_stat\x00') recvfrom$inet6(r2, &(0x7f00000000c0)=""/125, 0x7d, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000040)) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="00281c80", @ANYRES16=r0, @ANYBLOB="ff"], 0x34}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="f4d96c3794"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="58ad000010", 0x5, 0x0, 0x0, 0x0) r3 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r3, &(0x7f0000000000)='s', 0x10a73, 0x81e, 0x0, 0x4b6ae4f95a5de35b) [ 3215.626375][T30256] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=30256 comm=syz-executor.4 [ 3215.754971][T30275] netlink: 44371 bytes leftover after parsing attributes in process `syz-executor.4'. 06:23:15 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f0000000380)={0x3, 0x1, 0x7, 0x2, 0xb3, &(0x7f0000000500)}) ioctl$KDGKBLED(r0, 0x4b64, &(0x7f0000000040)) io_uring_setup(0xfc6, &(0x7f0000000180)) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000240)={0x9b0, 0x9, 0x1, 0x4, 0x3}) listen(r1, 0x400000001ffffffd) socket$inet_dccp(0x2, 0x6, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f0000000440)=@ipv4_newaddr={0x38, 0x14, 0x8, 0x70bd2d, 0x25dfdbfd, {0x2, 0x78, 0x40, 0xc8}, [@IFA_RT_PRIORITY={0x8, 0x9, 0x9}, @IFA_RT_PRIORITY={0x8, 0x9, 0x200}, @IFA_ADDRESS={0x8, 0x1, @loopback}, @IFA_ADDRESS={0x8, 0x1, @multicast2}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000090}, 0x8000) r2 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$cgroup_subtree(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="88ed7c48cfb680c42f89f97a7def31f7c3754b660e634848a0626b48d0b96e39c051b0006e7ca14700d0"], 0x8) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x1, 0x0, 0x0, 0x4, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x3) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r3, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) 06:23:15 executing program 2: creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[@ANYBLOB="88ed7c48cfb680c42f89f97a7def31f7c3754b660e634848a0626b48d0b96e39c051b0006e7ca14700d0"], 0x8) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x1, 0x0, 0x0, 0x4, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x3) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) 06:23:15 executing program 4: socket$inet6(0x10, 0x3, 0x0) (async) r0 = socket$inet6(0x10, 0x3, 0x0) recvmsg(r0, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) sendto$inet6(r0, &(0x7f00000001c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0) recvmsg(r0, &(0x7f00000003c0)={0x0, 0x3, 0x0}, 0x0) (async) recvmsg(r0, &(0x7f00000003c0)={0x0, 0x3, 0x0}, 0x0) recvmsg(r0, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x0) (async) recvmsg(r0, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='net/softnet_stat\x00') (async) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='net/softnet_stat\x00') recvfrom$inet6(r2, &(0x7f00000000c0)=""/125, 0x7d, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000040)) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="00281c80", @ANYRES16=r0, @ANYBLOB="ff"], 0x34}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="f4d96c3794"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="58ad000010", 0x5, 0x0, 0x0, 0x0) (async) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="58ad000010", 0x5, 0x0, 0x0, 0x0) r3 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r3, &(0x7f0000000000)='s', 0x10a73, 0x81e, 0x0, 0x4b6ae4f95a5de35b) 06:23:15 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000005c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e24, @local}, 0x10) writev(r0, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) recvmmsg(r0, &(0x7f0000003e40)=[{{&(0x7f0000000100)=@phonet, 0x80, 0x0, 0x0, &(0x7f00000024c0)=""/4096, 0x1000, 0x7d}}, {{0x0, 0x80100200, 0x0, 0x0, &(0x7f00000035c0)=""/241, 0xf1}}, {{&(0x7f00000036c0)=@un=@abs, 0x80, &(0x7f0000003780)=[{&(0x7f0000003740)=""/4, 0xfffffd07}], 0x1, &(0x7f00000037c0)=""/236, 0xec}}, {{&(0x7f00000038c0)=@l2tp6={0xa, 0x0, 0x0, @private1}, 0x80, &(0x7f0000003bc0)=[{0x0}, {&(0x7f0000003a00)=""/190, 0xbe}, {&(0x7f0000003ac0)=""/131, 0x83}, {0x0}], 0x4, &(0x7f0000003c00)=""/73, 0x49}}, {{&(0x7f0000003c80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, 0x0, 0x0, &(0x7f0000003e00)=""/48, 0x30}}], 0x5, 0x40000121, 0x0) 06:23:15 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f0000000380)={0x3, 0x1, 0x7, 0x2, 0xb3, &(0x7f0000000500)}) ioctl$KDGKBLED(r0, 0x4b64, &(0x7f0000000040)) io_uring_setup(0xfc6, &(0x7f0000000180)) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000240)={0x9b0, 0x9, 0x1, 0x4, 0x3}) listen(r1, 0x400000001ffffffd) r2 = socket$inet_dccp(0x2, 0x6, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f0000000440)=@ipv4_newaddr={0x38, 0x14, 0x8, 0x70bd2d, 0x25dfdbfd, {0x2, 0x78, 0x40, 0xc8}, [@IFA_RT_PRIORITY={0x8, 0x9, 0x9}, @IFA_RT_PRIORITY={0x8, 0x9, 0x200}, @IFA_ADDRESS={0x8, 0x1, @loopback}, @IFA_ADDRESS={0x8, 0x1, @multicast2}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000090}, 0x8000) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev}, 0x10) r3 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$cgroup_subtree(r3, &(0x7f00000003c0)=ANY=[@ANYBLOB="88ed7c48cfb680c42f89f97a7def31f7c3754b660e634848a0626b48d0b96e39c051b0006e7ca14700d0"], 0x8) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x1, 0x0, 0x0, 0x4, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x3) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000a00)=ANY=[@ANYBLOB="c42c6e2932282e6645da1d10791c92f43389bef4b185c4d1dacc3cfc8ecc0bf814f6dcdac6841be3bdbc710f350e80317fc828caee7984f2d0a503e8bd1d5277b9bd46fd855e5dddb9448b81ed681d262d5ac040d91bacd3562e16ee197e09907921748069c7421aa5ff99e8153f597070a04ff23f0a45ebf48370445ff6d239d848a6fb317608b13f2399485571d6524f3e9adb4c75b74d486603018a2a804528c63b0669ffd7a2ce6a73a5533c00e5af296b09bb560a761e76021df7", @ANYRES32=0x0, @ANYBLOB="0000000000140003006272696467655f736c6176655f3100000800020023f841841cfce752e51d7e5a869002947c29d84327aa016caefa3f43d42afa4d29e0d98cd04dc3f8dae1de642f0f38fb6e668992d5b914aa79bfc89fc05fa6913e85925d3d29e5652e807b0230392c1ba73de7cbf221788773d2b8f006ed6d957f35b9b76537357388083c178c120c", @ANYRES32=r6, @ANYBLOB="08000400da010000"], 0x44}}, 0x0) r7 = getpgid(0xffffffffffffffff) sendmsg$nl_route(r4, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@RTM_GETNSID={0x1c, 0x5a, 0x19, 0x70bd2d, 0x25dfdbfe, {}, [@NETNSA_PID={0x8, 0x2, r7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x811}, 0x4000001) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, 0xffffffffffffffff, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r8, 0x0) 06:23:15 executing program 5: r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e24, @local}, 0x10) writev(r0, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) recvmmsg(r0, &(0x7f0000003e40)=[{{&(0x7f0000000100)=@phonet, 0x80, 0x0, 0x0, &(0x7f00000024c0)=""/4096, 0x1000, 0xf}}, {{0x0, 0x80100200, 0x0, 0x0, &(0x7f00000035c0)=""/241, 0xf1}}, {{&(0x7f00000036c0)=@un=@abs, 0x80, &(0x7f0000003780)=[{&(0x7f0000003740)=""/4, 0xfffffd07}], 0x1, &(0x7f00000037c0)=""/236, 0xec}}, {{&(0x7f00000038c0)=@l2tp6={0xa, 0x0, 0x0, @private1}, 0x80, &(0x7f0000003bc0)=[{0x0}, {&(0x7f0000003a00)=""/190, 0xbe}, {&(0x7f0000003ac0)=""/131, 0x83}, {0x0}], 0x4, &(0x7f0000003c00)=""/73, 0x49}}, {{&(0x7f0000003c80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, 0x0, 0x0, &(0x7f0000003e00)=""/48, 0x30}}], 0x5, 0x40000121, 0x0) 06:23:15 executing program 2: creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[@ANYBLOB="88ed7c48cfb680c42f89f97a7def31f7c3754b660e634848a0626b48d0b96e39c051b0006e7ca14700d0"], 0x8) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x1, 0x0, 0x0, 0x4, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x3) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) 06:23:15 executing program 2: r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$cgroup_subtree(r0, 0x0, 0x8) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x1, 0x0, 0x0, 0x4, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x3) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) 06:23:15 executing program 2: r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$cgroup_subtree(r0, 0x0, 0x8) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x1, 0x0, 0x0, 0x4, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x3) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) 06:23:15 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) recvmsg(r0, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) (async) sendto$inet6(r0, &(0x7f00000001c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0) recvmsg(r0, &(0x7f00000003c0)={0x0, 0x3, 0x0}, 0x0) recvmsg(r0, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x0) (async) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) (async) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) (async, rerun: 32) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='net/softnet_stat\x00') (rerun: 32) recvfrom$inet6(r2, &(0x7f00000000c0)=""/125, 0x7d, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000040)) (async, rerun: 32) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="00281c80", @ANYRES16=r0, @ANYBLOB="ff"], 0x34}}, 0x0) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="f4d96c3794"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="58ad000010", 0x5, 0x0, 0x0, 0x0) r3 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r3, &(0x7f0000000000)='s', 0x10a73, 0x81e, 0x0, 0x4b6ae4f95a5de35b) 06:23:15 executing program 2: r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$cgroup_subtree(r0, 0x0, 0x8) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x1, 0x0, 0x0, 0x4, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x3) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) [ 3222.796136][T30285] netlink: 44371 bytes leftover after parsing attributes in process `syz-executor.4'. 06:23:16 executing program 2: r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$cgroup_subtree(r0, &(0x7f00000003c0)=ANY=[], 0x8) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x1, 0x0, 0x0, 0x4, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x3) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) [ 3228.987104][T30312] ref_ctr going negative. vaddr: 0x20000004, curr val: -18737, delta: 1 [ 3228.995813][T30312] ref_ctr increment failed for inode: 0x48b offset: 0x0 ref_ctr_offset: 0x4 of mm: 0xffff888104905500 06:23:22 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f0000000380)={0x3, 0x1, 0x7, 0x2, 0xb3, &(0x7f0000000500)}) ioctl$KDGKBLED(r0, 0x4b64, &(0x7f0000000040)) io_uring_setup(0xfc6, &(0x7f0000000180)) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000240)={0x9b0, 0x9, 0x1, 0x4, 0x3}) listen(r1, 0x400000001ffffffd) socket$inet_dccp(0x2, 0x6, 0x0) r2 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$cgroup_subtree(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="88ed7c48cfb680c42f89f97a7def31f7c3754b660e634848a0626b48d0b96e39c051b0006e7ca14700d0"], 0x8) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x1, 0x0, 0x0, 0x4, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x3) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r3, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) 06:23:22 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) recvmsg(r0, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) sendto$inet6(r0, &(0x7f00000001c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0) recvmsg(r0, &(0x7f00000003c0)={0x0, 0x3, 0x0}, 0x0) recvmsg(r0, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) recvfrom$inet6(r0, &(0x7f0000000000)=""/114, 0xfffffffffffffd1b, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="00281c80", @ANYRES16=r0, @ANYBLOB="ff"], 0x34}}, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xfffffe29}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(r2, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000140)={&(0x7f0000000400)={0x170, r3, 0x200, 0x70bd2b, 0x25dfdbfe, {}, [@TIPC_NLA_MEDIA={0x138, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9f8e}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4d8e}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd96}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x200}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x40}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffb9d}]}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fffffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xd5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xe8d}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fffffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}]}, @TIPC_NLA_MEDIA={0x18, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x7fff}]}]}, 0x170}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="f4997c3794"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) sendmsg$nl_route(r2, &(0x7f0000000840)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000600)={&(0x7f0000000680)=@getlink={0x1a4, 0x12, 0x400, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x28000, 0x800}, [@IFLA_VF_PORTS={0x100, 0x18, 0x0, 0x1, [{0x74, 0x1, 0x0, 0x1, [@IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "e19010c9fca1eed7fd270c399c25a244"}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "aa3b9775e5bbbc5cf6cb3ace2e7e2c0e"}, @IFLA_PORT_REQUEST={0x5}, @IFLA_PORT_VF={0x8, 0x1, 0x7}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x6}, @IFLA_PORT_REQUEST={0x5, 0x6, 0xf8}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "4d63cb889df28ee78b9f69b711966cd2"}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "6cfd8032aa8314ba86d8beefbe11bafd"}]}, {0x28, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8, 0x1, 0xec}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "3f4c4609f5ec7a2aa6896506f81e8c8d"}, @IFLA_PORT_VF={0x8, 0x1, 0x2}]}, {0x1c, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0x8, 0x2, '^{{\x00'}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x3f}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x1f}]}, {0x24, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8, 0x1, 0x2}, @IFLA_PORT_VF={0x8, 0x1, 0x1}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x81}, @IFLA_PORT_PROFILE={0x8, 0x2, 'eth\x00'}]}, {0x20, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8, 0x1, 0x1}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "262a08aa0272d9e74dd35a85b20b2dd2"}]}]}, @IFLA_PHYS_SWITCH_ID={0x5, 0x24, "f4"}, @IFLA_MAP={0x24, 0xe, {0x81, 0x5, 0x6, 0x6, 0x2, 0x1}}, @IFLA_PHYS_PORT_ID={0x19, 0x22, "80c78b109a5ed58cf4c67d7d3f3c269cb69ae808c0"}, @IFLA_PHYS_PORT_ID={0x20, 0x22, "3e05e9d4869d6efefdb12e13cd106a475db39273f46b47533eed92fb"}, @IFLA_PHYS_PORT_ID={0x13, 0x22, "e6a0e8a5b933819fab008f53f96712"}, @IFLA_EXT_MASK={0x8, 0x1d, 0x4}]}, 0x1a4}, 0x1, 0x0, 0x0, 0x44000}, 0x24000000) r4 = socket$unix(0x1, 0x5, 0x0) bind$unix(r4, &(0x7f0000000380)=@file={0x1, './file0\x00'}, 0x6e) listen(r4, 0x0) r5 = dup(r4) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r4}}) r6 = socket$unix(0x1, 0x5, 0x0) bind$unix(r6, &(0x7f0000000380)=@file={0x1, './file0\x00'}, 0x6e) listen(r6, 0x0) r7 = dup(r6) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r6}}) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@bloom_filter={0x1e, 0x0, 0x5, 0x0, 0x801, r5, 0x7, '\x00', r1, r7, 0x0, 0x5, 0x3, 0xe}, 0x48) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="58ad000010", 0x5, 0x0, 0x0, 0x0) r8 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r8, &(0x7f0000000000)='s', 0x10a73, 0x81e, 0x0, 0x4b6ae4f95a5de35b) 06:23:22 executing program 2: r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$cgroup_subtree(r0, &(0x7f00000003c0)=ANY=[], 0x8) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x1, 0x0, 0x0, 0x4, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x3) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) 06:23:22 executing program 5: r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e24, @local}, 0x10) writev(r0, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) recvmmsg(r0, &(0x7f0000003e40)=[{{&(0x7f0000000100)=@phonet, 0x80, 0x0, 0x0, &(0x7f00000024c0)=""/4096, 0x1000, 0x15}}, {{0x0, 0x80100200, 0x0, 0x0, &(0x7f00000035c0)=""/241, 0xf1}}, {{&(0x7f00000036c0)=@un=@abs, 0x80, &(0x7f0000003780)=[{&(0x7f0000003740)=""/4, 0xfffffd07}], 0x1, &(0x7f00000037c0)=""/236, 0xec}}, {{&(0x7f00000038c0)=@l2tp6={0xa, 0x0, 0x0, @private1}, 0x80, &(0x7f0000003bc0)=[{0x0}, {&(0x7f0000003a00)=""/190, 0xbe}, {&(0x7f0000003ac0)=""/131, 0x83}, {0x0}], 0x4, &(0x7f0000003c00)=""/73, 0x49}}, {{&(0x7f0000003c80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, 0x0, 0x0, &(0x7f0000003e00)=""/48, 0x30}}], 0x5, 0x40000121, 0x0) 06:23:22 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f0000000380)={0x3, 0x1, 0x7, 0x2, 0xb3, &(0x7f0000000500)}) ioctl$KDGKBLED(r0, 0x4b64, &(0x7f0000000040)) io_uring_setup(0xfc6, &(0x7f0000000180)) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000240)={0x9b0, 0x9, 0x1, 0x4, 0x3}) listen(r1, 0x400000001ffffffd) r2 = socket$inet_dccp(0x2, 0x6, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f0000000440)=@ipv4_newaddr={0x38, 0x14, 0x8, 0x70bd2d, 0x25dfdbfd, {0x2, 0x78, 0x40, 0xc8}, [@IFA_RT_PRIORITY={0x8, 0x9, 0x9}, @IFA_RT_PRIORITY={0x8, 0x9, 0x200}, @IFA_ADDRESS={0x8, 0x1, @loopback}, @IFA_ADDRESS={0x8, 0x1, @multicast2}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000090}, 0x8000) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev}, 0x10) r3 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$cgroup_subtree(r3, &(0x7f00000003c0)=ANY=[@ANYBLOB="88ed7c48cfb680c42f89f97a7def31f7c3754b660e634848a0626b48d0b96e39c051b0006e7ca14700d0"], 0x8) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x1, 0x0, 0x0, 0x4, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x3) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000a00)=ANY=[@ANYBLOB="c42c6e2932282e6645da1d10791c92f43389bef4b185c4d1dacc3cfc8ecc0bf814f6dcdac6841be3bdbc710f350e80317fc828caee7984f2d0a503e8bd1d5277b9bd46fd855e5dddb9448b81ed681d262d5ac040d91bacd3562e16ee197e09907921748069c7421aa5ff99e8153f597070a04ff23f0a45ebf48370445ff6d239d848a6fb317608b13f2399485571d6524f3e9adb4c75b74d486603018a2a804528c63b0669ffd7a2ce6a73a5533c00e5af296b09bb560a761e76021df7", @ANYRES32=0x0, @ANYBLOB="0000000000140003006272696467655f736c6176655f3100000800020023f841841cfce752e51d7e5a869002947c29d84327aa016caefa3f43d42afa4d29e0d98cd04dc3f8dae1de642f0f38fb6e668992d5b914aa79bfc89fc05fa6913e85925d3d29e5652e807b0230392c1ba73de7cbf221788773d2b8f006ed6d957f35b9b76537357388083c178c120c", @ANYRES32=r6, @ANYBLOB="08000400da010000"], 0x44}}, 0x0) r7 = getpgid(0xffffffffffffffff) sendmsg$nl_route(r4, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@RTM_GETNSID={0x1c, 0x5a, 0x19, 0x70bd2d, 0x25dfdbfe, {}, [@NETNSA_PID={0x8, 0x2, r7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x811}, 0x4000001) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, 0xffffffffffffffff, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r8, 0x0) 06:23:22 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000005c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e24, @local}, 0x10) writev(r0, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) recvmmsg(r0, &(0x7f0000003e40)=[{{&(0x7f0000000100)=@phonet, 0x80, 0x0, 0x0, &(0x7f00000024c0)=""/4096, 0x1000, 0x1f4}}, {{0x0, 0x80100200, 0x0, 0x0, &(0x7f00000035c0)=""/241, 0xf1}}, {{&(0x7f00000036c0)=@un=@abs, 0x80, &(0x7f0000003780)=[{&(0x7f0000003740)=""/4, 0xfffffd07}], 0x1, &(0x7f00000037c0)=""/236, 0xec}}, {{&(0x7f00000038c0)=@l2tp6={0xa, 0x0, 0x0, @private1}, 0x80, &(0x7f0000003bc0)=[{0x0}, {&(0x7f0000003a00)=""/190, 0xbe}, {&(0x7f0000003ac0)=""/131, 0x83}, {0x0}], 0x4, &(0x7f0000003c00)=""/73, 0x49}}, {{&(0x7f0000003c80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, 0x0, 0x0, &(0x7f0000003e00)=""/48, 0x30}}], 0x5, 0x40000121, 0x0) 06:23:22 executing program 2: r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$cgroup_subtree(r0, &(0x7f00000003c0)=ANY=[], 0x8) open(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x1, 0x0, 0x0, 0x4, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x3) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) 06:23:22 executing program 2: r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$cgroup_subtree(r0, &(0x7f00000003c0)=ANY=[], 0x8) open(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x1, 0x0, 0x0, 0x4, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x3) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) 06:23:22 executing program 2: r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$cgroup_subtree(r0, &(0x7f00000003c0)=ANY=[], 0x8) open(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x1, 0x0, 0x0, 0x4, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x3) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) 06:23:22 executing program 2: r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$cgroup_subtree(r0, &(0x7f00000003c0)=ANY=[], 0x8) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) 06:23:23 executing program 2: r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$cgroup_subtree(r0, &(0x7f00000003c0)=ANY=[], 0x8) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) [ 3229.894156][T30328] netlink: 44335 bytes leftover after parsing attributes in process `syz-executor.4'. 06:23:23 executing program 2: r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$cgroup_subtree(r0, &(0x7f00000003c0)=ANY=[], 0x8) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) [ 3236.028149][T30342] ref_ctr going negative. vaddr: 0x20000004, curr val: -18737, delta: 1 [ 3236.036614][T30342] ref_ctr increment failed for inode: 0x48b offset: 0x0 ref_ctr_offset: 0x4 of mm: 0xffff88813a8524c0 06:23:29 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f0000000380)={0x3, 0x1, 0x7, 0x2, 0xb3, &(0x7f0000000500)}) ioctl$KDGKBLED(r0, 0x4b64, &(0x7f0000000040)) io_uring_setup(0xfc6, &(0x7f0000000180)) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000240)={0x9b0, 0x9, 0x1, 0x4, 0x3}) listen(r1, 0x400000001ffffffd) r2 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$cgroup_subtree(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="88ed7c48cfb680c42f89f97a7def31f7c3754b660e634848a0626b48d0b96e39c051b0006e7ca14700d0"], 0x8) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x1, 0x0, 0x0, 0x4, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x3) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r3, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) 06:23:29 executing program 2: r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$cgroup_subtree(r0, &(0x7f00000003c0)=ANY=[], 0x8) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x0, 0x1, 0x0, 0x0, 0x4, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x3) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) 06:23:29 executing program 5: r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e24, @local}, 0x10) writev(r0, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) recvmmsg(r0, &(0x7f0000003e40)=[{{&(0x7f0000000100)=@phonet, 0x80, 0x0, 0x0, &(0x7f00000024c0)=""/4096, 0x1000, 0x34}}, {{0x0, 0x80100200, 0x0, 0x0, &(0x7f00000035c0)=""/241, 0xf1}}, {{&(0x7f00000036c0)=@un=@abs, 0x80, &(0x7f0000003780)=[{&(0x7f0000003740)=""/4, 0xfffffd07}], 0x1, &(0x7f00000037c0)=""/236, 0xec}}, {{&(0x7f00000038c0)=@l2tp6={0xa, 0x0, 0x0, @private1}, 0x80, &(0x7f0000003bc0)=[{0x0}, {&(0x7f0000003a00)=""/190, 0xbe}, {&(0x7f0000003ac0)=""/131, 0x83}, {0x0}], 0x4, &(0x7f0000003c00)=""/73, 0x49}}, {{&(0x7f0000003c80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, 0x0, 0x0, &(0x7f0000003e00)=""/48, 0x30}}], 0x5, 0x40000121, 0x0) 06:23:29 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) recvmsg(r0, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) (async) sendto$inet6(r0, &(0x7f00000001c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0) recvmsg(r0, &(0x7f00000003c0)={0x0, 0x3, 0x0}, 0x0) (async) recvmsg(r0, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x0) (async) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) (async) recvfrom$inet6(r0, &(0x7f0000000000)=""/114, 0xfffffffffffffd1b, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="00281c80", @ANYRES16=r0, @ANYBLOB="ff"], 0x34}}, 0x0) (async) r2 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xfffffe29}}, 0x0) (async) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(r2, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000140)={&(0x7f0000000400)={0x170, r3, 0x200, 0x70bd2b, 0x25dfdbfe, {}, [@TIPC_NLA_MEDIA={0x138, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9f8e}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4d8e}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd96}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x200}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x40}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffb9d}]}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fffffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xd5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xe8d}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fffffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}]}, @TIPC_NLA_MEDIA={0x18, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x7fff}]}]}, 0x170}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="f4997c3794"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) sendmsg$nl_route(r2, &(0x7f0000000840)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000600)={&(0x7f0000000680)=@getlink={0x1a4, 0x12, 0x400, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x28000, 0x800}, [@IFLA_VF_PORTS={0x100, 0x18, 0x0, 0x1, [{0x74, 0x1, 0x0, 0x1, [@IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "e19010c9fca1eed7fd270c399c25a244"}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "aa3b9775e5bbbc5cf6cb3ace2e7e2c0e"}, @IFLA_PORT_REQUEST={0x5}, @IFLA_PORT_VF={0x8, 0x1, 0x7}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x6}, @IFLA_PORT_REQUEST={0x5, 0x6, 0xf8}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "4d63cb889df28ee78b9f69b711966cd2"}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "6cfd8032aa8314ba86d8beefbe11bafd"}]}, {0x28, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8, 0x1, 0xec}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "3f4c4609f5ec7a2aa6896506f81e8c8d"}, @IFLA_PORT_VF={0x8, 0x1, 0x2}]}, {0x1c, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0x8, 0x2, '^{{\x00'}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x3f}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x1f}]}, {0x24, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8, 0x1, 0x2}, @IFLA_PORT_VF={0x8, 0x1, 0x1}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x81}, @IFLA_PORT_PROFILE={0x8, 0x2, 'eth\x00'}]}, {0x20, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8, 0x1, 0x1}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "262a08aa0272d9e74dd35a85b20b2dd2"}]}]}, @IFLA_PHYS_SWITCH_ID={0x5, 0x24, "f4"}, @IFLA_MAP={0x24, 0xe, {0x81, 0x5, 0x6, 0x6, 0x2, 0x1}}, @IFLA_PHYS_PORT_ID={0x19, 0x22, "80c78b109a5ed58cf4c67d7d3f3c269cb69ae808c0"}, @IFLA_PHYS_PORT_ID={0x20, 0x22, "3e05e9d4869d6efefdb12e13cd106a475db39273f46b47533eed92fb"}, @IFLA_PHYS_PORT_ID={0x13, 0x22, "e6a0e8a5b933819fab008f53f96712"}, @IFLA_EXT_MASK={0x8, 0x1d, 0x4}]}, 0x1a4}, 0x1, 0x0, 0x0, 0x44000}, 0x24000000) (async) r4 = socket$unix(0x1, 0x5, 0x0) bind$unix(r4, &(0x7f0000000380)=@file={0x1, './file0\x00'}, 0x6e) (async) listen(r4, 0x0) (async) r5 = dup(r4) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r4}}) (async) r6 = socket$unix(0x1, 0x5, 0x0) bind$unix(r6, &(0x7f0000000380)=@file={0x1, './file0\x00'}, 0x6e) (async) listen(r6, 0x0) (async) r7 = dup(r6) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r6}}) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@bloom_filter={0x1e, 0x0, 0x5, 0x0, 0x801, r5, 0x7, '\x00', r1, r7, 0x0, 0x5, 0x3, 0xe}, 0x48) (async) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="58ad000010", 0x5, 0x0, 0x0, 0x0) (async) r8 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r8, &(0x7f0000000000)='s', 0x10a73, 0x81e, 0x0, 0x4b6ae4f95a5de35b) 06:23:29 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f0000000380)={0x3, 0x1, 0x7, 0x2, 0xb3, &(0x7f0000000500)}) ioctl$KDGKBLED(r0, 0x4b64, &(0x7f0000000040)) io_uring_setup(0xfc6, &(0x7f0000000180)) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000240)={0x9b0, 0x9, 0x1, 0x4, 0x3}) listen(r1, 0x400000001ffffffd) r2 = socket$inet_dccp(0x2, 0x6, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f0000000440)=@ipv4_newaddr={0x38, 0x14, 0x8, 0x70bd2d, 0x25dfdbfd, {0x2, 0x78, 0x40, 0xc8}, [@IFA_RT_PRIORITY={0x8, 0x9, 0x9}, @IFA_RT_PRIORITY={0x8, 0x9, 0x200}, @IFA_ADDRESS={0x8, 0x1, @loopback}, @IFA_ADDRESS={0x8, 0x1, @multicast2}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000090}, 0x8000) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev}, 0x10) r3 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$cgroup_subtree(r3, &(0x7f00000003c0)=ANY=[@ANYBLOB="88ed7c48cfb680c42f89f97a7def31f7c3754b660e634848a0626b48d0b96e39c051b0006e7ca14700d0"], 0x8) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x1, 0x0, 0x0, 0x4, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x3) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000a00)=ANY=[@ANYBLOB="c42c6e2932282e6645da1d10791c92f43389bef4b185c4d1dacc3cfc8ecc0bf814f6dcdac6841be3bdbc710f350e80317fc828caee7984f2d0a503e8bd1d5277b9bd46fd855e5dddb9448b81ed681d262d5ac040d91bacd3562e16ee197e09907921748069c7421aa5ff99e8153f597070a04ff23f0a45ebf48370445ff6d239d848a6fb317608b13f2399485571d6524f3e9adb4c75b74d486603018a2a804528c63b0669ffd7a2ce6a73a5533c00e5af296b09bb560a761e76021df7", @ANYRES32=0x0, @ANYBLOB="0000000000140003006272696467655f736c6176655f3100000800020023f841841cfce752e51d7e5a869002947c29d84327aa016caefa3f43d42afa4d29e0d98cd04dc3f8dae1de642f0f38fb6e668992d5b914aa79bfc89fc05fa6913e85925d3d29e5652e807b0230392c1ba73de7cbf221788773d2b8f006ed6d957f35b9b76537357388083c178c120c", @ANYRES32=r6, @ANYBLOB="08000400da010000"], 0x44}}, 0x0) getpgid(0xffffffffffffffff) r7 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r7, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r8, 0x0) 06:23:29 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000005c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e24, @local}, 0x10) writev(r0, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) recvmmsg(r0, &(0x7f0000003e40)=[{{&(0x7f0000000100)=@phonet, 0x80, 0x0, 0x0, &(0x7f00000024c0)=""/4096, 0x1000, 0x241}}, {{0x0, 0x80100200, 0x0, 0x0, &(0x7f00000035c0)=""/241, 0xf1}}, {{&(0x7f00000036c0)=@un=@abs, 0x80, &(0x7f0000003780)=[{&(0x7f0000003740)=""/4, 0xfffffd07}], 0x1, &(0x7f00000037c0)=""/236, 0xec}}, {{&(0x7f00000038c0)=@l2tp6={0xa, 0x0, 0x0, @private1}, 0x80, &(0x7f0000003bc0)=[{0x0}, {&(0x7f0000003a00)=""/190, 0xbe}, {&(0x7f0000003ac0)=""/131, 0x83}, {0x0}], 0x4, &(0x7f0000003c00)=""/73, 0x49}}, {{&(0x7f0000003c80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, 0x0, 0x0, &(0x7f0000003e00)=""/48, 0x30}}], 0x5, 0x40000121, 0x0) 06:23:29 executing program 2: r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$cgroup_subtree(r0, &(0x7f00000003c0)=ANY=[], 0x8) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x0, 0x1, 0x0, 0x0, 0x4, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x3) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) 06:23:29 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) recvmsg(r0, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) (async) sendto$inet6(r0, &(0x7f00000001c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0) (async) recvmsg(r0, &(0x7f00000003c0)={0x0, 0x3, 0x0}, 0x0) (async) recvmsg(r0, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) (async) recvfrom$inet6(r0, &(0x7f0000000000)=""/114, 0xfffffffffffffd1b, 0x0, 0x0, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) (async) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="00281c80", @ANYRES16=r0, @ANYBLOB="ff"], 0x34}}, 0x0) (async) r2 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xfffffe29}}, 0x0) (async) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async, rerun: 32) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) (rerun: 32) sendmsg$TIPC_NL_NET_SET(r2, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000140)={&(0x7f0000000400)={0x170, r3, 0x200, 0x70bd2b, 0x25dfdbfe, {}, [@TIPC_NLA_MEDIA={0x138, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9f8e}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4d8e}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd96}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x200}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x40}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffb9d}]}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fffffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xd5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xe8d}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fffffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}]}, @TIPC_NLA_MEDIA={0x18, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x7fff}]}]}, 0x170}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) (async, rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="f4997c3794"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (rerun: 64) sendmsg$nl_route(r2, &(0x7f0000000840)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000600)={&(0x7f0000000680)=@getlink={0x1a4, 0x12, 0x400, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x28000, 0x800}, [@IFLA_VF_PORTS={0x100, 0x18, 0x0, 0x1, [{0x74, 0x1, 0x0, 0x1, [@IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "e19010c9fca1eed7fd270c399c25a244"}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "aa3b9775e5bbbc5cf6cb3ace2e7e2c0e"}, @IFLA_PORT_REQUEST={0x5}, @IFLA_PORT_VF={0x8, 0x1, 0x7}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x6}, @IFLA_PORT_REQUEST={0x5, 0x6, 0xf8}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "4d63cb889df28ee78b9f69b711966cd2"}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "6cfd8032aa8314ba86d8beefbe11bafd"}]}, {0x28, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8, 0x1, 0xec}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "3f4c4609f5ec7a2aa6896506f81e8c8d"}, @IFLA_PORT_VF={0x8, 0x1, 0x2}]}, {0x1c, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0x8, 0x2, '^{{\x00'}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x3f}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x1f}]}, {0x24, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8, 0x1, 0x2}, @IFLA_PORT_VF={0x8, 0x1, 0x1}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x81}, @IFLA_PORT_PROFILE={0x8, 0x2, 'eth\x00'}]}, {0x20, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8, 0x1, 0x1}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "262a08aa0272d9e74dd35a85b20b2dd2"}]}]}, @IFLA_PHYS_SWITCH_ID={0x5, 0x24, "f4"}, @IFLA_MAP={0x24, 0xe, {0x81, 0x5, 0x6, 0x6, 0x2, 0x1}}, @IFLA_PHYS_PORT_ID={0x19, 0x22, "80c78b109a5ed58cf4c67d7d3f3c269cb69ae808c0"}, @IFLA_PHYS_PORT_ID={0x20, 0x22, "3e05e9d4869d6efefdb12e13cd106a475db39273f46b47533eed92fb"}, @IFLA_PHYS_PORT_ID={0x13, 0x22, "e6a0e8a5b933819fab008f53f96712"}, @IFLA_EXT_MASK={0x8, 0x1d, 0x4}]}, 0x1a4}, 0x1, 0x0, 0x0, 0x44000}, 0x24000000) r4 = socket$unix(0x1, 0x5, 0x0) bind$unix(r4, &(0x7f0000000380)=@file={0x1, './file0\x00'}, 0x6e) (async) listen(r4, 0x0) r5 = dup(r4) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r4}}) r6 = socket$unix(0x1, 0x5, 0x0) bind$unix(r6, &(0x7f0000000380)=@file={0x1, './file0\x00'}, 0x6e) (async, rerun: 32) listen(r6, 0x0) (async, rerun: 32) r7 = dup(r6) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r6}}) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@bloom_filter={0x1e, 0x0, 0x5, 0x0, 0x801, r5, 0x7, '\x00', r1, r7, 0x0, 0x5, 0x3, 0xe}, 0x48) (async) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="58ad000010", 0x5, 0x0, 0x0, 0x0) r8 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r8, &(0x7f0000000000)='s', 0x10a73, 0x81e, 0x0, 0x4b6ae4f95a5de35b) 06:23:30 executing program 2: r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$cgroup_subtree(r0, &(0x7f00000003c0)=ANY=[], 0x8) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x0, 0x1, 0x0, 0x0, 0x4, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x3) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) 06:23:30 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) recvmsg(r0, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) sendto$inet6(r0, &(0x7f00000001c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0) recvmsg(r0, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x2) recvmsg(r0, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) recvfrom$inet6(r0, &(0x7f0000000000)=""/114, 0xfffffffffffffd1b, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000040)) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="429d", @ANYRES16=r0, @ANYBLOB="ff"], 0x34}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="f4997c3794"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="58ad000010", 0x5, 0x0, 0x0, 0x0) r1 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f0000000000)='s', 0x10a73, 0x81e, 0x0, 0x4b6ae4f95a5de35b) 06:23:30 executing program 2: r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$cgroup_subtree(r0, &(0x7f00000003c0)=ANY=[], 0x8) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x3) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) 06:23:30 executing program 2: r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$cgroup_subtree(r0, &(0x7f00000003c0)=ANY=[], 0x8) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x3) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) [ 3236.913814][T30369] ref_ctr going negative. vaddr: 0x20000004, curr val: -18737, delta: 1 [ 3236.922327][T30369] ref_ctr increment failed for inode: 0x48e offset: 0x0 ref_ctr_offset: 0x4 of mm: 0xffff88813edc9a40 06:23:37 executing program 2: r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$cgroup_subtree(r0, &(0x7f00000003c0)=ANY=[], 0x8) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x3) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) 06:23:37 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f0000000380)={0x3, 0x1, 0x7, 0x2, 0xb3, &(0x7f0000000500)}) ioctl$KDGKBLED(r0, 0x4b64, &(0x7f0000000040)) io_uring_setup(0xfc6, &(0x7f0000000180)) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000240)={0x9b0, 0x9, 0x1, 0x4, 0x3}) listen(r1, 0x400000001ffffffd) r2 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$cgroup_subtree(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="88ed7c48cfb680c42f89f97a7def31f7c3754b660e634848a0626b48d0b96e39c051b0006e7ca14700d0"], 0x8) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x1, 0x0, 0x0, 0x4, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x3) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r3, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) 06:23:37 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) recvmsg(r0, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) sendto$inet6(r0, &(0x7f00000001c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0) recvmsg(r0, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x2) (async) recvmsg(r0, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x0) (async) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) recvfrom$inet6(r0, &(0x7f0000000000)=""/114, 0xfffffffffffffd1b, 0x0, 0x0, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000040)) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="429d", @ANYRES16=r0, @ANYBLOB="ff"], 0x34}}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="f4997c3794"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="58ad000010", 0x5, 0x0, 0x0, 0x0) r1 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f0000000000)='s', 0x10a73, 0x81e, 0x0, 0x4b6ae4f95a5de35b) 06:23:37 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000005c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e24, @local}, 0x10) writev(r0, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) recvmmsg(r0, &(0x7f0000003e40)=[{{&(0x7f0000000100)=@phonet, 0x80, 0x0, 0x0, &(0x7f00000024c0)=""/4096, 0x1000, 0x300}}, {{0x0, 0x80100200, 0x0, 0x0, &(0x7f00000035c0)=""/241, 0xf1}}, {{&(0x7f00000036c0)=@un=@abs, 0x80, &(0x7f0000003780)=[{&(0x7f0000003740)=""/4, 0xfffffd07}], 0x1, &(0x7f00000037c0)=""/236, 0xec}}, {{&(0x7f00000038c0)=@l2tp6={0xa, 0x0, 0x0, @private1}, 0x80, &(0x7f0000003bc0)=[{0x0}, {&(0x7f0000003a00)=""/190, 0xbe}, {&(0x7f0000003ac0)=""/131, 0x83}, {0x0}], 0x4, &(0x7f0000003c00)=""/73, 0x49}}, {{&(0x7f0000003c80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, 0x0, 0x0, &(0x7f0000003e00)=""/48, 0x30}}], 0x5, 0x40000121, 0x0) 06:23:37 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f0000000380)={0x3, 0x1, 0x7, 0x2, 0xb3, &(0x7f0000000500)}) ioctl$KDGKBLED(r0, 0x4b64, &(0x7f0000000040)) io_uring_setup(0xfc6, &(0x7f0000000180)) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000240)={0x9b0, 0x9, 0x1, 0x4, 0x3}) listen(r1, 0x400000001ffffffd) r2 = socket$inet_dccp(0x2, 0x6, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f0000000440)=@ipv4_newaddr={0x38, 0x14, 0x8, 0x70bd2d, 0x25dfdbfd, {0x2, 0x78, 0x40, 0xc8}, [@IFA_RT_PRIORITY={0x8, 0x9, 0x9}, @IFA_RT_PRIORITY={0x8, 0x9, 0x200}, @IFA_ADDRESS={0x8, 0x1, @loopback}, @IFA_ADDRESS={0x8, 0x1, @multicast2}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000090}, 0x8000) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev}, 0x10) r3 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$cgroup_subtree(r3, &(0x7f00000003c0)=ANY=[@ANYBLOB="88ed7c48cfb680c42f89f97a7def31f7c3754b660e634848a0626b48d0b96e39c051b0006e7ca14700d0"], 0x8) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x1, 0x0, 0x0, 0x4, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x3) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000a00)=ANY=[@ANYBLOB="c42c6e2932282e6645da1d10791c92f43389bef4b185c4d1dacc3cfc8ecc0bf814f6dcdac6841be3bdbc710f350e80317fc828caee7984f2d0a503e8bd1d5277b9bd46fd855e5dddb9448b81ed681d262d5ac040d91bacd3562e16ee197e09907921748069c7421aa5ff99e8153f597070a04ff23f0a45ebf48370445ff6d239d848a6fb317608b13f2399485571d6524f3e9adb4c75b74d486603018a2a804528c63b0669ffd7a2ce6a73a5533c00e5af296b09bb560a761e76021df7", @ANYRES32=0x0, @ANYBLOB="0000000000140003006272696467655f736c6176655f3100000800020023f841841cfce752e51d7e5a869002947c29d84327aa016caefa3f43d42afa4d29e0d98cd04dc3f8dae1de642f0f38fb6e668992d5b914aa79bfc89fc05fa6913e85925d3d29e5652e807b0230392c1ba73de7cbf221788773d2b8f006ed6d957f35b9b76537357388083c178c120c", @ANYRES32=r6, @ANYBLOB="08000400da010000"], 0x44}}, 0x0) r7 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r7, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r8, 0x0) 06:23:37 executing program 5: r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e24, @local}, 0x10) writev(r0, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) recvmmsg(r0, &(0x7f0000003e40)=[{{&(0x7f0000000100)=@phonet, 0x80, 0x0, 0x0, &(0x7f00000024c0)=""/4096, 0x1000, 0x7d}}, {{0x0, 0x80100200, 0x0, 0x0, &(0x7f00000035c0)=""/241, 0xf1}}, {{&(0x7f00000036c0)=@un=@abs, 0x80, &(0x7f0000003780)=[{&(0x7f0000003740)=""/4, 0xfffffd07}], 0x1, &(0x7f00000037c0)=""/236, 0xec}}, {{&(0x7f00000038c0)=@l2tp6={0xa, 0x0, 0x0, @private1}, 0x80, &(0x7f0000003bc0)=[{0x0}, {&(0x7f0000003a00)=""/190, 0xbe}, {&(0x7f0000003ac0)=""/131, 0x83}, {0x0}], 0x4, &(0x7f0000003c00)=""/73, 0x49}}, {{&(0x7f0000003c80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, 0x0, 0x0, &(0x7f0000003e00)=""/48, 0x30}}], 0x5, 0x40000121, 0x0) 06:23:37 executing program 2: r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$cgroup_subtree(r0, &(0x7f00000003c0)=ANY=[], 0x8) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x3) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) 06:23:37 executing program 2: r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$cgroup_subtree(r0, &(0x7f00000003c0)=ANY=[], 0x8) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x3) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) 06:23:37 executing program 2: r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$cgroup_subtree(r0, &(0x7f00000003c0)=ANY=[], 0x8) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x3) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) 06:23:37 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) recvmsg(r0, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) (async) sendto$inet6(r0, &(0x7f00000001c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0) (async) recvmsg(r0, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x2) (async) recvmsg(r0, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) recvfrom$inet6(r0, &(0x7f0000000000)=""/114, 0xfffffffffffffd1b, 0x0, 0x0, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000040)) (async) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="429d", @ANYRES16=r0, @ANYBLOB="ff"], 0x34}}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="f4997c3794"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="58ad000010", 0x5, 0x0, 0x0, 0x0) (async) r1 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f0000000000)='s', 0x10a73, 0x81e, 0x0, 0x4b6ae4f95a5de35b) 06:23:37 executing program 2: r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$cgroup_subtree(r0, &(0x7f00000003c0)=ANY=[], 0x8) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x3) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) [ 3244.163880][T30396] ref_ctr going negative. vaddr: 0x20000004, curr val: -18737, delta: 1 [ 3244.172322][T30396] ref_ctr increment failed for inode: 0x4a0 offset: 0x0 ref_ctr_offset: 0x4 of mm: 0xffff888139ec2580 06:23:37 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) recvmsg(r0, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) sendto$inet6(r0, &(0x7f00000001c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0) recvmsg(r0, &(0x7f00000003c0)={0x0, 0x3, 0x0}, 0x0) recvmsg(r0, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) recvfrom$inet6(r0, &(0x7f0000000000)=""/114, 0xfffffffffffffd1b, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000040)) readv(r0, &(0x7f0000000700)=[{&(0x7f00000004c0)=""/166, 0xa6}, {&(0x7f0000000580)=""/139, 0x8b}, {&(0x7f0000000a40)=""/4096, 0x1000}, {&(0x7f0000000200)=""/105, 0x69}, {&(0x7f0000000680)=""/113, 0x71}], 0x5) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="00281c80", @ANYRES16=r0, @ANYBLOB], 0x34}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="f499407b70"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="58ad000010", 0x5, 0x0, 0x0, 0x0) r1 = openat2(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x10000, 0x140, 0x11}, 0x18) sendto$inet6(r1, &(0x7f0000000400)="915ccf997f93fd9653a0cf16ece49acf1e43cbe0e2b8086a0c110b77e1119d46cbd4a0de6b753a4acb0067de0dc2e3d3dd81be6e28bf40f1a4d4105ff7a080f724d22c11f6f94be30822e85323cb83e29d42159f1995f7918cd7a4ec4609a3f30a0502354bbaeb2f1e05901decf5b637fd0921433b8095d82c994c6438070927cc73a555236f4748ab8e9a799a26886df42250991f5f93a5d6eda2cc9bd278", 0x9f, 0x0, &(0x7f0000000140)={0xa, 0x4e20, 0x6, @mcast1, 0xfff}, 0x1c) r2 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r2, &(0x7f0000000000)='s', 0x10a73, 0x81e, 0x0, 0x4b6ae4f95a5de35b) 06:23:37 executing program 2: r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$cgroup_subtree(r0, &(0x7f00000003c0)=ANY=[], 0x8) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) [ 3250.340380][T30418] ref_ctr going negative. vaddr: 0x20000004, curr val: -18737, delta: 1 [ 3250.348817][T30418] ref_ctr increment failed for inode: 0x48b offset: 0x0 ref_ctr_offset: 0x4 of mm: 0xffff88813a0ab100 06:23:44 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f0000000380)={0x3, 0x1, 0x7, 0x2, 0xb3, &(0x7f0000000500)}) ioctl$KDGKBLED(r0, 0x4b64, &(0x7f0000000040)) io_uring_setup(0xfc6, &(0x7f0000000180)) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000240)={0x9b0, 0x9, 0x1, 0x4, 0x3}) r2 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$cgroup_subtree(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="88ed7c48cfb680c42f89f97a7def31f7c3754b660e634848a0626b48d0b96e39c051b0006e7ca14700d0"], 0x8) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x1, 0x0, 0x0, 0x4, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x3) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r3, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) 06:23:44 executing program 2: r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$cgroup_subtree(r0, &(0x7f00000003c0)=ANY=[], 0x8) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = open(0x0, 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) 06:23:44 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) recvmsg(r0, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) sendto$inet6(r0, &(0x7f00000001c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0) recvmsg(r0, &(0x7f00000003c0)={0x0, 0x3, 0x0}, 0x0) recvmsg(r0, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) (async) recvfrom$inet6(r0, &(0x7f0000000000)=""/114, 0xfffffffffffffd1b, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000040)) (async) readv(r0, &(0x7f0000000700)=[{&(0x7f00000004c0)=""/166, 0xa6}, {&(0x7f0000000580)=""/139, 0x8b}, {&(0x7f0000000a40)=""/4096, 0x1000}, {&(0x7f0000000200)=""/105, 0x69}, {&(0x7f0000000680)=""/113, 0x71}], 0x5) (async) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="00281c80", @ANYRES16=r0, @ANYBLOB], 0x34}}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="f499407b70"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="58ad000010", 0x5, 0x0, 0x0, 0x0) (async) r1 = openat2(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x10000, 0x140, 0x11}, 0x18) sendto$inet6(r1, &(0x7f0000000400)="915ccf997f93fd9653a0cf16ece49acf1e43cbe0e2b8086a0c110b77e1119d46cbd4a0de6b753a4acb0067de0dc2e3d3dd81be6e28bf40f1a4d4105ff7a080f724d22c11f6f94be30822e85323cb83e29d42159f1995f7918cd7a4ec4609a3f30a0502354bbaeb2f1e05901decf5b637fd0921433b8095d82c994c6438070927cc73a555236f4748ab8e9a799a26886df42250991f5f93a5d6eda2cc9bd278", 0x9f, 0x0, &(0x7f0000000140)={0xa, 0x4e20, 0x6, @mcast1, 0xfff}, 0x1c) r2 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r2, &(0x7f0000000000)='s', 0x10a73, 0x81e, 0x0, 0x4b6ae4f95a5de35b) 06:23:44 executing program 5: r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e24, @local}, 0x10) writev(r0, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) recvmmsg(r0, &(0x7f0000003e40)=[{{&(0x7f0000000100)=@phonet, 0x80, 0x0, 0x0, &(0x7f00000024c0)=""/4096, 0x1000, 0x1f4}}, {{0x0, 0x80100200, 0x0, 0x0, &(0x7f00000035c0)=""/241, 0xf1}}, {{&(0x7f00000036c0)=@un=@abs, 0x80, &(0x7f0000003780)=[{&(0x7f0000003740)=""/4, 0xfffffd07}], 0x1, &(0x7f00000037c0)=""/236, 0xec}}, {{&(0x7f00000038c0)=@l2tp6={0xa, 0x0, 0x0, @private1}, 0x80, &(0x7f0000003bc0)=[{0x0}, {&(0x7f0000003a00)=""/190, 0xbe}, {&(0x7f0000003ac0)=""/131, 0x83}, {0x0}], 0x4, &(0x7f0000003c00)=""/73, 0x49}}, {{&(0x7f0000003c80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, 0x0, 0x0, &(0x7f0000003e00)=""/48, 0x30}}], 0x5, 0x40000121, 0x0) 06:23:44 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f0000000380)={0x3, 0x1, 0x7, 0x2, 0xb3, &(0x7f0000000500)}) ioctl$KDGKBLED(r0, 0x4b64, &(0x7f0000000040)) io_uring_setup(0xfc6, &(0x7f0000000180)) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000240)={0x9b0, 0x9, 0x1, 0x4, 0x3}) listen(r1, 0x400000001ffffffd) r2 = socket$inet_dccp(0x2, 0x6, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f0000000440)=@ipv4_newaddr={0x38, 0x14, 0x8, 0x70bd2d, 0x25dfdbfd, {0x2, 0x78, 0x40, 0xc8}, [@IFA_RT_PRIORITY={0x8, 0x9, 0x9}, @IFA_RT_PRIORITY={0x8, 0x9, 0x200}, @IFA_ADDRESS={0x8, 0x1, @loopback}, @IFA_ADDRESS={0x8, 0x1, @multicast2}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000090}, 0x8000) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev}, 0x10) r3 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$cgroup_subtree(r3, &(0x7f00000003c0)=ANY=[@ANYBLOB="88ed7c48cfb680c42f89f97a7def31f7c3754b660e634848a0626b48d0b96e39c051b0006e7ca14700d0"], 0x8) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x1, 0x0, 0x0, 0x4, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x3) socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r5, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r6, 0x0) 06:23:44 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000005c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e24, @local}, 0x10) writev(r0, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) recvmmsg(r0, &(0x7f0000003e40)=[{{&(0x7f0000000100)=@phonet, 0x80, 0x0, 0x0, &(0x7f00000024c0)=""/4096, 0x1000, 0x3e8}}, {{0x0, 0x80100200, 0x0, 0x0, &(0x7f00000035c0)=""/241, 0xf1}}, {{&(0x7f00000036c0)=@un=@abs, 0x80, &(0x7f0000003780)=[{&(0x7f0000003740)=""/4, 0xfffffd07}], 0x1, &(0x7f00000037c0)=""/236, 0xec}}, {{&(0x7f00000038c0)=@l2tp6={0xa, 0x0, 0x0, @private1}, 0x80, &(0x7f0000003bc0)=[{0x0}, {&(0x7f0000003a00)=""/190, 0xbe}, {&(0x7f0000003ac0)=""/131, 0x83}, {0x0}], 0x4, &(0x7f0000003c00)=""/73, 0x49}}, {{&(0x7f0000003c80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, 0x0, 0x0, &(0x7f0000003e00)=""/48, 0x30}}], 0x5, 0x40000121, 0x0) 06:23:44 executing program 2: r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$cgroup_subtree(r0, &(0x7f00000003c0)=ANY=[], 0x8) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = open(0x0, 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) 06:23:44 executing program 2: r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$cgroup_subtree(r0, &(0x7f00000003c0)=ANY=[], 0x8) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = open(0x0, 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) 06:23:44 executing program 2: r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$cgroup_subtree(r0, &(0x7f00000003c0)=ANY=[], 0x8) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x10, r1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) 06:23:44 executing program 4: socket$inet6(0x10, 0x3, 0x0) (async) r0 = socket$inet6(0x10, 0x3, 0x0) recvmsg(r0, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) sendto$inet6(r0, &(0x7f00000001c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0) recvmsg(r0, &(0x7f00000003c0)={0x0, 0x3, 0x0}, 0x0) recvmsg(r0, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x0) (async) recvmsg(r0, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) recvfrom$inet6(r0, &(0x7f0000000000)=""/114, 0xfffffffffffffd1b, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000040)) (async) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000040)) readv(r0, &(0x7f0000000700)=[{&(0x7f00000004c0)=""/166, 0xa6}, {&(0x7f0000000580)=""/139, 0x8b}, {&(0x7f0000000a40)=""/4096, 0x1000}, {&(0x7f0000000200)=""/105, 0x69}, {&(0x7f0000000680)=""/113, 0x71}], 0x5) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="00281c80", @ANYRES16=r0, @ANYBLOB], 0x34}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="f499407b70"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="58ad000010", 0x5, 0x0, 0x0, 0x0) r1 = openat2(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x10000, 0x140, 0x11}, 0x18) sendto$inet6(r1, &(0x7f0000000400)="915ccf997f93fd9653a0cf16ece49acf1e43cbe0e2b8086a0c110b77e1119d46cbd4a0de6b753a4acb0067de0dc2e3d3dd81be6e28bf40f1a4d4105ff7a080f724d22c11f6f94be30822e85323cb83e29d42159f1995f7918cd7a4ec4609a3f30a0502354bbaeb2f1e05901decf5b637fd0921433b8095d82c994c6438070927cc73a555236f4748ab8e9a799a26886df42250991f5f93a5d6eda2cc9bd278", 0x9f, 0x0, &(0x7f0000000140)={0xa, 0x4e20, 0x6, @mcast1, 0xfff}, 0x1c) (async) sendto$inet6(r1, &(0x7f0000000400)="915ccf997f93fd9653a0cf16ece49acf1e43cbe0e2b8086a0c110b77e1119d46cbd4a0de6b753a4acb0067de0dc2e3d3dd81be6e28bf40f1a4d4105ff7a080f724d22c11f6f94be30822e85323cb83e29d42159f1995f7918cd7a4ec4609a3f30a0502354bbaeb2f1e05901decf5b637fd0921433b8095d82c994c6438070927cc73a555236f4748ab8e9a799a26886df42250991f5f93a5d6eda2cc9bd278", 0x9f, 0x0, &(0x7f0000000140)={0xa, 0x4e20, 0x6, @mcast1, 0xfff}, 0x1c) socket$inet6(0x10, 0x3, 0x0) (async) r2 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r2, &(0x7f0000000000)='s', 0x10a73, 0x81e, 0x0, 0x4b6ae4f95a5de35b) 06:23:44 executing program 2: r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$cgroup_subtree(r0, &(0x7f00000003c0)=ANY=[], 0x8) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x10, r1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) [ 3251.196538][T30436] ref_ctr going negative. vaddr: 0x20000004, curr val: -18737, delta: 1 [ 3251.205016][T30436] ref_ctr increment failed for inode: 0x49c offset: 0x0 ref_ctr_offset: 0x4 of mm: 0xffff88813edc9580 06:23:44 executing program 2: r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$cgroup_subtree(r0, &(0x7f00000003c0)=ANY=[], 0x8) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x10, r1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) [ 3255.381036][T30451] ref_ctr going negative. vaddr: 0x20000004, curr val: -18737, delta: 1 [ 3255.389445][T30451] ref_ctr increment failed for inode: 0x48b offset: 0x0 ref_ctr_offset: 0x4 of mm: 0xffff88813edc9a40 06:23:49 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f0000000380)={0x3, 0x1, 0x7, 0x2, 0xb3, &(0x7f0000000500)}) ioctl$KDGKBLED(r0, 0x4b64, &(0x7f0000000040)) io_uring_setup(0xfc6, &(0x7f0000000180)) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) r2 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$cgroup_subtree(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="88ed7c48cfb680c42f89f97a7def31f7c3754b660e634848a0626b48d0b96e39c051b0006e7ca14700d0"], 0x8) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x1, 0x0, 0x0, 0x4, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x3) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r3, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) 06:23:49 executing program 2: r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$cgroup_subtree(r0, &(0x7f00000003c0)=ANY=[], 0x8) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) 06:23:49 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) recvmsg(r0, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) sendto$inet6(r0, &(0x7f00000001c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0) recvmsg(r0, &(0x7f00000003c0)={0x0, 0x3, 0x0}, 0x0) recvmsg(r0, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) recvfrom$inet6(r0, &(0x7f0000000000)=""/114, 0xfffffffffffffd1b, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000040)) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="00281c80", @ANYRES16=r0, @ANYBLOB="ff"], 0x34}}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="f4997c3794"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r2 = socket$unix(0x1, 0x5, 0x0) bind$unix(r2, &(0x7f0000000380)=@file={0x1, './file0\x00'}, 0x6e) listen(r2, 0x0) r3 = dup(r2) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}}) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000240), 0x900, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x3, 0xc, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x7fff}, [@map_idx_val={0x18, 0x0, 0x6, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0xffffffffffffffff}, @btf_id={0x18, 0x4, 0x3, 0x0, 0x3}, @map_val={0x18, 0x9, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xfb59}, @alu={0x4, 0x1, 0x4, 0x0, 0x9, 0x4, 0xfffffffffffffffc}, @generic={0x1, 0x6, 0x1, 0xff7f, 0x9}]}, &(0x7f0000000140)='GPL\x00', 0x665a6557, 0xbd, &(0x7f0000000400)=""/189, 0x40f00, 0x0, '\x00', 0x0, 0x1, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x5, 0x5}, 0x8, 0x10, &(0x7f0000000200)={0x1, 0xd, 0x5, 0x81}, 0x10, 0xffffffffffffffff, r1, 0x0, &(0x7f00000004c0)=[0xffffffffffffffff, 0xffffffffffffffff, r3, r4]}, 0x80) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="58ad000010", 0x5, 0x0, 0x0, 0x0) r5 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r5, &(0x7f0000000000)='s', 0x10a73, 0x81e, 0x0, 0x4b6ae4f95a5de35b) 06:23:49 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f0000000380)={0x3, 0x1, 0x7, 0x2, 0xb3, &(0x7f0000000500)}) ioctl$KDGKBLED(r0, 0x4b64, &(0x7f0000000040)) io_uring_setup(0xfc6, &(0x7f0000000180)) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000240)={0x9b0, 0x9, 0x1, 0x4, 0x3}) listen(r1, 0x400000001ffffffd) r2 = socket$inet_dccp(0x2, 0x6, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f0000000440)=@ipv4_newaddr={0x38, 0x14, 0x8, 0x70bd2d, 0x25dfdbfd, {0x2, 0x78, 0x40, 0xc8}, [@IFA_RT_PRIORITY={0x8, 0x9, 0x9}, @IFA_RT_PRIORITY={0x8, 0x9, 0x200}, @IFA_ADDRESS={0x8, 0x1, @loopback}, @IFA_ADDRESS={0x8, 0x1, @multicast2}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000090}, 0x8000) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev}, 0x10) r3 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$cgroup_subtree(r3, &(0x7f00000003c0)=ANY=[@ANYBLOB="88ed7c48cfb680c42f89f97a7def31f7c3754b660e634848a0626b48d0b96e39c051b0006e7ca14700d0"], 0x8) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x1, 0x0, 0x0, 0x4, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x3) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r4, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) 06:23:49 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000005c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e24, @local}, 0x10) writev(r0, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) recvmmsg(r0, &(0x7f0000003e40)=[{{&(0x7f0000000100)=@phonet, 0x80, 0x0, 0x0, &(0x7f00000024c0)=""/4096, 0x1000, 0x500}}, {{0x0, 0x80100200, 0x0, 0x0, &(0x7f00000035c0)=""/241, 0xf1}}, {{&(0x7f00000036c0)=@un=@abs, 0x80, &(0x7f0000003780)=[{&(0x7f0000003740)=""/4, 0xfffffd07}], 0x1, &(0x7f00000037c0)=""/236, 0xec}}, {{&(0x7f00000038c0)=@l2tp6={0xa, 0x0, 0x0, @private1}, 0x80, &(0x7f0000003bc0)=[{0x0}, {&(0x7f0000003a00)=""/190, 0xbe}, {&(0x7f0000003ac0)=""/131, 0x83}, {0x0}], 0x4, &(0x7f0000003c00)=""/73, 0x49}}, {{&(0x7f0000003c80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, 0x0, 0x0, &(0x7f0000003e00)=""/48, 0x30}}], 0x5, 0x40000121, 0x0) 06:23:49 executing program 5: r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e24, @local}, 0x10) writev(r0, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) recvmmsg(r0, &(0x7f0000003e40)=[{{&(0x7f0000000100)=@phonet, 0x80, 0x0, 0x0, &(0x7f00000024c0)=""/4096, 0x1000, 0x241}}, {{0x0, 0x80100200, 0x0, 0x0, &(0x7f00000035c0)=""/241, 0xf1}}, {{&(0x7f00000036c0)=@un=@abs, 0x80, &(0x7f0000003780)=[{&(0x7f0000003740)=""/4, 0xfffffd07}], 0x1, &(0x7f00000037c0)=""/236, 0xec}}, {{&(0x7f00000038c0)=@l2tp6={0xa, 0x0, 0x0, @private1}, 0x80, &(0x7f0000003bc0)=[{0x0}, {&(0x7f0000003a00)=""/190, 0xbe}, {&(0x7f0000003ac0)=""/131, 0x83}, {0x0}], 0x4, &(0x7f0000003c00)=""/73, 0x49}}, {{&(0x7f0000003c80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, 0x0, 0x0, &(0x7f0000003e00)=""/48, 0x30}}], 0x5, 0x40000121, 0x0) 06:23:49 executing program 2: r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$cgroup_subtree(r0, &(0x7f00000003c0)=ANY=[], 0x8) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) 06:23:49 executing program 2: r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$cgroup_subtree(r0, &(0x7f00000003c0)=ANY=[], 0x8) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) 06:23:49 executing program 2: r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$cgroup_subtree(r0, &(0x7f00000003c0)=ANY=[], 0x8) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r1, 0x0) r2 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) [ 3256.240379][T30469] ref_ctr going negative. vaddr: 0x20000004, curr val: -18737, delta: 1 [ 3256.248915][T30469] ref_ctr increment failed for inode: 0x4a2 offset: 0x0 ref_ctr_offset: 0x4 of mm: 0xffff88813edc9580 06:23:49 executing program 2: r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$cgroup_subtree(r0, &(0x7f00000003c0)=ANY=[], 0x8) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r1, 0x0) r2 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) 06:23:49 executing program 2: r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$cgroup_subtree(r0, &(0x7f00000003c0)=ANY=[], 0x8) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r1, 0x0) r2 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) [ 3256.288849][T30460] netlink: 18367 bytes leftover after parsing attributes in process `syz-executor.4'. 06:23:49 executing program 2: r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$cgroup_subtree(r0, &(0x7f00000003c0)=ANY=[], 0x8) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r2, 0x0) [ 3262.421266][T30481] ref_ctr going negative. vaddr: 0x20000004, curr val: -18737, delta: 1 [ 3262.429925][T30481] ref_ctr increment failed for inode: 0x48b offset: 0x0 ref_ctr_offset: 0x4 of mm: 0xffff88813aa35ac0 06:23:56 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) recvmsg(r0, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) (async) sendto$inet6(r0, &(0x7f00000001c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0) (async) recvmsg(r0, &(0x7f00000003c0)={0x0, 0x3, 0x0}, 0x0) recvmsg(r0, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) recvfrom$inet6(r0, &(0x7f0000000000)=""/114, 0xfffffffffffffd1b, 0x0, 0x0, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000040)) (async) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="00281c80", @ANYRES16=r0, @ANYBLOB="ff"], 0x34}}, 0x0) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="f4997c3794"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) r2 = socket$unix(0x1, 0x5, 0x0) bind$unix(r2, &(0x7f0000000380)=@file={0x1, './file0\x00'}, 0x6e) (async) listen(r2, 0x0) (async) r3 = dup(r2) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}}) (async) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000240), 0x900, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x3, 0xc, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x7fff}, [@map_idx_val={0x18, 0x0, 0x6, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0xffffffffffffffff}, @btf_id={0x18, 0x4, 0x3, 0x0, 0x3}, @map_val={0x18, 0x9, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xfb59}, @alu={0x4, 0x1, 0x4, 0x0, 0x9, 0x4, 0xfffffffffffffffc}, @generic={0x1, 0x6, 0x1, 0xff7f, 0x9}]}, &(0x7f0000000140)='GPL\x00', 0x665a6557, 0xbd, &(0x7f0000000400)=""/189, 0x40f00, 0x0, '\x00', 0x0, 0x1, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x5, 0x5}, 0x8, 0x10, &(0x7f0000000200)={0x1, 0xd, 0x5, 0x81}, 0x10, 0xffffffffffffffff, r1, 0x0, &(0x7f00000004c0)=[0xffffffffffffffff, 0xffffffffffffffff, r3, r4]}, 0x80) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="58ad000010", 0x5, 0x0, 0x0, 0x0) (async) r5 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r5, &(0x7f0000000000)='s', 0x10a73, 0x81e, 0x0, 0x4b6ae4f95a5de35b) 06:23:56 executing program 2: r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$cgroup_subtree(r0, &(0x7f00000003c0)=ANY=[], 0x8) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, r2, 0x0) 06:23:56 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f0000000380)={0x3, 0x1, 0x7, 0x2, 0xb3, &(0x7f0000000500)}) ioctl$KDGKBLED(r0, 0x4b64, &(0x7f0000000040)) io_uring_setup(0xfc6, &(0x7f0000000180)) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000240)={0x9b0, 0x9, 0x1, 0x4, 0x3}) listen(r1, 0x400000001ffffffd) r2 = socket$inet_dccp(0x2, 0x6, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f0000000440)=@ipv4_newaddr={0x38, 0x14, 0x8, 0x70bd2d, 0x25dfdbfd, {0x2, 0x78, 0x40, 0xc8}, [@IFA_RT_PRIORITY={0x8, 0x9, 0x9}, @IFA_RT_PRIORITY={0x8, 0x9, 0x200}, @IFA_ADDRESS={0x8, 0x1, @loopback}, @IFA_ADDRESS={0x8, 0x1, @multicast2}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000090}, 0x8000) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev}, 0x10) r3 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$cgroup_subtree(r3, &(0x7f00000003c0)=ANY=[@ANYBLOB="88ed7c48cfb680c42f89f97a7def31f7c3754b660e634848a0626b48d0b96e39c051b0006e7ca14700d0"], 0x8) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x1, 0x0, 0x0, 0x4, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x3) socket$nl_route(0x10, 0x3, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r4, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) 06:23:56 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f0000000380)={0x3, 0x1, 0x7, 0x2, 0xb3, &(0x7f0000000500)}) ioctl$KDGKBLED(r0, 0x4b64, &(0x7f0000000040)) io_uring_setup(0xfc6, &(0x7f0000000180)) socket$inet6(0xa, 0x6, 0x0) r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$cgroup_subtree(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="88ed7c48cfb680c42f89f97a7def31f7c3754b660e634848a0626b48d0b96e39c051b0006e7ca14700d0"], 0x8) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x1, 0x0, 0x0, 0x4, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x3) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) 06:23:56 executing program 5: r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e24, @local}, 0x10) writev(r0, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) recvmmsg(r0, &(0x7f0000003e40)=[{{&(0x7f0000000100)=@phonet, 0x80, 0x0, 0x0, &(0x7f00000024c0)=""/4096, 0x1000, 0x300}}, {{0x0, 0x80100200, 0x0, 0x0, &(0x7f00000035c0)=""/241, 0xf1}}, {{&(0x7f00000036c0)=@un=@abs, 0x80, &(0x7f0000003780)=[{&(0x7f0000003740)=""/4, 0xfffffd07}], 0x1, &(0x7f00000037c0)=""/236, 0xec}}, {{&(0x7f00000038c0)=@l2tp6={0xa, 0x0, 0x0, @private1}, 0x80, &(0x7f0000003bc0)=[{0x0}, {&(0x7f0000003a00)=""/190, 0xbe}, {&(0x7f0000003ac0)=""/131, 0x83}, {0x0}], 0x4, &(0x7f0000003c00)=""/73, 0x49}}, {{&(0x7f0000003c80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, 0x0, 0x0, &(0x7f0000003e00)=""/48, 0x30}}], 0x5, 0x40000121, 0x0) 06:23:56 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000005c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e24, @local}, 0x10) writev(r0, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) recvmmsg(r0, &(0x7f0000003e40)=[{{&(0x7f0000000100)=@phonet, 0x80, 0x0, 0x0, &(0x7f00000024c0)=""/4096, 0x1000, 0x600}}, {{0x0, 0x80100200, 0x0, 0x0, &(0x7f00000035c0)=""/241, 0xf1}}, {{&(0x7f00000036c0)=@un=@abs, 0x80, &(0x7f0000003780)=[{&(0x7f0000003740)=""/4, 0xfffffd07}], 0x1, &(0x7f00000037c0)=""/236, 0xec}}, {{&(0x7f00000038c0)=@l2tp6={0xa, 0x0, 0x0, @private1}, 0x80, &(0x7f0000003bc0)=[{0x0}, {&(0x7f0000003a00)=""/190, 0xbe}, {&(0x7f0000003ac0)=""/131, 0x83}, {0x0}], 0x4, &(0x7f0000003c00)=""/73, 0x49}}, {{&(0x7f0000003c80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, 0x0, 0x0, &(0x7f0000003e00)=""/48, 0x30}}], 0x5, 0x40000121, 0x0) 06:23:56 executing program 2: r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$cgroup_subtree(r0, &(0x7f00000003c0)=ANY=[], 0x8) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, r2, 0x0) 06:23:56 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) recvmsg(r0, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) sendto$inet6(r0, &(0x7f00000001c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0) (async) recvmsg(r0, &(0x7f00000003c0)={0x0, 0x3, 0x0}, 0x0) recvmsg(r0, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x0) (async) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) (async) recvfrom$inet6(r0, &(0x7f0000000000)=""/114, 0xfffffffffffffd1b, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000040)) (async) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="00281c80", @ANYRES16=r0, @ANYBLOB="ff"], 0x34}}, 0x0) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="f4997c3794"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) r2 = socket$unix(0x1, 0x5, 0x0) bind$unix(r2, &(0x7f0000000380)=@file={0x1, './file0\x00'}, 0x6e) listen(r2, 0x0) r3 = dup(r2) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}}) (async) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000240), 0x900, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x3, 0xc, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x7fff}, [@map_idx_val={0x18, 0x0, 0x6, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0xffffffffffffffff}, @btf_id={0x18, 0x4, 0x3, 0x0, 0x3}, @map_val={0x18, 0x9, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xfb59}, @alu={0x4, 0x1, 0x4, 0x0, 0x9, 0x4, 0xfffffffffffffffc}, @generic={0x1, 0x6, 0x1, 0xff7f, 0x9}]}, &(0x7f0000000140)='GPL\x00', 0x665a6557, 0xbd, &(0x7f0000000400)=""/189, 0x40f00, 0x0, '\x00', 0x0, 0x1, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x5, 0x5}, 0x8, 0x10, &(0x7f0000000200)={0x1, 0xd, 0x5, 0x81}, 0x10, 0xffffffffffffffff, r1, 0x0, &(0x7f00000004c0)=[0xffffffffffffffff, 0xffffffffffffffff, r3, r4]}, 0x80) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="58ad000010", 0x5, 0x0, 0x0, 0x0) (async) r5 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r5, &(0x7f0000000000)='s', 0x10a73, 0x81e, 0x0, 0x4b6ae4f95a5de35b) 06:23:56 executing program 2: r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$cgroup_subtree(r0, &(0x7f00000003c0)=ANY=[], 0x8) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, r2, 0x0) 06:23:56 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) recvmsg(r0, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) sendto$inet6(r0, &(0x7f00000001c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0) recvmsg(r0, &(0x7f00000003c0)={0x0, 0x3, 0x0}, 0x0) recvmsg(r0, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) recvfrom$inet6(r0, &(0x7f0000000000)=""/114, 0xfffffffffffffd1b, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000040)) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="00281c80", @ANYRES16=r0, @ANYBLOB="ff"], 0x34}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="f4a3000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="58ad000010", 0x5, 0x0, 0x0, 0x0) r1 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f0000000000)='s', 0x10a73, 0x81e, 0x0, 0x4b6ae4f95a5de35b) 06:23:56 executing program 2: r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$cgroup_subtree(r0, &(0x7f00000003c0)=ANY=[], 0x8) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r1, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, 0xffffffffffffffff, 0x0) [ 3263.277951][T30504] ref_ctr going negative. vaddr: 0x20000004, curr val: -18737, delta: 1 [ 3263.286774][T30504] ref_ctr increment failed for inode: 0x4a1 offset: 0x0 ref_ctr_offset: 0x4 of mm: 0xffff88813edc9a40 06:23:56 executing program 2: r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$cgroup_subtree(r0, &(0x7f00000003c0)=ANY=[], 0x8) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r1, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, 0xffffffffffffffff, 0x0) 06:23:56 executing program 2: r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$cgroup_subtree(r0, &(0x7f00000003c0)=ANY=[], 0x8) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r1, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, 0xffffffffffffffff, 0x0) 06:23:56 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) recvmsg(r0, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) sendto$inet6(r0, &(0x7f00000001c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0) recvmsg(r0, &(0x7f00000003c0)={0x0, 0x3, 0x0}, 0x0) recvmsg(r0, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) recvfrom$inet6(r0, &(0x7f0000000000)=""/114, 0xfffffffffffffd1b, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000040)) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="00281c80", @ANYRES16=r0, @ANYBLOB="ff"], 0x34}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="f4a3000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="58ad000010", 0x5, 0x0, 0x0, 0x0) r1 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f0000000000)='s', 0x10a73, 0x81e, 0x0, 0x4b6ae4f95a5de35b) socket$inet6(0x10, 0x3, 0x0) (async) recvmsg(r0, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) (async) sendto$inet6(r0, &(0x7f00000001c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0) (async) recvmsg(r0, &(0x7f00000003c0)={0x0, 0x3, 0x0}, 0x0) (async) recvmsg(r0, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x0) (async) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) (async) recvfrom$inet6(r0, &(0x7f0000000000)=""/114, 0xfffffffffffffd1b, 0x0, 0x0, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000040)) (async) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="00281c80", @ANYRES16=r0, @ANYBLOB="ff"], 0x34}}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="f4a3000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="58ad000010", 0x5, 0x0, 0x0, 0x0) (async) socket$inet6(0x10, 0x3, 0x0) (async) sendto$inet6(r1, &(0x7f0000000000)='s', 0x10a73, 0x81e, 0x0, 0x4b6ae4f95a5de35b) (async) [ 3263.401895][T30512] netlink: 44271 bytes leftover after parsing attributes in process `syz-executor.4'. [ 3263.522695][T30520] netlink: 44271 bytes leftover after parsing attributes in process `syz-executor.4'. 06:23:57 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f0000000380)={0x3, 0x1, 0x7, 0x2, 0xb3, &(0x7f0000000500)}) ioctl$KDGKBLED(r0, 0x4b64, &(0x7f0000000040)) io_uring_setup(0xfc6, &(0x7f0000000180)) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000240)={0x9b0, 0x9, 0x1, 0x4, 0x3}) listen(r1, 0x400000001ffffffd) r2 = socket$inet_dccp(0x2, 0x6, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f0000000440)=@ipv4_newaddr={0x38, 0x14, 0x8, 0x70bd2d, 0x25dfdbfd, {0x2, 0x78, 0x40, 0xc8}, [@IFA_RT_PRIORITY={0x8, 0x9, 0x9}, @IFA_RT_PRIORITY={0x8, 0x9, 0x200}, @IFA_ADDRESS={0x8, 0x1, @loopback}, @IFA_ADDRESS={0x8, 0x1, @multicast2}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000090}, 0x8000) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev}, 0x10) r3 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$cgroup_subtree(r3, &(0x7f00000003c0)=ANY=[@ANYBLOB="88ed7c48cfb680c42f89f97a7def31f7c3754b660e634848a0626b48d0b96e39c051b0006e7ca14700d0"], 0x8) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x1, 0x0, 0x0, 0x4, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x3) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r4, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) [ 3264.132400][T30534] ref_ctr going negative. vaddr: 0x20000004, curr val: -18737, delta: 1 [ 3264.140988][T30534] ref_ctr increment failed for inode: 0x490 offset: 0x0 ref_ctr_offset: 0x4 of mm: 0xffff88813edc90c0 06:24:05 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f0000000380)={0x3, 0x1, 0x7, 0x2, 0xb3, &(0x7f0000000500)}) ioctl$KDGKBLED(r0, 0x4b64, &(0x7f0000000040)) io_uring_setup(0xfc6, &(0x7f0000000180)) socket$inet6(0xa, 0x6, 0x0) r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$cgroup_subtree(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="88ed7c48cfb680c42f89f97a7def31f7c3754b660e634848a0626b48d0b96e39c051b0006e7ca14700d0"], 0x8) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x1, 0x0, 0x0, 0x4, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x3) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) 06:24:05 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) recvmsg(r0, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) sendto$inet6(r0, &(0x7f00000001c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0) recvmsg(r0, &(0x7f00000003c0)={0x0, 0x3, 0x0}, 0x0) recvmsg(r0, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) recvfrom$inet6(r0, &(0x7f0000000000)=""/114, 0xfffffffffffffd1b, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000040)) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="00281c80", @ANYRES16=r0, @ANYBLOB="ff"], 0x34}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="f4a3000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="58ad000010", 0x5, 0x0, 0x0, 0x0) r1 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f0000000000)='s', 0x10a73, 0x81e, 0x0, 0x4b6ae4f95a5de35b) socket$inet6(0x10, 0x3, 0x0) (async) recvmsg(r0, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) (async) sendto$inet6(r0, &(0x7f00000001c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0) (async) recvmsg(r0, &(0x7f00000003c0)={0x0, 0x3, 0x0}, 0x0) (async) recvmsg(r0, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x0) (async) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) (async) recvfrom$inet6(r0, &(0x7f0000000000)=""/114, 0xfffffffffffffd1b, 0x0, 0x0, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000040)) (async) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="00281c80", @ANYRES16=r0, @ANYBLOB="ff"], 0x34}}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="f4a3000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="58ad000010", 0x5, 0x0, 0x0, 0x0) (async) socket$inet6(0x10, 0x3, 0x0) (async) sendto$inet6(r1, &(0x7f0000000000)='s', 0x10a73, 0x81e, 0x0, 0x4b6ae4f95a5de35b) (async) 06:24:05 executing program 5: r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e24, @local}, 0x10) writev(r0, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) recvmmsg(r0, &(0x7f0000003e40)=[{{&(0x7f0000000100)=@phonet, 0x80, 0x0, 0x0, &(0x7f00000024c0)=""/4096, 0x1000, 0x3e8}}, {{0x0, 0x80100200, 0x0, 0x0, &(0x7f00000035c0)=""/241, 0xf1}}, {{&(0x7f00000036c0)=@un=@abs, 0x80, &(0x7f0000003780)=[{&(0x7f0000003740)=""/4, 0xfffffd07}], 0x1, &(0x7f00000037c0)=""/236, 0xec}}, {{&(0x7f00000038c0)=@l2tp6={0xa, 0x0, 0x0, @private1}, 0x80, &(0x7f0000003bc0)=[{0x0}, {&(0x7f0000003a00)=""/190, 0xbe}, {&(0x7f0000003ac0)=""/131, 0x83}, {0x0}], 0x4, &(0x7f0000003c00)=""/73, 0x49}}, {{&(0x7f0000003c80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, 0x0, 0x0, &(0x7f0000003e00)=""/48, 0x30}}], 0x5, 0x40000121, 0x0) 06:24:05 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000005c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e24, @local}, 0x10) writev(r0, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) recvmmsg(r0, &(0x7f0000003e40)=[{{&(0x7f0000000100)=@phonet, 0x80, 0x0, 0x0, &(0x7f00000024c0)=""/4096, 0x1000, 0x700}}, {{0x0, 0x80100200, 0x0, 0x0, &(0x7f00000035c0)=""/241, 0xf1}}, {{&(0x7f00000036c0)=@un=@abs, 0x80, &(0x7f0000003780)=[{&(0x7f0000003740)=""/4, 0xfffffd07}], 0x1, &(0x7f00000037c0)=""/236, 0xec}}, {{&(0x7f00000038c0)=@l2tp6={0xa, 0x0, 0x0, @private1}, 0x80, &(0x7f0000003bc0)=[{0x0}, {&(0x7f0000003a00)=""/190, 0xbe}, {&(0x7f0000003ac0)=""/131, 0x83}, {0x0}], 0x4, &(0x7f0000003c00)=""/73, 0x49}}, {{&(0x7f0000003c80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, 0x0, 0x0, &(0x7f0000003e00)=""/48, 0x30}}], 0x5, 0x40000121, 0x0) 06:24:05 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f0000000380)={0x3, 0x1, 0x7, 0x2, 0xb3, &(0x7f0000000500)}) ioctl$KDGKBLED(r0, 0x4b64, &(0x7f0000000040)) io_uring_setup(0xfc6, &(0x7f0000000180)) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000240)={0x9b0, 0x9, 0x1, 0x4, 0x3}) listen(r1, 0x400000001ffffffd) r2 = socket$inet_dccp(0x2, 0x6, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f0000000440)=@ipv4_newaddr={0x38, 0x14, 0x8, 0x70bd2d, 0x25dfdbfd, {0x2, 0x78, 0x40, 0xc8}, [@IFA_RT_PRIORITY={0x8, 0x9, 0x9}, @IFA_RT_PRIORITY={0x8, 0x9, 0x200}, @IFA_ADDRESS={0x8, 0x1, @loopback}, @IFA_ADDRESS={0x8, 0x1, @multicast2}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000090}, 0x8000) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev}, 0x10) r3 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$cgroup_subtree(r3, &(0x7f00000003c0)=ANY=[@ANYBLOB="88ed7c48cfb680c42f89f97a7def31f7c3754b660e634848a0626b48d0b96e39c051b0006e7ca14700d0"], 0x8) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r4, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) 06:24:05 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f0000000380)={0x3, 0x1, 0x7, 0x2, 0xb3, &(0x7f0000000500)}) ioctl$KDGKBLED(r0, 0x4b64, &(0x7f0000000040)) io_uring_setup(0xfc6, &(0x7f0000000180)) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000240)={0x9b0, 0x9, 0x1, 0x4, 0x3}) listen(r1, 0x400000001ffffffd) r2 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$cgroup_subtree(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="88ed7c48cfb680c42f89f97a7def31f7c3754b660e634848a0626b48d0b96e39c051b0006e7ca14700d0"], 0x8) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x1, 0x0, 0x0, 0x4, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x3) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r3, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) 06:24:05 executing program 2: syz_open_dev$tty20(0xc, 0x4, 0x0) r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$cgroup_subtree(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="88ed7c48cfb680c42f89f97a7def31f7c3754b660e634848a0626b48d0b96e39c051b0006e7ca14700d0"], 0x8) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x1, 0x0, 0x0, 0x4, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x3) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) [ 3272.521731][T30548] ref_ctr going negative. vaddr: 0x20000004, curr val: -18737, delta: 1 [ 3272.530199][T30548] ref_ctr increment failed for inode: 0x49f offset: 0x0 ref_ctr_offset: 0x4 of mm: 0xffff888139ec2a40 [ 3272.561694][T30551] netlink: 44271 bytes leftover after parsing attributes in process `syz-executor.4'. 06:24:05 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) recvmsg(r0, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) sendto$inet6(r0, &(0x7f00000001c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0) recvmsg(r0, &(0x7f00000003c0)={0x0, 0x3, 0x0}, 0x0) recvmsg(r0, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) recvfrom$inet6(r0, &(0x7f0000000000)=""/114, 0xfffffffffffffd1b, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000040)) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="00281c80", @ANYRES16=r0, @ANYBLOB="ff"], 0x34}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="f4997c3794"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="58ad000010", 0x5, 0x0, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@private0, 0x200, 0x0, 0xff, 0x8, 0x8, 0x6}, 0x20) r1 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f0000000000)='s', 0x10a73, 0x81e, 0x0, 0x4b6ae4f95a5de35b) [ 3272.611654][T30569] ref_ctr going negative. vaddr: 0x20000004, curr val: -18737, delta: 1 [ 3272.620093][T30569] ref_ctr increment failed for inode: 0x4a0 offset: 0x0 ref_ctr_offset: 0x4 of mm: 0xffff88813aa35600 06:24:05 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f0000000380)={0x3, 0x1, 0x7, 0x2, 0xb3, &(0x7f0000000500)}) ioctl$KDGKBLED(r0, 0x4b64, &(0x7f0000000040)) io_uring_setup(0xfc6, &(0x7f0000000180)) r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$cgroup_subtree(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="88ed7c48cfb680c42f89f97a7def31f7c3754b660e634848a0626b48d0b96e39c051b0006e7ca14700d0"], 0x8) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x1, 0x0, 0x0, 0x4, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x3) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) [ 3272.684074][T30571] netlink: 'syz-executor.4': attribute type 41 has an invalid length. [ 3272.692423][T30571] netlink: 44123 bytes leftover after parsing attributes in process `syz-executor.4'. [ 3272.717391][T30574] ref_ctr going negative. vaddr: 0x20000004, curr val: -18737, delta: 1 06:24:05 executing program 4: socket$inet6(0x10, 0x3, 0x0) (async) r0 = socket$inet6(0x10, 0x3, 0x0) recvmsg(r0, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) sendto$inet6(r0, &(0x7f00000001c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0) recvmsg(r0, &(0x7f00000003c0)={0x0, 0x3, 0x0}, 0x0) recvmsg(r0, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x0) (async) recvmsg(r0, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) recvfrom$inet6(r0, &(0x7f0000000000)=""/114, 0xfffffffffffffd1b, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000040)) (async) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000040)) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="00281c80", @ANYRES16=r0, @ANYBLOB="ff"], 0x34}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="f4997c3794"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="58ad000010", 0x5, 0x0, 0x0, 0x0) (async) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="58ad000010", 0x5, 0x0, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@private0, 0x200, 0x0, 0xff, 0x8, 0x8, 0x6}, 0x20) r1 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f0000000000)='s', 0x10a73, 0x81e, 0x0, 0x4b6ae4f95a5de35b) [ 3272.722759][T30571] A link change request failed with some changes committed already. Interface ip6tnl0 may have been left with an inconsistent configuration, please check. [ 3272.725818][T30574] ref_ctr increment failed for inode: 0x4a0 offset: 0x0 ref_ctr_offset: 0x4 of mm: 0xffff88813a0aba80 06:24:05 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f0000000380)={0x3, 0x1, 0x7, 0x2, 0xb3, &(0x7f0000000500)}) ioctl$KDGKBLED(r0, 0x4b64, &(0x7f0000000040)) io_uring_setup(0xfc6, &(0x7f0000000180)) r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$cgroup_subtree(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="88ed7c48cfb680c42f89f97a7def31f7c3754b660e634848a0626b48d0b96e39c051b0006e7ca14700d0"], 0x8) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x1, 0x0, 0x0, 0x4, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x3) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) 06:24:05 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f0000000380)={0x3, 0x1, 0x7, 0x2, 0xb3, &(0x7f0000000500)}) ioctl$KDGKBLED(r0, 0x4b64, &(0x7f0000000040)) io_uring_setup(0xfc6, &(0x7f0000000180)) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000240)={0x9b0, 0x9, 0x1, 0x4, 0x3}) listen(r1, 0x400000001ffffffd) r2 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$cgroup_subtree(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="88ed7c48cfb680c42f89f97a7def31f7c3754b660e634848a0626b48d0b96e39c051b0006e7ca14700d0"], 0x8) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x1, 0x0, 0x0, 0x4, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x3) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r3, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) [ 3272.809358][T30579] ref_ctr going negative. vaddr: 0x20000004, curr val: -18737, delta: 1 [ 3272.817777][T30579] ref_ctr increment failed for inode: 0x4a0 offset: 0x0 ref_ctr_offset: 0x4 of mm: 0xffff88813aa35600 [ 3272.837178][T30577] netlink: 'syz-executor.4': attribute type 41 has an invalid length. [ 3272.845461][T30577] netlink: 41311 bytes leftover after parsing attributes in process `syz-executor.4'. [ 3272.864608][T30582] ref_ctr going negative. vaddr: 0x20000004, curr val: -18737, delta: 1 [ 3272.873003][T30582] ref_ctr increment failed for inode: 0x48b offset: 0x0 ref_ctr_offset: 0x4 of mm: 0xffff88813c89c980 [ 3278.740887][T30585] ref_ctr going negative. vaddr: 0x20000004, curr val: -18737, delta: 1 [ 3278.749378][T30585] ref_ctr increment failed for inode: 0x48b offset: 0x0 ref_ctr_offset: 0x4 of mm: 0xffff88813c89c4c0 06:24:12 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f0000000380)={0x3, 0x1, 0x7, 0x2, 0xb3, &(0x7f0000000500)}) ioctl$KDGKBLED(r0, 0x4b64, &(0x7f0000000040)) io_uring_setup(0xfc6, &(0x7f0000000180)) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000240)={0x9b0, 0x9, 0x1, 0x4, 0x3}) listen(r1, 0x400000001ffffffd) r2 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$cgroup_subtree(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="88ed7c48cfb680c42f89f97a7def31f7c3754b660e634848a0626b48d0b96e39c051b0006e7ca14700d0"], 0x8) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x1, 0x0, 0x0, 0x4, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x3) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r3, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) 06:24:12 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) recvmsg(r0, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) sendto$inet6(r0, &(0x7f00000001c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0) (async) recvmsg(r0, &(0x7f00000003c0)={0x0, 0x3, 0x0}, 0x0) recvmsg(r0, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x0) (async) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) recvfrom$inet6(r0, &(0x7f0000000000)=""/114, 0xfffffffffffffd1b, 0x0, 0x0, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000040)) (async) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="00281c80", @ANYRES16=r0, @ANYBLOB="ff"], 0x34}}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="f4997c3794"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async, rerun: 64) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="58ad000010", 0x5, 0x0, 0x0, 0x0) (rerun: 64) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@private0, 0x200, 0x0, 0xff, 0x8, 0x8, 0x6}, 0x20) (async) r1 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f0000000000)='s', 0x10a73, 0x81e, 0x0, 0x4b6ae4f95a5de35b) 06:24:12 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f0000000380)={0x3, 0x1, 0x7, 0x2, 0xb3, &(0x7f0000000500)}) ioctl$KDGKBLED(r0, 0x4b64, &(0x7f0000000040)) io_uring_setup(0xfc6, &(0x7f0000000180)) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000240)={0x9b0, 0x9, 0x1, 0x4, 0x3}) listen(r1, 0x400000001ffffffd) r2 = socket$inet_dccp(0x2, 0x6, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f0000000440)=@ipv4_newaddr={0x38, 0x14, 0x8, 0x70bd2d, 0x25dfdbfd, {0x2, 0x78, 0x40, 0xc8}, [@IFA_RT_PRIORITY={0x8, 0x9, 0x9}, @IFA_RT_PRIORITY={0x8, 0x9, 0x200}, @IFA_ADDRESS={0x8, 0x1, @loopback}, @IFA_ADDRESS={0x8, 0x1, @multicast2}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000090}, 0x8000) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev}, 0x10) r3 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$cgroup_subtree(r3, &(0x7f00000003c0)=ANY=[@ANYBLOB="88ed7c48cfb680c42f89f97a7def31f7c3754b660e634848a0626b48d0b96e39c051b0006e7ca14700d0"], 0x8) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r4, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) 06:24:12 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f0000000380)={0x3, 0x1, 0x7, 0x2, 0xb3, &(0x7f0000000500)}) ioctl$KDGKBLED(r0, 0x4b64, &(0x7f0000000040)) io_uring_setup(0xfc6, &(0x7f0000000180)) r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$cgroup_subtree(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="88ed7c48cfb680c42f89f97a7def31f7c3754b660e634848a0626b48d0b96e39c051b0006e7ca14700d0"], 0x8) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x1, 0x0, 0x0, 0x4, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x3) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) 06:24:12 executing program 5: r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e24, @local}, 0x10) writev(r0, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) recvmmsg(r0, &(0x7f0000003e40)=[{{&(0x7f0000000100)=@phonet, 0x80, 0x0, 0x0, &(0x7f00000024c0)=""/4096, 0x1000, 0x500}}, {{0x0, 0x80100200, 0x0, 0x0, &(0x7f00000035c0)=""/241, 0xf1}}, {{&(0x7f00000036c0)=@un=@abs, 0x80, &(0x7f0000003780)=[{&(0x7f0000003740)=""/4, 0xfffffd07}], 0x1, &(0x7f00000037c0)=""/236, 0xec}}, {{&(0x7f00000038c0)=@l2tp6={0xa, 0x0, 0x0, @private1}, 0x80, &(0x7f0000003bc0)=[{0x0}, {&(0x7f0000003a00)=""/190, 0xbe}, {&(0x7f0000003ac0)=""/131, 0x83}, {0x0}], 0x4, &(0x7f0000003c00)=""/73, 0x49}}, {{&(0x7f0000003c80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, 0x0, 0x0, &(0x7f0000003e00)=""/48, 0x30}}], 0x5, 0x40000121, 0x0) 06:24:12 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000005c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e24, @local}, 0x10) writev(r0, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) recvmmsg(r0, &(0x7f0000003e40)=[{{&(0x7f0000000100)=@phonet, 0x80, 0x0, 0x0, &(0x7f00000024c0)=""/4096, 0x1000, 0xa00}}, {{0x0, 0x80100200, 0x0, 0x0, &(0x7f00000035c0)=""/241, 0xf1}}, {{&(0x7f00000036c0)=@un=@abs, 0x80, &(0x7f0000003780)=[{&(0x7f0000003740)=""/4, 0xfffffd07}], 0x1, &(0x7f00000037c0)=""/236, 0xec}}, {{&(0x7f00000038c0)=@l2tp6={0xa, 0x0, 0x0, @private1}, 0x80, &(0x7f0000003bc0)=[{0x0}, {&(0x7f0000003a00)=""/190, 0xbe}, {&(0x7f0000003ac0)=""/131, 0x83}, {0x0}], 0x4, &(0x7f0000003c00)=""/73, 0x49}}, {{&(0x7f0000003c80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, 0x0, 0x0, &(0x7f0000003e00)=""/48, 0x30}}], 0x5, 0x40000121, 0x0) 06:24:12 executing program 2: mknodat(0xffffffffffffffff, &(0x7f0000000540)='./file0\x00', 0x0, 0x0) 06:24:12 executing program 2: mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000002, 0x8003a, 0xffffffffffffffff, 0x0) [ 3279.559417][T30594] ref_ctr going negative. vaddr: 0x20000004, curr val: -18737, delta: 1 [ 3279.568048][T30594] ref_ctr increment failed for inode: 0x49b offset: 0x0 ref_ctr_offset: 0x4 of mm: 0xffff888139dd8140 06:24:12 executing program 2: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/class/power_supply', 0x94500, 0x0) 06:24:12 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) recvmsg(r0, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) sendto$inet6(r0, &(0x7f00000001c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0) recvmsg(r0, &(0x7f00000003c0)={0x0, 0x3, 0x0}, 0x0) recvmsg(r0, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) recvfrom$inet6(r0, &(0x7f0000000000)=""/114, 0xfffffffffffffd1b, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="00281c80", @ANYRES16=r0, @ANYBLOB="ff"], 0x34}}, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x100) r2 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xfffffe29}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x2c, r4, 0x3d92e9cd9e546801, 0x0, 0x0, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}]}, 0x2c}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000180)={'sit0\x00', &(0x7f0000000100)={'sit0\x00', r1, 0x700, 0x1, 0x4, 0xa9, {{0xe, 0x4, 0x3, 0x9, 0x38, 0x64, 0x0, 0x3, 0x4, 0x0, @multicast1, @empty, {[@timestamp={0x44, 0x24, 0xa5, 0x0, 0x8, [0x0, 0x6, 0x9, 0x40, 0x5, 0x3, 0x3, 0x401]}]}}}}}) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r2, &(0x7f0000000440)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000400)={&(0x7f0000000200)={0x5c, r4, 0x601, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x2}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x8}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xffff}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r7}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x800}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x880}, 0x20004800) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="f4997c3794"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="58ad000010", 0x5, 0x0, 0x0, 0x0) r8 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r8, &(0x7f0000000000)='s', 0x10a73, 0x81e, 0x0, 0x4b6ae4f95a5de35b) 06:24:12 executing program 2: openat$cgroup_int(0xffffffffffffffff, &(0x7f00000005c0)='blkio.reset_stats\x00', 0x2, 0x0) 06:24:12 executing program 2: open$dir(&(0x7f0000000000)='./file0\x00', 0x80840, 0x21c) 06:24:12 executing program 2: openat$incfs(0xffffffffffffffff, &(0x7f0000000580)='.log\x00', 0x0, 0x0) 06:24:12 executing program 2: mmap$perf(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) [ 3279.728998][T30612] netlink: 'syz-executor.4': attribute type 48 has an invalid length. [ 3279.737387][T30612] netlink: 14027 bytes leftover after parsing attributes in process `syz-executor.4'. 06:24:13 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f0000000380)={0x3, 0x1, 0x7, 0x2, 0xb3, &(0x7f0000000500)}) ioctl$KDGKBLED(r0, 0x4b64, &(0x7f0000000040)) io_uring_setup(0xfc6, &(0x7f0000000180)) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000240)={0x9b0, 0x9, 0x1, 0x4, 0x3}) listen(r1, 0x400000001ffffffd) r2 = socket$inet_dccp(0x2, 0x6, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f0000000440)=@ipv4_newaddr={0x38, 0x14, 0x8, 0x70bd2d, 0x25dfdbfd, {0x2, 0x78, 0x40, 0xc8}, [@IFA_RT_PRIORITY={0x8, 0x9, 0x9}, @IFA_RT_PRIORITY={0x8, 0x9, 0x200}, @IFA_ADDRESS={0x8, 0x1, @loopback}, @IFA_ADDRESS={0x8, 0x1, @multicast2}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000090}, 0x8000) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev}, 0x10) r3 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$cgroup_subtree(r3, &(0x7f00000003c0)=ANY=[@ANYBLOB="88ed7c48cfb680c42f89f97a7def31f7c3754b660e634848a0626b48d0b96e39c051b0006e7ca14700d0"], 0x8) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r4, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) [ 3283.750671][T30628] ref_ctr going negative. vaddr: 0x20000004, curr val: -18737, delta: 1 [ 3283.759193][T30628] ref_ctr increment failed for inode: 0x48b offset: 0x0 ref_ctr_offset: 0x4 of mm: 0xffff88813a0ab5c0 06:24:17 executing program 2: r0 = open$dir(&(0x7f0000000000)='./file1\x00', 0x1a7041, 0x0) write$binfmt_script(r0, 0x0, 0x0) 06:24:17 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) recvmsg(r0, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) (async) sendto$inet6(r0, &(0x7f00000001c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0) (async, rerun: 32) recvmsg(r0, &(0x7f00000003c0)={0x0, 0x3, 0x0}, 0x0) (async, rerun: 32) recvmsg(r0, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x0) (async) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) (async) recvfrom$inet6(r0, &(0x7f0000000000)=""/114, 0xfffffffffffffd1b, 0x0, 0x0, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) (async, rerun: 32) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="00281c80", @ANYRES16=r0, @ANYBLOB="ff"], 0x34}}, 0x0) (rerun: 32) newfstatat(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x100) r2 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xfffffe29}}, 0x0) (async) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x2c, r4, 0x3d92e9cd9e546801, 0x0, 0x0, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}]}, 0x2c}}, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000180)={'sit0\x00', &(0x7f0000000100)={'sit0\x00', r1, 0x700, 0x1, 0x4, 0xa9, {{0xe, 0x4, 0x3, 0x9, 0x38, 0x64, 0x0, 0x3, 0x4, 0x0, @multicast1, @empty, {[@timestamp={0x44, 0x24, 0xa5, 0x0, 0x8, [0x0, 0x6, 0x9, 0x40, 0x5, 0x3, 0x3, 0x401]}]}}}}}) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r2, &(0x7f0000000440)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000400)={&(0x7f0000000200)={0x5c, r4, 0x601, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x2}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x8}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xffff}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r7}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x800}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x880}, 0x20004800) (async) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="f4997c3794"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="58ad000010", 0x5, 0x0, 0x0, 0x0) r8 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r8, &(0x7f0000000000)='s', 0x10a73, 0x81e, 0x0, 0x4b6ae4f95a5de35b) 06:24:17 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f0000000380)={0x3, 0x1, 0x7, 0x2, 0xb3, &(0x7f0000000500)}) ioctl$KDGKBLED(r0, 0x4b64, &(0x7f0000000040)) r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$cgroup_subtree(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="88ed7c48cfb680c42f89f97a7def31f7c3754b660e634848a0626b48d0b96e39c051b0006e7ca14700d0"], 0x8) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x1, 0x0, 0x0, 0x4, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x3) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) 06:24:17 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000005c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e24, @local}, 0x10) writev(r0, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) recvmmsg(r0, &(0x7f0000003e40)=[{{&(0x7f0000000100)=@phonet, 0x80, 0x0, 0x0, &(0x7f00000024c0)=""/4096, 0x1000, 0xf00}}, {{0x0, 0x80100200, 0x0, 0x0, &(0x7f00000035c0)=""/241, 0xf1}}, {{&(0x7f00000036c0)=@un=@abs, 0x80, &(0x7f0000003780)=[{&(0x7f0000003740)=""/4, 0xfffffd07}], 0x1, &(0x7f00000037c0)=""/236, 0xec}}, {{&(0x7f00000038c0)=@l2tp6={0xa, 0x0, 0x0, @private1}, 0x80, &(0x7f0000003bc0)=[{0x0}, {&(0x7f0000003a00)=""/190, 0xbe}, {&(0x7f0000003ac0)=""/131, 0x83}, {0x0}], 0x4, &(0x7f0000003c00)=""/73, 0x49}}, {{&(0x7f0000003c80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, 0x0, 0x0, &(0x7f0000003e00)=""/48, 0x30}}], 0x5, 0x40000121, 0x0) 06:24:17 executing program 5: r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e24, @local}, 0x10) writev(r0, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) recvmmsg(r0, &(0x7f0000003e40)=[{{&(0x7f0000000100)=@phonet, 0x80, 0x0, 0x0, &(0x7f00000024c0)=""/4096, 0x1000, 0x600}}, {{0x0, 0x80100200, 0x0, 0x0, &(0x7f00000035c0)=""/241, 0xf1}}, {{&(0x7f00000036c0)=@un=@abs, 0x80, &(0x7f0000003780)=[{&(0x7f0000003740)=""/4, 0xfffffd07}], 0x1, &(0x7f00000037c0)=""/236, 0xec}}, {{&(0x7f00000038c0)=@l2tp6={0xa, 0x0, 0x0, @private1}, 0x80, &(0x7f0000003bc0)=[{0x0}, {&(0x7f0000003a00)=""/190, 0xbe}, {&(0x7f0000003ac0)=""/131, 0x83}, {0x0}], 0x4, &(0x7f0000003c00)=""/73, 0x49}}, {{&(0x7f0000003c80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, 0x0, 0x0, &(0x7f0000003e00)=""/48, 0x30}}], 0x5, 0x40000121, 0x0) 06:24:17 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f0000000380)={0x3, 0x1, 0x7, 0x2, 0xb3, &(0x7f0000000500)}) ioctl$KDGKBLED(r0, 0x4b64, &(0x7f0000000040)) io_uring_setup(0xfc6, &(0x7f0000000180)) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000240)={0x9b0, 0x9, 0x1, 0x4, 0x3}) listen(r1, 0x400000001ffffffd) r2 = socket$inet_dccp(0x2, 0x6, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f0000000440)=@ipv4_newaddr={0x38, 0x14, 0x8, 0x70bd2d, 0x25dfdbfd, {0x2, 0x78, 0x40, 0xc8}, [@IFA_RT_PRIORITY={0x8, 0x9, 0x9}, @IFA_RT_PRIORITY={0x8, 0x9, 0x200}, @IFA_ADDRESS={0x8, 0x1, @loopback}, @IFA_ADDRESS={0x8, 0x1, @multicast2}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000090}, 0x8000) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev}, 0x10) r3 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$cgroup_subtree(r3, &(0x7f00000003c0)=ANY=[@ANYBLOB="88ed7c48cfb680c42f89f97a7def31f7c3754b660e634848a0626b48d0b96e39c051b0006e7ca14700d0"], 0x8) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x1, 0x0, 0x0, 0x4, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x3) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r4, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) 06:24:17 executing program 2: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000001600)='/sys/class/power_supply', 0x0, 0x0) ioctl$sock_inet6_udp_SIOCINQ(r0, 0x541b, 0x0) 06:24:17 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) recvmsg(r0, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) sendto$inet6(r0, &(0x7f00000001c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0) recvmsg(r0, &(0x7f00000003c0)={0x0, 0x3, 0x0}, 0x0) (async) recvmsg(r0, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x0) (async) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) recvfrom$inet6(r0, &(0x7f0000000000)=""/114, 0xfffffffffffffd1b, 0x0, 0x0, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="00281c80", @ANYRES16=r0, @ANYBLOB="ff"], 0x34}}, 0x0) (async) newfstatat(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x100) (async) r2 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xfffffe29}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x2c, r4, 0x3d92e9cd9e546801, 0x0, 0x0, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}]}, 0x2c}}, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000180)={'sit0\x00', &(0x7f0000000100)={'sit0\x00', r1, 0x700, 0x1, 0x4, 0xa9, {{0xe, 0x4, 0x3, 0x9, 0x38, 0x64, 0x0, 0x3, 0x4, 0x0, @multicast1, @empty, {[@timestamp={0x44, 0x24, 0xa5, 0x0, 0x8, [0x0, 0x6, 0x9, 0x40, 0x5, 0x3, 0x3, 0x401]}]}}}}}) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r2, &(0x7f0000000440)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000400)={&(0x7f0000000200)={0x5c, r4, 0x601, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x2}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x8}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xffff}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r7}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x800}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x880}, 0x20004800) (async) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="f4997c3794"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="58ad000010", 0x5, 0x0, 0x0, 0x0) (async) r8 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r8, &(0x7f0000000000)='s', 0x10a73, 0x81e, 0x0, 0x4b6ae4f95a5de35b) 06:24:17 executing program 2: open$dir(&(0x7f0000000000)='./file1\x00', 0x1a7041, 0x68) 06:24:17 executing program 2: epoll_pwait(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000180), 0x8) 06:24:17 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) recvmsg(r0, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) sendto$inet6(r0, &(0x7f00000001c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0) recvmsg(r0, &(0x7f00000003c0)={0x0, 0x3, 0x0}, 0x0) recvmsg(r0, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) recvfrom$inet6(r0, &(0x7f0000000000)=""/114, 0xfffffffffffffd1b, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000040)) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="00281c80", @ANYRES16=r0, @ANYBLOB="ff"], 0x34}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="b2997c3794"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="58ad000010", 0x5, 0x0, 0x0, 0x0) r1 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f0000000000)='s', 0x10a73, 0x81e, 0x0, 0x4b6ae4f95a5de35b) 06:24:17 executing program 2: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/class/power_supply', 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) 06:24:17 executing program 2: open$dir(&(0x7f0000000000)='./file1\x00', 0x1a7041, 0x0) open$dir(&(0x7f0000000040)='./file1/file0\x00', 0x0, 0x0) [ 3284.688762][T30662] netlink: 'syz-executor.4': attribute type 41 has an invalid length. [ 3284.697082][T30662] netlink: 44123 bytes leftover after parsing attributes in process `syz-executor.4'. 06:24:17 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) write$9p(r1, &(0x7f0000000000), 0x0) [ 3284.731056][T30662] A link change request failed with some changes committed already. Interface ip6tnl0 may have been left with an inconsistent configuration, please check. 06:24:23 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f0000000380)={0x3, 0x1, 0x7, 0x2, 0xb3, &(0x7f0000000500)}) r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$cgroup_subtree(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="88ed7c48cfb680c42f89f97a7def31f7c3754b660e634848a0626b48d0b96e39c051b0006e7ca14700d0"], 0x8) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x1, 0x0, 0x0, 0x4, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x3) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) 06:24:23 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) recvmsg(r0, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) (async) sendto$inet6(r0, &(0x7f00000001c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0) recvmsg(r0, &(0x7f00000003c0)={0x0, 0x3, 0x0}, 0x0) (async) recvmsg(r0, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) (async) recvfrom$inet6(r0, &(0x7f0000000000)=""/114, 0xfffffffffffffd1b, 0x0, 0x0, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000040)) (async) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="00281c80", @ANYRES16=r0, @ANYBLOB="ff"], 0x34}}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="b2997c3794"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="58ad000010", 0x5, 0x0, 0x0, 0x0) (async) r1 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f0000000000)='s', 0x10a73, 0x81e, 0x0, 0x4b6ae4f95a5de35b) 06:24:23 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) write$P9_RCLUNK(r1, 0x0, 0x0) 06:24:23 executing program 5: r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e24, @local}, 0x10) writev(r0, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) recvmmsg(r0, &(0x7f0000003e40)=[{{&(0x7f0000000100)=@phonet, 0x80, 0x0, 0x0, &(0x7f00000024c0)=""/4096, 0x1000, 0x700}}, {{0x0, 0x80100200, 0x0, 0x0, &(0x7f00000035c0)=""/241, 0xf1}}, {{&(0x7f00000036c0)=@un=@abs, 0x80, &(0x7f0000003780)=[{&(0x7f0000003740)=""/4, 0xfffffd07}], 0x1, &(0x7f00000037c0)=""/236, 0xec}}, {{&(0x7f00000038c0)=@l2tp6={0xa, 0x0, 0x0, @private1}, 0x80, &(0x7f0000003bc0)=[{0x0}, {&(0x7f0000003a00)=""/190, 0xbe}, {&(0x7f0000003ac0)=""/131, 0x83}, {0x0}], 0x4, &(0x7f0000003c00)=""/73, 0x49}}, {{&(0x7f0000003c80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, 0x0, 0x0, &(0x7f0000003e00)=""/48, 0x30}}], 0x5, 0x40000121, 0x0) 06:24:23 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000005c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e24, @local}, 0x10) writev(r0, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) recvmmsg(r0, &(0x7f0000003e40)=[{{&(0x7f0000000100)=@phonet, 0x80, 0x0, 0x0, &(0x7f00000024c0)=""/4096, 0x1000, 0x1500}}, {{0x0, 0x80100200, 0x0, 0x0, &(0x7f00000035c0)=""/241, 0xf1}}, {{&(0x7f00000036c0)=@un=@abs, 0x80, &(0x7f0000003780)=[{&(0x7f0000003740)=""/4, 0xfffffd07}], 0x1, &(0x7f00000037c0)=""/236, 0xec}}, {{&(0x7f00000038c0)=@l2tp6={0xa, 0x0, 0x0, @private1}, 0x80, &(0x7f0000003bc0)=[{0x0}, {&(0x7f0000003a00)=""/190, 0xbe}, {&(0x7f0000003ac0)=""/131, 0x83}, {0x0}], 0x4, &(0x7f0000003c00)=""/73, 0x49}}, {{&(0x7f0000003c80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, 0x0, 0x0, &(0x7f0000003e00)=""/48, 0x30}}], 0x5, 0x40000121, 0x0) 06:24:23 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f0000000380)={0x3, 0x1, 0x7, 0x2, 0xb3, &(0x7f0000000500)}) ioctl$KDGKBLED(r0, 0x4b64, &(0x7f0000000040)) io_uring_setup(0xfc6, &(0x7f0000000180)) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000240)={0x9b0, 0x9, 0x1, 0x4, 0x3}) listen(r1, 0x400000001ffffffd) r2 = socket$inet_dccp(0x2, 0x6, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f0000000440)=@ipv4_newaddr={0x38, 0x14, 0x8, 0x70bd2d, 0x25dfdbfd, {0x2, 0x78, 0x40, 0xc8}, [@IFA_RT_PRIORITY={0x8, 0x9, 0x9}, @IFA_RT_PRIORITY={0x8, 0x9, 0x200}, @IFA_ADDRESS={0x8, 0x1, @loopback}, @IFA_ADDRESS={0x8, 0x1, @multicast2}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000090}, 0x8000) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev}, 0x10) r3 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$cgroup_subtree(r3, &(0x7f00000003c0)=ANY=[@ANYBLOB="88ed7c48cfb680c42f89f97a7def31f7c3754b660e634848a0626b48d0b96e39c051b0006e7ca14700d0"], 0x8) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x1, 0x0, 0x0, 0x4, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x3) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r4, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) 06:24:23 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) write$P9_RLINK(r2, 0x0, 0x0) [ 3290.776185][T30672] ref_ctr going negative. vaddr: 0x20000004, curr val: -18737, delta: 1 [ 3290.784662][T30672] ref_ctr increment failed for inode: 0x48b offset: 0x0 ref_ctr_offset: 0x4 of mm: 0xffff88813c89c4c0 06:24:23 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) recvmsg(r0, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) sendto$inet6(r0, &(0x7f00000001c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0) recvmsg(r0, &(0x7f00000003c0)={0x0, 0x3, 0x0}, 0x0) recvmsg(r0, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) recvfrom$inet6(r0, &(0x7f0000000000)=""/114, 0xfffffffffffffd1b, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000040)) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="00281c80", @ANYRES16=r0, @ANYBLOB="ff"], 0x34}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="b2997c3794"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="58ad000010", 0x5, 0x0, 0x0, 0x0) r1 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f0000000000)='s', 0x10a73, 0x81e, 0x0, 0x4b6ae4f95a5de35b) socket$inet6(0x10, 0x3, 0x0) (async) recvmsg(r0, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) (async) sendto$inet6(r0, &(0x7f00000001c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0) (async) recvmsg(r0, &(0x7f00000003c0)={0x0, 0x3, 0x0}, 0x0) (async) recvmsg(r0, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x0) (async) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) (async) recvfrom$inet6(r0, &(0x7f0000000000)=""/114, 0xfffffffffffffd1b, 0x0, 0x0, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000040)) (async) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="00281c80", @ANYRES16=r0, @ANYBLOB="ff"], 0x34}}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="b2997c3794"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="58ad000010", 0x5, 0x0, 0x0, 0x0) (async) socket$inet6(0x10, 0x3, 0x0) (async) sendto$inet6(r1, &(0x7f0000000000)='s', 0x10a73, 0x81e, 0x0, 0x4b6ae4f95a5de35b) (async) 06:24:23 executing program 2: r0 = signalfd(0xffffffffffffffff, &(0x7f00000074c0), 0x8) r1 = signalfd(r0, &(0x7f00000000c0), 0x8) write$cgroup_int(r1, 0x0, 0x0) 06:24:24 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = signalfd(0xffffffffffffffff, &(0x7f00000074c0), 0x8) r2 = fcntl$dupfd(r0, 0x0, r1) write$cgroup_int(r2, 0x0, 0x0) 06:24:24 executing program 2: r0 = signalfd(0xffffffffffffffff, &(0x7f00000074c0), 0x8) r1 = signalfd(r0, &(0x7f0000000000), 0x8) write$binfmt_script(r1, 0x0, 0x0) 06:24:24 executing program 2: pselect6(0x40, &(0x7f00000003c0), &(0x7f0000000400), &(0x7f0000000440)={0x8}, 0x0, &(0x7f0000000540)={&(0x7f0000000500)={[0x80000001]}, 0x8}) [ 3290.918152][T30694] netlink: 'syz-executor.4': attribute type 41 has an invalid length. [ 3290.926536][T30694] netlink: 44123 bytes leftover after parsing attributes in process `syz-executor.4'. [ 3290.938375][T30694] A link change request failed with some changes committed already. Interface ip6tnl0 may have been left with an inconsistent configuration, please check. 06:24:32 executing program 2: r0 = epoll_create1(0x0) epoll_pwait2(r0, &(0x7f0000000100)=[{}], 0x1, 0x0, 0x0, 0x0) 06:24:32 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) recvmsg(r0, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) sendto$inet6(r0, &(0x7f00000001c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0) recvmsg(r0, &(0x7f00000003c0)={0x0, 0x3, 0x0}, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) recvfrom(r1, &(0x7f00000000c0)=""/164, 0xa4, 0x100, &(0x7f0000000200)=@rc={0x1f, @any, 0xa2}, 0x80) recvmsg(r0, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) recvfrom$inet6(r0, &(0x7f0000000000)=""/114, 0xfffffffffffffd1b, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000040)) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="00281c80", @ANYRES16=r0, @ANYBLOB="ff"], 0x34}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="f4997c3794"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="58ad000010", 0x5, 0x0, 0x0, 0x0) r2 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r2, &(0x7f0000000000)='s', 0x10a73, 0x81e, 0x0, 0x4b6ae4f95a5de35b) 06:24:32 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f0000000380)={0x3, 0x1, 0x7, 0x2, 0xb3, &(0x7f0000000500)}) ioctl$KDGKBLED(r0, 0x4b64, &(0x7f0000000040)) io_uring_setup(0xfc6, &(0x7f0000000180)) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000240)={0x9b0, 0x9, 0x1, 0x4, 0x3}) listen(r1, 0x400000001ffffffd) r2 = socket$inet_dccp(0x2, 0x6, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f0000000440)=@ipv4_newaddr={0x38, 0x14, 0x8, 0x70bd2d, 0x25dfdbfd, {0x2, 0x78, 0x40, 0xc8}, [@IFA_RT_PRIORITY={0x8, 0x9, 0x9}, @IFA_RT_PRIORITY={0x8, 0x9, 0x200}, @IFA_ADDRESS={0x8, 0x1, @loopback}, @IFA_ADDRESS={0x8, 0x1, @multicast2}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000090}, 0x8000) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev}, 0x10) r3 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$cgroup_subtree(r3, &(0x7f00000003c0)=ANY=[@ANYBLOB="88ed7c48cfb680c42f89f97a7def31f7c3754b660e634848a0626b48d0b96e39c051b0006e7ca14700d0"], 0x8) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x1, 0x0, 0x0, 0x4, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x3) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r4, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) 06:24:32 executing program 0: syz_open_dev$tty20(0xc, 0x4, 0x0) r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$cgroup_subtree(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="88ed7c48cfb680c42f89f97a7def31f7c3754b660e634848a0626b48d0b96e39c051b0006e7ca14700d0"], 0x8) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x1, 0x0, 0x0, 0x4, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x3) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) 06:24:32 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000005c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e24, @local}, 0x10) writev(r0, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) recvmmsg(r0, &(0x7f0000003e40)=[{{&(0x7f0000000100)=@phonet, 0x80, 0x0, 0x0, &(0x7f00000024c0)=""/4096, 0x1000, 0x2000}}, {{0x0, 0x80100200, 0x0, 0x0, &(0x7f00000035c0)=""/241, 0xf1}}, {{&(0x7f00000036c0)=@un=@abs, 0x80, &(0x7f0000003780)=[{&(0x7f0000003740)=""/4, 0xfffffd07}], 0x1, &(0x7f00000037c0)=""/236, 0xec}}, {{&(0x7f00000038c0)=@l2tp6={0xa, 0x0, 0x0, @private1}, 0x80, &(0x7f0000003bc0)=[{0x0}, {&(0x7f0000003a00)=""/190, 0xbe}, {&(0x7f0000003ac0)=""/131, 0x83}, {0x0}], 0x4, &(0x7f0000003c00)=""/73, 0x49}}, {{&(0x7f0000003c80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, 0x0, 0x0, &(0x7f0000003e00)=""/48, 0x30}}], 0x5, 0x40000121, 0x0) 06:24:32 executing program 5: r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e24, @local}, 0x10) writev(r0, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) recvmmsg(r0, &(0x7f0000003e40)=[{{&(0x7f0000000100)=@phonet, 0x80, 0x0, 0x0, &(0x7f00000024c0)=""/4096, 0x1000, 0xa00}}, {{0x0, 0x80100200, 0x0, 0x0, &(0x7f00000035c0)=""/241, 0xf1}}, {{&(0x7f00000036c0)=@un=@abs, 0x80, &(0x7f0000003780)=[{&(0x7f0000003740)=""/4, 0xfffffd07}], 0x1, &(0x7f00000037c0)=""/236, 0xec}}, {{&(0x7f00000038c0)=@l2tp6={0xa, 0x0, 0x0, @private1}, 0x80, &(0x7f0000003bc0)=[{0x0}, {&(0x7f0000003a00)=""/190, 0xbe}, {&(0x7f0000003ac0)=""/131, 0x83}, {0x0}], 0x4, &(0x7f0000003c00)=""/73, 0x49}}, {{&(0x7f0000003c80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, 0x0, 0x0, &(0x7f0000003e00)=""/48, 0x30}}], 0x5, 0x40000121, 0x0) [ 3299.179828][T30717] ref_ctr going negative. vaddr: 0x20000004, curr val: -18737, delta: 1 [ 3299.188311][T30717] ref_ctr increment failed for inode: 0x48a offset: 0x0 ref_ctr_offset: 0x4 of mm: 0xffff88813a1b8500 06:24:32 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) recvmsg(r0, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) (async, rerun: 32) sendto$inet6(r0, &(0x7f00000001c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0) (rerun: 32) recvmsg(r0, &(0x7f00000003c0)={0x0, 0x3, 0x0}, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) recvfrom(r1, &(0x7f00000000c0)=""/164, 0xa4, 0x100, &(0x7f0000000200)=@rc={0x1f, @any, 0xa2}, 0x80) (async) recvmsg(r0, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) (async) recvfrom$inet6(r0, &(0x7f0000000000)=""/114, 0xfffffffffffffd1b, 0x0, 0x0, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000040)) (async) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="00281c80", @ANYRES16=r0, @ANYBLOB="ff"], 0x34}}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="f4997c3794"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="58ad000010", 0x5, 0x0, 0x0, 0x0) (async, rerun: 32) r2 = socket$inet6(0x10, 0x3, 0x0) (rerun: 32) sendto$inet6(r2, &(0x7f0000000000)='s', 0x10a73, 0x81e, 0x0, 0x4b6ae4f95a5de35b) [ 3299.272028][T30729] netlink: 'syz-executor.4': attribute type 41 has an invalid length. [ 3299.280341][T30729] netlink: 44123 bytes leftover after parsing attributes in process `syz-executor.4'. [ 3299.295950][T30729] A link change request failed with some changes committed already. Interface ip6tnl0 may have been left with an inconsistent configuration, please check. 06:24:32 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) recvmsg(r0, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) (async) sendto$inet6(r0, &(0x7f00000001c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0) (async) recvmsg(r0, &(0x7f00000003c0)={0x0, 0x3, 0x0}, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) (async) recvfrom(r1, &(0x7f00000000c0)=""/164, 0xa4, 0x100, &(0x7f0000000200)=@rc={0x1f, @any, 0xa2}, 0x80) (async) recvmsg(r0, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) (async) recvfrom$inet6(r0, &(0x7f0000000000)=""/114, 0xfffffffffffffd1b, 0x0, 0x0, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000040)) (async) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="00281c80", @ANYRES16=r0, @ANYBLOB="ff"], 0x34}}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="f4997c3794"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="58ad000010", 0x5, 0x0, 0x0, 0x0) r2 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r2, &(0x7f0000000000)='s', 0x10a73, 0x81e, 0x0, 0x4b6ae4f95a5de35b) [ 3299.389140][T30734] netlink: 25683 bytes leftover after parsing attributes in process `syz-executor.4'. 06:24:32 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) recvmsg(r0, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) sendto$inet6(r0, &(0x7f00000001c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0) recvmsg(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0xc}, 0x100) recvmsg(r0, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xfffffe29}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) recvfrom$inet6(r1, &(0x7f0000000100)=""/172, 0xb4, 0x40000002, &(0x7f0000000200)={0xa, 0x4e20, 0x6, @remote, 0x8}, 0xffffffffffffff87) recvfrom$inet6(r0, &(0x7f0000000000)=""/114, 0xfffffffffffffd1b, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000040)) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="00281c80", @ANYRES16=r0, @ANYBLOB="ff"], 0x34}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="f4997c3794"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="58ad000010", 0x5, 0x0, 0x0, 0x0) r2 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r2, &(0x7f0000000000)='s', 0x10a73, 0x81e, 0x0, 0x4b6ae4f95a5de35b) 06:24:32 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) recvmsg(r0, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) (async, rerun: 32) sendto$inet6(r0, &(0x7f00000001c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0) (rerun: 32) recvmsg(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0xc}, 0x100) (async) recvmsg(r0, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xfffffe29}}, 0x0) (async) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) recvfrom$inet6(r1, &(0x7f0000000100)=""/172, 0xb4, 0x40000002, &(0x7f0000000200)={0xa, 0x4e20, 0x6, @remote, 0x8}, 0xffffffffffffff87) (async, rerun: 64) recvfrom$inet6(r0, &(0x7f0000000000)=""/114, 0xfffffffffffffd1b, 0x0, 0x0, 0x0) (async, rerun: 64) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000040)) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="00281c80", @ANYRES16=r0, @ANYBLOB="ff"], 0x34}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="f4997c3794"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="58ad000010", 0x5, 0x0, 0x0, 0x0) r2 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r2, &(0x7f0000000000)='s', 0x10a73, 0x81e, 0x0, 0x4b6ae4f95a5de35b) 06:24:32 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) recvmsg(r0, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) (async) recvmsg(r0, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) sendto$inet6(r0, &(0x7f00000001c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0) recvmsg(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0xc}, 0x100) (async) recvmsg(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0xc}, 0x100) recvmsg(r0, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xfffffe29}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) recvfrom$inet6(r1, &(0x7f0000000100)=""/172, 0xb4, 0x40000002, &(0x7f0000000200)={0xa, 0x4e20, 0x6, @remote, 0x8}, 0xffffffffffffff87) recvfrom$inet6(r0, &(0x7f0000000000)=""/114, 0xfffffffffffffd1b, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000040)) (async) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000040)) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="00281c80", @ANYRES16=r0, @ANYBLOB="ff"], 0x34}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="f4997c3794"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="f4997c3794"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="58ad000010", 0x5, 0x0, 0x0, 0x0) r2 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r2, &(0x7f0000000000)='s', 0x10a73, 0x81e, 0x0, 0x4b6ae4f95a5de35b) [ 3299.519712][T30742] netlink: 18367 bytes leftover after parsing attributes in process `syz-executor.4'. 06:24:32 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) recvmsg(r0, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) sendto$inet6(r0, &(0x7f00000001c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0) recvmsg(r0, &(0x7f00000003c0)={0x0, 0x3, 0x0}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'bridge_slave_1\x00'}, @IFLA_MASTER={0x8, 0xa, r3}, @IFLA_MTU={0x8, 0x4, 0x1da}]}, 0x44}}, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) bind$unix(r4, &(0x7f0000000380)=@file={0x1, './file0\x00'}, 0x6e) listen(r4, 0x0) r5 = dup(r4) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r4}}) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000004c0)={0x6a1d, 0x0}, 0x8) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000500)={{0x1, 0x1, 0x18, r0, {0x4}}, './file0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0xb, 0x5, &(0x7f0000000180)=@raw=[@exit, @ldst={0x2, 0x2, 0x1, 0x9, 0x1, 0x2, 0xfffffffffffffffc}, @call={0x85, 0x0, 0x0, 0xc7}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffb}, @ldst={0xcb42b40c76688d27, 0x0, 0x1, 0x6, 0x5, 0x4, 0x10}], &(0x7f0000000200)='syzkaller\x00', 0x1ff, 0x70, &(0x7f0000000400)=""/112, 0x40f00, 0xf, '\x00', r3, 0x2f, r5, 0x8, &(0x7f0000000240)={0x4, 0x3}, 0x8, 0x10, &(0x7f0000000480)={0x0, 0x8, 0x81, 0xad}, 0x10, r6, r7, 0x0, &(0x7f0000000540)=[0xffffffffffffffff]}, 0x80) recvmsg(r0, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x0) r8 = socket(0x10, 0x803, 0x0) recvmsg(r8, &(0x7f0000000340)={0x0, 0xffffffffffffff23, 0x0}, 0x40012161) recvfrom$inet6(r0, &(0x7f0000000000)=""/114, 0xfffffffffffffd1b, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="00281c80", @ANYRES16=r0, @ANYBLOB="ff"], 0x34}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="f4997c3794"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r10 = accept4$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000100)=0x1c, 0x80800) setsockopt$MRT6_DEL_MIF(r10, 0x29, 0xcb, &(0x7f0000000140)={0x1, 0x0, 0x9, r9, 0x5}, 0xc) r11 = accept4$inet6(r10, 0x0, &(0x7f0000000600), 0x800) getsockopt$IP6T_SO_GET_INFO(r11, 0x29, 0x40, &(0x7f0000000680)={'mangle\x00', 0x0, [0x81, 0x800, 0xfff, 0x5, 0x6351]}, &(0x7f0000000700)=0x54) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="58ad000010", 0x5, 0x0, 0x0, 0x0) r12 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r12, &(0x7f0000000000)='s', 0x10a73, 0x81e, 0x0, 0x4b6ae4f95a5de35b) [ 3299.622073][T30751] netlink: 'syz-executor.4': attribute type 41 has an invalid length. [ 3299.630278][T30751] netlink: 44123 bytes leftover after parsing attributes in process `syz-executor.4'. [ 3299.640043][T30751] A link change request failed with some changes committed already. Interface ip6tnl0 may have been left with an inconsistent configuration, please check. [ 3299.782270][T30756] netlink: 18367 bytes leftover after parsing attributes in process `syz-executor.4'. 06:24:33 executing program 2: epoll_create(0x101) 06:24:33 executing program 5: r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e24, @local}, 0x10) writev(r0, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) recvmmsg(r0, &(0x7f0000003e40)=[{{&(0x7f0000000100)=@phonet, 0x80, 0x0, 0x0, &(0x7f00000024c0)=""/4096, 0x1000, 0xf00}}, {{0x0, 0x80100200, 0x0, 0x0, &(0x7f00000035c0)=""/241, 0xf1}}, {{&(0x7f00000036c0)=@un=@abs, 0x80, &(0x7f0000003780)=[{&(0x7f0000003740)=""/4, 0xfffffd07}], 0x1, &(0x7f00000037c0)=""/236, 0xec}}, {{&(0x7f00000038c0)=@l2tp6={0xa, 0x0, 0x0, @private1}, 0x80, &(0x7f0000003bc0)=[{0x0}, {&(0x7f0000003a00)=""/190, 0xbe}, {&(0x7f0000003ac0)=""/131, 0x83}, {0x0}], 0x4, &(0x7f0000003c00)=""/73, 0x49}}, {{&(0x7f0000003c80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, 0x0, 0x0, &(0x7f0000003e00)=""/48, 0x30}}], 0x5, 0x40000121, 0x0) 06:24:33 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f0000000380)={0x3, 0x1, 0x7, 0x2, 0xb3, &(0x7f0000000500)}) ioctl$KDGKBLED(r0, 0x4b64, &(0x7f0000000040)) io_uring_setup(0xfc6, &(0x7f0000000180)) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000240)={0x9b0, 0x9, 0x1, 0x4, 0x3}) listen(r1, 0x400000001ffffffd) r2 = socket$inet_dccp(0x2, 0x6, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f0000000440)=@ipv4_newaddr={0x38, 0x14, 0x8, 0x70bd2d, 0x25dfdbfd, {0x2, 0x78, 0x40, 0xc8}, [@IFA_RT_PRIORITY={0x8, 0x9, 0x9}, @IFA_RT_PRIORITY={0x8, 0x9, 0x200}, @IFA_ADDRESS={0x8, 0x1, @loopback}, @IFA_ADDRESS={0x8, 0x1, @multicast2}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000090}, 0x8000) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev}, 0x10) creat(&(0x7f00000000c0)='./bus\x00', 0x0) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x1, 0x0, 0x0, 0x4, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x3) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r3, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) 06:24:38 executing program 0: r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$cgroup_subtree(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="88ed7c48cfb680c42f89f97a7def31f7c3754b660e634848a0626b48d0b96e39c051b0006e7ca14700d0"], 0x8) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x1, 0x0, 0x0, 0x4, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x3) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) 06:24:38 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000005c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e24, @local}, 0x10) writev(r0, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) recvmmsg(r0, &(0x7f0000003e40)=[{{&(0x7f0000000100)=@phonet, 0x80, 0x0, 0x0, &(0x7f00000024c0)=""/4096, 0x1000, 0x3400}}, {{0x0, 0x80100200, 0x0, 0x0, &(0x7f00000035c0)=""/241, 0xf1}}, {{&(0x7f00000036c0)=@un=@abs, 0x80, &(0x7f0000003780)=[{&(0x7f0000003740)=""/4, 0xfffffd07}], 0x1, &(0x7f00000037c0)=""/236, 0xec}}, {{&(0x7f00000038c0)=@l2tp6={0xa, 0x0, 0x0, @private1}, 0x80, &(0x7f0000003bc0)=[{0x0}, {&(0x7f0000003a00)=""/190, 0xbe}, {&(0x7f0000003ac0)=""/131, 0x83}, {0x0}], 0x4, &(0x7f0000003c00)=""/73, 0x49}}, {{&(0x7f0000003c80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, 0x0, 0x0, &(0x7f0000003e00)=""/48, 0x30}}], 0x5, 0x40000121, 0x0) 06:24:38 executing program 2: statx(0xffffffffffffffff, &(0x7f00000027c0)='./file0/file0\x00', 0x400, 0x0, 0x0) 06:24:38 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) recvmsg(r0, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) (async) sendto$inet6(r0, &(0x7f00000001c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0) (async) recvmsg(r0, &(0x7f00000003c0)={0x0, 0x3, 0x0}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'bridge_slave_1\x00'}, @IFLA_MASTER={0x8, 0xa, r3}, @IFLA_MTU={0x8, 0x4, 0x1da}]}, 0x44}}, 0x0) (async, rerun: 32) r4 = socket$unix(0x1, 0x5, 0x0) (rerun: 32) bind$unix(r4, &(0x7f0000000380)=@file={0x1, './file0\x00'}, 0x6e) (async, rerun: 64) listen(r4, 0x0) (rerun: 64) r5 = dup(r4) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r4}}) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000004c0)={0x6a1d, 0x0}, 0x8) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000500)={{0x1, 0x1, 0x18, r0, {0x4}}, './file0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0xb, 0x5, &(0x7f0000000180)=@raw=[@exit, @ldst={0x2, 0x2, 0x1, 0x9, 0x1, 0x2, 0xfffffffffffffffc}, @call={0x85, 0x0, 0x0, 0xc7}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffb}, @ldst={0xcb42b40c76688d27, 0x0, 0x1, 0x6, 0x5, 0x4, 0x10}], &(0x7f0000000200)='syzkaller\x00', 0x1ff, 0x70, &(0x7f0000000400)=""/112, 0x40f00, 0xf, '\x00', r3, 0x2f, r5, 0x8, &(0x7f0000000240)={0x4, 0x3}, 0x8, 0x10, &(0x7f0000000480)={0x0, 0x8, 0x81, 0xad}, 0x10, r6, r7, 0x0, &(0x7f0000000540)=[0xffffffffffffffff]}, 0x80) (async) recvmsg(r0, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x0) (async, rerun: 64) r8 = socket(0x10, 0x803, 0x0) (rerun: 64) recvmsg(r8, &(0x7f0000000340)={0x0, 0xffffffffffffff23, 0x0}, 0x40012161) recvfrom$inet6(r0, &(0x7f0000000000)=""/114, 0xfffffffffffffd1b, 0x0, 0x0, 0x0) (async, rerun: 32) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) (async, rerun: 32) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="00281c80", @ANYRES16=r0, @ANYBLOB="ff"], 0x34}}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="f4997c3794"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r10 = accept4$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000100)=0x1c, 0x80800) setsockopt$MRT6_DEL_MIF(r10, 0x29, 0xcb, &(0x7f0000000140)={0x1, 0x0, 0x9, r9, 0x5}, 0xc) r11 = accept4$inet6(r10, 0x0, &(0x7f0000000600), 0x800) getsockopt$IP6T_SO_GET_INFO(r11, 0x29, 0x40, &(0x7f0000000680)={'mangle\x00', 0x0, [0x81, 0x800, 0xfff, 0x5, 0x6351]}, &(0x7f0000000700)=0x54) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="58ad000010", 0x5, 0x0, 0x0, 0x0) (async) r12 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r12, &(0x7f0000000000)='s', 0x10a73, 0x81e, 0x0, 0x4b6ae4f95a5de35b) 06:24:38 executing program 5: r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e24, @local}, 0x10) writev(r0, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) recvmmsg(r0, &(0x7f0000003e40)=[{{&(0x7f0000000100)=@phonet, 0x80, 0x0, 0x0, &(0x7f00000024c0)=""/4096, 0x1000, 0x1500}}, {{0x0, 0x80100200, 0x0, 0x0, &(0x7f00000035c0)=""/241, 0xf1}}, {{&(0x7f00000036c0)=@un=@abs, 0x80, &(0x7f0000003780)=[{&(0x7f0000003740)=""/4, 0xfffffd07}], 0x1, &(0x7f00000037c0)=""/236, 0xec}}, {{&(0x7f00000038c0)=@l2tp6={0xa, 0x0, 0x0, @private1}, 0x80, &(0x7f0000003bc0)=[{0x0}, {&(0x7f0000003a00)=""/190, 0xbe}, {&(0x7f0000003ac0)=""/131, 0x83}, {0x0}], 0x4, &(0x7f0000003c00)=""/73, 0x49}}, {{&(0x7f0000003c80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, 0x0, 0x0, &(0x7f0000003e00)=""/48, 0x30}}], 0x5, 0x40000121, 0x0) 06:24:38 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f0000000380)={0x3, 0x1, 0x7, 0x2, 0xb3, &(0x7f0000000500)}) ioctl$KDGKBLED(r0, 0x4b64, &(0x7f0000000040)) io_uring_setup(0xfc6, &(0x7f0000000180)) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000240)={0x9b0, 0x9, 0x1, 0x4, 0x3}) listen(r1, 0x400000001ffffffd) r2 = socket$inet_dccp(0x2, 0x6, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f0000000440)=@ipv4_newaddr={0x38, 0x14, 0x8, 0x70bd2d, 0x25dfdbfd, {0x2, 0x78, 0x40, 0xc8}, [@IFA_RT_PRIORITY={0x8, 0x9, 0x9}, @IFA_RT_PRIORITY={0x8, 0x9, 0x200}, @IFA_ADDRESS={0x8, 0x1, @loopback}, @IFA_ADDRESS={0x8, 0x1, @multicast2}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000090}, 0x8000) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev}, 0x10) creat(&(0x7f00000000c0)='./bus\x00', 0x0) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x1, 0x0, 0x0, 0x4, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x3) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r3, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) 06:24:38 executing program 2: r0 = signalfd(0xffffffffffffffff, &(0x7f00000074c0), 0x8) r1 = signalfd(r0, &(0x7f00000074c0), 0x8) write$binfmt_script(r1, 0x0, 0x102) [ 3305.412713][T30766] ref_ctr going negative. vaddr: 0x20000004, curr val: -18737, delta: 1 [ 3305.421235][T30766] ref_ctr increment failed for inode: 0x48b offset: 0x0 ref_ctr_offset: 0x4 of mm: 0xffff888139ec2a40 06:24:38 executing program 2: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ffe000/0x1000)=nil, 0x1000) 06:24:38 executing program 2: faccessat(0xffffffffffffffff, 0x0, 0x48) 06:24:38 executing program 2: pselect6(0x40, &(0x7f00000003c0), &(0x7f0000000400), &(0x7f0000000440), &(0x7f00000004c0), 0x0) 06:24:38 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) recvmsg(r0, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) sendto$inet6(r0, &(0x7f00000001c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0) (async) recvmsg(r0, &(0x7f00000003c0)={0x0, 0x3, 0x0}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'bridge_slave_1\x00'}, @IFLA_MASTER={0x8, 0xa, r3}, @IFLA_MTU={0x8, 0x4, 0x1da}]}, 0x44}}, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) bind$unix(r4, &(0x7f0000000380)=@file={0x1, './file0\x00'}, 0x6e) (async) listen(r4, 0x0) r5 = dup(r4) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r4}}) (async) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000004c0)={0x6a1d, 0x0}, 0x8) (async) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000500)={{0x1, 0x1, 0x18, r0, {0x4}}, './file0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0xb, 0x5, &(0x7f0000000180)=@raw=[@exit, @ldst={0x2, 0x2, 0x1, 0x9, 0x1, 0x2, 0xfffffffffffffffc}, @call={0x85, 0x0, 0x0, 0xc7}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffb}, @ldst={0xcb42b40c76688d27, 0x0, 0x1, 0x6, 0x5, 0x4, 0x10}], &(0x7f0000000200)='syzkaller\x00', 0x1ff, 0x70, &(0x7f0000000400)=""/112, 0x40f00, 0xf, '\x00', r3, 0x2f, r5, 0x8, &(0x7f0000000240)={0x4, 0x3}, 0x8, 0x10, &(0x7f0000000480)={0x0, 0x8, 0x81, 0xad}, 0x10, r6, r7, 0x0, &(0x7f0000000540)=[0xffffffffffffffff]}, 0x80) (async) recvmsg(r0, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x0) (async) r8 = socket(0x10, 0x803, 0x0) recvmsg(r8, &(0x7f0000000340)={0x0, 0xffffffffffffff23, 0x0}, 0x40012161) (async) recvfrom$inet6(r0, &(0x7f0000000000)=""/114, 0xfffffffffffffd1b, 0x0, 0x0, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) (async) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="00281c80", @ANYRES16=r0, @ANYBLOB="ff"], 0x34}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="f4997c3794"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) r10 = accept4$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000100)=0x1c, 0x80800) setsockopt$MRT6_DEL_MIF(r10, 0x29, 0xcb, &(0x7f0000000140)={0x1, 0x0, 0x9, r9, 0x5}, 0xc) (async) r11 = accept4$inet6(r10, 0x0, &(0x7f0000000600), 0x800) getsockopt$IP6T_SO_GET_INFO(r11, 0x29, 0x40, &(0x7f0000000680)={'mangle\x00', 0x0, [0x81, 0x800, 0xfff, 0x5, 0x6351]}, &(0x7f0000000700)=0x54) (async) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="58ad000010", 0x5, 0x0, 0x0, 0x0) r12 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r12, &(0x7f0000000000)='s', 0x10a73, 0x81e, 0x0, 0x4b6ae4f95a5de35b) 06:24:38 executing program 2: pselect6(0x40, &(0x7f00000003c0), &(0x7f0000000400), &(0x7f0000000440)={0x8}, &(0x7f00000004c0), &(0x7f0000000540)={&(0x7f0000000500)={[0x80000001]}, 0x8}) 06:24:46 executing program 0: r0 = creat(0x0, 0x0) write$cgroup_subtree(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="88ed7c48cfb680c42f89f97a7def31f7c3754b660e634848a0626b48d0b96e39c051b0006e7ca14700d0"], 0x8) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x1, 0x0, 0x0, 0x4, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x3) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) 06:24:46 executing program 2: openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x4000, 0x0) 06:24:46 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) recvmsg(r0, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) sendto$inet6(r0, &(0x7f00000001c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0) recvmsg(r0, &(0x7f00000003c0)={0x0, 0x3, 0x0}, 0x0) recvmsg(r0, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) recvfrom$inet6(r0, &(0x7f0000000000)=""/114, 0xfffffffffffffd1b, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000040)) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="00b21c4c892927ed4d92c99f0c59433180", @ANYRES16=r0, @ANYBLOB="ff"], 0x34}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="f4997c3794"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="58ad000010", 0x5, 0x0, 0x0, 0x0) r1 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f0000000000)='s', 0x10a73, 0x81e, 0x0, 0x4b6ae4f95a5de35b) 06:24:46 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f0000000380)={0x3, 0x1, 0x7, 0x2, 0xb3, &(0x7f0000000500)}) ioctl$KDGKBLED(r0, 0x4b64, &(0x7f0000000040)) io_uring_setup(0xfc6, &(0x7f0000000180)) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000240)={0x9b0, 0x9, 0x1, 0x4, 0x3}) listen(r1, 0x400000001ffffffd) r2 = socket$inet_dccp(0x2, 0x6, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f0000000440)=@ipv4_newaddr={0x38, 0x14, 0x8, 0x70bd2d, 0x25dfdbfd, {0x2, 0x78, 0x40, 0xc8}, [@IFA_RT_PRIORITY={0x8, 0x9, 0x9}, @IFA_RT_PRIORITY={0x8, 0x9, 0x200}, @IFA_ADDRESS={0x8, 0x1, @loopback}, @IFA_ADDRESS={0x8, 0x1, @multicast2}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000090}, 0x8000) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev}, 0x10) creat(&(0x7f00000000c0)='./bus\x00', 0x0) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x1, 0x0, 0x0, 0x4, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x3) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r3, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) 06:24:46 executing program 5: r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e24, @local}, 0x10) writev(r0, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) recvmmsg(r0, &(0x7f0000003e40)=[{{&(0x7f0000000100)=@phonet, 0x80, 0x0, 0x0, &(0x7f00000024c0)=""/4096, 0x1000, 0x1d4c}}, {{0x0, 0x80100200, 0x0, 0x0, &(0x7f00000035c0)=""/241, 0xf1}}, {{&(0x7f00000036c0)=@un=@abs, 0x80, &(0x7f0000003780)=[{&(0x7f0000003740)=""/4, 0xfffffd07}], 0x1, &(0x7f00000037c0)=""/236, 0xec}}, {{&(0x7f00000038c0)=@l2tp6={0xa, 0x0, 0x0, @private1}, 0x80, &(0x7f0000003bc0)=[{0x0}, {&(0x7f0000003a00)=""/190, 0xbe}, {&(0x7f0000003ac0)=""/131, 0x83}, {0x0}], 0x4, &(0x7f0000003c00)=""/73, 0x49}}, {{&(0x7f0000003c80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, 0x0, 0x0, &(0x7f0000003e00)=""/48, 0x30}}], 0x5, 0x40000121, 0x0) 06:24:46 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000005c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e24, @local}, 0x10) writev(r0, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) recvmmsg(r0, &(0x7f0000003e40)=[{{&(0x7f0000000100)=@phonet, 0x80, 0x0, 0x0, &(0x7f00000024c0)=""/4096, 0x1000, 0x4000}}, {{0x0, 0x80100200, 0x0, 0x0, &(0x7f00000035c0)=""/241, 0xf1}}, {{&(0x7f00000036c0)=@un=@abs, 0x80, &(0x7f0000003780)=[{&(0x7f0000003740)=""/4, 0xfffffd07}], 0x1, &(0x7f00000037c0)=""/236, 0xec}}, {{&(0x7f00000038c0)=@l2tp6={0xa, 0x0, 0x0, @private1}, 0x80, &(0x7f0000003bc0)=[{0x0}, {&(0x7f0000003a00)=""/190, 0xbe}, {&(0x7f0000003ac0)=""/131, 0x83}, {0x0}], 0x4, &(0x7f0000003c00)=""/73, 0x49}}, {{&(0x7f0000003c80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, 0x0, 0x0, &(0x7f0000003e00)=""/48, 0x30}}], 0x5, 0x40000121, 0x0) 06:24:46 executing program 2: openat$thread_pidfd(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) [ 3313.729930][T30800] ref_ctr going negative. vaddr: 0x20000004, curr val: -18737, delta: 1 [ 3313.738433][T30800] ref_ctr increment failed for inode: 0x48b offset: 0x0 ref_ctr_offset: 0x4 of mm: 0xffff8881078da080 06:24:46 executing program 2: epoll_pwait(0xffffffffffffffff, 0x0, 0x0, 0xfffff801, 0x0, 0x0) 06:24:46 executing program 2: r0 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) shmat(r0, &(0x7f0000ffc000/0x2000)=nil, 0x2000) 06:24:46 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) recvmsg(r0, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) sendto$inet6(r0, &(0x7f00000001c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0) recvmsg(r0, &(0x7f00000003c0)={0x0, 0x3, 0x0}, 0x0) (async) recvmsg(r0, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x0) (async) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) (async) recvfrom$inet6(r0, &(0x7f0000000000)=""/114, 0xfffffffffffffd1b, 0x0, 0x0, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000040)) (async) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="00b21c4c892927ed4d92c99f0c59433180", @ANYRES16=r0, @ANYBLOB="ff"], 0x34}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="f4997c3794"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="58ad000010", 0x5, 0x0, 0x0, 0x0) r1 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f0000000000)='s', 0x10a73, 0x81e, 0x0, 0x4b6ae4f95a5de35b) 06:24:46 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x20, 0x7, 0xa, 0x101, 0x0, 0x0, {}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}, 0x20}}, 0x0) 06:24:47 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001300)={&(0x7f00000010c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x2c, 0x2c, 0x2, [@func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{}, {}, {}, {}]}]}}, &(0x7f0000001200)=""/201, 0x46, 0xc9, 0x1}, 0x20) 06:24:55 executing program 0: r0 = creat(0x0, 0x0) write$cgroup_subtree(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="88ed7c48cfb680c42f89f97a7def31f7c3754b660e634848a0626b48d0b96e39c051b0006e7ca14700d0"], 0x8) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x1, 0x0, 0x0, 0x4, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x3) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) 06:24:55 executing program 2: unshare(0x8000000) semtimedop(0x0, &(0x7f00000000c0)=[{0x0, 0x0, 0x1000}, {}], 0x2, 0x0) 06:24:55 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) recvmsg(r0, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) sendto$inet6(r0, &(0x7f00000001c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0) (async) recvmsg(r0, &(0x7f00000003c0)={0x0, 0x3, 0x0}, 0x0) (async, rerun: 64) recvmsg(r0, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x0) (rerun: 64) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) (async) recvfrom$inet6(r0, &(0x7f0000000000)=""/114, 0xfffffffffffffd1b, 0x0, 0x0, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000040)) (async) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="00b21c4c892927ed4d92c99f0c59433180", @ANYRES16=r0, @ANYBLOB="ff"], 0x34}}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="f4997c3794"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async, rerun: 32) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="58ad000010", 0x5, 0x0, 0x0, 0x0) (async, rerun: 32) r1 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f0000000000)='s', 0x10a73, 0x81e, 0x0, 0x4b6ae4f95a5de35b) 06:24:55 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f0000000380)={0x3, 0x1, 0x7, 0x2, 0xb3, &(0x7f0000000500)}) ioctl$KDGKBLED(r0, 0x4b64, &(0x7f0000000040)) io_uring_setup(0xfc6, &(0x7f0000000180)) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000240)={0x9b0, 0x9, 0x1, 0x4, 0x3}) listen(r1, 0x400000001ffffffd) r2 = socket$inet_dccp(0x2, 0x6, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f0000000440)=@ipv4_newaddr={0x38, 0x14, 0x8, 0x70bd2d, 0x25dfdbfd, {0x2, 0x78, 0x40, 0xc8}, [@IFA_RT_PRIORITY={0x8, 0x9, 0x9}, @IFA_RT_PRIORITY={0x8, 0x9, 0x200}, @IFA_ADDRESS={0x8, 0x1, @loopback}, @IFA_ADDRESS={0x8, 0x1, @multicast2}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000090}, 0x8000) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev}, 0x10) write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[@ANYBLOB="88ed7c48cfb680c42f89f97a7def31f7c3754b660e634848a0626b48d0b96e39c051b0006e7ca14700d0"], 0x8) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x1, 0x0, 0x0, 0x4, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x3) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r3, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) 06:24:55 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000005c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e24, @local}, 0x10) writev(r0, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) recvmmsg(r0, &(0x7f0000003e40)=[{{&(0x7f0000000100)=@phonet, 0x80, 0x0, 0x0, &(0x7f00000024c0)=""/4096, 0x1000, 0x407e}}, {{0x0, 0x80100200, 0x0, 0x0, &(0x7f00000035c0)=""/241, 0xf1}}, {{&(0x7f00000036c0)=@un=@abs, 0x80, &(0x7f0000003780)=[{&(0x7f0000003740)=""/4, 0xfffffd07}], 0x1, &(0x7f00000037c0)=""/236, 0xec}}, {{&(0x7f00000038c0)=@l2tp6={0xa, 0x0, 0x0, @private1}, 0x80, &(0x7f0000003bc0)=[{0x0}, {&(0x7f0000003a00)=""/190, 0xbe}, {&(0x7f0000003ac0)=""/131, 0x83}, {0x0}], 0x4, &(0x7f0000003c00)=""/73, 0x49}}, {{&(0x7f0000003c80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, 0x0, 0x0, &(0x7f0000003e00)=""/48, 0x30}}], 0x5, 0x40000121, 0x0) 06:24:55 executing program 5: r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e24, @local}, 0x10) writev(r0, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) recvmmsg(r0, &(0x7f0000003e40)=[{{&(0x7f0000000100)=@phonet, 0x80, 0x0, 0x0, &(0x7f00000024c0)=""/4096, 0x1000, 0x2000}}, {{0x0, 0x80100200, 0x0, 0x0, &(0x7f00000035c0)=""/241, 0xf1}}, {{&(0x7f00000036c0)=@un=@abs, 0x80, &(0x7f0000003780)=[{&(0x7f0000003740)=""/4, 0xfffffd07}], 0x1, &(0x7f00000037c0)=""/236, 0xec}}, {{&(0x7f00000038c0)=@l2tp6={0xa, 0x0, 0x0, @private1}, 0x80, &(0x7f0000003bc0)=[{0x0}, {&(0x7f0000003a00)=""/190, 0xbe}, {&(0x7f0000003ac0)=""/131, 0x83}, {0x0}], 0x4, &(0x7f0000003c00)=""/73, 0x49}}, {{&(0x7f0000003c80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, 0x0, 0x0, &(0x7f0000003e00)=""/48, 0x30}}], 0x5, 0x40000121, 0x0) 06:24:55 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @empty}, r1}}, 0x30) 06:24:55 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f0000000140)=@get={0x1, &(0x7f0000000040)=""/236, 0x3}) 06:24:55 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) recvmsg(r0, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) sendto$inet6(r0, &(0x7f00000001c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0) recvmsg(r0, &(0x7f00000003c0)={0x0, 0x3, 0x0}, 0x0) recvmsg(r0, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) recvfrom$inet6(r0, &(0x7f0000000000)=""/114, 0xfffffffffffffd1b, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000040)) getsockopt$sock_int(r0, 0x1, 0x29, &(0x7f00000000c0), &(0x7f0000000100)=0x4) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="00281c80", @ANYRES16=r0, @ANYBLOB="ff"], 0x34}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="f4997c3794"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="58ad000010", 0x5, 0x0, 0x0, 0x0) r1 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f0000000000)='s', 0x10a73, 0x81e, 0x0, 0x4b6ae4f95a5de35b) 06:24:55 executing program 2: getpeername$unix(0xffffffffffffff9c, 0x0, 0x0) 06:24:55 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000004600)={0xffffffffffffffff}) connect(r0, &(0x7f00000000c0)=@un=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x10c) 06:24:55 executing program 2: r0 = socket(0x18, 0x3, 0x0) sendto$unix(r0, 0x0, 0x0, 0x0, 0x0, 0x0) [ 3322.201901][T30860] netlink: 'syz-executor.4': attribute type 41 has an invalid length. [ 3322.210276][T30860] netlink: 44123 bytes leftover after parsing attributes in process `syz-executor.4'. [ 3322.234563][T30860] A link change request failed with some changes committed already. Interface ip6tnl0 may have been left with an inconsistent configuration, please check. 06:25:01 executing program 0: r0 = creat(0x0, 0x0) write$cgroup_subtree(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="88ed7c48cfb680c42f89f97a7def31f7c3754b660e634848a0626b48d0b96e39c051b0006e7ca14700d0"], 0x8) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x1, 0x0, 0x0, 0x4, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x3) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) 06:25:01 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000004600)) mprotect(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0) 06:25:01 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) recvmsg(r0, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) (async, rerun: 64) sendto$inet6(r0, &(0x7f00000001c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0) (async, rerun: 64) recvmsg(r0, &(0x7f00000003c0)={0x0, 0x3, 0x0}, 0x0) recvmsg(r0, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) (async) recvfrom$inet6(r0, &(0x7f0000000000)=""/114, 0xfffffffffffffd1b, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000040)) getsockopt$sock_int(r0, 0x1, 0x29, &(0x7f00000000c0), &(0x7f0000000100)=0x4) (async) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="00281c80", @ANYRES16=r0, @ANYBLOB="ff"], 0x34}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="f4997c3794"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async, rerun: 64) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="58ad000010", 0x5, 0x0, 0x0, 0x0) (async, rerun: 64) r1 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f0000000000)='s', 0x10a73, 0x81e, 0x0, 0x4b6ae4f95a5de35b) 06:25:01 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000005c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e24, @local}, 0x10) writev(r0, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) recvmmsg(r0, &(0x7f0000003e40)=[{{&(0x7f0000000100)=@phonet, 0x80, 0x0, 0x0, &(0x7f00000024c0)=""/4096, 0x1000, 0x4102}}, {{0x0, 0x80100200, 0x0, 0x0, &(0x7f00000035c0)=""/241, 0xf1}}, {{&(0x7f00000036c0)=@un=@abs, 0x80, &(0x7f0000003780)=[{&(0x7f0000003740)=""/4, 0xfffffd07}], 0x1, &(0x7f00000037c0)=""/236, 0xec}}, {{&(0x7f00000038c0)=@l2tp6={0xa, 0x0, 0x0, @private1}, 0x80, &(0x7f0000003bc0)=[{0x0}, {&(0x7f0000003a00)=""/190, 0xbe}, {&(0x7f0000003ac0)=""/131, 0x83}, {0x0}], 0x4, &(0x7f0000003c00)=""/73, 0x49}}, {{&(0x7f0000003c80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, 0x0, 0x0, &(0x7f0000003e00)=""/48, 0x30}}], 0x5, 0x40000121, 0x0) 06:25:01 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f0000000380)={0x3, 0x1, 0x7, 0x2, 0xb3, &(0x7f0000000500)}) ioctl$KDGKBLED(r0, 0x4b64, &(0x7f0000000040)) io_uring_setup(0xfc6, &(0x7f0000000180)) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000240)={0x9b0, 0x9, 0x1, 0x4, 0x3}) listen(r1, 0x400000001ffffffd) r2 = socket$inet_dccp(0x2, 0x6, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f0000000440)=@ipv4_newaddr={0x38, 0x14, 0x8, 0x70bd2d, 0x25dfdbfd, {0x2, 0x78, 0x40, 0xc8}, [@IFA_RT_PRIORITY={0x8, 0x9, 0x9}, @IFA_RT_PRIORITY={0x8, 0x9, 0x200}, @IFA_ADDRESS={0x8, 0x1, @loopback}, @IFA_ADDRESS={0x8, 0x1, @multicast2}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000090}, 0x8000) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev}, 0x10) write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[@ANYBLOB="88ed7c48cfb680c42f89f97a7def31f7c3754b660e634848a0626b48d0b96e39c051b0006e7ca14700d0"], 0x8) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x1, 0x0, 0x0, 0x4, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x3) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r3, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) 06:25:01 executing program 5: r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e24, @local}, 0x10) writev(r0, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) recvmmsg(r0, &(0x7f0000003e40)=[{{&(0x7f0000000100)=@phonet, 0x80, 0x0, 0x0, &(0x7f00000024c0)=""/4096, 0x1000, 0x3075}}, {{0x0, 0x80100200, 0x0, 0x0, &(0x7f00000035c0)=""/241, 0xf1}}, {{&(0x7f00000036c0)=@un=@abs, 0x80, &(0x7f0000003780)=[{&(0x7f0000003740)=""/4, 0xfffffd07}], 0x1, &(0x7f00000037c0)=""/236, 0xec}}, {{&(0x7f00000038c0)=@l2tp6={0xa, 0x0, 0x0, @private1}, 0x80, &(0x7f0000003bc0)=[{0x0}, {&(0x7f0000003a00)=""/190, 0xbe}, {&(0x7f0000003ac0)=""/131, 0x83}, {0x0}], 0x4, &(0x7f0000003c00)=""/73, 0x49}}, {{&(0x7f0000003c80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, 0x0, 0x0, &(0x7f0000003e00)=""/48, 0x30}}], 0x5, 0x40000121, 0x0) 06:25:01 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) recvmsg(r0, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) sendto$inet6(r0, &(0x7f00000001c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0) recvmsg(r0, &(0x7f00000003c0)={0x0, 0x3, 0x0}, 0x0) recvmsg(r0, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) recvfrom$inet6(r0, &(0x7f0000000000)=""/114, 0xfffffffffffffd1b, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000040)) getsockopt$sock_int(r0, 0x1, 0x29, &(0x7f00000000c0), &(0x7f0000000100)=0x4) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="00281c80", @ANYRES16=r0, @ANYBLOB="ff"], 0x34}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="f4997c3794"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="58ad000010", 0x5, 0x0, 0x0, 0x0) r1 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f0000000000)='s', 0x10a73, 0x81e, 0x0, 0x4b6ae4f95a5de35b) socket$inet6(0x10, 0x3, 0x0) (async) recvmsg(r0, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) (async) sendto$inet6(r0, &(0x7f00000001c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0) (async) recvmsg(r0, &(0x7f00000003c0)={0x0, 0x3, 0x0}, 0x0) (async) recvmsg(r0, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x0) (async) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) (async) recvfrom$inet6(r0, &(0x7f0000000000)=""/114, 0xfffffffffffffd1b, 0x0, 0x0, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000040)) (async) getsockopt$sock_int(r0, 0x1, 0x29, &(0x7f00000000c0), &(0x7f0000000100)=0x4) (async) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="00281c80", @ANYRES16=r0, @ANYBLOB="ff"], 0x34}}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="f4997c3794"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="58ad000010", 0x5, 0x0, 0x0, 0x0) (async) socket$inet6(0x10, 0x3, 0x0) (async) sendto$inet6(r1, &(0x7f0000000000)='s', 0x10a73, 0x81e, 0x0, 0x4b6ae4f95a5de35b) (async) 06:25:01 executing program 2: sendmmsg(0xffffffffffffffff, &(0x7f0000001b40), 0x10, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000004600)={0xffffffffffffffff}) recvmmsg(r0, &(0x7f0000003340), 0x10, 0x0, 0x0) [ 3328.404468][T30886] netlink: 'syz-executor.4': attribute type 41 has an invalid length. [ 3328.412880][T30886] netlink: 44123 bytes leftover after parsing attributes in process `syz-executor.4'. 06:25:01 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) recvmsg(r0, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) sendto$inet6(r0, &(0x7f00000001c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'bridge_slave_1\x00'}, @IFLA_MASTER={0x8, 0xa, r3}, @IFLA_MTU={0x8, 0x4, 0x1da}]}, 0x44}}, 0x0) recvmsg(r1, &(0x7f0000000200)={&(0x7f00000000c0)=@pptp={0x18, 0x2, {0x0, @local}}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000140)=""/6, 0x6}], 0x1, &(0x7f0000000400)=""/158, 0x9e}, 0x40000202) recvmsg(r0, &(0x7f00000003c0)={0x0, 0x3, 0x0}, 0x0) recvmsg(r0, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) recvfrom$inet6(r0, &(0x7f0000000000)=""/114, 0xfffffffffffffd1b, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000040)) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="00281c80", @ANYRES16=r0, @ANYBLOB="ff"], 0x34}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="f4997c3794"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="58ad000010", 0x5, 0x0, 0x0, 0x0) r4 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r4, &(0x7f0000000000)='s', 0x10a73, 0x81e, 0x0, 0x4b6ae4f95a5de35b) [ 3328.443670][T30886] A link change request failed with some changes committed already. Interface ip6tnl0 may have been left with an inconsistent configuration, please check. [ 3328.602748][T30904] netlink: 'syz-executor.4': attribute type 41 has an invalid length. [ 3328.610976][T30904] netlink: 44123 bytes leftover after parsing attributes in process `syz-executor.4'. [ 3328.620731][T30904] A link change request failed with some changes committed already. Interface ip6tnl0 may have been left with an inconsistent configuration, please check. 06:25:02 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f0000000380)={0x3, 0x1, 0x7, 0x2, 0xb3, &(0x7f0000000500)}) ioctl$KDGKBLED(r0, 0x4b64, &(0x7f0000000040)) io_uring_setup(0xfc6, &(0x7f0000000180)) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000240)={0x9b0, 0x9, 0x1, 0x4, 0x3}) listen(r1, 0x400000001ffffffd) r2 = socket$inet_dccp(0x2, 0x6, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f0000000440)=@ipv4_newaddr={0x38, 0x14, 0x8, 0x70bd2d, 0x25dfdbfd, {0x2, 0x78, 0x40, 0xc8}, [@IFA_RT_PRIORITY={0x8, 0x9, 0x9}, @IFA_RT_PRIORITY={0x8, 0x9, 0x200}, @IFA_ADDRESS={0x8, 0x1, @loopback}, @IFA_ADDRESS={0x8, 0x1, @multicast2}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000090}, 0x8000) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev}, 0x10) write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[@ANYBLOB="88ed7c48cfb680c42f89f97a7def31f7c3754b660e634848a0626b48d0b96e39c051b0006e7ca14700d0"], 0x8) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x1, 0x0, 0x0, 0x4, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x3) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r3, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) 06:25:02 executing program 5: r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e24, @local}, 0x10) writev(r0, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) recvmmsg(r0, &(0x7f0000003e40)=[{{&(0x7f0000000100)=@phonet, 0x80, 0x0, 0x0, &(0x7f00000024c0)=""/4096, 0x1000, 0x3400}}, {{0x0, 0x80100200, 0x0, 0x0, &(0x7f00000035c0)=""/241, 0xf1}}, {{&(0x7f00000036c0)=@un=@abs, 0x80, &(0x7f0000003780)=[{&(0x7f0000003740)=""/4, 0xfffffd07}], 0x1, &(0x7f00000037c0)=""/236, 0xec}}, {{&(0x7f00000038c0)=@l2tp6={0xa, 0x0, 0x0, @private1}, 0x80, &(0x7f0000003bc0)=[{0x0}, {&(0x7f0000003a00)=""/190, 0xbe}, {&(0x7f0000003ac0)=""/131, 0x83}, {0x0}], 0x4, &(0x7f0000003c00)=""/73, 0x49}}, {{&(0x7f0000003c80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, 0x0, 0x0, &(0x7f0000003e00)=""/48, 0x30}}], 0x5, 0x40000121, 0x0) 06:25:02 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000005c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e24, @local}, 0x10) writev(r0, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) recvmmsg(r0, &(0x7f0000003e40)=[{{&(0x7f0000000100)=@phonet, 0x80, 0x0, 0x0, &(0x7f00000024c0)=""/4096, 0x1000, 0x54be}}, {{0x0, 0x80100200, 0x0, 0x0, &(0x7f00000035c0)=""/241, 0xf1}}, {{&(0x7f00000036c0)=@un=@abs, 0x80, &(0x7f0000003780)=[{&(0x7f0000003740)=""/4, 0xfffffd07}], 0x1, &(0x7f00000037c0)=""/236, 0xec}}, {{&(0x7f00000038c0)=@l2tp6={0xa, 0x0, 0x0, @private1}, 0x80, &(0x7f0000003bc0)=[{0x0}, {&(0x7f0000003a00)=""/190, 0xbe}, {&(0x7f0000003ac0)=""/131, 0x83}, {0x0}], 0x4, &(0x7f0000003c00)=""/73, 0x49}}, {{&(0x7f0000003c80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, 0x0, 0x0, &(0x7f0000003e00)=""/48, 0x30}}], 0x5, 0x40000121, 0x0) 06:25:07 executing program 0: creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[@ANYBLOB="88ed7c48cfb680c42f89f97a7def31f7c3754b660e634848a0626b48d0b96e39c051b0006e7ca14700d0"], 0x8) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x1, 0x0, 0x0, 0x4, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x3) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) 06:25:07 executing program 2: r0 = socket(0x18, 0x3, 0x0) sendto(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=@in={0x2, 0x2}, 0xc) 06:25:07 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) recvmsg(r0, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) (async) sendto$inet6(r0, &(0x7f00000001c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'bridge_slave_1\x00'}, @IFLA_MASTER={0x8, 0xa, r3}, @IFLA_MTU={0x8, 0x4, 0x1da}]}, 0x44}}, 0x0) recvmsg(r1, &(0x7f0000000200)={&(0x7f00000000c0)=@pptp={0x18, 0x2, {0x0, @local}}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000140)=""/6, 0x6}], 0x1, &(0x7f0000000400)=""/158, 0x9e}, 0x40000202) (async) recvmsg(r0, &(0x7f00000003c0)={0x0, 0x3, 0x0}, 0x0) (async, rerun: 64) recvmsg(r0, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x0) (rerun: 64) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) (async) recvfrom$inet6(r0, &(0x7f0000000000)=""/114, 0xfffffffffffffd1b, 0x0, 0x0, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000040)) (async) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="00281c80", @ANYRES16=r0, @ANYBLOB="ff"], 0x34}}, 0x0) (async, rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="f4997c3794"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (rerun: 64) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="58ad000010", 0x5, 0x0, 0x0, 0x0) (async) r4 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r4, &(0x7f0000000000)='s', 0x10a73, 0x81e, 0x0, 0x4b6ae4f95a5de35b) 06:25:07 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f0000000380)={0x3, 0x1, 0x7, 0x2, 0xb3, &(0x7f0000000500)}) ioctl$KDGKBLED(r0, 0x4b64, &(0x7f0000000040)) io_uring_setup(0xfc6, &(0x7f0000000180)) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000240)={0x9b0, 0x9, 0x1, 0x4, 0x3}) listen(r1, 0x400000001ffffffd) socket$inet_dccp(0x2, 0x6, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f0000000440)=@ipv4_newaddr={0x38, 0x14, 0x8, 0x70bd2d, 0x25dfdbfd, {0x2, 0x78, 0x40, 0xc8}, [@IFA_RT_PRIORITY={0x8, 0x9, 0x9}, @IFA_RT_PRIORITY={0x8, 0x9, 0x200}, @IFA_ADDRESS={0x8, 0x1, @loopback}, @IFA_ADDRESS={0x8, 0x1, @multicast2}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000090}, 0x8000) r2 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$cgroup_subtree(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="88ed7c48cfb680c42f89f97a7def31f7c3754b660e634848a0626b48d0b96e39c051b0006e7ca14700d0"], 0x8) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x1, 0x0, 0x0, 0x4, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x3) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r3, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) 06:25:07 executing program 5: r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e24, @local}, 0x10) writev(r0, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) recvmmsg(r0, &(0x7f0000003e40)=[{{&(0x7f0000000100)=@phonet, 0x80, 0x0, 0x0, &(0x7f00000024c0)=""/4096, 0x1000, 0x3a98}}, {{0x0, 0x80100200, 0x0, 0x0, &(0x7f00000035c0)=""/241, 0xf1}}, {{&(0x7f00000036c0)=@un=@abs, 0x80, &(0x7f0000003780)=[{&(0x7f0000003740)=""/4, 0xfffffd07}], 0x1, &(0x7f00000037c0)=""/236, 0xec}}, {{&(0x7f00000038c0)=@l2tp6={0xa, 0x0, 0x0, @private1}, 0x80, &(0x7f0000003bc0)=[{0x0}, {&(0x7f0000003a00)=""/190, 0xbe}, {&(0x7f0000003ac0)=""/131, 0x83}, {0x0}], 0x4, &(0x7f0000003c00)=""/73, 0x49}}, {{&(0x7f0000003c80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, 0x0, 0x0, &(0x7f0000003e00)=""/48, 0x30}}], 0x5, 0x40000121, 0x0) 06:25:07 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000005c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e24, @local}, 0x10) writev(r0, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) recvmmsg(r0, &(0x7f0000003e40)=[{{&(0x7f0000000100)=@phonet, 0x80, 0x0, 0x0, &(0x7f00000024c0)=""/4096, 0x1000, 0x5883}}, {{0x0, 0x80100200, 0x0, 0x0, &(0x7f00000035c0)=""/241, 0xf1}}, {{&(0x7f00000036c0)=@un=@abs, 0x80, &(0x7f0000003780)=[{&(0x7f0000003740)=""/4, 0xfffffd07}], 0x1, &(0x7f00000037c0)=""/236, 0xec}}, {{&(0x7f00000038c0)=@l2tp6={0xa, 0x0, 0x0, @private1}, 0x80, &(0x7f0000003bc0)=[{0x0}, {&(0x7f0000003a00)=""/190, 0xbe}, {&(0x7f0000003ac0)=""/131, 0x83}, {0x0}], 0x4, &(0x7f0000003c00)=""/73, 0x49}}, {{&(0x7f0000003c80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, 0x0, 0x0, &(0x7f0000003e00)=""/48, 0x30}}], 0x5, 0x40000121, 0x0) 06:25:07 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) 06:25:07 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) recvmsg(r0, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) (async, rerun: 64) sendto$inet6(r0, &(0x7f00000001c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0) (rerun: 64) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'bridge_slave_1\x00'}, @IFLA_MASTER={0x8, 0xa, r3}, @IFLA_MTU={0x8, 0x4, 0x1da}]}, 0x44}}, 0x0) (async) recvmsg(r1, &(0x7f0000000200)={&(0x7f00000000c0)=@pptp={0x18, 0x2, {0x0, @local}}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000140)=""/6, 0x6}], 0x1, &(0x7f0000000400)=""/158, 0x9e}, 0x40000202) recvmsg(r0, &(0x7f00000003c0)={0x0, 0x3, 0x0}, 0x0) (async) recvmsg(r0, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x0) (async) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) recvfrom$inet6(r0, &(0x7f0000000000)=""/114, 0xfffffffffffffd1b, 0x0, 0x0, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000040)) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="00281c80", @ANYRES16=r0, @ANYBLOB="ff"], 0x34}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="f4997c3794"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async, rerun: 32) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="58ad000010", 0x5, 0x0, 0x0, 0x0) (async, rerun: 32) r4 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r4, &(0x7f0000000000)='s', 0x10a73, 0x81e, 0x0, 0x4b6ae4f95a5de35b) 06:25:07 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x4, 0x0, 0x4, 0x1}, 0x48) 06:25:07 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f0000000380)={0x3, 0x1, 0x7, 0x2, 0xb3, &(0x7f0000000500)}) ioctl$KDGKBLED(r0, 0x4b64, &(0x7f0000000040)) io_uring_setup(0xfc6, &(0x7f0000000180)) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000240)={0x9b0, 0x9, 0x1, 0x4, 0x3}) listen(r1, 0x400000001ffffffd) socket$inet_dccp(0x2, 0x6, 0x0) r2 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$cgroup_subtree(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="88ed7c48cfb680c42f89f97a7def31f7c3754b660e634848a0626b48d0b96e39c051b0006e7ca14700d0"], 0x8) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x1, 0x0, 0x0, 0x4, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x3) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r3, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) [ 3334.553384][T30924] ref_ctr going negative. vaddr: 0x20000004, curr val: -18737, delta: 1 [ 3334.561943][T30924] ref_ctr increment failed for inode: 0x49f offset: 0x0 ref_ctr_offset: 0x4 of mm: 0xffff8881078da540 06:25:07 executing program 2: bpf$PROG_LOAD(0x3, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x80) [ 3334.642321][T30936] ref_ctr going negative. vaddr: 0x20000004, curr val: -18737, delta: 1 [ 3334.650829][T30936] ref_ctr increment failed for inode: 0x49b offset: 0x0 ref_ctr_offset: 0x4 of mm: 0xffff888139ec2580 06:25:07 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f0000000380)={0x3, 0x1, 0x7, 0x2, 0xb3, &(0x7f0000000500)}) ioctl$KDGKBLED(r0, 0x4b64, &(0x7f0000000040)) io_uring_setup(0xfc6, &(0x7f0000000180)) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000240)={0x9b0, 0x9, 0x1, 0x4, 0x3}) listen(r1, 0x400000001ffffffd) r2 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$cgroup_subtree(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="88ed7c48cfb680c42f89f97a7def31f7c3754b660e634848a0626b48d0b96e39c051b0006e7ca14700d0"], 0x8) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x1, 0x0, 0x0, 0x4, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x3) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r3, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) [ 3334.741315][T30946] ref_ctr going negative. vaddr: 0x20000004, curr val: -18737, delta: 1 [ 3334.749929][T30946] ref_ctr increment failed for inode: 0x497 offset: 0x0 ref_ctr_offset: 0x4 of mm: 0xffff888104cb25c0 06:25:13 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) recvmsg(r0, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) sendto$inet6(r0, &(0x7f00000001c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0) recvmsg(r0, &(0x7f00000003c0)={0x0, 0x3, 0x0}, 0x0) recvmsg(r0, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x15, &(0x7f00000000c0)={@mcast2}, 0x14) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) recvfrom$inet6(r0, &(0x7f0000000000)=""/114, 0xfffffffffffffd1b, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000040)) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="00281c80", @ANYRES16=r0, @ANYBLOB="ff"], 0x34}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="f4997c3794"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="58ad000010", 0x5, 0x0, 0x0, 0x0) r1 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f0000000000)='s', 0x10a73, 0x81e, 0x0, 0x4b6ae4f95a5de35b) 06:25:13 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000280)=ANY=[@ANYBLOB="61157400000000006113740000000000bfa000000000000014000000080000002d0301000000000095000000000000006916000000000000bf67000000000000350307000fff07206706000002000000160300000ee60060bf050000000000005f650000000000006507f9ff01000000070700004ddfffff1e75000000000000bf54000000000000070400000400f9ffad4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f1754558f2278af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd399703cac4f6f3be4b369289aa6812b8e007e733a9a4f1b0af3dda82ee45a010fb94fe9de57b9d8a814261bdb94a05000000c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe0185473d51b546cad3f1d5ab2af27546e7c955ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc8da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e0dee5eb106774a8f3e6916dfec88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc206438b8ef4901fd03c16dfda44221b235c8ac86d8a297dff0445a15f21dce431e56723888fb126a163f16f920ae2fb494059bba8e3b680324a188076eb685d55c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20cecac4d03723f1c932b3a6aa57f1ad2e99e0e67ab93716d20000009f0f53acbb40b4f8e2738270b31562ed834f2af97787f696649a462e7ee4bcf8b07a10d6735154beb4000000000000000000000000004000bc00f674629709e7e78f4ddcfded41f6e2520a211bc3ebe6bd9d42ca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253887a5ad103649afa1769081591e276c466dc5d293b7d5ca384f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc47287cd31cc43ea0ffb567b40407d000000210000000000000000005f37d83f84e98a523d80bd970d703f37ca364a601ae899a56715a0a62a34c6c94cce6994521629ab028acfc1d926a0f6a5480a55c22fe3a5ac000000000000000000000000000000c1eb2d91fb79ea00000000000000000000000000000000000000e4007be511fe32fbc90e2364a55e9bb66ac64423d2d00fea2594e190deae46e26c596f84eba90000000000000000fffb0000000082fb0d3cc3aa39ee4b1386bab561cda886fa642994cacd473b543ccb5f0d7b63924f17c67b13631d22a11dc3c693962895496d2e6e9cc54db6c7205a6b068fff496d2da7d6327f31d73fcc5d325c5379b0363ce8bd1f61b007e1ff5f1be1969a1ba791ad46d800000000c7f26a0337302f3b41eae59809fd05d12f6106f117b062df67d3a6473265dd1410eea68208a3f26b2989f832d8b34a34a4f08b34b3042065acaa10856e858d27adee7daf32903d3fc78700d429a2d4c8b6d803eb83eecfe4c7ff9e6ab5a52e83d089dad7a8710e0254f1b11cced7bc3c8da0c44d2ebf9f6f3ff3be4d1458077c2253b0c7c7a0a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631dbaa74f22bad050e9856b48ae3a03a497c37758537650fe6db89da3c41fdc3d78e046f6160e1741299e8dc29906870e6431ed1eab5d067a183f064b060a8ec12725d42e3a74863d66bee966b1574f8e01b3f34a267ff0afa1e1c758a0079b747067312e9815a21cb3f1f8150d999d78854ca4d3116dbc7e2bf2402a75fd7a55733360040855ed5d1c0d634fc5fb38f84d9d87b27f8a5d91217b728f13e3ee20e69e0ffb2780b1a7af137ff7b4ff139604faf0453b65586f65c7943d54b52f06c870edf0c5d744b5272b44c23488b2bdbff947c4dfa108cbb88202eeb81f428a5b3c299848649e1a57ff52f657a67463d7dbf85ae9321fc2cc17dc4a29b9cba8ded5de8206c812439ab129ae818837ee15620789c524b3baf49a0be9bb7d958d5e87c6c09bf71a894bad62934782cc308e936d7637e07c4a2b3bc87b0da20000d9ef418cf19e7a8c4c328be0ce91798adc2dca87ddd9d064e04b6f0275866d1a1d1c761e2c29ff6630b7c4b317bbfa70e46829dcab474178da43aacd93bdb91972dba18c0600e61529cd7c42304523c8db521d17330f8a14490f568391524419cb539c26657c38bde412ee11d52bba48cf455509e25b0a3f3877737120ab9c1ed5952c824596010cb25678b79f081c446bb4136ec1dea66a6aad694f7702c393c61e38f188a59eb808f555e4"], &(0x7f0000000100)='GPL\x00'}, 0x48) 06:25:13 executing program 0: creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[@ANYBLOB="88ed7c48cfb680c42f89f97a7def31f7c3754b660e634848a0626b48d0b96e39c051b0006e7ca14700d0"], 0x8) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x1, 0x0, 0x0, 0x4, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x3) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) 06:25:13 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f0000000380)={0x3, 0x1, 0x7, 0x2, 0xb3, &(0x7f0000000500)}) ioctl$KDGKBLED(r0, 0x4b64, &(0x7f0000000040)) io_uring_setup(0xfc6, &(0x7f0000000180)) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000240)={0x9b0, 0x9, 0x1, 0x4, 0x3}) r2 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$cgroup_subtree(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="88ed7c48cfb680c42f89f97a7def31f7c3754b660e634848a0626b48d0b96e39c051b0006e7ca14700d0"], 0x8) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x1, 0x0, 0x0, 0x4, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x3) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r3, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) 06:25:13 executing program 5: r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e24, @local}, 0x10) writev(r0, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) recvmmsg(r0, &(0x7f0000003e40)=[{{&(0x7f0000000100)=@phonet, 0x80, 0x0, 0x0, &(0x7f00000024c0)=""/4096, 0x1000, 0x4000}}, {{0x0, 0x80100200, 0x0, 0x0, &(0x7f00000035c0)=""/241, 0xf1}}, {{&(0x7f00000036c0)=@un=@abs, 0x80, &(0x7f0000003780)=[{&(0x7f0000003740)=""/4, 0xfffffd07}], 0x1, &(0x7f00000037c0)=""/236, 0xec}}, {{&(0x7f00000038c0)=@l2tp6={0xa, 0x0, 0x0, @private1}, 0x80, &(0x7f0000003bc0)=[{0x0}, {&(0x7f0000003a00)=""/190, 0xbe}, {&(0x7f0000003ac0)=""/131, 0x83}, {0x0}], 0x4, &(0x7f0000003c00)=""/73, 0x49}}, {{&(0x7f0000003c80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, 0x0, 0x0, &(0x7f0000003e00)=""/48, 0x30}}], 0x5, 0x40000121, 0x0) 06:25:13 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000005c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e24, @local}, 0x10) writev(r0, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) recvmmsg(r0, &(0x7f0000003e40)=[{{&(0x7f0000000100)=@phonet, 0x80, 0x0, 0x0, &(0x7f00000024c0)=""/4096, 0x1000, 0x7c80}}, {{0x0, 0x80100200, 0x0, 0x0, &(0x7f00000035c0)=""/241, 0xf1}}, {{&(0x7f00000036c0)=@un=@abs, 0x80, &(0x7f0000003780)=[{&(0x7f0000003740)=""/4, 0xfffffd07}], 0x1, &(0x7f00000037c0)=""/236, 0xec}}, {{&(0x7f00000038c0)=@l2tp6={0xa, 0x0, 0x0, @private1}, 0x80, &(0x7f0000003bc0)=[{0x0}, {&(0x7f0000003a00)=""/190, 0xbe}, {&(0x7f0000003ac0)=""/131, 0x83}, {0x0}], 0x4, &(0x7f0000003c00)=""/73, 0x49}}, {{&(0x7f0000003c80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, 0x0, 0x0, &(0x7f0000003e00)=""/48, 0x30}}], 0x5, 0x40000121, 0x0) 06:25:13 executing program 2: syz_clone(0x8000000, &(0x7f0000000280)="3e0cb665097cadb2aa514077c740dfb94010a5e6cafc67b27576475247c0d2817d198a0b91435dd31b710106490ec68b03da5233bc4e92e7db1377f60fa2a0e1dc52683267bfb5bc1dadd0021da48a678ab73c0498caeb69e4719608519d826bf529eb84442ef87015053f5160f50d034a6554ad9fc625d7d72bdc25a63723f9a6dcfe652c67ff2a3436a8fc44dd670b928a792cfe9c13a557518293c0e141c762b2213ed9f58a42a82fc6bfbb543cf60111fd96ca29eb58ce5b42fe", 0xbc, &(0x7f0000000380), &(0x7f00000003c0), 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) 06:25:13 executing program 2: r0 = perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x9) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000540)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@bloom_filter={0x1e, 0x0, 0x0, 0xd8000000, 0x2, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1, 0x4}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x0, 0xb, &(0x7f00000006c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x22, 0xffffffffffffffff, 0x8, &(0x7f00000001c0), 0x8, 0x10, &(0x7f0000000200)={0x4, 0x0, 0x0, 0x1202}, 0x10, 0x0, r1, 0x0, &(0x7f0000000600)=[0xffffffffffffffff, 0x1, 0x1, r2]}, 0x80) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x0, 0xb, &(0x7f00000006c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x22, 0xffffffffffffffff, 0x8, &(0x7f00000001c0), 0x8, 0x10, &(0x7f0000000200)={0x4, 0x4, 0x2}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000600)=[0x1, 0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff]}, 0x80) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000540)={0xffffffffffffffff, 0xe0, &(0x7f00000014c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240), ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, &(0x7f0000001340)=[0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0], 0x0, 0x8, 0x0, 0x0, 0x10, &(0x7f00000013c0), &(0x7f00000003c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000400)}}, 0x10) r4 = gettid() perf_event_open(&(0x7f0000000700)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x1, 0x4}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x9) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000280)={0x0, r3}, 0x10) syz_open_procfs$namespace(r4, &(0x7f00000002c0)='ns/uts\x00') syz_clone(0xc0b00600, 0x0, 0x0, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)="c907d18da73959230617490e44b411f905fb37f74fffa3a8e28529399219a44caca2d67130d227af5d4ae1441b3328bba3c96da0566d5bea69179c7c977d4f4b0a419f73ae8a2caf67ea464f9fcfb59d612e89364f3e68fb56299f8cdd") bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) [ 3340.809774][T30956] ref_ctr going negative. vaddr: 0x20000004, curr val: -18737, delta: 1 [ 3340.818293][T30956] ref_ctr increment failed for inode: 0x4a0 offset: 0x0 ref_ctr_offset: 0x4 of mm: 0xffff88813a1b8040 [ 3340.844520][T30958] netlink: 'syz-executor.4': attribute type 41 has an invalid length. 06:25:13 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f0000000380)={0x3, 0x1, 0x7, 0x2, 0xb3, &(0x7f0000000500)}) ioctl$KDGKBLED(r0, 0x4b64, &(0x7f0000000040)) io_uring_setup(0xfc6, &(0x7f0000000180)) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) r2 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$cgroup_subtree(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="88ed7c48cfb680c42f89f97a7def31f7c3754b660e634848a0626b48d0b96e39c051b0006e7ca14700d0"], 0x8) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x1, 0x0, 0x0, 0x4, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x3) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r3, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) [ 3340.852754][T30958] netlink: 44123 bytes leftover after parsing attributes in process `syz-executor.4'. 06:25:14 executing program 4: socket$inet6(0x10, 0x3, 0x0) (async) r0 = socket$inet6(0x10, 0x3, 0x0) recvmsg(r0, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) sendto$inet6(r0, &(0x7f00000001c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0) recvmsg(r0, &(0x7f00000003c0)={0x0, 0x3, 0x0}, 0x0) recvmsg(r0, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x0) (async) recvmsg(r0, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x15, &(0x7f00000000c0)={@mcast2}, 0x14) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) (async) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) recvfrom$inet6(r0, &(0x7f0000000000)=""/114, 0xfffffffffffffd1b, 0x0, 0x0, 0x0) (async) recvfrom$inet6(r0, &(0x7f0000000000)=""/114, 0xfffffffffffffd1b, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000040)) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="00281c80", @ANYRES16=r0, @ANYBLOB="ff"], 0x34}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="f4997c3794"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="58ad000010", 0x5, 0x0, 0x0, 0x0) r1 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f0000000000)='s', 0x10a73, 0x81e, 0x0, 0x4b6ae4f95a5de35b) [ 3340.888225][T30958] A link change request failed with some changes committed already. Interface ip6tnl0 may have been left with an inconsistent configuration, please check. 06:25:14 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f0000000380)={0x3, 0x1, 0x7, 0x2, 0xb3, &(0x7f0000000500)}) ioctl$KDGKBLED(r0, 0x4b64, &(0x7f0000000040)) io_uring_setup(0xfc6, &(0x7f0000000180)) socket$inet6(0xa, 0x6, 0x0) r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$cgroup_subtree(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="88ed7c48cfb680c42f89f97a7def31f7c3754b660e634848a0626b48d0b96e39c051b0006e7ca14700d0"], 0x8) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x1, 0x0, 0x0, 0x4, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x3) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) [ 3340.958349][T30969] ref_ctr going negative. vaddr: 0x20000004, curr val: -18737, delta: 1 [ 3340.966835][T30969] ref_ctr increment failed for inode: 0x4a0 offset: 0x0 ref_ctr_offset: 0x4 of mm: 0xffff88813a1b8500 [ 3341.031233][T30971] netlink: 'syz-executor.4': attribute type 41 has an invalid length. [ 3341.039484][T30971] netlink: 431 bytes leftover after parsing attributes in process `syz-executor.4'. [ 3341.063898][T30975] ref_ctr going negative. vaddr: 0x20000004, curr val: -18737, delta: 1 [ 3341.070327][T30971] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 3341.072390][T30975] ref_ctr increment failed for inode: 0x4a0 offset: 0x0 ref_ctr_offset: 0x4 of mm: 0xffff888104cb2a80 06:25:14 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) recvmsg(r0, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) sendto$inet6(r0, &(0x7f00000001c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0) (async) sendto$inet6(r0, &(0x7f00000001c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0) recvmsg(r0, &(0x7f00000003c0)={0x0, 0x3, 0x0}, 0x0) (async) recvmsg(r0, &(0x7f00000003c0)={0x0, 0x3, 0x0}, 0x0) recvmsg(r0, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x15, &(0x7f00000000c0)={@mcast2}, 0x14) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) recvfrom$inet6(r0, &(0x7f0000000000)=""/114, 0xfffffffffffffd1b, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000040)) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="00281c80", @ANYRES16=r0, @ANYBLOB="ff"], 0x34}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="f4997c3794"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="f4997c3794"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="58ad000010", 0x5, 0x0, 0x0, 0x0) socket$inet6(0x10, 0x3, 0x0) (async) r1 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f0000000000)='s', 0x10a73, 0x81e, 0x0, 0x4b6ae4f95a5de35b) 06:25:14 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f0000000380)={0x3, 0x1, 0x7, 0x2, 0xb3, &(0x7f0000000500)}) ioctl$KDGKBLED(r0, 0x4b64, &(0x7f0000000040)) io_uring_setup(0xfc6, &(0x7f0000000180)) r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$cgroup_subtree(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="88ed7c48cfb680c42f89f97a7def31f7c3754b660e634848a0626b48d0b96e39c051b0006e7ca14700d0"], 0x8) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x1, 0x0, 0x0, 0x4, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x3) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) 06:25:14 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) recvmsg(r0, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) sendto$inet6(r0, &(0x7f00000001c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0) recvmsg(r0, &(0x7f00000003c0)={0x0, 0x3, 0x0}, 0x0) recvmsg(r0, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) recvfrom$inet6(r0, &(0x7f0000000000)=""/114, 0xfffffffffffffd1b, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000040)) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="d7", @ANYRES16=r0, @ANYBLOB="ff"], 0x34}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="f4997c3794"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="58ad000010", 0x5, 0x0, 0x0, 0x0) r1 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f0000000000)='s', 0x10a73, 0x81e, 0x0, 0x4b6ae4f95a5de35b) [ 3341.221402][T30979] ref_ctr going negative. vaddr: 0x20000004, curr val: -18737, delta: 1 [ 3341.229821][T30979] ref_ctr increment failed for inode: 0x4a0 offset: 0x0 ref_ctr_offset: 0x4 of mm: 0xffff888103795540 06:25:14 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f0000000380)={0x3, 0x1, 0x7, 0x2, 0xb3, &(0x7f0000000500)}) ioctl$KDGKBLED(r0, 0x4b64, &(0x7f0000000040)) r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$cgroup_subtree(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="88ed7c48cfb680c42f89f97a7def31f7c3754b660e634848a0626b48d0b96e39c051b0006e7ca14700d0"], 0x8) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x1, 0x0, 0x0, 0x4, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x3) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) [ 3341.310213][T30986] ref_ctr going negative. vaddr: 0x20000004, curr val: -18737, delta: 1 [ 3341.318896][T30986] ref_ctr increment failed for inode: 0x4a0 offset: 0x0 ref_ctr_offset: 0x4 of mm: 0xffff8881078daa00 06:25:21 executing program 0: creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[@ANYBLOB="88ed7c48cfb680c42f89f97a7def31f7c3754b660e634848a0626b48d0b96e39c051b0006e7ca14700d0"], 0x8) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x1, 0x0, 0x0, 0x4, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x3) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) 06:25:21 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f0000000380)={0x3, 0x1, 0x7, 0x2, 0xb3, &(0x7f0000000500)}) r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$cgroup_subtree(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="88ed7c48cfb680c42f89f97a7def31f7c3754b660e634848a0626b48d0b96e39c051b0006e7ca14700d0"], 0x8) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x1, 0x0, 0x0, 0x4, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x3) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) 06:25:21 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) recvmsg(r0, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) sendto$inet6(r0, &(0x7f00000001c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0) recvmsg(r0, &(0x7f00000003c0)={0x0, 0x3, 0x0}, 0x0) recvmsg(r0, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) recvfrom$inet6(r0, &(0x7f0000000000)=""/114, 0xfffffffffffffd1b, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000040)) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="d7", @ANYRES16=r0, @ANYBLOB="ff"], 0x34}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="f4997c3794"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="58ad000010", 0x5, 0x0, 0x0, 0x0) r1 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f0000000000)='s', 0x10a73, 0x81e, 0x0, 0x4b6ae4f95a5de35b) socket$inet6(0x10, 0x3, 0x0) (async) recvmsg(r0, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) (async) sendto$inet6(r0, &(0x7f00000001c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0) (async) recvmsg(r0, &(0x7f00000003c0)={0x0, 0x3, 0x0}, 0x0) (async) recvmsg(r0, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x0) (async) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) (async) recvfrom$inet6(r0, &(0x7f0000000000)=""/114, 0xfffffffffffffd1b, 0x0, 0x0, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000040)) (async) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="d7", @ANYRES16=r0, @ANYBLOB="ff"], 0x34}}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="f4997c3794"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="58ad000010", 0x5, 0x0, 0x0, 0x0) (async) socket$inet6(0x10, 0x3, 0x0) (async) sendto$inet6(r1, &(0x7f0000000000)='s', 0x10a73, 0x81e, 0x0, 0x4b6ae4f95a5de35b) (async) 06:25:21 executing program 2: r0 = perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x9) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000540)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@bloom_filter={0x1e, 0x0, 0x0, 0xd8000000, 0x2, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1, 0x4}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x0, 0xb, &(0x7f00000006c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x22, 0xffffffffffffffff, 0x8, &(0x7f00000001c0), 0x8, 0x10, &(0x7f0000000200)={0x4, 0x0, 0x0, 0x1202}, 0x10, 0x0, r1, 0x0, &(0x7f0000000600)=[0xffffffffffffffff, 0x1, 0x1, r2]}, 0x80) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x0, 0xb, &(0x7f00000006c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x22, 0xffffffffffffffff, 0x8, &(0x7f00000001c0), 0x8, 0x10, &(0x7f0000000200)={0x4, 0x4, 0x2}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000600)=[0x1, 0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff]}, 0x80) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000540)={0xffffffffffffffff, 0xe0, &(0x7f00000014c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240), ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, &(0x7f0000001340)=[0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0], 0x0, 0x8, 0x0, 0x0, 0x10, &(0x7f00000013c0), &(0x7f00000003c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000400)}}, 0x10) r4 = gettid() perf_event_open(&(0x7f0000000700)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x1, 0x4}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x9) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000280)={0x0, r3}, 0x10) syz_open_procfs$namespace(r4, &(0x7f00000002c0)='ns/uts\x00') syz_clone(0xc0b00600, 0x0, 0x0, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)="c907d18da73959230617490e44b411f905fb37f74fffa3a8e28529399219a44caca2d67130d227af5d4ae1441b3328bba3c96da0566d5bea69179c7c977d4f4b0a419f73ae8a2caf67ea464f9fcfb59d612e89364f3e68fb56299f8cdd") bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) 06:25:21 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000005c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e24, @local}, 0x10) writev(r0, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) recvmmsg(r0, &(0x7f0000003e40)=[{{&(0x7f0000000100)=@phonet, 0x80, 0x0, 0x0, &(0x7f00000024c0)=""/4096, 0x1000, 0x7d00}}, {{0x0, 0x80100200, 0x0, 0x0, &(0x7f00000035c0)=""/241, 0xf1}}, {{&(0x7f00000036c0)=@un=@abs, 0x80, &(0x7f0000003780)=[{&(0x7f0000003740)=""/4, 0xfffffd07}], 0x1, &(0x7f00000037c0)=""/236, 0xec}}, {{&(0x7f00000038c0)=@l2tp6={0xa, 0x0, 0x0, @private1}, 0x80, &(0x7f0000003bc0)=[{0x0}, {&(0x7f0000003a00)=""/190, 0xbe}, {&(0x7f0000003ac0)=""/131, 0x83}, {0x0}], 0x4, &(0x7f0000003c00)=""/73, 0x49}}, {{&(0x7f0000003c80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, 0x0, 0x0, &(0x7f0000003e00)=""/48, 0x30}}], 0x5, 0x40000121, 0x0) 06:25:21 executing program 5: r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e24, @local}, 0x10) writev(r0, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) recvmmsg(r0, &(0x7f0000003e40)=[{{&(0x7f0000000100)=@phonet, 0x80, 0x0, 0x0, &(0x7f00000024c0)=""/4096, 0x1000, 0x407e}}, {{0x0, 0x80100200, 0x0, 0x0, &(0x7f00000035c0)=""/241, 0xf1}}, {{&(0x7f00000036c0)=@un=@abs, 0x80, &(0x7f0000003780)=[{&(0x7f0000003740)=""/4, 0xfffffd07}], 0x1, &(0x7f00000037c0)=""/236, 0xec}}, {{&(0x7f00000038c0)=@l2tp6={0xa, 0x0, 0x0, @private1}, 0x80, &(0x7f0000003bc0)=[{0x0}, {&(0x7f0000003a00)=""/190, 0xbe}, {&(0x7f0000003ac0)=""/131, 0x83}, {0x0}], 0x4, &(0x7f0000003c00)=""/73, 0x49}}, {{&(0x7f0000003c80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, 0x0, 0x0, &(0x7f0000003e00)=""/48, 0x30}}], 0x5, 0x40000121, 0x0) 06:25:21 executing program 1: syz_open_dev$tty20(0xc, 0x4, 0x0) r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$cgroup_subtree(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="88ed7c48cfb680c42f89f97a7def31f7c3754b660e634848a0626b48d0b96e39c051b0006e7ca14700d0"], 0x8) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x1, 0x0, 0x0, 0x4, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x3) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) [ 3347.950964][T30996] ref_ctr going negative. vaddr: 0x20000004, curr val: -18737, delta: 1 [ 3347.959821][T30996] ref_ctr increment failed for inode: 0x498 offset: 0x0 ref_ctr_offset: 0x4 of mm: 0xffff8881078da080 06:25:21 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) recvmsg(r0, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) sendto$inet6(r0, &(0x7f00000001c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0) (async) recvmsg(r0, &(0x7f00000003c0)={0x0, 0x3, 0x0}, 0x0) (async) recvmsg(r0, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x0) (async) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) recvfrom$inet6(r0, &(0x7f0000000000)=""/114, 0xfffffffffffffd1b, 0x0, 0x0, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000040)) (async) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="d7", @ANYRES16=r0, @ANYBLOB="ff"], 0x34}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="f4997c3794"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="58ad000010", 0x5, 0x0, 0x0, 0x0) r1 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f0000000000)='s', 0x10a73, 0x81e, 0x0, 0x4b6ae4f95a5de35b) [ 3348.011271][T31014] ref_ctr going negative. vaddr: 0x20000004, curr val: -18737, delta: 1 [ 3348.020188][T31014] ref_ctr increment failed for inode: 0x498 offset: 0x0 ref_ctr_offset: 0x4 of mm: 0xffff8881078da080 06:25:21 executing program 1: r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$cgroup_subtree(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="88ed7c48cfb680c42f89f97a7def31f7c3754b660e634848a0626b48d0b96e39c051b0006e7ca14700d0"], 0x8) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x1, 0x0, 0x0, 0x4, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x3) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) 06:25:21 executing program 1: r0 = creat(0x0, 0x0) write$cgroup_subtree(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="88ed7c48cfb680c42f89f97a7def31f7c3754b660e634848a0626b48d0b96e39c051b0006e7ca14700d0"], 0x8) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x1, 0x0, 0x0, 0x4, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x3) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) [ 3348.099640][T31021] ref_ctr going negative. vaddr: 0x20000004, curr val: -18737, delta: 1 [ 3348.108126][T31021] ref_ctr increment failed for inode: 0x498 offset: 0x0 ref_ctr_offset: 0x4 of mm: 0xffff8881078da080 06:25:21 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) recvmsg(r0, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) sendto$inet6(r0, &(0x7f00000001c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0) recvmsg(r0, &(0x7f00000003c0)={0x0, 0x3, 0x0}, 0x0) recvmsg(r0, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) recvfrom$inet6(r0, &(0x7f0000000000)=""/114, 0xfffffffffffffd1b, 0x0, 0x0, 0x0) r1 = dup(0xffffffffffffffff) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r1}}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000240)) r2 = socket$unix(0x1, 0x5, 0x0) bind$unix(r2, &(0x7f0000000380)=@file={0x1, './file0\x00'}, 0x6e) listen(r2, 0x0) r3 = dup(r2) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}}) r4 = socket$unix(0x1, 0x5, 0x0) bind$unix(r4, &(0x7f0000000380)=@file={0x1, './file0\x00'}, 0x6e) listen(r4, 0x0) r5 = dup(r4) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r4}}) r6 = open(&(0x7f0000000480)='./file0\x00', 0x0, 0x8) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r0, {0x8}}, './file0\x00'}) openat$incfs(0xffffffffffffff9c, &(0x7f0000000500)='.pending_reads\x00', 0x408002, 0xc3) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1b, 0x11, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x401}, [@ldst={0x1, 0x2, 0x1, 0x1, 0x8, 0xfffffffffffffffe, 0xfffffffffffffff0}, @cb_func={0x18, 0x8, 0x4, 0x0, 0x3}, @initr0={0x18, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x6}, @func={0x85, 0x0, 0x1, 0x0, 0x1}, @jmp={0x5, 0x0, 0xb, 0x1, 0xa, 0xc, 0x1}, @cb_func={0x18, 0x3, 0x4, 0x0, 0x8}, @map_fd={0x18, 0x9, 0x1, 0x0, r1}, @initr0={0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0x3}]}, &(0x7f0000000180)='syzkaller\x00', 0xffffff81, 0x29, &(0x7f0000000200)=""/41, 0x0, 0x7, '\x00', 0x0, 0x17, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x1, 0x3}, 0x8, 0x10, &(0x7f0000000440)={0x4, 0x4, 0x181, 0x1}, 0x10, 0x0, r3, 0x0, &(0x7f0000000600)=[r5, 0xffffffffffffffff, 0xffffffffffffffff, r6, 0xffffffffffffffff, r7, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000040)) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="00281c80", @ANYRES16=r0, @ANYBLOB="ff"], 0x34}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="f4997c3794"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="58ad000010", 0x5, 0x0, 0x0, 0x0) r8 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r8, &(0x7f0000000000)='s', 0x10a73, 0x81e, 0x0, 0x4b6ae4f95a5de35b) 06:25:21 executing program 1: r0 = creat(0x0, 0x0) write$cgroup_subtree(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="88ed7c48cfb680c42f89f97a7def31f7c3754b660e634848a0626b48d0b96e39c051b0006e7ca14700d0"], 0x8) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x1, 0x0, 0x0, 0x4, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x3) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) [ 3348.348193][T31032] netlink: 'syz-executor.4': attribute type 41 has an invalid length. [ 3348.356479][T31032] netlink: 37699 bytes leftover after parsing attributes in process `syz-executor.4'. [ 3348.366375][T31032] A link change request failed with some changes committed already. Interface ip6tnl0 may have been left with an inconsistent configuration, please check. 06:25:28 executing program 0: r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$cgroup_subtree(r0, 0x0, 0x8) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x1, 0x0, 0x0, 0x4, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x3) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) 06:25:28 executing program 1: r0 = creat(0x0, 0x0) write$cgroup_subtree(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="88ed7c48cfb680c42f89f97a7def31f7c3754b660e634848a0626b48d0b96e39c051b0006e7ca14700d0"], 0x8) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x1, 0x0, 0x0, 0x4, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x3) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) 06:25:28 executing program 2: r0 = perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x9) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000540)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@bloom_filter={0x1e, 0x0, 0x0, 0xd8000000, 0x2, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1, 0x4}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x0, 0xb, &(0x7f00000006c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x22, 0xffffffffffffffff, 0x8, &(0x7f00000001c0), 0x8, 0x10, &(0x7f0000000200)={0x4, 0x0, 0x0, 0x1202}, 0x10, 0x0, r1, 0x0, &(0x7f0000000600)=[0xffffffffffffffff, 0x1, 0x1, r2]}, 0x80) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x0, 0xb, &(0x7f00000006c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x22, 0xffffffffffffffff, 0x8, &(0x7f00000001c0), 0x8, 0x10, &(0x7f0000000200)={0x4, 0x4, 0x2}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000600)=[0x1, 0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff]}, 0x80) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000540)={0xffffffffffffffff, 0xe0, &(0x7f00000014c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240), ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, &(0x7f0000001340)=[0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0], 0x0, 0x8, 0x0, 0x0, 0x10, &(0x7f00000013c0), &(0x7f00000003c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000400)}}, 0x10) r4 = gettid() perf_event_open(&(0x7f0000000700)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x1, 0x4}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x9) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000280)={0x0, r3}, 0x10) syz_open_procfs$namespace(r4, &(0x7f00000002c0)='ns/uts\x00') syz_clone(0xc0b00600, 0x0, 0x0, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)="c907d18da73959230617490e44b411f905fb37f74fffa3a8e28529399219a44caca2d67130d227af5d4ae1441b3328bba3c96da0566d5bea69179c7c977d4f4b0a419f73ae8a2caf67ea464f9fcfb59d612e89364f3e68fb56299f8cdd") bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) 06:25:28 executing program 5: r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e24, @local}, 0x10) writev(r0, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) recvmmsg(r0, &(0x7f0000003e40)=[{{&(0x7f0000000100)=@phonet, 0x80, 0x0, 0x0, &(0x7f00000024c0)=""/4096, 0x1000, 0x4102}}, {{0x0, 0x80100200, 0x0, 0x0, &(0x7f00000035c0)=""/241, 0xf1}}, {{&(0x7f00000036c0)=@un=@abs, 0x80, &(0x7f0000003780)=[{&(0x7f0000003740)=""/4, 0xfffffd07}], 0x1, &(0x7f00000037c0)=""/236, 0xec}}, {{&(0x7f00000038c0)=@l2tp6={0xa, 0x0, 0x0, @private1}, 0x80, &(0x7f0000003bc0)=[{0x0}, {&(0x7f0000003a00)=""/190, 0xbe}, {&(0x7f0000003ac0)=""/131, 0x83}, {0x0}], 0x4, &(0x7f0000003c00)=""/73, 0x49}}, {{&(0x7f0000003c80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, 0x0, 0x0, &(0x7f0000003e00)=""/48, 0x30}}], 0x5, 0x40000121, 0x0) 06:25:28 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000005c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e24, @local}, 0x10) writev(r0, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) recvmmsg(r0, &(0x7f0000003e40)=[{{&(0x7f0000000100)=@phonet, 0x80, 0x0, 0x0, &(0x7f00000024c0)=""/4096, 0x1000, 0x7e40}}, {{0x0, 0x80100200, 0x0, 0x0, &(0x7f00000035c0)=""/241, 0xf1}}, {{&(0x7f00000036c0)=@un=@abs, 0x80, &(0x7f0000003780)=[{&(0x7f0000003740)=""/4, 0xfffffd07}], 0x1, &(0x7f00000037c0)=""/236, 0xec}}, {{&(0x7f00000038c0)=@l2tp6={0xa, 0x0, 0x0, @private1}, 0x80, &(0x7f0000003bc0)=[{0x0}, {&(0x7f0000003a00)=""/190, 0xbe}, {&(0x7f0000003ac0)=""/131, 0x83}, {0x0}], 0x4, &(0x7f0000003c00)=""/73, 0x49}}, {{&(0x7f0000003c80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, 0x0, 0x0, &(0x7f0000003e00)=""/48, 0x30}}], 0x5, 0x40000121, 0x0) 06:25:28 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) recvmsg(r0, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) sendto$inet6(r0, &(0x7f00000001c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0) (async) recvmsg(r0, &(0x7f00000003c0)={0x0, 0x3, 0x0}, 0x0) (async) recvmsg(r0, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) recvfrom$inet6(r0, &(0x7f0000000000)=""/114, 0xfffffffffffffd1b, 0x0, 0x0, 0x0) (async) r1 = dup(0xffffffffffffffff) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r1}}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000240)) (async) r2 = socket$unix(0x1, 0x5, 0x0) bind$unix(r2, &(0x7f0000000380)=@file={0x1, './file0\x00'}, 0x6e) (async) listen(r2, 0x0) (async) r3 = dup(r2) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}}) r4 = socket$unix(0x1, 0x5, 0x0) bind$unix(r4, &(0x7f0000000380)=@file={0x1, './file0\x00'}, 0x6e) listen(r4, 0x0) (async) r5 = dup(r4) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r4}}) (async) r6 = open(&(0x7f0000000480)='./file0\x00', 0x0, 0x8) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r0, {0x8}}, './file0\x00'}) openat$incfs(0xffffffffffffff9c, &(0x7f0000000500)='.pending_reads\x00', 0x408002, 0xc3) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1b, 0x11, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x401}, [@ldst={0x1, 0x2, 0x1, 0x1, 0x8, 0xfffffffffffffffe, 0xfffffffffffffff0}, @cb_func={0x18, 0x8, 0x4, 0x0, 0x3}, @initr0={0x18, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x6}, @func={0x85, 0x0, 0x1, 0x0, 0x1}, @jmp={0x5, 0x0, 0xb, 0x1, 0xa, 0xc, 0x1}, @cb_func={0x18, 0x3, 0x4, 0x0, 0x8}, @map_fd={0x18, 0x9, 0x1, 0x0, r1}, @initr0={0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0x3}]}, &(0x7f0000000180)='syzkaller\x00', 0xffffff81, 0x29, &(0x7f0000000200)=""/41, 0x0, 0x7, '\x00', 0x0, 0x17, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x1, 0x3}, 0x8, 0x10, &(0x7f0000000440)={0x4, 0x4, 0x181, 0x1}, 0x10, 0x0, r3, 0x0, &(0x7f0000000600)=[r5, 0xffffffffffffffff, 0xffffffffffffffff, r6, 0xffffffffffffffff, r7, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) (async) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000040)) (async) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="00281c80", @ANYRES16=r0, @ANYBLOB="ff"], 0x34}}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="f4997c3794"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="58ad000010", 0x5, 0x0, 0x0, 0x0) (async) r8 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r8, &(0x7f0000000000)='s', 0x10a73, 0x81e, 0x0, 0x4b6ae4f95a5de35b) 06:25:28 executing program 1: creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[@ANYBLOB="88ed7c48cfb680c42f89f97a7def31f7c3754b660e634848a0626b48d0b96e39c051b0006e7ca14700d0"], 0x8) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x1, 0x0, 0x0, 0x4, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x3) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) 06:25:28 executing program 1: creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[@ANYBLOB="88ed7c48cfb680c42f89f97a7def31f7c3754b660e634848a0626b48d0b96e39c051b0006e7ca14700d0"], 0x8) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x1, 0x0, 0x0, 0x4, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x3) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) 06:25:28 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) recvmsg(r0, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) (async) sendto$inet6(r0, &(0x7f00000001c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0) (async) recvmsg(r0, &(0x7f00000003c0)={0x0, 0x3, 0x0}, 0x0) (async) recvmsg(r0, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x0) (async) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) recvfrom$inet6(r0, &(0x7f0000000000)=""/114, 0xfffffffffffffd1b, 0x0, 0x0, 0x0) r1 = dup(0xffffffffffffffff) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r1}}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000240)) (async) r2 = socket$unix(0x1, 0x5, 0x0) bind$unix(r2, &(0x7f0000000380)=@file={0x1, './file0\x00'}, 0x6e) listen(r2, 0x0) r3 = dup(r2) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}}) (async, rerun: 64) r4 = socket$unix(0x1, 0x5, 0x0) (rerun: 64) bind$unix(r4, &(0x7f0000000380)=@file={0x1, './file0\x00'}, 0x6e) (async, rerun: 32) listen(r4, 0x0) (async, rerun: 32) r5 = dup(r4) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r4}}) (async) r6 = open(&(0x7f0000000480)='./file0\x00', 0x0, 0x8) (async) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r0, {0x8}}, './file0\x00'}) (async) openat$incfs(0xffffffffffffff9c, &(0x7f0000000500)='.pending_reads\x00', 0x408002, 0xc3) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1b, 0x11, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x401}, [@ldst={0x1, 0x2, 0x1, 0x1, 0x8, 0xfffffffffffffffe, 0xfffffffffffffff0}, @cb_func={0x18, 0x8, 0x4, 0x0, 0x3}, @initr0={0x18, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x6}, @func={0x85, 0x0, 0x1, 0x0, 0x1}, @jmp={0x5, 0x0, 0xb, 0x1, 0xa, 0xc, 0x1}, @cb_func={0x18, 0x3, 0x4, 0x0, 0x8}, @map_fd={0x18, 0x9, 0x1, 0x0, r1}, @initr0={0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0x3}]}, &(0x7f0000000180)='syzkaller\x00', 0xffffff81, 0x29, &(0x7f0000000200)=""/41, 0x0, 0x7, '\x00', 0x0, 0x17, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x1, 0x3}, 0x8, 0x10, &(0x7f0000000440)={0x4, 0x4, 0x181, 0x1}, 0x10, 0x0, r3, 0x0, &(0x7f0000000600)=[r5, 0xffffffffffffffff, 0xffffffffffffffff, r6, 0xffffffffffffffff, r7, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) (async) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000040)) (async) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="00281c80", @ANYRES16=r0, @ANYBLOB="ff"], 0x34}}, 0x0) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="f4997c3794"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async, rerun: 32) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="58ad000010", 0x5, 0x0, 0x0, 0x0) (async) r8 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r8, &(0x7f0000000000)='s', 0x10a73, 0x81e, 0x0, 0x4b6ae4f95a5de35b) 06:25:28 executing program 1: creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[@ANYBLOB="88ed7c48cfb680c42f89f97a7def31f7c3754b660e634848a0626b48d0b96e39c051b0006e7ca14700d0"], 0x8) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x1, 0x0, 0x0, 0x4, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x3) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) 06:25:28 executing program 1: r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$cgroup_subtree(r0, 0x0, 0x8) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x1, 0x0, 0x0, 0x4, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x3) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) 06:25:28 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) recvmsg(r0, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x40, @private0, 0x8}, 0x1c) sendto$inet6(r0, &(0x7f00000001c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0) recvmsg(r0, &(0x7f00000003c0)={0x0, 0x3, 0x0}, 0x0) recvmsg(r0, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) recvfrom$inet6(r0, &(0x7f0000000000)=""/114, 0xfffffffffffffd1b, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000040)) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="00281c80", @ANYRES16=r0, @ANYBLOB="0e"], 0x34}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="f4997c3794"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="58ad000010", 0x5, 0x0, 0x0, 0x0) r1 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f0000000000)='s', 0x10a73, 0x81e, 0x0, 0x4b6ae4f95a5de35b) 06:25:38 executing program 0: r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$cgroup_subtree(r0, 0x0, 0x8) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x1, 0x0, 0x0, 0x4, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x3) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) 06:25:38 executing program 1: r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$cgroup_subtree(r0, 0x0, 0x8) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x1, 0x0, 0x0, 0x4, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x3) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) 06:25:38 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) recvmsg(r0, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x40, @private0, 0x8}, 0x1c) sendto$inet6(r0, &(0x7f00000001c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0) recvmsg(r0, &(0x7f00000003c0)={0x0, 0x3, 0x0}, 0x0) recvmsg(r0, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x0) (async) recvmsg(r0, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) (async) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) recvfrom$inet6(r0, &(0x7f0000000000)=""/114, 0xfffffffffffffd1b, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000040)) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="00281c80", @ANYRES16=r0, @ANYBLOB="0e"], 0x34}}, 0x0) (async) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="00281c80", @ANYRES16=r0, @ANYBLOB="0e"], 0x34}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="f4997c3794"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="58ad000010", 0x5, 0x0, 0x0, 0x0) r1 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f0000000000)='s', 0x10a73, 0x81e, 0x0, 0x4b6ae4f95a5de35b) (async) sendto$inet6(r1, &(0x7f0000000000)='s', 0x10a73, 0x81e, 0x0, 0x4b6ae4f95a5de35b) 06:25:38 executing program 2: r0 = perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x9) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000540)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@bloom_filter={0x1e, 0x0, 0x0, 0xd8000000, 0x2, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1, 0x4}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x0, 0xb, &(0x7f00000006c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x22, 0xffffffffffffffff, 0x8, &(0x7f00000001c0), 0x8, 0x10, &(0x7f0000000200)={0x4, 0x0, 0x0, 0x1202}, 0x10, 0x0, r1, 0x0, &(0x7f0000000600)=[0xffffffffffffffff, 0x1, 0x1, r2]}, 0x80) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x0, 0xb, &(0x7f00000006c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x22, 0xffffffffffffffff, 0x8, &(0x7f00000001c0), 0x8, 0x10, &(0x7f0000000200)={0x4, 0x4, 0x2}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000600)=[0x1, 0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff]}, 0x80) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000540)={0xffffffffffffffff, 0xe0, &(0x7f00000014c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240), ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, &(0x7f0000001340)=[0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0], 0x0, 0x8, 0x0, 0x0, 0x10, &(0x7f00000013c0), &(0x7f00000003c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000400)}}, 0x10) r4 = gettid() perf_event_open(&(0x7f0000000700)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x1, 0x4}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x9) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000280)={0x0, r3}, 0x10) syz_open_procfs$namespace(r4, &(0x7f00000002c0)='ns/uts\x00') syz_clone(0xc0b00600, 0x0, 0x0, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)="c907d18da73959230617490e44b411f905fb37f74fffa3a8e28529399219a44caca2d67130d227af5d4ae1441b3328bba3c96da0566d5bea69179c7c977d4f4b0a419f73ae8a2caf67ea464f9fcfb59d612e89364f3e68fb56299f8cdd") bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) 06:25:38 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000005c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e24, @local}, 0x10) writev(r0, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) recvmmsg(r0, &(0x7f0000003e40)=[{{&(0x7f0000000100)=@phonet, 0x80, 0x0, 0x0, &(0x7f00000024c0)=""/4096, 0x1000, 0x7fd8}}, {{0x0, 0x80100200, 0x0, 0x0, &(0x7f00000035c0)=""/241, 0xf1}}, {{&(0x7f00000036c0)=@un=@abs, 0x80, &(0x7f0000003780)=[{&(0x7f0000003740)=""/4, 0xfffffd07}], 0x1, &(0x7f00000037c0)=""/236, 0xec}}, {{&(0x7f00000038c0)=@l2tp6={0xa, 0x0, 0x0, @private1}, 0x80, &(0x7f0000003bc0)=[{0x0}, {&(0x7f0000003a00)=""/190, 0xbe}, {&(0x7f0000003ac0)=""/131, 0x83}, {0x0}], 0x4, &(0x7f0000003c00)=""/73, 0x49}}, {{&(0x7f0000003c80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, 0x0, 0x0, &(0x7f0000003e00)=""/48, 0x30}}], 0x5, 0x40000121, 0x0) 06:25:38 executing program 5: r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e24, @local}, 0x10) writev(r0, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) recvmmsg(r0, &(0x7f0000003e40)=[{{&(0x7f0000000100)=@phonet, 0x80, 0x0, 0x0, &(0x7f00000024c0)=""/4096, 0x1000, 0x4c1d}}, {{0x0, 0x80100200, 0x0, 0x0, &(0x7f00000035c0)=""/241, 0xf1}}, {{&(0x7f00000036c0)=@un=@abs, 0x80, &(0x7f0000003780)=[{&(0x7f0000003740)=""/4, 0xfffffd07}], 0x1, &(0x7f00000037c0)=""/236, 0xec}}, {{&(0x7f00000038c0)=@l2tp6={0xa, 0x0, 0x0, @private1}, 0x80, &(0x7f0000003bc0)=[{0x0}, {&(0x7f0000003a00)=""/190, 0xbe}, {&(0x7f0000003ac0)=""/131, 0x83}, {0x0}], 0x4, &(0x7f0000003c00)=""/73, 0x49}}, {{&(0x7f0000003c80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, 0x0, 0x0, &(0x7f0000003e00)=""/48, 0x30}}], 0x5, 0x40000121, 0x0) 06:25:38 executing program 1: r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$cgroup_subtree(r0, 0x0, 0x8) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x1, 0x0, 0x0, 0x4, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x3) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) 06:25:38 executing program 1: r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$cgroup_subtree(r0, &(0x7f00000003c0)=ANY=[], 0x8) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x1, 0x0, 0x0, 0x4, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x3) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) 06:25:38 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) recvmsg(r0, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x40, @private0, 0x8}, 0x1c) sendto$inet6(r0, &(0x7f00000001c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0) recvmsg(r0, &(0x7f00000003c0)={0x0, 0x3, 0x0}, 0x0) recvmsg(r0, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) recvfrom$inet6(r0, &(0x7f0000000000)=""/114, 0xfffffffffffffd1b, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000040)) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="00281c80", @ANYRES16=r0, @ANYBLOB="0e"], 0x34}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="f4997c3794"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="58ad000010", 0x5, 0x0, 0x0, 0x0) r1 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f0000000000)='s', 0x10a73, 0x81e, 0x0, 0x4b6ae4f95a5de35b) socket$inet6(0x10, 0x3, 0x0) (async) recvmsg(r0, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) (async) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x40, @private0, 0x8}, 0x1c) (async) sendto$inet6(r0, &(0x7f00000001c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0) (async) recvmsg(r0, &(0x7f00000003c0)={0x0, 0x3, 0x0}, 0x0) (async) recvmsg(r0, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x0) (async) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) (async) recvfrom$inet6(r0, &(0x7f0000000000)=""/114, 0xfffffffffffffd1b, 0x0, 0x0, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000040)) (async) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="00281c80", @ANYRES16=r0, @ANYBLOB="0e"], 0x34}}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="f4997c3794"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="58ad000010", 0x5, 0x0, 0x0, 0x0) (async) socket$inet6(0x10, 0x3, 0x0) (async) sendto$inet6(r1, &(0x7f0000000000)='s', 0x10a73, 0x81e, 0x0, 0x4b6ae4f95a5de35b) (async) 06:25:38 executing program 1: r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$cgroup_subtree(r0, &(0x7f00000003c0)=ANY=[], 0x8) open(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x1, 0x0, 0x0, 0x4, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x3) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) 06:25:38 executing program 1: r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$cgroup_subtree(r0, &(0x7f00000003c0)=ANY=[], 0x8) open(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x1, 0x0, 0x0, 0x4, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x3) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) 06:25:38 executing program 1: r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$cgroup_subtree(r0, &(0x7f00000003c0)=ANY=[], 0x8) open(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x1, 0x0, 0x0, 0x4, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x3) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) 06:25:45 executing program 1: r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$cgroup_subtree(r0, &(0x7f00000003c0)=ANY=[], 0x8) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) 06:25:45 executing program 0: r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$cgroup_subtree(r0, 0x0, 0x8) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x1, 0x0, 0x0, 0x4, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x3) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) 06:25:45 executing program 2: perf_event_open$cgroup(&(0x7f0000000000)={0x2, 0x80, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 06:25:45 executing program 5: r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e24, @local}, 0x10) writev(r0, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) recvmmsg(r0, &(0x7f0000003e40)=[{{&(0x7f0000000100)=@phonet, 0x80, 0x0, 0x0, &(0x7f00000024c0)=""/4096, 0x1000, 0x7530}}, {{0x0, 0x80100200, 0x0, 0x0, &(0x7f00000035c0)=""/241, 0xf1}}, {{&(0x7f00000036c0)=@un=@abs, 0x80, &(0x7f0000003780)=[{&(0x7f0000003740)=""/4, 0xfffffd07}], 0x1, &(0x7f00000037c0)=""/236, 0xec}}, {{&(0x7f00000038c0)=@l2tp6={0xa, 0x0, 0x0, @private1}, 0x80, &(0x7f0000003bc0)=[{0x0}, {&(0x7f0000003a00)=""/190, 0xbe}, {&(0x7f0000003ac0)=""/131, 0x83}, {0x0}], 0x4, &(0x7f0000003c00)=""/73, 0x49}}, {{&(0x7f0000003c80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, 0x0, 0x0, &(0x7f0000003e00)=""/48, 0x30}}], 0x5, 0x40000121, 0x0) 06:25:45 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) recvmsg(r0, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) sendto$inet6(r0, &(0x7f00000001c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0) recvmsg(r0, &(0x7f00000003c0)={0x0, 0x3, 0x0}, 0x0) recvmsg(r0, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) recvfrom$inet6(r0, &(0x7f0000000000)=""/114, 0xfffffffffffffd1b, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="00281c80", @ANYRES16=r0, @ANYBLOB="ff"], 0x34}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000bc0)={'batadv0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000c80)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)=@ipv4_getaddr={0x2c, 0x16, 0x100, 0x70bd29, 0x25dfdbff, {0x2, 0x20, 0x9, 0xff, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x6, 0x5, 0x2, 0x7fff}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x8000) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000d00)={0x5, 0x0}, 0x8) signalfd(r0, &(0x7f0000000080), 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0x3, &(0x7f0000000d40)=ANY=[@ANYBLOB="c830997c3794"], 0x0, 0xffffffff, 0x0, 0x0, 0x41100, 0x0, '\x00', r1, 0x18, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r3}, 0x80) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="58ad000010", 0x5, 0x0, 0x0, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmmsg$inet6(r4, &(0x7f0000000ac0)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x81}, 0x1c, &(0x7f0000000200)=[{&(0x7f0000000100)="3f7d50c31b6987013e2b9b6da369189e4e16f110f88916f40db9b5b9d34cc47b36275073c5c51d7e0975", 0x2a}, {&(0x7f0000000400)="994c332a89281efb949f360afb8c228717051021abe4f91ea1d330fcedda9c318c07ecc78b3033f648441c756fe6412d6c18fcdd016c42fa6f726c69855ca3dc4906779cd80e6e04d25e2e18365823e55868ee793ec67a83a68cf79f3f5929ae62b2314cb6f8f79755483249ed96595e21b106b6315b7b2ea0c4e7e6f757c1d3e823aa94e15dca9cea6535b2225b08ef26349df0b9640e49a244deefe801e7711e8c21d85aca07443fde3b36deda555b59bf932930b7af0fb544742759ffceae74d086eea7a17e4bcff708730b98d9a79202ed05a9996769c1e09386d8afc2988b3161c7", 0xe4}, {&(0x7f0000000140)="dcbcc6e9e89a4724eae9871f1abfc69d94fa61025bf6d987ffd641a028fc245129446cecbb057103c54252572c2c7bc23ad80399eb05ff0f56bc7491c3ede24c6c958d9b2f9342ec71151fa3504d737868191ae5", 0x54}], 0x3}}, {{&(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast2, 0x1ff}, 0x1c, &(0x7f00000005c0)=[{&(0x7f0000000500)="aeb3250914ecaa9f570eb45ffca178a867485c2a82be65e1d59bc8a3d2b47c309a859b12f17f61813c3cacb80a1c1b9686c0ec247b7bb418f360dc59734189471745e46523f2c7c83a81ac6dc271bdf7c5443e37745b91012cf52c84", 0x5c}, {&(0x7f0000000580)="ff100eed24c92f3f96b22d54e2dbbc887c37f619e14c56bd69", 0x19}], 0x2, &(0x7f0000000d80)=ANY=[@ANYBLOB="140000000000000029000000430000008100000000000000140000000000000029000000080000001f0000000000000088000000000000002900000039000000000e010300000000fe8000000000d612000000000000000000aa0000000000000000000000000000000100000000000000000000000000000000ff010000000000000000000000000001ff010000000000000000000000000001fc010000000000000000000000000001fc0100"/186], 0xb8}}, {{&(0x7f0000000600)={0xa, 0x4e24, 0x401, @loopback, 0x449}, 0x1c, &(0x7f00000009c0)=[{&(0x7f0000000740)="da82f19b0d9dba637ac0cf519379ffe6b30f14b0fdb6f497ccc7ca01e5568ab36dba425d6b027e0e289f07cd916879b70d9e53a3bcc714ae31dd6a349eaf215f4653397aa948c53f1ee736c2de26ba701e4d5da185e92f5a7fac3f7e0627d0909940ad6390cde02e67ef47c36aa8c4b4e81d87d9812f5f91e50010bbd0a9e3d1101a98b51b1842933b291feb1fd9145b3cb0847149ebcb2f139aea2adb58dfb5741111f7a7633556131cd5f0104e05e891eee3f86597dec9324e152b223bb65ffd6ff519255eeefa56e6191397", 0xcd}, {&(0x7f0000000840)="0b459e54036c7b09fd166f653e993426c3801d281aad9adef1af3e948e6cb610b5f36b4f5e88a15f70e238e75846e5e9d726b443b1332f73004195a1d9d2fbb4d2841b5804ce7e4eea526f91e91faa61ae509a698cb97ddd80660eeeebcfddaace2d80dff2666381691e788fcc68a919e00ac3a4cc00340169364e6dfae102788c72", 0x82}, {&(0x7f0000000900)="824c5e2b24e646189a9b4c340b2faa0d1b77cb8a13ee2cf01c4774e0e6b325ccaae7c5817aad6378a6803cb8181489cfb058c6de89bb2790fdc4ade26cc84bdb252c2f3ddb802ea07fd6b6d3e517cccd746e8a94f56f86f37f2a9332a4ac9793ba55b5b89459119cc95922032874a4e48a12597d4a4275077caff8e844873bfe8a81e1c21e219bbf04361e3f020be3933be1d69afe436591c2c18f40c3912b153e76c91d88616be870477298312a626940d5f81dda", 0xb5}], 0x3, &(0x7f0000000a40)=[@rthdrdstopts={{0x50, 0x29, 0x37, {0x3b, 0x6, '\x00', [@calipso={0x7, 0x30, {0x1, 0xa, 0x10, 0x0, [0x9, 0xb99, 0x5, 0x3ff, 0x7]}}]}}}], 0x50}}], 0x3, 0x20040002) r5 = socket$inet6(0x10, 0x3, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000cc0)={0xa, 0x4e23, 0x7dae, @mcast2, 0x5}, 0x1c) sendto$inet6(r5, &(0x7f0000000000)='s', 0x10a73, 0x81e, 0x0, 0x4b6ae4f95a5de35b) 06:25:45 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000005c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e24, @local}, 0x10) writev(r0, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) recvmmsg(r0, &(0x7f0000003e40)=[{{&(0x7f0000000100)=@phonet, 0x80, 0x0, 0x0, &(0x7f00000024c0)=""/4096, 0x1000, 0x807c}}, {{0x0, 0x80100200, 0x0, 0x0, &(0x7f00000035c0)=""/241, 0xf1}}, {{&(0x7f00000036c0)=@un=@abs, 0x80, &(0x7f0000003780)=[{&(0x7f0000003740)=""/4, 0xfffffd07}], 0x1, &(0x7f00000037c0)=""/236, 0xec}}, {{&(0x7f00000038c0)=@l2tp6={0xa, 0x0, 0x0, @private1}, 0x80, &(0x7f0000003bc0)=[{0x0}, {&(0x7f0000003a00)=""/190, 0xbe}, {&(0x7f0000003ac0)=""/131, 0x83}, {0x0}], 0x4, &(0x7f0000003c00)=""/73, 0x49}}, {{&(0x7f0000003c80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, 0x0, 0x0, &(0x7f0000003e00)=""/48, 0x30}}], 0x5, 0x40000121, 0x0) 06:25:45 executing program 1: r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$cgroup_subtree(r0, &(0x7f00000003c0)=ANY=[], 0x8) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) 06:25:45 executing program 2: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000007c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r0, 0x0, 0xffffffffffffffff, 0x0) 06:25:45 executing program 1: r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$cgroup_subtree(r0, &(0x7f00000003c0)=ANY=[], 0x8) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) 06:25:45 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) 06:25:45 executing program 1: r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$cgroup_subtree(r0, &(0x7f00000003c0)=ANY=[], 0x8) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x0, 0x1, 0x0, 0x0, 0x4, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x3) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) 06:25:45 executing program 2: bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000000)={@cgroup, 0xffffffffffffffff, 0xb}, 0x10) 06:25:45 executing program 1: r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$cgroup_subtree(r0, &(0x7f00000003c0)=ANY=[], 0x8) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x0, 0x1, 0x0, 0x0, 0x4, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x3) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) [ 3372.738659][T31113] netlink: 44271 bytes leftover after parsing attributes in process `syz-executor.4'. 06:25:51 executing program 0: r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$cgroup_subtree(r0, &(0x7f00000003c0)=ANY=[], 0x8) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x1, 0x0, 0x0, 0x4, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x3) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) 06:25:51 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) recvmsg(r0, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) (async) recvmsg(r0, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) sendto$inet6(r0, &(0x7f00000001c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0) recvmsg(r0, &(0x7f00000003c0)={0x0, 0x3, 0x0}, 0x0) recvmsg(r0, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x0) (async) recvmsg(r0, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) recvfrom$inet6(r0, &(0x7f0000000000)=""/114, 0xfffffffffffffd1b, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="00281c80", @ANYRES16=r0, @ANYBLOB="ff"], 0x34}}, 0x0) (async) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="00281c80", @ANYRES16=r0, @ANYBLOB="ff"], 0x34}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000bc0)={'batadv0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000c80)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)=@ipv4_getaddr={0x2c, 0x16, 0x100, 0x70bd29, 0x25dfdbff, {0x2, 0x20, 0x9, 0xff, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x6, 0x5, 0x2, 0x7fff}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x8000) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000d00)={0x5}, 0x8) (async) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000d00)={0x5, 0x0}, 0x8) signalfd(r0, &(0x7f0000000080), 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0x3, &(0x7f0000000d40)=ANY=[@ANYBLOB="c830997c3794"], 0x0, 0xffffffff, 0x0, 0x0, 0x41100, 0x0, '\x00', r1, 0x18, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r3}, 0x80) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="58ad000010", 0x5, 0x0, 0x0, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) (async) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmmsg$inet6(r4, &(0x7f0000000ac0)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x81}, 0x1c, &(0x7f0000000200)=[{&(0x7f0000000100)="3f7d50c31b6987013e2b9b6da369189e4e16f110f88916f40db9b5b9d34cc47b36275073c5c51d7e0975", 0x2a}, {&(0x7f0000000400)="994c332a89281efb949f360afb8c228717051021abe4f91ea1d330fcedda9c318c07ecc78b3033f648441c756fe6412d6c18fcdd016c42fa6f726c69855ca3dc4906779cd80e6e04d25e2e18365823e55868ee793ec67a83a68cf79f3f5929ae62b2314cb6f8f79755483249ed96595e21b106b6315b7b2ea0c4e7e6f757c1d3e823aa94e15dca9cea6535b2225b08ef26349df0b9640e49a244deefe801e7711e8c21d85aca07443fde3b36deda555b59bf932930b7af0fb544742759ffceae74d086eea7a17e4bcff708730b98d9a79202ed05a9996769c1e09386d8afc2988b3161c7", 0xe4}, {&(0x7f0000000140)="dcbcc6e9e89a4724eae9871f1abfc69d94fa61025bf6d987ffd641a028fc245129446cecbb057103c54252572c2c7bc23ad80399eb05ff0f56bc7491c3ede24c6c958d9b2f9342ec71151fa3504d737868191ae5", 0x54}], 0x3}}, {{&(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast2, 0x1ff}, 0x1c, &(0x7f00000005c0)=[{&(0x7f0000000500)="aeb3250914ecaa9f570eb45ffca178a867485c2a82be65e1d59bc8a3d2b47c309a859b12f17f61813c3cacb80a1c1b9686c0ec247b7bb418f360dc59734189471745e46523f2c7c83a81ac6dc271bdf7c5443e37745b91012cf52c84", 0x5c}, {&(0x7f0000000580)="ff100eed24c92f3f96b22d54e2dbbc887c37f619e14c56bd69", 0x19}], 0x2, &(0x7f0000000d80)=ANY=[@ANYBLOB="140000000000000029000000430000008100000000000000140000000000000029000000080000001f0000000000000088000000000000002900000039000000000e010300000000fe8000000000d612000000000000000000aa0000000000000000000000000000000100000000000000000000000000000000ff010000000000000000000000000001ff010000000000000000000000000001fc010000000000000000000000000001fc0100"/186], 0xb8}}, {{&(0x7f0000000600)={0xa, 0x4e24, 0x401, @loopback, 0x449}, 0x1c, &(0x7f00000009c0)=[{&(0x7f0000000740)="da82f19b0d9dba637ac0cf519379ffe6b30f14b0fdb6f497ccc7ca01e5568ab36dba425d6b027e0e289f07cd916879b70d9e53a3bcc714ae31dd6a349eaf215f4653397aa948c53f1ee736c2de26ba701e4d5da185e92f5a7fac3f7e0627d0909940ad6390cde02e67ef47c36aa8c4b4e81d87d9812f5f91e50010bbd0a9e3d1101a98b51b1842933b291feb1fd9145b3cb0847149ebcb2f139aea2adb58dfb5741111f7a7633556131cd5f0104e05e891eee3f86597dec9324e152b223bb65ffd6ff519255eeefa56e6191397", 0xcd}, {&(0x7f0000000840)="0b459e54036c7b09fd166f653e993426c3801d281aad9adef1af3e948e6cb610b5f36b4f5e88a15f70e238e75846e5e9d726b443b1332f73004195a1d9d2fbb4d2841b5804ce7e4eea526f91e91faa61ae509a698cb97ddd80660eeeebcfddaace2d80dff2666381691e788fcc68a919e00ac3a4cc00340169364e6dfae102788c72", 0x82}, {&(0x7f0000000900)="824c5e2b24e646189a9b4c340b2faa0d1b77cb8a13ee2cf01c4774e0e6b325ccaae7c5817aad6378a6803cb8181489cfb058c6de89bb2790fdc4ade26cc84bdb252c2f3ddb802ea07fd6b6d3e517cccd746e8a94f56f86f37f2a9332a4ac9793ba55b5b89459119cc95922032874a4e48a12597d4a4275077caff8e844873bfe8a81e1c21e219bbf04361e3f020be3933be1d69afe436591c2c18f40c3912b153e76c91d88616be870477298312a626940d5f81dda", 0xb5}], 0x3, &(0x7f0000000a40)=[@rthdrdstopts={{0x50, 0x29, 0x37, {0x3b, 0x6, '\x00', [@calipso={0x7, 0x30, {0x1, 0xa, 0x10, 0x0, [0x9, 0xb99, 0x5, 0x3ff, 0x7]}}]}}}], 0x50}}], 0x3, 0x20040002) socket$inet6(0x10, 0x3, 0x0) (async) r5 = socket$inet6(0x10, 0x3, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000cc0)={0xa, 0x4e23, 0x7dae, @mcast2, 0x5}, 0x1c) sendto$inet6(r5, &(0x7f0000000000)='s', 0x10a73, 0x81e, 0x0, 0x4b6ae4f95a5de35b) (async) sendto$inet6(r5, &(0x7f0000000000)='s', 0x10a73, 0x81e, 0x0, 0x4b6ae4f95a5de35b) 06:25:51 executing program 2: syz_clone(0xc1004000, &(0x7f00000005c0), 0x0, &(0x7f00000006c0), &(0x7f0000000700), &(0x7f0000000740)="48d0c8a39469f0cebe2a47abe957ed16ddcfc635cc04c1d4f8a97f1df1e5a1917a36784760d4a2e28507c8fe92a07c299fae565d3f0519a068a8f2d7c510c2") 06:25:51 executing program 1: r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$cgroup_subtree(r0, &(0x7f00000003c0)=ANY=[], 0x8) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x0, 0x1, 0x0, 0x0, 0x4, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x3) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) 06:25:51 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000005c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e24, @local}, 0x10) writev(r0, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) recvmmsg(r0, &(0x7f0000003e40)=[{{&(0x7f0000000100)=@phonet, 0x80, 0x0, 0x0, &(0x7f00000024c0)=""/4096, 0x1000, 0x8358}}, {{0x0, 0x80100200, 0x0, 0x0, &(0x7f00000035c0)=""/241, 0xf1}}, {{&(0x7f00000036c0)=@un=@abs, 0x80, &(0x7f0000003780)=[{&(0x7f0000003740)=""/4, 0xfffffd07}], 0x1, &(0x7f00000037c0)=""/236, 0xec}}, {{&(0x7f00000038c0)=@l2tp6={0xa, 0x0, 0x0, @private1}, 0x80, &(0x7f0000003bc0)=[{0x0}, {&(0x7f0000003a00)=""/190, 0xbe}, {&(0x7f0000003ac0)=""/131, 0x83}, {0x0}], 0x4, &(0x7f0000003c00)=""/73, 0x49}}, {{&(0x7f0000003c80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, 0x0, 0x0, &(0x7f0000003e00)=""/48, 0x30}}], 0x5, 0x40000121, 0x0) 06:25:51 executing program 5: r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e24, @local}, 0x10) writev(r0, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) recvmmsg(r0, &(0x7f0000003e40)=[{{&(0x7f0000000100)=@phonet, 0x80, 0x0, 0x0, &(0x7f00000024c0)=""/4096, 0x1000, 0x7c80}}, {{0x0, 0x80100200, 0x0, 0x0, &(0x7f00000035c0)=""/241, 0xf1}}, {{&(0x7f00000036c0)=@un=@abs, 0x80, &(0x7f0000003780)=[{&(0x7f0000003740)=""/4, 0xfffffd07}], 0x1, &(0x7f00000037c0)=""/236, 0xec}}, {{&(0x7f00000038c0)=@l2tp6={0xa, 0x0, 0x0, @private1}, 0x80, &(0x7f0000003bc0)=[{0x0}, {&(0x7f0000003a00)=""/190, 0xbe}, {&(0x7f0000003ac0)=""/131, 0x83}, {0x0}], 0x4, &(0x7f0000003c00)=""/73, 0x49}}, {{&(0x7f0000003c80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, 0x0, 0x0, &(0x7f0000003e00)=""/48, 0x30}}], 0x5, 0x40000121, 0x0) 06:25:52 executing program 1: r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$cgroup_subtree(r0, &(0x7f00000003c0)=ANY=[], 0x8) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x3) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) 06:25:52 executing program 2: bpf$OBJ_GET_MAP(0x7, &(0x7f0000000900)={&(0x7f00000008c0)='./file0\x00'}, 0x10) mkdir(&(0x7f0000000a80)='./file0\x00', 0x0) 06:25:52 executing program 1: r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$cgroup_subtree(r0, &(0x7f00000003c0)=ANY=[], 0x8) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x3) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) 06:25:52 executing program 1: r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$cgroup_subtree(r0, &(0x7f00000003c0)=ANY=[], 0x8) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x3) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) [ 3378.924615][T31147] netlink: 44271 bytes leftover after parsing attributes in process `syz-executor.4'. [ 3378.957570][T31147] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 06:25:52 executing program 2: perf_event_open$cgroup(&(0x7f0000000000)={0x2, 0x80, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x8000000000000d3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 06:25:52 executing program 1: r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$cgroup_subtree(r0, &(0x7f00000003c0)=ANY=[], 0x8) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x3) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) [ 3378.972437][T31146] netlink: 44271 bytes leftover after parsing attributes in process `syz-executor.4'. 06:25:59 executing program 0: r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$cgroup_subtree(r0, &(0x7f00000003c0)=ANY=[], 0x8) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x1, 0x0, 0x0, 0x4, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x3) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) 06:25:59 executing program 2: bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x6, 0x1, &(0x7f0000000000)=@raw=[@generic={0x6}], &(0x7f0000000040)='syzkaller\x00', 0x3, 0xf0, &(0x7f0000000080)=""/240, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 06:25:59 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) recvmsg(r0, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) (async) sendto$inet6(r0, &(0x7f00000001c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0) (async) recvmsg(r0, &(0x7f00000003c0)={0x0, 0x3, 0x0}, 0x0) recvmsg(r0, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) (async) recvfrom$inet6(r0, &(0x7f0000000000)=""/114, 0xfffffffffffffd1b, 0x0, 0x0, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) (async) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="00281c80", @ANYRES16=r0, @ANYBLOB="ff"], 0x34}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000bc0)={'batadv0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000c80)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)=@ipv4_getaddr={0x2c, 0x16, 0x100, 0x70bd29, 0x25dfdbff, {0x2, 0x20, 0x9, 0xff, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x6, 0x5, 0x2, 0x7fff}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x8000) (async) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000d00)={0x5, 0x0}, 0x8) signalfd(r0, &(0x7f0000000080), 0x8) (async) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0x3, &(0x7f0000000d40)=ANY=[@ANYBLOB="c830997c3794"], 0x0, 0xffffffff, 0x0, 0x0, 0x41100, 0x0, '\x00', r1, 0x18, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r3}, 0x80) (async) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="58ad000010", 0x5, 0x0, 0x0, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) (async) sendmmsg$inet6(r4, &(0x7f0000000ac0)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x81}, 0x1c, &(0x7f0000000200)=[{&(0x7f0000000100)="3f7d50c31b6987013e2b9b6da369189e4e16f110f88916f40db9b5b9d34cc47b36275073c5c51d7e0975", 0x2a}, {&(0x7f0000000400)="994c332a89281efb949f360afb8c228717051021abe4f91ea1d330fcedda9c318c07ecc78b3033f648441c756fe6412d6c18fcdd016c42fa6f726c69855ca3dc4906779cd80e6e04d25e2e18365823e55868ee793ec67a83a68cf79f3f5929ae62b2314cb6f8f79755483249ed96595e21b106b6315b7b2ea0c4e7e6f757c1d3e823aa94e15dca9cea6535b2225b08ef26349df0b9640e49a244deefe801e7711e8c21d85aca07443fde3b36deda555b59bf932930b7af0fb544742759ffceae74d086eea7a17e4bcff708730b98d9a79202ed05a9996769c1e09386d8afc2988b3161c7", 0xe4}, {&(0x7f0000000140)="dcbcc6e9e89a4724eae9871f1abfc69d94fa61025bf6d987ffd641a028fc245129446cecbb057103c54252572c2c7bc23ad80399eb05ff0f56bc7491c3ede24c6c958d9b2f9342ec71151fa3504d737868191ae5", 0x54}], 0x3}}, {{&(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast2, 0x1ff}, 0x1c, &(0x7f00000005c0)=[{&(0x7f0000000500)="aeb3250914ecaa9f570eb45ffca178a867485c2a82be65e1d59bc8a3d2b47c309a859b12f17f61813c3cacb80a1c1b9686c0ec247b7bb418f360dc59734189471745e46523f2c7c83a81ac6dc271bdf7c5443e37745b91012cf52c84", 0x5c}, {&(0x7f0000000580)="ff100eed24c92f3f96b22d54e2dbbc887c37f619e14c56bd69", 0x19}], 0x2, &(0x7f0000000d80)=ANY=[@ANYBLOB="140000000000000029000000430000008100000000000000140000000000000029000000080000001f0000000000000088000000000000002900000039000000000e010300000000fe8000000000d612000000000000000000aa0000000000000000000000000000000100000000000000000000000000000000ff010000000000000000000000000001ff010000000000000000000000000001fc010000000000000000000000000001fc0100"/186], 0xb8}}, {{&(0x7f0000000600)={0xa, 0x4e24, 0x401, @loopback, 0x449}, 0x1c, &(0x7f00000009c0)=[{&(0x7f0000000740)="da82f19b0d9dba637ac0cf519379ffe6b30f14b0fdb6f497ccc7ca01e5568ab36dba425d6b027e0e289f07cd916879b70d9e53a3bcc714ae31dd6a349eaf215f4653397aa948c53f1ee736c2de26ba701e4d5da185e92f5a7fac3f7e0627d0909940ad6390cde02e67ef47c36aa8c4b4e81d87d9812f5f91e50010bbd0a9e3d1101a98b51b1842933b291feb1fd9145b3cb0847149ebcb2f139aea2adb58dfb5741111f7a7633556131cd5f0104e05e891eee3f86597dec9324e152b223bb65ffd6ff519255eeefa56e6191397", 0xcd}, {&(0x7f0000000840)="0b459e54036c7b09fd166f653e993426c3801d281aad9adef1af3e948e6cb610b5f36b4f5e88a15f70e238e75846e5e9d726b443b1332f73004195a1d9d2fbb4d2841b5804ce7e4eea526f91e91faa61ae509a698cb97ddd80660eeeebcfddaace2d80dff2666381691e788fcc68a919e00ac3a4cc00340169364e6dfae102788c72", 0x82}, {&(0x7f0000000900)="824c5e2b24e646189a9b4c340b2faa0d1b77cb8a13ee2cf01c4774e0e6b325ccaae7c5817aad6378a6803cb8181489cfb058c6de89bb2790fdc4ade26cc84bdb252c2f3ddb802ea07fd6b6d3e517cccd746e8a94f56f86f37f2a9332a4ac9793ba55b5b89459119cc95922032874a4e48a12597d4a4275077caff8e844873bfe8a81e1c21e219bbf04361e3f020be3933be1d69afe436591c2c18f40c3912b153e76c91d88616be870477298312a626940d5f81dda", 0xb5}], 0x3, &(0x7f0000000a40)=[@rthdrdstopts={{0x50, 0x29, 0x37, {0x3b, 0x6, '\x00', [@calipso={0x7, 0x30, {0x1, 0xa, 0x10, 0x0, [0x9, 0xb99, 0x5, 0x3ff, 0x7]}}]}}}], 0x50}}], 0x3, 0x20040002) r5 = socket$inet6(0x10, 0x3, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000cc0)={0xa, 0x4e23, 0x7dae, @mcast2, 0x5}, 0x1c) (async) sendto$inet6(r5, &(0x7f0000000000)='s', 0x10a73, 0x81e, 0x0, 0x4b6ae4f95a5de35b) 06:25:59 executing program 1: r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$cgroup_subtree(r0, &(0x7f00000003c0)=ANY=[], 0x8) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x3) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) 06:25:59 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000005c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e24, @local}, 0x10) writev(r0, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) recvmmsg(r0, &(0x7f0000003e40)=[{{&(0x7f0000000100)=@phonet, 0x80, 0x0, 0x0, &(0x7f00000024c0)=""/4096, 0x1000, 0xbe54}}, {{0x0, 0x80100200, 0x0, 0x0, &(0x7f00000035c0)=""/241, 0xf1}}, {{&(0x7f00000036c0)=@un=@abs, 0x80, &(0x7f0000003780)=[{&(0x7f0000003740)=""/4, 0xfffffd07}], 0x1, &(0x7f00000037c0)=""/236, 0xec}}, {{&(0x7f00000038c0)=@l2tp6={0xa, 0x0, 0x0, @private1}, 0x80, &(0x7f0000003bc0)=[{0x0}, {&(0x7f0000003a00)=""/190, 0xbe}, {&(0x7f0000003ac0)=""/131, 0x83}, {0x0}], 0x4, &(0x7f0000003c00)=""/73, 0x49}}, {{&(0x7f0000003c80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, 0x0, 0x0, &(0x7f0000003e00)=""/48, 0x30}}], 0x5, 0x40000121, 0x0) 06:25:59 executing program 5: r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e24, @local}, 0x10) writev(r0, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) recvmmsg(r0, &(0x7f0000003e40)=[{{&(0x7f0000000100)=@phonet, 0x80, 0x0, 0x0, &(0x7f00000024c0)=""/4096, 0x1000, 0x7d00}}, {{0x0, 0x80100200, 0x0, 0x0, &(0x7f00000035c0)=""/241, 0xf1}}, {{&(0x7f00000036c0)=@un=@abs, 0x80, &(0x7f0000003780)=[{&(0x7f0000003740)=""/4, 0xfffffd07}], 0x1, &(0x7f00000037c0)=""/236, 0xec}}, {{&(0x7f00000038c0)=@l2tp6={0xa, 0x0, 0x0, @private1}, 0x80, &(0x7f0000003bc0)=[{0x0}, {&(0x7f0000003a00)=""/190, 0xbe}, {&(0x7f0000003ac0)=""/131, 0x83}, {0x0}], 0x4, &(0x7f0000003c00)=""/73, 0x49}}, {{&(0x7f0000003c80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, 0x0, 0x0, &(0x7f0000003e00)=""/48, 0x30}}], 0x5, 0x40000121, 0x0) 06:25:59 executing program 2: perf_event_open$cgroup(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 06:25:59 executing program 1: r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$cgroup_subtree(r0, &(0x7f00000003c0)=ANY=[], 0x8) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x3) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) 06:25:59 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) recvmsg(r0, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) sendto$inet6(r0, &(0x7f00000001c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0) recvmsg(r0, &(0x7f00000003c0)={0x0, 0x3, 0x0}, 0x0) recvmsg(r0, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) recvfrom$inet6(r0, &(0x7f0000000000)=""/114, 0xfffffffffffffd1b, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000040)) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="00281c80", @ANYRES16=r0, @ANYBLOB="bd"], 0x34}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="f4997c3794"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="58ad000010", 0x5, 0x0, 0x0, 0x0) r1 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f0000000000)='s', 0x10a73, 0x81e, 0x0, 0x4b6ae4f95a5de35b) 06:25:59 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x8, 0x5, &(0x7f0000000000)=@framed={{}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 06:25:59 executing program 1: r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$cgroup_subtree(r0, &(0x7f00000003c0)=ANY=[], 0x8) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) 06:25:59 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x10, 0x4, 0x8, 0x979, 0x881, 0x1}, 0x48) [ 3386.129607][T31186] netlink: 'syz-executor.4': attribute type 41 has an invalid length. [ 3386.137863][T31186] netlink: 44123 bytes leftover after parsing attributes in process `syz-executor.4'. [ 3386.160031][T31186] A link change request failed with some changes committed already. Interface ip6tnl0 may have been left with an inconsistent configuration, please check. 06:26:05 executing program 0: r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$cgroup_subtree(r0, &(0x7f00000003c0)=ANY=[], 0x8) open(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x1, 0x0, 0x0, 0x4, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x3) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) 06:26:05 executing program 1: r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$cgroup_subtree(r0, &(0x7f00000003c0)=ANY=[], 0x8) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = open(0x0, 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) 06:26:05 executing program 2: perf_event_open$cgroup(&(0x7f0000003c00)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 06:26:05 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) recvmsg(r0, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) (async, rerun: 32) sendto$inet6(r0, &(0x7f00000001c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0) (async, rerun: 32) recvmsg(r0, &(0x7f00000003c0)={0x0, 0x3, 0x0}, 0x0) recvmsg(r0, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) (async) recvfrom$inet6(r0, &(0x7f0000000000)=""/114, 0xfffffffffffffd1b, 0x0, 0x0, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000040)) (async) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="00281c80", @ANYRES16=r0, @ANYBLOB="bd"], 0x34}}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="f4997c3794"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async, rerun: 64) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="58ad000010", 0x5, 0x0, 0x0, 0x0) (async, rerun: 64) r1 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f0000000000)='s', 0x10a73, 0x81e, 0x0, 0x4b6ae4f95a5de35b) 06:26:05 executing program 5: r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e24, @local}, 0x10) writev(r0, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) recvmmsg(r0, &(0x7f0000003e40)=[{{&(0x7f0000000100)=@phonet, 0x80, 0x0, 0x0, &(0x7f00000024c0)=""/4096, 0x1000, 0x7e40}}, {{0x0, 0x80100200, 0x0, 0x0, &(0x7f00000035c0)=""/241, 0xf1}}, {{&(0x7f00000036c0)=@un=@abs, 0x80, &(0x7f0000003780)=[{&(0x7f0000003740)=""/4, 0xfffffd07}], 0x1, &(0x7f00000037c0)=""/236, 0xec}}, {{&(0x7f00000038c0)=@l2tp6={0xa, 0x0, 0x0, @private1}, 0x80, &(0x7f0000003bc0)=[{0x0}, {&(0x7f0000003a00)=""/190, 0xbe}, {&(0x7f0000003ac0)=""/131, 0x83}, {0x0}], 0x4, &(0x7f0000003c00)=""/73, 0x49}}, {{&(0x7f0000003c80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, 0x0, 0x0, &(0x7f0000003e00)=""/48, 0x30}}], 0x5, 0x40000121, 0x0) 06:26:05 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000005c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e24, @local}, 0x10) writev(r0, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) recvmmsg(r0, &(0x7f0000003e40)=[{{&(0x7f0000000100)=@phonet, 0x80, 0x0, 0x0, &(0x7f00000024c0)=""/4096, 0x1000, 0xd87f}}, {{0x0, 0x80100200, 0x0, 0x0, &(0x7f00000035c0)=""/241, 0xf1}}, {{&(0x7f00000036c0)=@un=@abs, 0x80, &(0x7f0000003780)=[{&(0x7f0000003740)=""/4, 0xfffffd07}], 0x1, &(0x7f00000037c0)=""/236, 0xec}}, {{&(0x7f00000038c0)=@l2tp6={0xa, 0x0, 0x0, @private1}, 0x80, &(0x7f0000003bc0)=[{0x0}, {&(0x7f0000003a00)=""/190, 0xbe}, {&(0x7f0000003ac0)=""/131, 0x83}, {0x0}], 0x4, &(0x7f0000003c00)=""/73, 0x49}}, {{&(0x7f0000003c80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, 0x0, 0x0, &(0x7f0000003e00)=""/48, 0x30}}], 0x5, 0x40000121, 0x0) 06:26:05 executing program 2: perf_event_open$cgroup(&(0x7f0000000140)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 06:26:05 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) recvmsg(r0, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) sendto$inet6(r0, &(0x7f00000001c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0) (async) recvmsg(r0, &(0x7f00000003c0)={0x0, 0x3, 0x0}, 0x0) (async) recvmsg(r0, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x0) (async) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) (async) recvfrom$inet6(r0, &(0x7f0000000000)=""/114, 0xfffffffffffffd1b, 0x0, 0x0, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000040)) (async) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="00281c80", @ANYRES16=r0, @ANYBLOB="bd"], 0x34}}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="f4997c3794"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="58ad000010", 0x5, 0x0, 0x0, 0x0) (async) r1 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f0000000000)='s', 0x10a73, 0x81e, 0x0, 0x4b6ae4f95a5de35b) 06:26:05 executing program 1: r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$cgroup_subtree(r0, &(0x7f00000003c0)=ANY=[], 0x8) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = open(0x0, 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) 06:26:05 executing program 1: r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$cgroup_subtree(r0, &(0x7f00000003c0)=ANY=[], 0x8) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = open(0x0, 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) 06:26:05 executing program 2: bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000040)={&(0x7f0000000000)='./file0\x00'}, 0x10) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x82080, 0x0) mkdir(&(0x7f0000001800)='./file0\x00', 0x103) 06:26:05 executing program 1: r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$cgroup_subtree(r0, &(0x7f00000003c0)=ANY=[], 0x8) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x10, r1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) 06:26:11 executing program 0: r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$cgroup_subtree(r0, &(0x7f00000003c0)=ANY=[], 0x8) open(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x1, 0x0, 0x0, 0x4, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x3) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) 06:26:11 executing program 2: perf_event_open$cgroup(&(0x7f0000003c00)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 06:26:11 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x8, @local, 0x7f}, 0x1c) recvmsg(r0, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) sendto$inet6(r0, &(0x7f00000001c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0) recvmsg(r0, &(0x7f00000003c0)={0x0, 0x3, 0x0}, 0x0) recvmsg(r0, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) recvfrom$inet6(r0, &(0x7f0000000000)=""/114, 0xfffffffffffffd1b, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="00281c80", @ANYRES16=r0, @ANYRES8=r1], 0x34}}, 0x4040041) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={0xffffffffffffffff, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000080)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8, &(0x7f0000000180)=[0x0], &(0x7f0000000680)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000400)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f0000000240), &(0x7f0000000480), 0x8, 0x10, 0x8, 0x8, &(0x7f00000004c0)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0x3, &(0x7f0000000140)=ANY=[@ANYRESDEC=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r2}, 0x80) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="58ad000010", 0x5, 0x0, 0x0, 0x0) r3 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r3, &(0x7f0000000000)='s', 0x10a73, 0x81e, 0x0, 0x4b6ae4f95a5de35b) 06:26:11 executing program 1: r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$cgroup_subtree(r0, &(0x7f00000003c0)=ANY=[], 0x8) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x10, r1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) 06:26:11 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000005c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e24, @local}, 0x10) writev(r0, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) recvmmsg(r0, &(0x7f0000003e40)=[{{&(0x7f0000000100)=@phonet, 0x80, 0x0, 0x0, &(0x7f00000024c0)=""/4096, 0x1000, 0xe803}}, {{0x0, 0x80100200, 0x0, 0x0, &(0x7f00000035c0)=""/241, 0xf1}}, {{&(0x7f00000036c0)=@un=@abs, 0x80, &(0x7f0000003780)=[{&(0x7f0000003740)=""/4, 0xfffffd07}], 0x1, &(0x7f00000037c0)=""/236, 0xec}}, {{&(0x7f00000038c0)=@l2tp6={0xa, 0x0, 0x0, @private1}, 0x80, &(0x7f0000003bc0)=[{0x0}, {&(0x7f0000003a00)=""/190, 0xbe}, {&(0x7f0000003ac0)=""/131, 0x83}, {0x0}], 0x4, &(0x7f0000003c00)=""/73, 0x49}}, {{&(0x7f0000003c80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, 0x0, 0x0, &(0x7f0000003e00)=""/48, 0x30}}], 0x5, 0x40000121, 0x0) 06:26:11 executing program 5: r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e24, @local}, 0x10) writev(r0, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) recvmmsg(r0, &(0x7f0000003e40)=[{{&(0x7f0000000100)=@phonet, 0x80, 0x0, 0x0, &(0x7f00000024c0)=""/4096, 0x1000, 0x7fd8}}, {{0x0, 0x80100200, 0x0, 0x0, &(0x7f00000035c0)=""/241, 0xf1}}, {{&(0x7f00000036c0)=@un=@abs, 0x80, &(0x7f0000003780)=[{&(0x7f0000003740)=""/4, 0xfffffd07}], 0x1, &(0x7f00000037c0)=""/236, 0xec}}, {{&(0x7f00000038c0)=@l2tp6={0xa, 0x0, 0x0, @private1}, 0x80, &(0x7f0000003bc0)=[{0x0}, {&(0x7f0000003a00)=""/190, 0xbe}, {&(0x7f0000003ac0)=""/131, 0x83}, {0x0}], 0x4, &(0x7f0000003c00)=""/73, 0x49}}, {{&(0x7f0000003c80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, 0x0, 0x0, &(0x7f0000003e00)=""/48, 0x30}}], 0x5, 0x40000121, 0x0) 06:26:11 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x2100, &(0x7f0000000000)=@raw=[@call], &(0x7f0000000040)='GPL\x00', 0x5, 0xfc, &(0x7f0000000080)=""/252, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 06:26:11 executing program 1: r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$cgroup_subtree(r0, &(0x7f00000003c0)=ANY=[], 0x8) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x10, r1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) 06:26:11 executing program 1: r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$cgroup_subtree(r0, &(0x7f00000003c0)=ANY=[], 0x8) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) 06:26:11 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) 06:26:11 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x8, @local, 0x7f}, 0x1c) (async) recvmsg(r0, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) (async) sendto$inet6(r0, &(0x7f00000001c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0) (async) recvmsg(r0, &(0x7f00000003c0)={0x0, 0x3, 0x0}, 0x0) (async) recvmsg(r0, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) recvfrom$inet6(r0, &(0x7f0000000000)=""/114, 0xfffffffffffffd1b, 0x0, 0x0, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="00281c80", @ANYRES16=r0, @ANYRES8=r1], 0x34}}, 0x4040041) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={0xffffffffffffffff, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000080)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8, &(0x7f0000000180)=[0x0], &(0x7f0000000680)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000400)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f0000000240), &(0x7f0000000480), 0x8, 0x10, 0x8, 0x8, &(0x7f00000004c0)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0x3, &(0x7f0000000140)=ANY=[@ANYRESDEC=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r2}, 0x80) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="58ad000010", 0x5, 0x0, 0x0, 0x0) (async) r3 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r3, &(0x7f0000000000)='s', 0x10a73, 0x81e, 0x0, 0x4b6ae4f95a5de35b) 06:26:11 executing program 1: r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$cgroup_subtree(r0, &(0x7f00000003c0)=ANY=[], 0x8) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) 06:26:15 executing program 0: r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$cgroup_subtree(r0, &(0x7f00000003c0)=ANY=[], 0x8) open(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x1, 0x0, 0x0, 0x4, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x3) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) 06:26:15 executing program 2: ioctl$TUNSETVNETLE(0xffffffffffffffff, 0x400454dc, &(0x7f0000000040)) perf_event_open$cgroup(&(0x7f0000003c00)={0x6, 0x80}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 06:26:15 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x8, @local, 0x7f}, 0x1c) recvmsg(r0, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) (async) sendto$inet6(r0, &(0x7f00000001c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0) (async) recvmsg(r0, &(0x7f00000003c0)={0x0, 0x3, 0x0}, 0x0) (async) recvmsg(r0, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x0) (async) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) (async) recvfrom$inet6(r0, &(0x7f0000000000)=""/114, 0xfffffffffffffd1b, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="00281c80", @ANYRES16=r0, @ANYRES8=r1], 0x34}}, 0x4040041) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={0xffffffffffffffff, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000080)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8, &(0x7f0000000180)=[0x0], &(0x7f0000000680)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000400)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f0000000240), &(0x7f0000000480), 0x8, 0x10, 0x8, 0x8, &(0x7f00000004c0)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0x3, &(0x7f0000000140)=ANY=[@ANYRESDEC=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r2}, 0x80) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="58ad000010", 0x5, 0x0, 0x0, 0x0) r3 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r3, &(0x7f0000000000)='s', 0x10a73, 0x81e, 0x0, 0x4b6ae4f95a5de35b) 06:26:15 executing program 1: r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$cgroup_subtree(r0, &(0x7f00000003c0)=ANY=[], 0x8) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) 06:26:15 executing program 5: r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e24, @local}, 0x10) writev(r0, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) recvmmsg(r0, &(0x7f0000003e40)=[{{&(0x7f0000000100)=@phonet, 0x80, 0x0, 0x0, &(0x7f00000024c0)=""/4096, 0x1000, 0x807c}}, {{0x0, 0x80100200, 0x0, 0x0, &(0x7f00000035c0)=""/241, 0xf1}}, {{&(0x7f00000036c0)=@un=@abs, 0x80, &(0x7f0000003780)=[{&(0x7f0000003740)=""/4, 0xfffffd07}], 0x1, &(0x7f00000037c0)=""/236, 0xec}}, {{&(0x7f00000038c0)=@l2tp6={0xa, 0x0, 0x0, @private1}, 0x80, &(0x7f0000003bc0)=[{0x0}, {&(0x7f0000003a00)=""/190, 0xbe}, {&(0x7f0000003ac0)=""/131, 0x83}, {0x0}], 0x4, &(0x7f0000003c00)=""/73, 0x49}}, {{&(0x7f0000003c80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, 0x0, 0x0, &(0x7f0000003e00)=""/48, 0x30}}], 0x5, 0x40000121, 0x0) 06:26:15 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000005c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e24, @local}, 0x10) writev(r0, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) recvmmsg(r0, &(0x7f0000003e40)=[{{&(0x7f0000000100)=@phonet, 0x80, 0x0, 0x0, &(0x7f00000024c0)=""/4096, 0x1000, 0xf401}}, {{0x0, 0x80100200, 0x0, 0x0, &(0x7f00000035c0)=""/241, 0xf1}}, {{&(0x7f00000036c0)=@un=@abs, 0x80, &(0x7f0000003780)=[{&(0x7f0000003740)=""/4, 0xfffffd07}], 0x1, &(0x7f00000037c0)=""/236, 0xec}}, {{&(0x7f00000038c0)=@l2tp6={0xa, 0x0, 0x0, @private1}, 0x80, &(0x7f0000003bc0)=[{0x0}, {&(0x7f0000003a00)=""/190, 0xbe}, {&(0x7f0000003ac0)=""/131, 0x83}, {0x0}], 0x4, &(0x7f0000003c00)=""/73, 0x49}}, {{&(0x7f0000003c80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, 0x0, 0x0, &(0x7f0000003e00)=""/48, 0x30}}], 0x5, 0x40000121, 0x0) 06:26:15 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) recvmsg(r0, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) sendto$inet6(r0, &(0x7f00000001c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0) recvmsg(r0, &(0x7f00000003c0)={0x0, 0x3, 0x0}, 0x0) recvmsg(r0, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) recvfrom$inet6(r0, &(0x7f0000000000)=""/114, 0xfffffffffffffd1b, 0x0, 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x406, r0) getpeername(r1, &(0x7f00000000c0)=@qipcrtr, &(0x7f0000000140)=0x80) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000040)) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="00281c80", @ANYRES16=r0, @ANYBLOB="ff"], 0x34}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="f4997c3794"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="58ad000010", 0x5, 0x0, 0x0, 0x0) r2 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r2, &(0x7f0000000000)='s', 0x10a73, 0x81e, 0x0, 0x4b6ae4f95a5de35b) 06:26:15 executing program 1: r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$cgroup_subtree(r0, &(0x7f00000003c0)=ANY=[], 0x8) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r1, 0x0) r2 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) 06:26:15 executing program 2: bpf$ITER_CREATE(0x21, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_clone(0x44082000, 0x0, 0x0, 0x0, 0x0, 0x0) gettid() syz_clone(0x0, 0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f00000000c0)) 06:26:15 executing program 1: r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$cgroup_subtree(r0, &(0x7f00000003c0)=ANY=[], 0x8) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r1, 0x0) r2 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) 06:26:15 executing program 1: r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$cgroup_subtree(r0, &(0x7f00000003c0)=ANY=[], 0x8) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r1, 0x0) r2 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) 06:26:15 executing program 1: r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$cgroup_subtree(r0, &(0x7f00000003c0)=ANY=[], 0x8) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r2, 0x0) [ 3402.729721][T31288] netlink: 'syz-executor.4': attribute type 41 has an invalid length. [ 3402.738018][T31288] netlink: 44123 bytes leftover after parsing attributes in process `syz-executor.4'. [ 3402.760892][T31288] A link change request failed with some changes committed already. Interface ip6tnl0 may have been left with an inconsistent configuration, please check. 06:26:21 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000001000)=@base={0x10, 0x4, 0x0, 0x8000}, 0x48) 06:26:21 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) recvmsg(r0, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) sendto$inet6(r0, &(0x7f00000001c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0) (async) recvmsg(r0, &(0x7f00000003c0)={0x0, 0x3, 0x0}, 0x0) (async) recvmsg(r0, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) recvfrom$inet6(r0, &(0x7f0000000000)=""/114, 0xfffffffffffffd1b, 0x0, 0x0, 0x0) (async, rerun: 64) r1 = fcntl$dupfd(r0, 0x406, r0) (rerun: 64) getpeername(r1, &(0x7f00000000c0)=@qipcrtr, &(0x7f0000000140)=0x80) (async) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000040)) (async) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="00281c80", @ANYRES16=r0, @ANYBLOB="ff"], 0x34}}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="f4997c3794"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="58ad000010", 0x5, 0x0, 0x0, 0x0) (async) r2 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r2, &(0x7f0000000000)='s', 0x10a73, 0x81e, 0x0, 0x4b6ae4f95a5de35b) 06:26:21 executing program 1: r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$cgroup_subtree(r0, &(0x7f00000003c0)=ANY=[], 0x8) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, r2, 0x0) 06:26:21 executing program 0: r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$cgroup_subtree(r0, &(0x7f00000003c0)=ANY=[], 0x8) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) 06:26:21 executing program 5: r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e24, @local}, 0x10) writev(r0, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) recvmmsg(r0, &(0x7f0000003e40)=[{{&(0x7f0000000100)=@phonet, 0x80, 0x0, 0x0, &(0x7f00000024c0)=""/4096, 0x1000, 0x983a}}, {{0x0, 0x80100200, 0x0, 0x0, &(0x7f00000035c0)=""/241, 0xf1}}, {{&(0x7f00000036c0)=@un=@abs, 0x80, &(0x7f0000003780)=[{&(0x7f0000003740)=""/4, 0xfffffd07}], 0x1, &(0x7f00000037c0)=""/236, 0xec}}, {{&(0x7f00000038c0)=@l2tp6={0xa, 0x0, 0x0, @private1}, 0x80, &(0x7f0000003bc0)=[{0x0}, {&(0x7f0000003a00)=""/190, 0xbe}, {&(0x7f0000003ac0)=""/131, 0x83}, {0x0}], 0x4, &(0x7f0000003c00)=""/73, 0x49}}, {{&(0x7f0000003c80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, 0x0, 0x0, &(0x7f0000003e00)=""/48, 0x30}}], 0x5, 0x40000121, 0x0) 06:26:21 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000005c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e24, @local}, 0x10) writev(r0, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) recvmmsg(r0, &(0x7f0000003e40)=[{{&(0x7f0000000100)=@phonet, 0x80, 0x0, 0x0, &(0x7f00000024c0)=""/4096, 0x1000, 0xff00}}, {{0x0, 0x80100200, 0x0, 0x0, &(0x7f00000035c0)=""/241, 0xf1}}, {{&(0x7f00000036c0)=@un=@abs, 0x80, &(0x7f0000003780)=[{&(0x7f0000003740)=""/4, 0xfffffd07}], 0x1, &(0x7f00000037c0)=""/236, 0xec}}, {{&(0x7f00000038c0)=@l2tp6={0xa, 0x0, 0x0, @private1}, 0x80, &(0x7f0000003bc0)=[{0x0}, {&(0x7f0000003a00)=""/190, 0xbe}, {&(0x7f0000003ac0)=""/131, 0x83}, {0x0}], 0x4, &(0x7f0000003c00)=""/73, 0x49}}, {{&(0x7f0000003c80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, 0x0, 0x0, &(0x7f0000003e00)=""/48, 0x30}}], 0x5, 0x40000121, 0x0) 06:26:22 executing program 2: bpf$MAP_CREATE(0x2, &(0x7f0000000780)=@bloom_filter, 0x48) 06:26:22 executing program 1: r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$cgroup_subtree(r0, &(0x7f00000003c0)=ANY=[], 0x8) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, r2, 0x0) 06:26:22 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)}, 0x80) 06:26:22 executing program 1: r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$cgroup_subtree(r0, &(0x7f00000003c0)=ANY=[], 0x8) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, r2, 0x0) 06:26:22 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) recvmsg(r0, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) sendto$inet6(r0, &(0x7f00000001c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0) recvmsg(r0, &(0x7f00000003c0)={0x0, 0x3, 0x0}, 0x0) recvmsg(r0, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) (async, rerun: 64) recvfrom$inet6(r0, &(0x7f0000000000)=""/114, 0xfffffffffffffd1b, 0x0, 0x0, 0x0) (rerun: 64) r1 = fcntl$dupfd(r0, 0x406, r0) getpeername(r1, &(0x7f00000000c0)=@qipcrtr, &(0x7f0000000140)=0x80) (async, rerun: 32) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000040)) (async, rerun: 32) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="00281c80", @ANYRES16=r0, @ANYBLOB="ff"], 0x34}}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="f4997c3794"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="58ad000010", 0x5, 0x0, 0x0, 0x0) (async) r2 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r2, &(0x7f0000000000)='s', 0x10a73, 0x81e, 0x0, 0x4b6ae4f95a5de35b) 06:26:22 executing program 2: openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz0\x00', 0x200002, 0x0) 06:26:22 executing program 1: r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$cgroup_subtree(r0, &(0x7f00000003c0)=ANY=[], 0x8) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r1, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, 0xffffffffffffffff, 0x0) 06:26:22 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) write$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000040)='FREEZING\x00', 0x9) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000080)='syz1\x00', 0x1ff) r1 = bpf$ITER_CREATE(0x21, &(0x7f00000001c0), 0x8) perf_event_open$cgroup(&(0x7f0000000140)={0x4, 0x80, 0x5, 0x4, 0x20, 0x20, 0x0, 0x800, 0x4010, 0x8, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x5, @perf_bp={&(0x7f0000000100), 0x1}, 0x2110, 0x5, 0x9, 0x5, 0x1, 0x1ff, 0x9, 0x0, 0x5, 0x0, 0x2a31}, r1, 0xb, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000200)='blkio.bfq.group_wait_time\x00', 0x0, 0x0) ioctl$TUNGETDEVNETNS(r2, 0x54e3, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r2, 0xc008240a, &(0x7f0000000240)={0x7, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) recvmsg(0xffffffffffffffff, &(0x7f0000000b40)={&(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @remote}, 0x80, &(0x7f00000009c0)=[{&(0x7f0000000300)=""/206, 0xce}, {&(0x7f0000000400)=""/245, 0xf5}, {&(0x7f0000000500)=""/40, 0x28}, {&(0x7f0000000540)=""/73, 0x49}, {&(0x7f00000005c0)=""/30, 0x1e}, {&(0x7f0000000600)=""/249, 0xf9}, {&(0x7f0000000700)=""/84, 0x54}, {&(0x7f0000000780)=""/223, 0xdf}, {&(0x7f0000000880)=""/114, 0x72}, {&(0x7f0000000900)=""/169, 0xa9}], 0xa, &(0x7f0000000a80)=""/175, 0xaf}, 0x10060) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000b80)=r1, 0x4) ioctl$TUNSETDEBUG(r1, 0x400454c9, &(0x7f0000000bc0)=0x6) recvmsg(0xffffffffffffffff, &(0x7f0000002040)={&(0x7f0000000c00)=@l2tp={0x2, 0x0, @private}, 0x80, &(0x7f0000001f40)=[{&(0x7f0000000c80)=""/102, 0x66}, {&(0x7f0000000d00)=""/240, 0xf0}, {&(0x7f0000000e00)=""/245, 0xf5}, {&(0x7f0000000f00)=""/4096, 0x1000}, {&(0x7f0000001f00)=""/27, 0x1b}], 0x5, &(0x7f0000001fc0)=""/107, 0x6b}, 0x60) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000002080)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) mkdirat$cgroup(r3, &(0x7f00000020c0)='syz1\x00', 0x1ff) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000002100)={r2}, 0x8) ioctl$TUNSETLINK(r4, 0x400454cd, 0x204) openat$cgroup_devices(r1, &(0x7f0000002140)='devices.allow\x00', 0x2, 0x0) r5 = openat$cgroup(r3, &(0x7f0000002180)='syz1\x00', 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000021c0)={r4, r5, 0x1c}, 0x10) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000002200)=0x9) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000002240)={@cgroup, r2, 0x27}, 0x10) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000002400)={0xffffffffffffffff, &(0x7f0000002340)="1a494f3f7934c241316c24c6b8c3", &(0x7f0000002380)=""/118}, 0x20) 06:26:22 executing program 1: r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$cgroup_subtree(r0, &(0x7f00000003c0)=ANY=[], 0x8) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r1, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, 0xffffffffffffffff, 0x0) 06:26:28 executing program 1: r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$cgroup_subtree(r0, &(0x7f00000003c0)=ANY=[], 0x8) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r1, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, 0xffffffffffffffff, 0x0) 06:26:28 executing program 2: bpf$ITER_CREATE(0x21, &(0x7f0000000c40), 0x8) syz_clone(0x44082000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x300, 0x0, 0x0, &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0)) 06:26:28 executing program 0: r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$cgroup_subtree(r0, &(0x7f00000003c0)=ANY=[], 0x8) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) 06:26:28 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000005c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e24, @local}, 0x10) writev(r0, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) recvmmsg(r0, &(0x7f0000003e40)=[{{&(0x7f0000000100)=@phonet, 0x80, 0x0, 0x0, &(0x7f00000024c0)=""/4096, 0x1000, 0x10380}}, {{0x0, 0x80100200, 0x0, 0x0, &(0x7f00000035c0)=""/241, 0xf1}}, {{&(0x7f00000036c0)=@un=@abs, 0x80, &(0x7f0000003780)=[{&(0x7f0000003740)=""/4, 0xfffffd07}], 0x1, &(0x7f00000037c0)=""/236, 0xec}}, {{&(0x7f00000038c0)=@l2tp6={0xa, 0x0, 0x0, @private1}, 0x80, &(0x7f0000003bc0)=[{0x0}, {&(0x7f0000003a00)=""/190, 0xbe}, {&(0x7f0000003ac0)=""/131, 0x83}, {0x0}], 0x4, &(0x7f0000003c00)=""/73, 0x49}}, {{&(0x7f0000003c80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, 0x0, 0x0, &(0x7f0000003e00)=""/48, 0x30}}], 0x5, 0x40000121, 0x0) 06:26:28 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) recvmsg(r0, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x2000) sendto$inet6(r0, &(0x7f00000001c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0) recvmsg(r0, &(0x7f00000003c0)={0x0, 0x3, 0x0}, 0x0) recvmsg(r0, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) recvfrom$inet6(r0, &(0x7f0000000000)=""/114, 0xfffffffffffffd1b, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000040)) r1 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xfffffe29}}, 0x0) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000580)=0xe7) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="0028feff", @ANYRES16=r0, @ANYRES8=r1], 0x34}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000140)={{0x1, 0x1, 0x18, r1, {0x1}}, './file0\x00'}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'bridge_slave_1\x00'}, @IFLA_MASTER={0x8, 0xa, r6}, @IFLA_MTU={0x8, 0x4, 0x1da}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000440)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000400)={&(0x7f0000000240)=@newtclass={0x24, 0x28, 0x300, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0xffff, 0xb}, {0xfff3, 0x10}, {0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x10004005}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="f4997c3794"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="58ad000010", 0x5, 0x0, 0x0, 0x0) r7 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r7, &(0x7f0000000000)='s', 0x10a73, 0x81e, 0x0, 0x4b6ae4f95a5de35b) 06:26:28 executing program 5: r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e24, @local}, 0x10) writev(r0, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) recvmmsg(r0, &(0x7f0000003e40)=[{{&(0x7f0000000100)=@phonet, 0x80, 0x0, 0x0, &(0x7f00000024c0)=""/4096, 0x1000, 0xd87f}}, {{0x0, 0x80100200, 0x0, 0x0, &(0x7f00000035c0)=""/241, 0xf1}}, {{&(0x7f00000036c0)=@un=@abs, 0x80, &(0x7f0000003780)=[{&(0x7f0000003740)=""/4, 0xfffffd07}], 0x1, &(0x7f00000037c0)=""/236, 0xec}}, {{&(0x7f00000038c0)=@l2tp6={0xa, 0x0, 0x0, @private1}, 0x80, &(0x7f0000003bc0)=[{0x0}, {&(0x7f0000003a00)=""/190, 0xbe}, {&(0x7f0000003ac0)=""/131, 0x83}, {0x0}], 0x4, &(0x7f0000003c00)=""/73, 0x49}}, {{&(0x7f0000003c80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, 0x0, 0x0, &(0x7f0000003e00)=""/48, 0x30}}], 0x5, 0x40000121, 0x0) 06:26:28 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000800)={0xffffffffffffffff}) recvmsg(r0, &(0x7f0000001940)={&(0x7f0000001500)=@sco, 0x80, 0x0}, 0x2) 06:26:28 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) recvmsg(r0, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x2000) sendto$inet6(r0, &(0x7f00000001c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0) (async) recvmsg(r0, &(0x7f00000003c0)={0x0, 0x3, 0x0}, 0x0) (async) recvmsg(r0, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x0) (async) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) (async) recvfrom$inet6(r0, &(0x7f0000000000)=""/114, 0xfffffffffffffd1b, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000040)) (async) r1 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xfffffe29}}, 0x0) (async) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000580)=0xe7) (async) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="0028feff", @ANYRES16=r0, @ANYRES8=r1], 0x34}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000140)={{0x1, 0x1, 0x18, r1, {0x1}}, './file0\x00'}) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) (async) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'bridge_slave_1\x00'}, @IFLA_MASTER={0x8, 0xa, r6}, @IFLA_MTU={0x8, 0x4, 0x1da}]}, 0x44}}, 0x0) (async) sendmsg$nl_route_sched(r3, &(0x7f0000000440)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000400)={&(0x7f0000000240)=@newtclass={0x24, 0x28, 0x300, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0xffff, 0xb}, {0xfff3, 0x10}, {0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x10004005}, 0x80) (async) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="f4997c3794"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="58ad000010", 0x5, 0x0, 0x0, 0x0) (async) r7 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r7, &(0x7f0000000000)='s', 0x10a73, 0x81e, 0x0, 0x4b6ae4f95a5de35b) 06:26:28 executing program 2: bpf$ITER_CREATE(0x21, &(0x7f0000000c40), 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000001000)=@bloom_filter={0x1e, 0x3f, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x5}, 0x48) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) syz_clone(0x44082000, 0x0, 0x0, 0x0, 0x0, 0x0) 06:26:28 executing program 4: socket$inet6(0x10, 0x3, 0x0) (async) r0 = socket$inet6(0x10, 0x3, 0x0) recvmsg(r0, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x2000) sendto$inet6(r0, &(0x7f00000001c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0) (async) sendto$inet6(r0, &(0x7f00000001c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0) recvmsg(r0, &(0x7f00000003c0)={0x0, 0x3, 0x0}, 0x0) recvmsg(r0, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) recvfrom$inet6(r0, &(0x7f0000000000)=""/114, 0xfffffffffffffd1b, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000040)) r1 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xfffffe29}}, 0x0) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000580)=0xe7) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="0028feff", @ANYRES16=r0, @ANYRES8=r1], 0x34}}, 0x0) (async) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="0028feff", @ANYRES16=r0, @ANYRES8=r1], 0x34}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000140)={{0x1, 0x1, 0x18, r1, {0x1}}, './file0\x00'}) socket$nl_route(0x10, 0x3, 0x0) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'bridge_slave_1\x00'}, @IFLA_MASTER={0x8, 0xa, r6}, @IFLA_MTU={0x8, 0x4, 0x1da}]}, 0x44}}, 0x0) (async) sendmsg$nl_route(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'bridge_slave_1\x00'}, @IFLA_MASTER={0x8, 0xa, r6}, @IFLA_MTU={0x8, 0x4, 0x1da}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000440)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000400)={&(0x7f0000000240)=@newtclass={0x24, 0x28, 0x300, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0xffff, 0xb}, {0xfff3, 0x10}, {0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x10004005}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="f4997c3794"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="58ad000010", 0x5, 0x0, 0x0, 0x0) (async) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="58ad000010", 0x5, 0x0, 0x0, 0x0) socket$inet6(0x10, 0x3, 0x0) (async) r7 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r7, &(0x7f0000000000)='s', 0x10a73, 0x81e, 0x0, 0x4b6ae4f95a5de35b) (async) sendto$inet6(r7, &(0x7f0000000000)='s', 0x10a73, 0x81e, 0x0, 0x4b6ae4f95a5de35b) 06:26:28 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000001000)=@base={0x2, 0x4, 0x0, 0x8000, 0x0, 0x1}, 0x48) 06:26:28 executing program 2: bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000840)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000740)="cd", &(0x7f0000000780)}, 0x48) 06:26:28 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$TUNSETDEBUG(r0, 0x400454c9, 0x0) 06:26:28 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) recvmsg(r0, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) sendto$inet6(r0, &(0x7f00000001c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0) recvmsg(r0, &(0x7f00000003c0)={0x0, 0x3, 0x0}, 0x0) setsockopt$inet6_int(r0, 0x29, 0x11, &(0x7f0000000140), 0x4) recvmsg(r0, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x80}]}, 0x2c}}, 0x0) sendmsg$NL80211_CMD_START_NAN(r2, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x8052}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x2c, 0x0, 0x100, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0xff}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x48191}, 0x40000) sendmsg$DEVLINK_CMD_SB_POOL_GET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xfffffe29}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r2, &(0x7f00000000c0), &(0x7f0000000100)=0x14) listen(r1, 0x1) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'bridge_slave_1\x00'}, @IFLA_MASTER={0x8, 0xa, r5}, @IFLA_MTU={0x8, 0x4, 0x1da}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f0000000a40)=@newchain={0x212c, 0x64, 0x600, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x1, 0xc}, {0x6, 0xb}, {0x8, 0x6}}, [@TCA_CHAIN={0x8, 0xb, 0x3}, @filter_kind_options=@f_flow={{0x9}, {0x9c, 0x2, [@TCA_FLOW_POLICE={0x98, 0xa, 0x0, 0x1, [@TCA_POLICE_RATE64={0xc, 0x8, 0xee1}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x4}, @TCA_POLICE_RESULT={0x8, 0x5, 0x6c50}, @TCA_POLICE_TBF={0x3c, 0x1, {0xff, 0x4, 0x1000, 0x4b, 0x6, {0xf, 0x1, 0x813a, 0x400, 0x2e49, 0x1000}, {0xa, 0x2, 0xc2f, 0x90f5, 0x9}, 0x4, 0xb44a, 0x4}}, @TCA_POLICE_TBF={0x3c, 0x1, {0x4, 0x6, 0x0, 0xffffffff, 0x4, {0xff, 0x2, 0x8, 0xdd24, 0x2, 0x5}, {0xf9, 0x2, 0x2, 0x5e88, 0x1913, 0x800}, 0x1, 0x2, 0x1}}]}]}}, @filter_kind_options=@f_rsvp6={{0xa}, {0x204c, 0x2, [@TCA_RSVP_PINFO={0x20, 0x4, {{0x9, 0x8, 0x800}, {0x2, 0x6}, 0x1, 0x4, 0x2}}, @TCA_RSVP_PINFO={0x20, 0x4, {{0x10001, 0x0, 0x3ff}, {0x81, 0x0, 0x40}, 0xe3, 0x4, 0xfc}}, @TCA_RSVP_PINFO={0x20, 0x4, {{0x9, 0x2, 0x3}, {0xffff, 0x7}, 0x6c, 0x6, 0x80}}, @TCA_RSVP_SRC={0x14, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}}, @TCA_RSVP_ACT={0x14dc, 0x6, [@m_tunnel_key={0xd8, 0x1d, 0x0, 0x0, {{0xf}, {0x3c, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @private0}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e24}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @loopback}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @rand_addr=' \x01\x00'}]}, {0x6f, 0x6, "01a03e38e74dab61077ce415ac5642d0543b5cb305dccb7e0363204ce63dd6d8d9a64d7860e1952a7ae15131d23871cf9b673ca852896fbe3614aa4738d00e1410a4d4d056ae1d7b960f4553b6eaeaf0f4e0b9e0a35c8c1f0327edaf47eba417928f051bd80469affa1bb4"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_ctinfo={0x150, 0x14, 0x0, 0x0, {{0xb}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x5}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x3}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x5}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0xfffffff9}, @TCA_CTINFO_ACT={0x18, 0x3, {0x7, 0x0, 0x20000000, 0x9, 0x1}}]}, {0xe9, 0x6, "aac9497386642e3611a72e072b514864de10bd8574a85d5d586beb11af8e16036dbfd5196961b5b49fa1b5c47decbc25b76518ac279cc1092f4f582c66a2decf779de70c03aa008a3f2bbdc525cbfd018bd77428153215d2b59518693e1cfadaaebc8da1dc9ce263ef13f84e26ed1bc9fe75cb9a0ebca5e9c7fa480160f22348d92f7cc587319940dc12861cf18ceb6285539d3e6a5af8908c420eced45b5bd7e5f4c5addbb4a2e528bda369fb4a9647e5ab43078a18beb1a908ea3adba9d5c5e884ecc867504ed2a2cc0eca98b761cc23cd96997eac49416a2dfa0b8b0a640c4ac56b032c"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_police={0x1134, 0x1a, 0x0, 0x0, {{0xb}, {0x1048, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE64={0xc, 0x8, 0x6}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x9b0, 0x2, 0x5, 0x8, 0x5, 0x4, 0x2, 0x80, 0x80, 0x1, 0xc4a, 0x10, 0xdbb, 0xffff8000, 0x40, 0x400, 0x6, 0x7fff, 0x8ec, 0x6, 0xdc, 0x5, 0x10000, 0x1, 0x1, 0x8, 0x0, 0x8, 0x4, 0x4, 0x401, 0x9, 0x7, 0xc64e, 0x5, 0x5, 0x5, 0x7, 0x10001, 0x6, 0xfa16924, 0x5, 0x8, 0x4, 0x1, 0x7, 0x5, 0x6, 0x0, 0x9, 0x9, 0x1d, 0x8, 0x76, 0xffffffff, 0x3, 0x0, 0x3f, 0x3, 0x400, 0x9, 0x7, 0x6, 0xbf6, 0x9, 0x400, 0x3f, 0x1, 0x8, 0x2, 0x200, 0x80000000, 0x7fff, 0x2, 0x200, 0x3, 0x323, 0x6, 0x6, 0x4, 0x3f, 0x2, 0x66f, 0x40000, 0x20, 0x14000, 0x8, 0x80000001, 0x9, 0x9, 0x80000000, 0x3, 0x2, 0xd591, 0xe16, 0x3, 0x6, 0x8, 0x3, 0x8, 0x8, 0x6, 0x400, 0x903, 0x2e9, 0x1000, 0x1fc703d5, 0x6108e75e, 0xfa3f, 0x1f, 0x8, 0x80000001, 0x6, 0xd40, 0x0, 0x4, 0x4, 0x7, 0x101, 0x9, 0x1, 0x8, 0x2, 0x81, 0x3, 0x4, 0x2e, 0xa2, 0x14000, 0x4, 0x3, 0x3, 0x3f, 0x101, 0x3, 0xffff551f, 0x0, 0xfffffffd, 0xa14, 0x68f2, 0x0, 0x80, 0x5b40, 0x3ff, 0x9, 0x1, 0x9, 0x3, 0x76, 0x400, 0x1000, 0x3, 0x5, 0x80, 0x31, 0x1, 0x1fffe0, 0x0, 0x5, 0x80000001, 0xffffffff, 0x264ed648, 0x6, 0x3, 0x800, 0x4, 0x5, 0x57, 0x8, 0x9, 0x7fffffff, 0x0, 0x8, 0x9, 0x3, 0x2, 0x7f, 0x8b4, 0x5, 0xfffffff8, 0xff800000, 0x8, 0x6, 0x7, 0x0, 0xee, 0x1, 0xfffffff9, 0x2, 0x0, 0x2, 0x413c, 0x4, 0x8, 0x71d, 0xb30, 0xe80e, 0x7, 0x40, 0x9, 0x81, 0x7, 0x1, 0xfffff920, 0x7, 0xfffffc01, 0x81, 0x8, 0x4, 0x6b, 0xc0000000, 0x3, 0x401, 0x9, 0x10000, 0x0, 0x9, 0x4, 0x10, 0x8, 0xfffffff9, 0x101, 0x5, 0x2, 0x1f, 0x9, 0x7, 0x401, 0x3, 0x8000, 0x2, 0x1f, 0x101, 0xfffffff9, 0x9, 0x1000, 0x3, 0xfffffffb, 0x2, 0x1, 0x81, 0x8000, 0x8, 0x2b, 0x6f, 0x3, 0x81, 0x6500, 0xe46, 0x4, 0x1, 0x3, 0x2, 0x7, 0x60000000, 0x3]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xe4}, @TCA_POLICE_RATE64={0xc, 0x8, 0xff}, @TCA_POLICE_RESULT={0x8, 0x5, 0x7}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x6, 0x8, 0x80, 0x9, 0x401, 0x800, 0x4, 0x7, 0x3, 0x0, 0x5, 0x7fff, 0x8, 0x2e, 0xfff, 0x5, 0x60, 0x1, 0x1, 0x4, 0x5, 0x40, 0x2, 0x5b, 0xc24, 0x3, 0xc, 0x1, 0x81, 0x80, 0x1, 0x583b, 0x5, 0x2, 0x5, 0x9, 0x8, 0x3, 0x7f, 0x7, 0x81, 0x0, 0x7, 0x3, 0xe3a4, 0x1ff, 0xfffffffc, 0x3, 0x1f, 0xadd7, 0x40f, 0x1, 0x8, 0x4, 0x6, 0x7, 0x4, 0x3, 0xa3ad, 0x8, 0x3f51, 0x9, 0x6, 0x5, 0x8, 0x8, 0xaed2e70, 0x2, 0x1, 0xdc6, 0x80000001, 0x3, 0x6, 0x3, 0x5, 0xe15, 0x1, 0x6, 0x1ff, 0x9, 0x4, 0x80000001, 0x4, 0x7ff, 0xa76, 0x1, 0x179, 0xe1dc, 0x120000, 0xdc, 0x0, 0x3, 0xfffffff8, 0x0, 0x7, 0x7f, 0x40, 0x7, 0x8, 0x2, 0x800, 0x2, 0x7, 0x5, 0x8, 0x1, 0x76f, 0x10000, 0x80000001, 0x9, 0x1, 0x5547, 0x2, 0x1ff, 0xfbe, 0xc0000000, 0x8001, 0xfff, 0x401, 0x8001, 0x78c, 0x1, 0x5, 0x3, 0xa2c, 0xff, 0x5, 0x6, 0x6, 0x9, 0xf60, 0x80000000, 0x400, 0xeb, 0x5, 0x9, 0x7f, 0x8000, 0xfedc, 0x3ff, 0xfffff800, 0x3, 0x200, 0x7, 0x6, 0x1, 0x8, 0x5, 0x0, 0x7, 0x97, 0x80000000, 0xc806, 0x4, 0xfffffffb, 0x0, 0x800, 0x40, 0x3, 0x51, 0xffff, 0x7fff, 0x6, 0x3d5, 0x4, 0x1f, 0x25b4, 0x1000, 0xfff, 0x1, 0x200, 0x4, 0x1, 0x9, 0xffff8001, 0x7, 0x485, 0x2, 0xfffff001, 0x6, 0x80, 0xdd0, 0xfffffff9, 0xc0000000, 0x0, 0x80000001, 0xffffffff, 0x46f, 0x8, 0xfffffffe, 0x4, 0x8, 0x8000, 0xfffffffb, 0x4, 0x6acb35e0, 0x1, 0x80000000, 0xfffff000, 0x2, 0xff, 0x0, 0x7, 0x2, 0x3, 0xa8, 0x8, 0x200, 0x3f, 0x2, 0x5, 0x8ee4, 0x3f, 0x4, 0x6, 0xa3d, 0x8803, 0xffffffff, 0x5, 0x0, 0x0, 0x8, 0x5965, 0x733d, 0x2, 0x1ff, 0x1000, 0xffff, 0x8, 0x6, 0x5, 0x4, 0xfc, 0x4, 0x6, 0x4, 0x81, 0x1, 0x1f, 0x6, 0x7, 0xfa9b, 0x8, 0x628c, 0x7fff, 0x3f, 0x93, 0x7fff, 0x8, 0x10001, 0x192, 0x101, 0x9, 0x85, 0x8, 0x7]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xa51b, 0xffffff01, 0x59, 0x200, 0xff, 0x6, 0xf0e6, 0x4aa, 0x3, 0x2b1, 0x80, 0x6, 0x10000, 0x0, 0x2, 0x40, 0x5, 0x1ff, 0x0, 0x0, 0x6, 0xc4, 0x4, 0x698abcc9, 0x6, 0xe68, 0x8, 0x7ff, 0x4, 0x9, 0x6, 0x4, 0x4, 0x5, 0x9, 0x8, 0x5, 0x3, 0x6, 0x57, 0x7fffffff, 0x4, 0x0, 0x1, 0x5b, 0xd95, 0x4, 0x9, 0x2, 0x3, 0x7, 0xe0, 0x4, 0x8, 0x7fff, 0x6, 0x8, 0xf22, 0xffff, 0x7, 0x1, 0x5, 0xffffffff, 0xacc4, 0x69ce14d4, 0x2, 0x401, 0x100, 0x0, 0x800, 0x6, 0x7, 0xfffffd18, 0x6, 0x0, 0x3c, 0xf69e, 0x2, 0x8, 0x4, 0x2, 0xfffffffb, 0x2, 0x4, 0x9, 0x1, 0x1ff, 0xffff, 0x2, 0xffff, 0x9, 0x2, 0x10000, 0x20, 0xfff, 0x4, 0xffff, 0x7, 0x5, 0x7, 0x93, 0xf1c80000, 0x4, 0x0, 0xffffffc1, 0x1, 0x5, 0x6, 0x4, 0x0, 0xed4, 0x2, 0x0, 0x7fff, 0x2550ee3e, 0x1, 0x786, 0x0, 0x3800000, 0x1, 0x3, 0xffffff80, 0x4, 0xfffffffa, 0x1, 0x4bd, 0x2, 0x400, 0x7, 0xd9, 0x6, 0x10000, 0x8000, 0x53, 0x9, 0x5, 0x10000, 0x5, 0x2, 0x7, 0x23c, 0x8, 0xce, 0x2, 0x7, 0xfff, 0x7, 0x7, 0x0, 0x4, 0x7f, 0x0, 0x1, 0xffff, 0x1ff, 0x400, 0x200, 0x800, 0x7, 0x10000, 0xfffffffc, 0x101, 0x2000000, 0x6, 0x7282, 0x2, 0x0, 0x0, 0x6, 0x2, 0x80, 0x0, 0x5, 0x3, 0x74a4, 0x4, 0x6, 0x800, 0x3, 0x0, 0x40000000, 0x8, 0x9, 0x3bec453a, 0x5, 0x6, 0x0, 0x3f, 0x3, 0x6, 0x3, 0x9, 0x7fffffff, 0x4, 0x3, 0x6, 0xffff, 0x7ff, 0x8, 0x1, 0x8000, 0x100, 0xfefc, 0x0, 0x800, 0x7, 0x7fffffff, 0x3c, 0x5a, 0x101, 0x6c, 0x2, 0x1ff, 0x3, 0x2, 0x3, 0x0, 0xca1, 0x7, 0x3, 0x1ff, 0x3, 0x64, 0x3, 0x5, 0x5, 0x7bb, 0xfa, 0x7, 0x9, 0xfff, 0x5, 0x5, 0x2, 0x9, 0x10000, 0x5a, 0x7, 0x569, 0x200, 0x100, 0x1, 0x8, 0x10001, 0x2, 0x4, 0x8, 0x7, 0xaf33, 0xffff, 0x5, 0x2, 0x80000001, 0x5, 0x5, 0x42e31cf9]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x4}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x4, 0x8, 0x2, 0x5, 0x8000, 0x9, 0x44c, 0x1, 0xc83, 0x8, 0x20, 0x5, 0x9, 0x1, 0x1, 0x80, 0x7, 0x0, 0x100, 0x4, 0x1, 0x298f, 0x400, 0x3, 0x3, 0x80, 0x4, 0x9a44, 0xfffffffc, 0x3f01, 0x8, 0xcd, 0x2, 0x5ad8, 0x2, 0x7ff, 0x2bc, 0x80, 0x6, 0x7ff, 0x7ff, 0x2, 0x1ff, 0x8, 0xc6, 0x7f, 0xd, 0x10001, 0x0, 0x6, 0x5, 0x59, 0x7, 0x9, 0x3f, 0x2, 0xfffffffa, 0x8, 0x8, 0xfffffff9, 0xffff, 0x1, 0x9ec, 0x8, 0x200, 0x6, 0x0, 0x1, 0x2, 0x7, 0x0, 0x2, 0x1, 0x66, 0x1, 0x8, 0x7f, 0x3, 0x5, 0x9, 0x80, 0x80, 0x1000, 0x80000001, 0x1, 0xffffffe0, 0x100, 0x20, 0xfb, 0x101, 0x3, 0x80000001, 0x400, 0x80, 0x10000, 0x9, 0x2, 0x1000, 0x9, 0x7fff, 0xb967, 0x6ac, 0x5, 0x200, 0x0, 0x2, 0x2, 0x7, 0x4, 0x0, 0x70, 0x10001, 0x3a, 0x8, 0xffff, 0x8, 0x800, 0x7fff, 0xa33, 0x7f, 0xde5f, 0x9, 0xffffffff, 0xffffff81, 0x100, 0x100, 0x6, 0x7, 0xaf000000, 0x5c, 0x1ff, 0x2eb, 0x2, 0x7fff, 0x2, 0xfb3, 0x2, 0xffffffff, 0x7, 0x8, 0x2, 0x8, 0xa27e, 0x4, 0xffffff90, 0x5, 0x4, 0x6, 0xca, 0x3, 0xa3, 0x4ab4, 0x6, 0x7d, 0x4, 0x0, 0x0, 0xb4, 0x80, 0x1, 0x1f, 0x7ff, 0x6, 0x100, 0x7, 0x0, 0x3, 0x7fff, 0x0, 0x7f, 0x40000000, 0x6, 0x10000, 0xcdc0, 0x933f, 0x7, 0x2, 0x1000, 0x1, 0xf0000000, 0x4, 0x7fff, 0xe2, 0xd55, 0x0, 0x6, 0x20, 0xd9f, 0x4, 0x6, 0x6, 0x788, 0xffffffff, 0x5, 0x7b5, 0x5, 0xd0, 0x8, 0x81, 0x5, 0x0, 0x80, 0x56a4, 0x99, 0x20, 0x4, 0x4, 0xfffffc6b, 0x3, 0x8, 0x1ff, 0x5, 0x1, 0x710a, 0x5, 0x80, 0x101, 0x4, 0xd3a2, 0x80000001, 0x5, 0x6, 0x6, 0x6, 0xfff, 0x7ff, 0x5, 0xfff, 0x7fff, 0x7, 0xf0000000, 0x4, 0x2, 0x5, 0x6, 0x9, 0x0, 0x6, 0x8, 0x7b, 0x11fd, 0x5, 0x0, 0x8, 0x3, 0x3, 0x400, 0x96b, 0x7, 0x5, 0x3, 0x0, 0x9, 0x7c3, 0x5, 0x80]}]]}, {0xc4, 0x6, "b46f2165b06c639d0537883b440e56365d0b075fcec1a23b2ae4e90fe4e0b4ded1d6e6227913113aaf65feb1a4a3a7bc97d937508eca279c42b76118ffd1cc6eedcf3b1db570137ffe6a1e29538c5de02d9b663f63d1d15b2358178f47275410fb9a7f67903608aadd7194a1475965a2321e06719d51f0052411573785719ffeb0c51c894449d1de031720e579f7c495f84f3e2ba6f8a3ee4ef4923ffec338dcaa42d589752359a6ae1c1b677499194e6040f47c04ab85d3ad2327f56c4b1086"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_simple={0x17c, 0xd, 0x0, 0x0, {{0xb}, {0x9c, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x5, 0x3, '\x00'}, @TCA_DEF_DATA={0xa, 0x3, 'team0\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x5, 0x67, 0x1, 0x0, 0x6}}, @TCA_DEF_DATA={0x6, 0x3, '(\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x800, 0x6, 0x1, 0x6, 0x6}}, @TCA_DEF_PARMS={0x18, 0x2, {0x7fff, 0xb34, 0xffffffffdffffffc, 0x4, 0x3}}, @TCA_DEF_DATA={0x10, 0x3, '\\-*-)]}4+w-\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x0, 0x9, 0x2, 0xf4, 0x8}}, @TCA_DEF_DATA={0xa, 0x3, 'team0\x00'}]}, {0xb6, 0x6, "46d9f1bb2cd1141f7086424973ed931f34322c9714f3ac49603f8705bcc0a3685ab633a53026a666025fe695aed73563c8d4057efa33aa146967c4d938753664d7a07a4c98180d795a45da7dec5c314ff8adac456c186ff767caedc2e530d029fce94a69e7a4cfa3d3ba89060fe7d03976f159ca82d62cc850d7cb54cae9cb0e11be362e6a9b268fd336eb18c7016ad4313c8b2b7c38ad8846fafbea231bf4cc9381aaa4e6275520c8ddcde66ec18e268808"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}, @TCA_RSVP_ACT={0xaf8, 0x6, [@m_skbedit={0x104, 0x20, 0x0, 0x0, {{0xc}, {0x54, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x373b, 0x7, 0x20000000, 0x6, 0x1f}}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0xfffffffc}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x401, 0x5, 0x2, 0x19a0, 0x1f}}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x8}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x6}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x6}]}, {0x85, 0x6, "755ec42d380402883fb3a3693bb006319454f5601cac9ff52f7a2b4c3f315cfe13bbb45923eaaff056aefaa1b180625f650b78b519343b29630c589ab7cc94ee851fb56c983f8ebe1b6916c1dc2dc7175b5c4b732d2308b1b93d1c20039915b9c94a36bf3337b0621fd09aa8229beef66a291a7526cf25de61bca4ec80e70ac919"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_sample={0xe8, 0x11, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x40}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x1ff}, @TCA_SAMPLE_RATE={0x8, 0x3, 0xc0cc}, @TCA_SAMPLE_TRUNC_SIZE={0x8}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x6}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x9}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x3}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x3}]}, {0x7c, 0x6, "b3a8514738451c3d32c86f3edf285a6719f0fe4d23720e81fd1657cfcf3b63c1eb0954c9f5ff35b680e80ce29ab6b54760e480c951b2503d43a979e6e32b346a8973e9c449a59127e69110ed306c8f006c4d85a5b8e903f5e7031d0d7dbfc407a2b88c9d1a707ca6ff0250d4c212a313b31d6303db841ca8"}, {0xc}, {0xc, 0x8, {0x2, 0x1}}}}, @m_sample={0x84, 0x20, 0x0, 0x0, {{0xb}, {0x14, 0x2, 0x0, 0x1, [@TCA_SAMPLE_RATE={0x8, 0x3, 0xd096}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x5}]}, {0x47, 0x6, "7fc38967fd144a8d03e72cf42745abd15c90e5113245040fd5ec1d8178a2fa248a33afe33e1d11e6c4b8616ee1091a378fd449315a16dfc7bedc71abb749b1eda0e62b"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_ife={0x110, 0xa, 0x0, 0x0, {{0x8}, {0x60, 0x2, 0x0, 0x1, [@TCA_IFE_METALST={0x10, 0x6, [@IFE_META_SKBMARK={0x8, 0x1, @val=0xd7}, @IFE_META_SKBMARK={0x4, 0x1, @void}]}, @TCA_IFE_TYPE={0x6, 0x5, 0xf5}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x135, 0x0, 0x4, 0x80}, 0x1}}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x8, 0xcd73, 0x2, 0x401, 0x5}}}, @TCA_IFE_SMAC={0xa, 0x4, @local}]}, {0x8c, 0x6, "bb5614a152decc1bb39b59c6fce91223bb70a1718ba53b6775e8e51f13a6675033ccb6a6d727ffaedd5f8d34a8306dec9f7d4aa05378b11cb84183b8e23842af2a08803dbd73212460a9b276dfd7bdde472ece1468845e236d08583a8082e03792acab1ac9506f4b93d044abc35bb22e6b1cb7bbf83248785666494f5eb90ea78a576047f7544599"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x4}}}}, @m_vlan={0x134, 0x13, 0x0, 0x0, {{0x9}, {0x90, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x7e5}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x5, 0x64, 0x6, 0x20000, 0x6}, 0x2}}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x7}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x145}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0xffff8000, 0xc6, 0x3, 0x9, 0xfffffffc}, 0x2}}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0xe40}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x1, 0x4, 0x8, 0x6, 0x5}, 0x3}}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x7}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x7}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0xc13}]}, {0x7c, 0x6, "2f14171b7d89937297d6cb9e76f4631dfad56da8bf5c803b626a6fca5e7c2a57af7ccce86a4b9ffcaf0cbf3d149321fd12ce88ae2bd4ea409d89bad456012d754c37653211c20cabf63d7b8c348373cb6a09529ddc0adc0b346b20a3b0697f88236e60ef55f5bf85ebfe0eb432505fcb2512a01da84cddc7"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x3}}}}, @m_nat={0x22c, 0x12, 0x0, 0x0, {{0x8}, {0x194, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x3, 0x5, 0x8, 0x0, 0x5}, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xffffffff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x9, 0x3, 0x0, 0x9, 0x4f7}, @empty, @broadcast, 0xffffff00, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x7, 0x1430, 0x5, 0x6, 0x3}, @multicast1, @multicast1, 0xffffff00}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xff, 0x2a56, 0x7, 0x4a, 0x9}, @remote, @local, 0xffffffff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x2, 0x800, 0x4, 0x0, 0xff}, @dev={0xac, 0x14, 0x14, 0x30}, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x400, 0xfff, 0x20000000, 0x1, 0xcdb}, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xffffff00}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x1ff, 0x3fb, 0xffffffffffffffff, 0x80, 0x5}, @multicast1, @empty, 0xff000000, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x100, 0x101, 0x0, 0x40, 0xfffff800}, @multicast1, @loopback, 0xffffff00}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x5387, 0x80, 0x6, 0x200, 0x3}, @multicast1, @remote, 0xffffffff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x2c, 0x4, 0x10000000, 0x6, 0x1}, @empty, @local}}]}, {0x72, 0x6, "e8f9083d8fb061c84adc5456a0e20f049dba5f3ee3bde0ff5ab2a1a053e8efab5f34b545af88cb6e9c4b584b14dcdc7c0e965451bbe5ee0bb987581f625ce07f773b0e82794c7f26e03b512154db7218364338c51dbb6bb7566189d912d1abc8018b23513fef8e2b547a6b41baf1"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3}}}}, @m_xt={0x1c0, 0xd, 0x0, 0x0, {{0x7}, {0xdc, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8, 0x2, 0x3}, @TCA_IPT_TARG={0xb8, 0x6, {0x81, 'mangle\x00', 0x0, 0x7ff, "5e52f7285592448ba43e764d8c74f620c9690fc5b9c90d387ef3abf0c9134d872ff4f762783cba5b1e4748f8c2d179d29d16a5274add94b738af3c0dff664fd5c8bbe3ad4e6c24cc8fe1e7b36749a1200ac4245ee71aae178d82f41339ca7feb44c9d797d52034a4bbee3d03d5c9985919e96bb730198c1270f64d24b693e4f24dadafae3a529ece90eb341775f1"}}, @TCA_IPT_INDEX={0x8, 0x3, 0x6}, @TCA_IPT_INDEX={0x8, 0x3, 0x1}, @TCA_IPT_INDEX={0x8, 0x3, 0x81}]}, {0xbf, 0x6, "fef4cbea263d994e24deaeafb64eaa947b2b0a2fd0163b1b7c634d45e18b34838abdd2fbead488a73cc1d9c0a0023a1839f6480c840d6b08020cdd5bf17f720a29c81928eb98fbf60e8908723f26b51be7373ccc520b7b78a062e825500fefd7dfbac8deb24e547fecf79b05b09b8988048210b8e22e8e776410bc24bbab4fd873d87e13ca461f9b3720cae7d67b3c652c0724d5c336d75b1a3e125b147140e667d9d89c20c46ff3e21f7da107c9c8eb29774cb7301feb86507272"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_mpls={0x108, 0x1a, 0x0, 0x0, {{0x9}, {0x58, 0x2, 0x0, 0x1, [@TCA_MPLS_TC={0x5, 0x6, 0x5}, @TCA_MPLS_BOS={0x5}, @TCA_MPLS_LABEL={0x8, 0x5, 0x99fcb}, @TCA_MPLS_BOS={0x5}, @TCA_MPLS_PROTO={0x6, 0x4, 0x88fb}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x9, 0x3, 0x10000000, 0x1, 0x7}, 0x2}}, @TCA_MPLS_TC={0x5, 0x6, 0x5}, @TCA_MPLS_BOS={0x5, 0x8, 0x1}]}, {0x85, 0x6, "e1a6e6c3e40c6fb7e158505031bcf43095c1a35095ed84e4b7d2fa66525499c2ddec3e42c1888cefda34482be7afb1191aca99c8d2a34344ca70d28bfbfea9ed3e2e60fc27a05805bcba6a4ff6759a25ff9e395f012d2e64501432596c0916fdea9155393c06813e58697afc633ca35c44c3b00b7537a206eaf83790f49040dffc"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_tunnel_key={0x84, 0x9, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0x8}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, {0x35, 0x6, "8cebf4b13520a674f321ef620c3d9f92c51875f237c79e85bbcf7b23c2c28157b6e38840c45a4d795d8a737c5527c6b9f7"}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}, @m_simple={0xc8, 0xb, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x5727, 0x8, 0x2, 0x3, 0x4}}]}, {0x82, 0x6, "5c1d5275478489fcdf59013db47c82e43d0bce5f1da5a085ef1465f21f350fb5bd7a37201fe7f334b79c2f1e407ec1a122180277cb0c7d4428dc460423a21d30ac4b79f8034da9b81b94df5d80748ab0893777e8363d083b0f4f457b039661d1f63d6bf4bf2fd8ae0a9a3c14d1b1837f756bc1b5b9886752da5eb57ea15f"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0x212c}, 0x1, 0x0, 0x0, 0x20004000}, 0x4020804) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) setsockopt$inet6_int(r6, 0x29, 0x4e, &(0x7f0000000180)=0x40, 0x4) recvfrom$inet6(r0, &(0x7f0000000000)=""/114, 0xfffffffffffffd1b, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000040)) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="00281c80", @ANYRES16=r0, @ANYBLOB="ff"], 0x34}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="f4997c3794"], 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="58ad000010", 0x5, 0x0, 0x0, 0x0) r7 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r7, &(0x7f0000000000)='s', 0x10a73, 0x81e, 0x0, 0x4b6ae4f95a5de35b) [ 3415.537013][T31386] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=31386 comm=syz-executor.4 [ 3415.550198][ T23] audit: type=1400 audit(1679379988.662:402): avc: denied { listen } for pid=31385 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 3415.573478][T31386] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 3415.593882][T31386] netlink: 'syz-executor.4': attribute type 41 has an invalid length. [ 3415.602198][T31386] netlink: 44123 bytes leftover after parsing attributes in process `syz-executor.4'. [ 3415.613298][T31386] A link change request failed with some changes committed already. Interface ip6tnl0 may have been left with an inconsistent configuration, please check. 06:26:35 executing program 0: r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$cgroup_subtree(r0, &(0x7f00000003c0)=ANY=[], 0x8) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) 06:26:35 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@bloom_filter, 0x48) 06:26:35 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) recvmsg(r0, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) sendto$inet6(r0, &(0x7f00000001c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0) (async, rerun: 64) recvmsg(r0, &(0x7f00000003c0)={0x0, 0x3, 0x0}, 0x0) (async, rerun: 64) setsockopt$inet6_int(r0, 0x29, 0x11, &(0x7f0000000140), 0x4) (async, rerun: 32) recvmsg(r0, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x0) (async, rerun: 32) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) (async, rerun: 32) r1 = socket$inet_smc(0x2b, 0x1, 0x0) (async, rerun: 32) r2 = socket(0x10, 0x803, 0x0) (async, rerun: 32) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x80}]}, 0x2c}}, 0x0) (rerun: 32) sendmsg$NL80211_CMD_START_NAN(r2, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x8052}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x2c, 0x0, 0x100, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0xff}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x48191}, 0x40000) sendmsg$DEVLINK_CMD_SB_POOL_GET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xfffffe29}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r2, &(0x7f00000000c0), &(0x7f0000000100)=0x14) (async) listen(r1, 0x1) r3 = socket$nl_route(0x10, 0x3, 0x0) (async) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'bridge_slave_1\x00'}, @IFLA_MASTER={0x8, 0xa, r5}, @IFLA_MTU={0x8, 0x4, 0x1da}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f0000000a40)=@newchain={0x212c, 0x64, 0x600, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x1, 0xc}, {0x6, 0xb}, {0x8, 0x6}}, [@TCA_CHAIN={0x8, 0xb, 0x3}, @filter_kind_options=@f_flow={{0x9}, {0x9c, 0x2, [@TCA_FLOW_POLICE={0x98, 0xa, 0x0, 0x1, [@TCA_POLICE_RATE64={0xc, 0x8, 0xee1}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x4}, @TCA_POLICE_RESULT={0x8, 0x5, 0x6c50}, @TCA_POLICE_TBF={0x3c, 0x1, {0xff, 0x4, 0x1000, 0x4b, 0x6, {0xf, 0x1, 0x813a, 0x400, 0x2e49, 0x1000}, {0xa, 0x2, 0xc2f, 0x90f5, 0x9}, 0x4, 0xb44a, 0x4}}, @TCA_POLICE_TBF={0x3c, 0x1, {0x4, 0x6, 0x0, 0xffffffff, 0x4, {0xff, 0x2, 0x8, 0xdd24, 0x2, 0x5}, {0xf9, 0x2, 0x2, 0x5e88, 0x1913, 0x800}, 0x1, 0x2, 0x1}}]}]}}, @filter_kind_options=@f_rsvp6={{0xa}, {0x204c, 0x2, [@TCA_RSVP_PINFO={0x20, 0x4, {{0x9, 0x8, 0x800}, {0x2, 0x6}, 0x1, 0x4, 0x2}}, @TCA_RSVP_PINFO={0x20, 0x4, {{0x10001, 0x0, 0x3ff}, {0x81, 0x0, 0x40}, 0xe3, 0x4, 0xfc}}, @TCA_RSVP_PINFO={0x20, 0x4, {{0x9, 0x2, 0x3}, {0xffff, 0x7}, 0x6c, 0x6, 0x80}}, @TCA_RSVP_SRC={0x14, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}}, @TCA_RSVP_ACT={0x14dc, 0x6, [@m_tunnel_key={0xd8, 0x1d, 0x0, 0x0, {{0xf}, {0x3c, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @private0}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e24}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @loopback}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @rand_addr=' \x01\x00'}]}, {0x6f, 0x6, "01a03e38e74dab61077ce415ac5642d0543b5cb305dccb7e0363204ce63dd6d8d9a64d7860e1952a7ae15131d23871cf9b673ca852896fbe3614aa4738d00e1410a4d4d056ae1d7b960f4553b6eaeaf0f4e0b9e0a35c8c1f0327edaf47eba417928f051bd80469affa1bb4"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_ctinfo={0x150, 0x14, 0x0, 0x0, {{0xb}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x5}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x3}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x5}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0xfffffff9}, @TCA_CTINFO_ACT={0x18, 0x3, {0x7, 0x0, 0x20000000, 0x9, 0x1}}]}, {0xe9, 0x6, "aac9497386642e3611a72e072b514864de10bd8574a85d5d586beb11af8e16036dbfd5196961b5b49fa1b5c47decbc25b76518ac279cc1092f4f582c66a2decf779de70c03aa008a3f2bbdc525cbfd018bd77428153215d2b59518693e1cfadaaebc8da1dc9ce263ef13f84e26ed1bc9fe75cb9a0ebca5e9c7fa480160f22348d92f7cc587319940dc12861cf18ceb6285539d3e6a5af8908c420eced45b5bd7e5f4c5addbb4a2e528bda369fb4a9647e5ab43078a18beb1a908ea3adba9d5c5e884ecc867504ed2a2cc0eca98b761cc23cd96997eac49416a2dfa0b8b0a640c4ac56b032c"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_police={0x1134, 0x1a, 0x0, 0x0, {{0xb}, {0x1048, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE64={0xc, 0x8, 0x6}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x9b0, 0x2, 0x5, 0x8, 0x5, 0x4, 0x2, 0x80, 0x80, 0x1, 0xc4a, 0x10, 0xdbb, 0xffff8000, 0x40, 0x400, 0x6, 0x7fff, 0x8ec, 0x6, 0xdc, 0x5, 0x10000, 0x1, 0x1, 0x8, 0x0, 0x8, 0x4, 0x4, 0x401, 0x9, 0x7, 0xc64e, 0x5, 0x5, 0x5, 0x7, 0x10001, 0x6, 0xfa16924, 0x5, 0x8, 0x4, 0x1, 0x7, 0x5, 0x6, 0x0, 0x9, 0x9, 0x1d, 0x8, 0x76, 0xffffffff, 0x3, 0x0, 0x3f, 0x3, 0x400, 0x9, 0x7, 0x6, 0xbf6, 0x9, 0x400, 0x3f, 0x1, 0x8, 0x2, 0x200, 0x80000000, 0x7fff, 0x2, 0x200, 0x3, 0x323, 0x6, 0x6, 0x4, 0x3f, 0x2, 0x66f, 0x40000, 0x20, 0x14000, 0x8, 0x80000001, 0x9, 0x9, 0x80000000, 0x3, 0x2, 0xd591, 0xe16, 0x3, 0x6, 0x8, 0x3, 0x8, 0x8, 0x6, 0x400, 0x903, 0x2e9, 0x1000, 0x1fc703d5, 0x6108e75e, 0xfa3f, 0x1f, 0x8, 0x80000001, 0x6, 0xd40, 0x0, 0x4, 0x4, 0x7, 0x101, 0x9, 0x1, 0x8, 0x2, 0x81, 0x3, 0x4, 0x2e, 0xa2, 0x14000, 0x4, 0x3, 0x3, 0x3f, 0x101, 0x3, 0xffff551f, 0x0, 0xfffffffd, 0xa14, 0x68f2, 0x0, 0x80, 0x5b40, 0x3ff, 0x9, 0x1, 0x9, 0x3, 0x76, 0x400, 0x1000, 0x3, 0x5, 0x80, 0x31, 0x1, 0x1fffe0, 0x0, 0x5, 0x80000001, 0xffffffff, 0x264ed648, 0x6, 0x3, 0x800, 0x4, 0x5, 0x57, 0x8, 0x9, 0x7fffffff, 0x0, 0x8, 0x9, 0x3, 0x2, 0x7f, 0x8b4, 0x5, 0xfffffff8, 0xff800000, 0x8, 0x6, 0x7, 0x0, 0xee, 0x1, 0xfffffff9, 0x2, 0x0, 0x2, 0x413c, 0x4, 0x8, 0x71d, 0xb30, 0xe80e, 0x7, 0x40, 0x9, 0x81, 0x7, 0x1, 0xfffff920, 0x7, 0xfffffc01, 0x81, 0x8, 0x4, 0x6b, 0xc0000000, 0x3, 0x401, 0x9, 0x10000, 0x0, 0x9, 0x4, 0x10, 0x8, 0xfffffff9, 0x101, 0x5, 0x2, 0x1f, 0x9, 0x7, 0x401, 0x3, 0x8000, 0x2, 0x1f, 0x101, 0xfffffff9, 0x9, 0x1000, 0x3, 0xfffffffb, 0x2, 0x1, 0x81, 0x8000, 0x8, 0x2b, 0x6f, 0x3, 0x81, 0x6500, 0xe46, 0x4, 0x1, 0x3, 0x2, 0x7, 0x60000000, 0x3]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xe4}, @TCA_POLICE_RATE64={0xc, 0x8, 0xff}, @TCA_POLICE_RESULT={0x8, 0x5, 0x7}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x6, 0x8, 0x80, 0x9, 0x401, 0x800, 0x4, 0x7, 0x3, 0x0, 0x5, 0x7fff, 0x8, 0x2e, 0xfff, 0x5, 0x60, 0x1, 0x1, 0x4, 0x5, 0x40, 0x2, 0x5b, 0xc24, 0x3, 0xc, 0x1, 0x81, 0x80, 0x1, 0x583b, 0x5, 0x2, 0x5, 0x9, 0x8, 0x3, 0x7f, 0x7, 0x81, 0x0, 0x7, 0x3, 0xe3a4, 0x1ff, 0xfffffffc, 0x3, 0x1f, 0xadd7, 0x40f, 0x1, 0x8, 0x4, 0x6, 0x7, 0x4, 0x3, 0xa3ad, 0x8, 0x3f51, 0x9, 0x6, 0x5, 0x8, 0x8, 0xaed2e70, 0x2, 0x1, 0xdc6, 0x80000001, 0x3, 0x6, 0x3, 0x5, 0xe15, 0x1, 0x6, 0x1ff, 0x9, 0x4, 0x80000001, 0x4, 0x7ff, 0xa76, 0x1, 0x179, 0xe1dc, 0x120000, 0xdc, 0x0, 0x3, 0xfffffff8, 0x0, 0x7, 0x7f, 0x40, 0x7, 0x8, 0x2, 0x800, 0x2, 0x7, 0x5, 0x8, 0x1, 0x76f, 0x10000, 0x80000001, 0x9, 0x1, 0x5547, 0x2, 0x1ff, 0xfbe, 0xc0000000, 0x8001, 0xfff, 0x401, 0x8001, 0x78c, 0x1, 0x5, 0x3, 0xa2c, 0xff, 0x5, 0x6, 0x6, 0x9, 0xf60, 0x80000000, 0x400, 0xeb, 0x5, 0x9, 0x7f, 0x8000, 0xfedc, 0x3ff, 0xfffff800, 0x3, 0x200, 0x7, 0x6, 0x1, 0x8, 0x5, 0x0, 0x7, 0x97, 0x80000000, 0xc806, 0x4, 0xfffffffb, 0x0, 0x800, 0x40, 0x3, 0x51, 0xffff, 0x7fff, 0x6, 0x3d5, 0x4, 0x1f, 0x25b4, 0x1000, 0xfff, 0x1, 0x200, 0x4, 0x1, 0x9, 0xffff8001, 0x7, 0x485, 0x2, 0xfffff001, 0x6, 0x80, 0xdd0, 0xfffffff9, 0xc0000000, 0x0, 0x80000001, 0xffffffff, 0x46f, 0x8, 0xfffffffe, 0x4, 0x8, 0x8000, 0xfffffffb, 0x4, 0x6acb35e0, 0x1, 0x80000000, 0xfffff000, 0x2, 0xff, 0x0, 0x7, 0x2, 0x3, 0xa8, 0x8, 0x200, 0x3f, 0x2, 0x5, 0x8ee4, 0x3f, 0x4, 0x6, 0xa3d, 0x8803, 0xffffffff, 0x5, 0x0, 0x0, 0x8, 0x5965, 0x733d, 0x2, 0x1ff, 0x1000, 0xffff, 0x8, 0x6, 0x5, 0x4, 0xfc, 0x4, 0x6, 0x4, 0x81, 0x1, 0x1f, 0x6, 0x7, 0xfa9b, 0x8, 0x628c, 0x7fff, 0x3f, 0x93, 0x7fff, 0x8, 0x10001, 0x192, 0x101, 0x9, 0x85, 0x8, 0x7]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xa51b, 0xffffff01, 0x59, 0x200, 0xff, 0x6, 0xf0e6, 0x4aa, 0x3, 0x2b1, 0x80, 0x6, 0x10000, 0x0, 0x2, 0x40, 0x5, 0x1ff, 0x0, 0x0, 0x6, 0xc4, 0x4, 0x698abcc9, 0x6, 0xe68, 0x8, 0x7ff, 0x4, 0x9, 0x6, 0x4, 0x4, 0x5, 0x9, 0x8, 0x5, 0x3, 0x6, 0x57, 0x7fffffff, 0x4, 0x0, 0x1, 0x5b, 0xd95, 0x4, 0x9, 0x2, 0x3, 0x7, 0xe0, 0x4, 0x8, 0x7fff, 0x6, 0x8, 0xf22, 0xffff, 0x7, 0x1, 0x5, 0xffffffff, 0xacc4, 0x69ce14d4, 0x2, 0x401, 0x100, 0x0, 0x800, 0x6, 0x7, 0xfffffd18, 0x6, 0x0, 0x3c, 0xf69e, 0x2, 0x8, 0x4, 0x2, 0xfffffffb, 0x2, 0x4, 0x9, 0x1, 0x1ff, 0xffff, 0x2, 0xffff, 0x9, 0x2, 0x10000, 0x20, 0xfff, 0x4, 0xffff, 0x7, 0x5, 0x7, 0x93, 0xf1c80000, 0x4, 0x0, 0xffffffc1, 0x1, 0x5, 0x6, 0x4, 0x0, 0xed4, 0x2, 0x0, 0x7fff, 0x2550ee3e, 0x1, 0x786, 0x0, 0x3800000, 0x1, 0x3, 0xffffff80, 0x4, 0xfffffffa, 0x1, 0x4bd, 0x2, 0x400, 0x7, 0xd9, 0x6, 0x10000, 0x8000, 0x53, 0x9, 0x5, 0x10000, 0x5, 0x2, 0x7, 0x23c, 0x8, 0xce, 0x2, 0x7, 0xfff, 0x7, 0x7, 0x0, 0x4, 0x7f, 0x0, 0x1, 0xffff, 0x1ff, 0x400, 0x200, 0x800, 0x7, 0x10000, 0xfffffffc, 0x101, 0x2000000, 0x6, 0x7282, 0x2, 0x0, 0x0, 0x6, 0x2, 0x80, 0x0, 0x5, 0x3, 0x74a4, 0x4, 0x6, 0x800, 0x3, 0x0, 0x40000000, 0x8, 0x9, 0x3bec453a, 0x5, 0x6, 0x0, 0x3f, 0x3, 0x6, 0x3, 0x9, 0x7fffffff, 0x4, 0x3, 0x6, 0xffff, 0x7ff, 0x8, 0x1, 0x8000, 0x100, 0xfefc, 0x0, 0x800, 0x7, 0x7fffffff, 0x3c, 0x5a, 0x101, 0x6c, 0x2, 0x1ff, 0x3, 0x2, 0x3, 0x0, 0xca1, 0x7, 0x3, 0x1ff, 0x3, 0x64, 0x3, 0x5, 0x5, 0x7bb, 0xfa, 0x7, 0x9, 0xfff, 0x5, 0x5, 0x2, 0x9, 0x10000, 0x5a, 0x7, 0x569, 0x200, 0x100, 0x1, 0x8, 0x10001, 0x2, 0x4, 0x8, 0x7, 0xaf33, 0xffff, 0x5, 0x2, 0x80000001, 0x5, 0x5, 0x42e31cf9]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x4}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x4, 0x8, 0x2, 0x5, 0x8000, 0x9, 0x44c, 0x1, 0xc83, 0x8, 0x20, 0x5, 0x9, 0x1, 0x1, 0x80, 0x7, 0x0, 0x100, 0x4, 0x1, 0x298f, 0x400, 0x3, 0x3, 0x80, 0x4, 0x9a44, 0xfffffffc, 0x3f01, 0x8, 0xcd, 0x2, 0x5ad8, 0x2, 0x7ff, 0x2bc, 0x80, 0x6, 0x7ff, 0x7ff, 0x2, 0x1ff, 0x8, 0xc6, 0x7f, 0xd, 0x10001, 0x0, 0x6, 0x5, 0x59, 0x7, 0x9, 0x3f, 0x2, 0xfffffffa, 0x8, 0x8, 0xfffffff9, 0xffff, 0x1, 0x9ec, 0x8, 0x200, 0x6, 0x0, 0x1, 0x2, 0x7, 0x0, 0x2, 0x1, 0x66, 0x1, 0x8, 0x7f, 0x3, 0x5, 0x9, 0x80, 0x80, 0x1000, 0x80000001, 0x1, 0xffffffe0, 0x100, 0x20, 0xfb, 0x101, 0x3, 0x80000001, 0x400, 0x80, 0x10000, 0x9, 0x2, 0x1000, 0x9, 0x7fff, 0xb967, 0x6ac, 0x5, 0x200, 0x0, 0x2, 0x2, 0x7, 0x4, 0x0, 0x70, 0x10001, 0x3a, 0x8, 0xffff, 0x8, 0x800, 0x7fff, 0xa33, 0x7f, 0xde5f, 0x9, 0xffffffff, 0xffffff81, 0x100, 0x100, 0x6, 0x7, 0xaf000000, 0x5c, 0x1ff, 0x2eb, 0x2, 0x7fff, 0x2, 0xfb3, 0x2, 0xffffffff, 0x7, 0x8, 0x2, 0x8, 0xa27e, 0x4, 0xffffff90, 0x5, 0x4, 0x6, 0xca, 0x3, 0xa3, 0x4ab4, 0x6, 0x7d, 0x4, 0x0, 0x0, 0xb4, 0x80, 0x1, 0x1f, 0x7ff, 0x6, 0x100, 0x7, 0x0, 0x3, 0x7fff, 0x0, 0x7f, 0x40000000, 0x6, 0x10000, 0xcdc0, 0x933f, 0x7, 0x2, 0x1000, 0x1, 0xf0000000, 0x4, 0x7fff, 0xe2, 0xd55, 0x0, 0x6, 0x20, 0xd9f, 0x4, 0x6, 0x6, 0x788, 0xffffffff, 0x5, 0x7b5, 0x5, 0xd0, 0x8, 0x81, 0x5, 0x0, 0x80, 0x56a4, 0x99, 0x20, 0x4, 0x4, 0xfffffc6b, 0x3, 0x8, 0x1ff, 0x5, 0x1, 0x710a, 0x5, 0x80, 0x101, 0x4, 0xd3a2, 0x80000001, 0x5, 0x6, 0x6, 0x6, 0xfff, 0x7ff, 0x5, 0xfff, 0x7fff, 0x7, 0xf0000000, 0x4, 0x2, 0x5, 0x6, 0x9, 0x0, 0x6, 0x8, 0x7b, 0x11fd, 0x5, 0x0, 0x8, 0x3, 0x3, 0x400, 0x96b, 0x7, 0x5, 0x3, 0x0, 0x9, 0x7c3, 0x5, 0x80]}]]}, {0xc4, 0x6, "b46f2165b06c639d0537883b440e56365d0b075fcec1a23b2ae4e90fe4e0b4ded1d6e6227913113aaf65feb1a4a3a7bc97d937508eca279c42b76118ffd1cc6eedcf3b1db570137ffe6a1e29538c5de02d9b663f63d1d15b2358178f47275410fb9a7f67903608aadd7194a1475965a2321e06719d51f0052411573785719ffeb0c51c894449d1de031720e579f7c495f84f3e2ba6f8a3ee4ef4923ffec338dcaa42d589752359a6ae1c1b677499194e6040f47c04ab85d3ad2327f56c4b1086"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_simple={0x17c, 0xd, 0x0, 0x0, {{0xb}, {0x9c, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x5, 0x3, '\x00'}, @TCA_DEF_DATA={0xa, 0x3, 'team0\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x5, 0x67, 0x1, 0x0, 0x6}}, @TCA_DEF_DATA={0x6, 0x3, '(\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x800, 0x6, 0x1, 0x6, 0x6}}, @TCA_DEF_PARMS={0x18, 0x2, {0x7fff, 0xb34, 0xffffffffdffffffc, 0x4, 0x3}}, @TCA_DEF_DATA={0x10, 0x3, '\\-*-)]}4+w-\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x0, 0x9, 0x2, 0xf4, 0x8}}, @TCA_DEF_DATA={0xa, 0x3, 'team0\x00'}]}, {0xb6, 0x6, "46d9f1bb2cd1141f7086424973ed931f34322c9714f3ac49603f8705bcc0a3685ab633a53026a666025fe695aed73563c8d4057efa33aa146967c4d938753664d7a07a4c98180d795a45da7dec5c314ff8adac456c186ff767caedc2e530d029fce94a69e7a4cfa3d3ba89060fe7d03976f159ca82d62cc850d7cb54cae9cb0e11be362e6a9b268fd336eb18c7016ad4313c8b2b7c38ad8846fafbea231bf4cc9381aaa4e6275520c8ddcde66ec18e268808"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}, @TCA_RSVP_ACT={0xaf8, 0x6, [@m_skbedit={0x104, 0x20, 0x0, 0x0, {{0xc}, {0x54, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x373b, 0x7, 0x20000000, 0x6, 0x1f}}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0xfffffffc}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x401, 0x5, 0x2, 0x19a0, 0x1f}}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x8}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x6}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x6}]}, {0x85, 0x6, "755ec42d380402883fb3a3693bb006319454f5601cac9ff52f7a2b4c3f315cfe13bbb45923eaaff056aefaa1b180625f650b78b519343b29630c589ab7cc94ee851fb56c983f8ebe1b6916c1dc2dc7175b5c4b732d2308b1b93d1c20039915b9c94a36bf3337b0621fd09aa8229beef66a291a7526cf25de61bca4ec80e70ac919"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_sample={0xe8, 0x11, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x40}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x1ff}, @TCA_SAMPLE_RATE={0x8, 0x3, 0xc0cc}, @TCA_SAMPLE_TRUNC_SIZE={0x8}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x6}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x9}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x3}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x3}]}, {0x7c, 0x6, "b3a8514738451c3d32c86f3edf285a6719f0fe4d23720e81fd1657cfcf3b63c1eb0954c9f5ff35b680e80ce29ab6b54760e480c951b2503d43a979e6e32b346a8973e9c449a59127e69110ed306c8f006c4d85a5b8e903f5e7031d0d7dbfc407a2b88c9d1a707ca6ff0250d4c212a313b31d6303db841ca8"}, {0xc}, {0xc, 0x8, {0x2, 0x1}}}}, @m_sample={0x84, 0x20, 0x0, 0x0, {{0xb}, {0x14, 0x2, 0x0, 0x1, [@TCA_SAMPLE_RATE={0x8, 0x3, 0xd096}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x5}]}, {0x47, 0x6, "7fc38967fd144a8d03e72cf42745abd15c90e5113245040fd5ec1d8178a2fa248a33afe33e1d11e6c4b8616ee1091a378fd449315a16dfc7bedc71abb749b1eda0e62b"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_ife={0x110, 0xa, 0x0, 0x0, {{0x8}, {0x60, 0x2, 0x0, 0x1, [@TCA_IFE_METALST={0x10, 0x6, [@IFE_META_SKBMARK={0x8, 0x1, @val=0xd7}, @IFE_META_SKBMARK={0x4, 0x1, @void}]}, @TCA_IFE_TYPE={0x6, 0x5, 0xf5}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x135, 0x0, 0x4, 0x80}, 0x1}}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x8, 0xcd73, 0x2, 0x401, 0x5}}}, @TCA_IFE_SMAC={0xa, 0x4, @local}]}, {0x8c, 0x6, "bb5614a152decc1bb39b59c6fce91223bb70a1718ba53b6775e8e51f13a6675033ccb6a6d727ffaedd5f8d34a8306dec9f7d4aa05378b11cb84183b8e23842af2a08803dbd73212460a9b276dfd7bdde472ece1468845e236d08583a8082e03792acab1ac9506f4b93d044abc35bb22e6b1cb7bbf83248785666494f5eb90ea78a576047f7544599"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x4}}}}, @m_vlan={0x134, 0x13, 0x0, 0x0, {{0x9}, {0x90, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x7e5}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x5, 0x64, 0x6, 0x20000, 0x6}, 0x2}}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x7}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x145}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0xffff8000, 0xc6, 0x3, 0x9, 0xfffffffc}, 0x2}}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0xe40}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x1, 0x4, 0x8, 0x6, 0x5}, 0x3}}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x7}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x7}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0xc13}]}, {0x7c, 0x6, "2f14171b7d89937297d6cb9e76f4631dfad56da8bf5c803b626a6fca5e7c2a57af7ccce86a4b9ffcaf0cbf3d149321fd12ce88ae2bd4ea409d89bad456012d754c37653211c20cabf63d7b8c348373cb6a09529ddc0adc0b346b20a3b0697f88236e60ef55f5bf85ebfe0eb432505fcb2512a01da84cddc7"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x3}}}}, @m_nat={0x22c, 0x12, 0x0, 0x0, {{0x8}, {0x194, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x3, 0x5, 0x8, 0x0, 0x5}, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xffffffff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x9, 0x3, 0x0, 0x9, 0x4f7}, @empty, @broadcast, 0xffffff00, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x7, 0x1430, 0x5, 0x6, 0x3}, @multicast1, @multicast1, 0xffffff00}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xff, 0x2a56, 0x7, 0x4a, 0x9}, @remote, @local, 0xffffffff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x2, 0x800, 0x4, 0x0, 0xff}, @dev={0xac, 0x14, 0x14, 0x30}, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x400, 0xfff, 0x20000000, 0x1, 0xcdb}, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xffffff00}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x1ff, 0x3fb, 0xffffffffffffffff, 0x80, 0x5}, @multicast1, @empty, 0xff000000, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x100, 0x101, 0x0, 0x40, 0xfffff800}, @multicast1, @loopback, 0xffffff00}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x5387, 0x80, 0x6, 0x200, 0x3}, @multicast1, @remote, 0xffffffff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x2c, 0x4, 0x10000000, 0x6, 0x1}, @empty, @local}}]}, {0x72, 0x6, "e8f9083d8fb061c84adc5456a0e20f049dba5f3ee3bde0ff5ab2a1a053e8efab5f34b545af88cb6e9c4b584b14dcdc7c0e965451bbe5ee0bb987581f625ce07f773b0e82794c7f26e03b512154db7218364338c51dbb6bb7566189d912d1abc8018b23513fef8e2b547a6b41baf1"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3}}}}, @m_xt={0x1c0, 0xd, 0x0, 0x0, {{0x7}, {0xdc, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8, 0x2, 0x3}, @TCA_IPT_TARG={0xb8, 0x6, {0x81, 'mangle\x00', 0x0, 0x7ff, "5e52f7285592448ba43e764d8c74f620c9690fc5b9c90d387ef3abf0c9134d872ff4f762783cba5b1e4748f8c2d179d29d16a5274add94b738af3c0dff664fd5c8bbe3ad4e6c24cc8fe1e7b36749a1200ac4245ee71aae178d82f41339ca7feb44c9d797d52034a4bbee3d03d5c9985919e96bb730198c1270f64d24b693e4f24dadafae3a529ece90eb341775f1"}}, @TCA_IPT_INDEX={0x8, 0x3, 0x6}, @TCA_IPT_INDEX={0x8, 0x3, 0x1}, @TCA_IPT_INDEX={0x8, 0x3, 0x81}]}, {0xbf, 0x6, "fef4cbea263d994e24deaeafb64eaa947b2b0a2fd0163b1b7c634d45e18b34838abdd2fbead488a73cc1d9c0a0023a1839f6480c840d6b08020cdd5bf17f720a29c81928eb98fbf60e8908723f26b51be7373ccc520b7b78a062e825500fefd7dfbac8deb24e547fecf79b05b09b8988048210b8e22e8e776410bc24bbab4fd873d87e13ca461f9b3720cae7d67b3c652c0724d5c336d75b1a3e125b147140e667d9d89c20c46ff3e21f7da107c9c8eb29774cb7301feb86507272"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_mpls={0x108, 0x1a, 0x0, 0x0, {{0x9}, {0x58, 0x2, 0x0, 0x1, [@TCA_MPLS_TC={0x5, 0x6, 0x5}, @TCA_MPLS_BOS={0x5}, @TCA_MPLS_LABEL={0x8, 0x5, 0x99fcb}, @TCA_MPLS_BOS={0x5}, @TCA_MPLS_PROTO={0x6, 0x4, 0x88fb}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x9, 0x3, 0x10000000, 0x1, 0x7}, 0x2}}, @TCA_MPLS_TC={0x5, 0x6, 0x5}, @TCA_MPLS_BOS={0x5, 0x8, 0x1}]}, {0x85, 0x6, "e1a6e6c3e40c6fb7e158505031bcf43095c1a35095ed84e4b7d2fa66525499c2ddec3e42c1888cefda34482be7afb1191aca99c8d2a34344ca70d28bfbfea9ed3e2e60fc27a05805bcba6a4ff6759a25ff9e395f012d2e64501432596c0916fdea9155393c06813e58697afc633ca35c44c3b00b7537a206eaf83790f49040dffc"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_tunnel_key={0x84, 0x9, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0x8}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, {0x35, 0x6, "8cebf4b13520a674f321ef620c3d9f92c51875f237c79e85bbcf7b23c2c28157b6e38840c45a4d795d8a737c5527c6b9f7"}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}, @m_simple={0xc8, 0xb, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x5727, 0x8, 0x2, 0x3, 0x4}}]}, {0x82, 0x6, "5c1d5275478489fcdf59013db47c82e43d0bce5f1da5a085ef1465f21f350fb5bd7a37201fe7f334b79c2f1e407ec1a122180277cb0c7d4428dc460423a21d30ac4b79f8034da9b81b94df5d80748ab0893777e8363d083b0f4f457b039661d1f63d6bf4bf2fd8ae0a9a3c14d1b1837f756bc1b5b9886752da5eb57ea15f"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0x212c}, 0x1, 0x0, 0x0, 0x20004000}, 0x4020804) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) (async) setsockopt$inet6_int(r6, 0x29, 0x4e, &(0x7f0000000180)=0x40, 0x4) (async) recvfrom$inet6(r0, &(0x7f0000000000)=""/114, 0xfffffffffffffd1b, 0x0, 0x0, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000040)) (async) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="00281c80", @ANYRES16=r0, @ANYBLOB="ff"], 0x34}}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="f4997c3794"], 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="58ad000010", 0x5, 0x0, 0x0, 0x0) (async) r7 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r7, &(0x7f0000000000)='s', 0x10a73, 0x81e, 0x0, 0x4b6ae4f95a5de35b) 06:26:35 executing program 5: r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e24, @local}, 0x10) writev(r0, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) recvmmsg(r0, &(0x7f0000003e40)=[{{&(0x7f0000000100)=@phonet, 0x80, 0x0, 0x0, &(0x7f00000024c0)=""/4096, 0x1000, 0xe803}}, {{0x0, 0x80100200, 0x0, 0x0, &(0x7f00000035c0)=""/241, 0xf1}}, {{&(0x7f00000036c0)=@un=@abs, 0x80, &(0x7f0000003780)=[{&(0x7f0000003740)=""/4, 0xfffffd07}], 0x1, &(0x7f00000037c0)=""/236, 0xec}}, {{&(0x7f00000038c0)=@l2tp6={0xa, 0x0, 0x0, @private1}, 0x80, &(0x7f0000003bc0)=[{0x0}, {&(0x7f0000003a00)=""/190, 0xbe}, {&(0x7f0000003ac0)=""/131, 0x83}, {0x0}], 0x4, &(0x7f0000003c00)=""/73, 0x49}}, {{&(0x7f0000003c80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, 0x0, 0x0, &(0x7f0000003e00)=""/48, 0x30}}], 0x5, 0x40000121, 0x0) 06:26:35 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000005c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e24, @local}, 0x10) writev(r0, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) recvmmsg(r0, &(0x7f0000003e40)=[{{&(0x7f0000000100)=@phonet, 0x80, 0x0, 0x0, &(0x7f00000024c0)=""/4096, 0x1000, 0x10700}}, {{0x0, 0x80100200, 0x0, 0x0, &(0x7f00000035c0)=""/241, 0xf1}}, {{&(0x7f00000036c0)=@un=@abs, 0x80, &(0x7f0000003780)=[{&(0x7f0000003740)=""/4, 0xfffffd07}], 0x1, &(0x7f00000037c0)=""/236, 0xec}}, {{&(0x7f00000038c0)=@l2tp6={0xa, 0x0, 0x0, @private1}, 0x80, &(0x7f0000003bc0)=[{0x0}, {&(0x7f0000003a00)=""/190, 0xbe}, {&(0x7f0000003ac0)=""/131, 0x83}, {0x0}], 0x4, &(0x7f0000003c00)=""/73, 0x49}}, {{&(0x7f0000003c80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, 0x0, 0x0, &(0x7f0000003e00)=""/48, 0x30}}], 0x5, 0x40000121, 0x0) 06:26:35 executing program 1: perf_event_open$cgroup(&(0x7f0000000140)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 06:26:35 executing program 1: bpf$MAP_CREATE(0x1e, &(0x7f0000000780)=@bloom_filter, 0x48) 06:26:35 executing program 2: bpf$OBJ_GET_MAP(0x7, &(0x7f0000000080)={&(0x7f0000000040)='./file0\x00'}, 0x10) bpf$OBJ_GET_MAP(0x7, &(0x7f00000005c0)={&(0x7f0000000580)='./file0\x00', 0x0, 0x8}, 0x10) 06:26:35 executing program 1: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000300)={&(0x7f00000002c0)='./file0\x00'}, 0x10) mkdir(&(0x7f0000001800)='./file0\x00', 0x0) 06:26:35 executing program 2: bpf$ITER_CREATE(0x21, 0x0, 0x0) syz_clone(0x44082000, 0x0, 0x0, 0x0, 0x0, 0x0) gettid() syz_clone(0x0, &(0x7f0000000000), 0x0, &(0x7f0000000040), 0x0, 0x0) 06:26:35 executing program 4: socket$inet6(0x10, 0x3, 0x0) (async) r0 = socket$inet6(0x10, 0x3, 0x0) recvmsg(r0, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) sendto$inet6(r0, &(0x7f00000001c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0) recvmsg(r0, &(0x7f00000003c0)={0x0, 0x3, 0x0}, 0x0) setsockopt$inet6_int(r0, 0x29, 0x11, &(0x7f0000000140), 0x4) (async) setsockopt$inet6_int(r0, 0x29, 0x11, &(0x7f0000000140), 0x4) recvmsg(r0, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) (async) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) (async) r1 = socket$inet_smc(0x2b, 0x1, 0x0) socket(0x10, 0x803, 0x0) (async) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x80}]}, 0x2c}}, 0x0) sendmsg$NL80211_CMD_START_NAN(r2, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x8052}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x2c, 0x0, 0x100, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0xff}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x48191}, 0x40000) (async) sendmsg$NL80211_CMD_START_NAN(r2, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x8052}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x2c, 0x0, 0x100, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0xff}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x48191}, 0x40000) sendmsg$DEVLINK_CMD_SB_POOL_GET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xfffffe29}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r2, &(0x7f00000000c0), &(0x7f0000000100)=0x14) listen(r1, 0x1) (async) listen(r1, 0x1) socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'bridge_slave_1\x00'}, @IFLA_MASTER={0x8, 0xa, r5}, @IFLA_MTU={0x8, 0x4, 0x1da}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f0000000a40)=@newchain={0x212c, 0x64, 0x600, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x1, 0xc}, {0x6, 0xb}, {0x8, 0x6}}, [@TCA_CHAIN={0x8, 0xb, 0x3}, @filter_kind_options=@f_flow={{0x9}, {0x9c, 0x2, [@TCA_FLOW_POLICE={0x98, 0xa, 0x0, 0x1, [@TCA_POLICE_RATE64={0xc, 0x8, 0xee1}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x4}, @TCA_POLICE_RESULT={0x8, 0x5, 0x6c50}, @TCA_POLICE_TBF={0x3c, 0x1, {0xff, 0x4, 0x1000, 0x4b, 0x6, {0xf, 0x1, 0x813a, 0x400, 0x2e49, 0x1000}, {0xa, 0x2, 0xc2f, 0x90f5, 0x9}, 0x4, 0xb44a, 0x4}}, @TCA_POLICE_TBF={0x3c, 0x1, {0x4, 0x6, 0x0, 0xffffffff, 0x4, {0xff, 0x2, 0x8, 0xdd24, 0x2, 0x5}, {0xf9, 0x2, 0x2, 0x5e88, 0x1913, 0x800}, 0x1, 0x2, 0x1}}]}]}}, @filter_kind_options=@f_rsvp6={{0xa}, {0x204c, 0x2, [@TCA_RSVP_PINFO={0x20, 0x4, {{0x9, 0x8, 0x800}, {0x2, 0x6}, 0x1, 0x4, 0x2}}, @TCA_RSVP_PINFO={0x20, 0x4, {{0x10001, 0x0, 0x3ff}, {0x81, 0x0, 0x40}, 0xe3, 0x4, 0xfc}}, @TCA_RSVP_PINFO={0x20, 0x4, {{0x9, 0x2, 0x3}, {0xffff, 0x7}, 0x6c, 0x6, 0x80}}, @TCA_RSVP_SRC={0x14, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}}, @TCA_RSVP_ACT={0x14dc, 0x6, [@m_tunnel_key={0xd8, 0x1d, 0x0, 0x0, {{0xf}, {0x3c, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @private0}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e24}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @loopback}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @rand_addr=' \x01\x00'}]}, {0x6f, 0x6, "01a03e38e74dab61077ce415ac5642d0543b5cb305dccb7e0363204ce63dd6d8d9a64d7860e1952a7ae15131d23871cf9b673ca852896fbe3614aa4738d00e1410a4d4d056ae1d7b960f4553b6eaeaf0f4e0b9e0a35c8c1f0327edaf47eba417928f051bd80469affa1bb4"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_ctinfo={0x150, 0x14, 0x0, 0x0, {{0xb}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x5}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x3}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x5}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0xfffffff9}, @TCA_CTINFO_ACT={0x18, 0x3, {0x7, 0x0, 0x20000000, 0x9, 0x1}}]}, {0xe9, 0x6, "aac9497386642e3611a72e072b514864de10bd8574a85d5d586beb11af8e16036dbfd5196961b5b49fa1b5c47decbc25b76518ac279cc1092f4f582c66a2decf779de70c03aa008a3f2bbdc525cbfd018bd77428153215d2b59518693e1cfadaaebc8da1dc9ce263ef13f84e26ed1bc9fe75cb9a0ebca5e9c7fa480160f22348d92f7cc587319940dc12861cf18ceb6285539d3e6a5af8908c420eced45b5bd7e5f4c5addbb4a2e528bda369fb4a9647e5ab43078a18beb1a908ea3adba9d5c5e884ecc867504ed2a2cc0eca98b761cc23cd96997eac49416a2dfa0b8b0a640c4ac56b032c"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_police={0x1134, 0x1a, 0x0, 0x0, {{0xb}, {0x1048, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE64={0xc, 0x8, 0x6}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x9b0, 0x2, 0x5, 0x8, 0x5, 0x4, 0x2, 0x80, 0x80, 0x1, 0xc4a, 0x10, 0xdbb, 0xffff8000, 0x40, 0x400, 0x6, 0x7fff, 0x8ec, 0x6, 0xdc, 0x5, 0x10000, 0x1, 0x1, 0x8, 0x0, 0x8, 0x4, 0x4, 0x401, 0x9, 0x7, 0xc64e, 0x5, 0x5, 0x5, 0x7, 0x10001, 0x6, 0xfa16924, 0x5, 0x8, 0x4, 0x1, 0x7, 0x5, 0x6, 0x0, 0x9, 0x9, 0x1d, 0x8, 0x76, 0xffffffff, 0x3, 0x0, 0x3f, 0x3, 0x400, 0x9, 0x7, 0x6, 0xbf6, 0x9, 0x400, 0x3f, 0x1, 0x8, 0x2, 0x200, 0x80000000, 0x7fff, 0x2, 0x200, 0x3, 0x323, 0x6, 0x6, 0x4, 0x3f, 0x2, 0x66f, 0x40000, 0x20, 0x14000, 0x8, 0x80000001, 0x9, 0x9, 0x80000000, 0x3, 0x2, 0xd591, 0xe16, 0x3, 0x6, 0x8, 0x3, 0x8, 0x8, 0x6, 0x400, 0x903, 0x2e9, 0x1000, 0x1fc703d5, 0x6108e75e, 0xfa3f, 0x1f, 0x8, 0x80000001, 0x6, 0xd40, 0x0, 0x4, 0x4, 0x7, 0x101, 0x9, 0x1, 0x8, 0x2, 0x81, 0x3, 0x4, 0x2e, 0xa2, 0x14000, 0x4, 0x3, 0x3, 0x3f, 0x101, 0x3, 0xffff551f, 0x0, 0xfffffffd, 0xa14, 0x68f2, 0x0, 0x80, 0x5b40, 0x3ff, 0x9, 0x1, 0x9, 0x3, 0x76, 0x400, 0x1000, 0x3, 0x5, 0x80, 0x31, 0x1, 0x1fffe0, 0x0, 0x5, 0x80000001, 0xffffffff, 0x264ed648, 0x6, 0x3, 0x800, 0x4, 0x5, 0x57, 0x8, 0x9, 0x7fffffff, 0x0, 0x8, 0x9, 0x3, 0x2, 0x7f, 0x8b4, 0x5, 0xfffffff8, 0xff800000, 0x8, 0x6, 0x7, 0x0, 0xee, 0x1, 0xfffffff9, 0x2, 0x0, 0x2, 0x413c, 0x4, 0x8, 0x71d, 0xb30, 0xe80e, 0x7, 0x40, 0x9, 0x81, 0x7, 0x1, 0xfffff920, 0x7, 0xfffffc01, 0x81, 0x8, 0x4, 0x6b, 0xc0000000, 0x3, 0x401, 0x9, 0x10000, 0x0, 0x9, 0x4, 0x10, 0x8, 0xfffffff9, 0x101, 0x5, 0x2, 0x1f, 0x9, 0x7, 0x401, 0x3, 0x8000, 0x2, 0x1f, 0x101, 0xfffffff9, 0x9, 0x1000, 0x3, 0xfffffffb, 0x2, 0x1, 0x81, 0x8000, 0x8, 0x2b, 0x6f, 0x3, 0x81, 0x6500, 0xe46, 0x4, 0x1, 0x3, 0x2, 0x7, 0x60000000, 0x3]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xe4}, @TCA_POLICE_RATE64={0xc, 0x8, 0xff}, @TCA_POLICE_RESULT={0x8, 0x5, 0x7}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x6, 0x8, 0x80, 0x9, 0x401, 0x800, 0x4, 0x7, 0x3, 0x0, 0x5, 0x7fff, 0x8, 0x2e, 0xfff, 0x5, 0x60, 0x1, 0x1, 0x4, 0x5, 0x40, 0x2, 0x5b, 0xc24, 0x3, 0xc, 0x1, 0x81, 0x80, 0x1, 0x583b, 0x5, 0x2, 0x5, 0x9, 0x8, 0x3, 0x7f, 0x7, 0x81, 0x0, 0x7, 0x3, 0xe3a4, 0x1ff, 0xfffffffc, 0x3, 0x1f, 0xadd7, 0x40f, 0x1, 0x8, 0x4, 0x6, 0x7, 0x4, 0x3, 0xa3ad, 0x8, 0x3f51, 0x9, 0x6, 0x5, 0x8, 0x8, 0xaed2e70, 0x2, 0x1, 0xdc6, 0x80000001, 0x3, 0x6, 0x3, 0x5, 0xe15, 0x1, 0x6, 0x1ff, 0x9, 0x4, 0x80000001, 0x4, 0x7ff, 0xa76, 0x1, 0x179, 0xe1dc, 0x120000, 0xdc, 0x0, 0x3, 0xfffffff8, 0x0, 0x7, 0x7f, 0x40, 0x7, 0x8, 0x2, 0x800, 0x2, 0x7, 0x5, 0x8, 0x1, 0x76f, 0x10000, 0x80000001, 0x9, 0x1, 0x5547, 0x2, 0x1ff, 0xfbe, 0xc0000000, 0x8001, 0xfff, 0x401, 0x8001, 0x78c, 0x1, 0x5, 0x3, 0xa2c, 0xff, 0x5, 0x6, 0x6, 0x9, 0xf60, 0x80000000, 0x400, 0xeb, 0x5, 0x9, 0x7f, 0x8000, 0xfedc, 0x3ff, 0xfffff800, 0x3, 0x200, 0x7, 0x6, 0x1, 0x8, 0x5, 0x0, 0x7, 0x97, 0x80000000, 0xc806, 0x4, 0xfffffffb, 0x0, 0x800, 0x40, 0x3, 0x51, 0xffff, 0x7fff, 0x6, 0x3d5, 0x4, 0x1f, 0x25b4, 0x1000, 0xfff, 0x1, 0x200, 0x4, 0x1, 0x9, 0xffff8001, 0x7, 0x485, 0x2, 0xfffff001, 0x6, 0x80, 0xdd0, 0xfffffff9, 0xc0000000, 0x0, 0x80000001, 0xffffffff, 0x46f, 0x8, 0xfffffffe, 0x4, 0x8, 0x8000, 0xfffffffb, 0x4, 0x6acb35e0, 0x1, 0x80000000, 0xfffff000, 0x2, 0xff, 0x0, 0x7, 0x2, 0x3, 0xa8, 0x8, 0x200, 0x3f, 0x2, 0x5, 0x8ee4, 0x3f, 0x4, 0x6, 0xa3d, 0x8803, 0xffffffff, 0x5, 0x0, 0x0, 0x8, 0x5965, 0x733d, 0x2, 0x1ff, 0x1000, 0xffff, 0x8, 0x6, 0x5, 0x4, 0xfc, 0x4, 0x6, 0x4, 0x81, 0x1, 0x1f, 0x6, 0x7, 0xfa9b, 0x8, 0x628c, 0x7fff, 0x3f, 0x93, 0x7fff, 0x8, 0x10001, 0x192, 0x101, 0x9, 0x85, 0x8, 0x7]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xa51b, 0xffffff01, 0x59, 0x200, 0xff, 0x6, 0xf0e6, 0x4aa, 0x3, 0x2b1, 0x80, 0x6, 0x10000, 0x0, 0x2, 0x40, 0x5, 0x1ff, 0x0, 0x0, 0x6, 0xc4, 0x4, 0x698abcc9, 0x6, 0xe68, 0x8, 0x7ff, 0x4, 0x9, 0x6, 0x4, 0x4, 0x5, 0x9, 0x8, 0x5, 0x3, 0x6, 0x57, 0x7fffffff, 0x4, 0x0, 0x1, 0x5b, 0xd95, 0x4, 0x9, 0x2, 0x3, 0x7, 0xe0, 0x4, 0x8, 0x7fff, 0x6, 0x8, 0xf22, 0xffff, 0x7, 0x1, 0x5, 0xffffffff, 0xacc4, 0x69ce14d4, 0x2, 0x401, 0x100, 0x0, 0x800, 0x6, 0x7, 0xfffffd18, 0x6, 0x0, 0x3c, 0xf69e, 0x2, 0x8, 0x4, 0x2, 0xfffffffb, 0x2, 0x4, 0x9, 0x1, 0x1ff, 0xffff, 0x2, 0xffff, 0x9, 0x2, 0x10000, 0x20, 0xfff, 0x4, 0xffff, 0x7, 0x5, 0x7, 0x93, 0xf1c80000, 0x4, 0x0, 0xffffffc1, 0x1, 0x5, 0x6, 0x4, 0x0, 0xed4, 0x2, 0x0, 0x7fff, 0x2550ee3e, 0x1, 0x786, 0x0, 0x3800000, 0x1, 0x3, 0xffffff80, 0x4, 0xfffffffa, 0x1, 0x4bd, 0x2, 0x400, 0x7, 0xd9, 0x6, 0x10000, 0x8000, 0x53, 0x9, 0x5, 0x10000, 0x5, 0x2, 0x7, 0x23c, 0x8, 0xce, 0x2, 0x7, 0xfff, 0x7, 0x7, 0x0, 0x4, 0x7f, 0x0, 0x1, 0xffff, 0x1ff, 0x400, 0x200, 0x800, 0x7, 0x10000, 0xfffffffc, 0x101, 0x2000000, 0x6, 0x7282, 0x2, 0x0, 0x0, 0x6, 0x2, 0x80, 0x0, 0x5, 0x3, 0x74a4, 0x4, 0x6, 0x800, 0x3, 0x0, 0x40000000, 0x8, 0x9, 0x3bec453a, 0x5, 0x6, 0x0, 0x3f, 0x3, 0x6, 0x3, 0x9, 0x7fffffff, 0x4, 0x3, 0x6, 0xffff, 0x7ff, 0x8, 0x1, 0x8000, 0x100, 0xfefc, 0x0, 0x800, 0x7, 0x7fffffff, 0x3c, 0x5a, 0x101, 0x6c, 0x2, 0x1ff, 0x3, 0x2, 0x3, 0x0, 0xca1, 0x7, 0x3, 0x1ff, 0x3, 0x64, 0x3, 0x5, 0x5, 0x7bb, 0xfa, 0x7, 0x9, 0xfff, 0x5, 0x5, 0x2, 0x9, 0x10000, 0x5a, 0x7, 0x569, 0x200, 0x100, 0x1, 0x8, 0x10001, 0x2, 0x4, 0x8, 0x7, 0xaf33, 0xffff, 0x5, 0x2, 0x80000001, 0x5, 0x5, 0x42e31cf9]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x4}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x4, 0x8, 0x2, 0x5, 0x8000, 0x9, 0x44c, 0x1, 0xc83, 0x8, 0x20, 0x5, 0x9, 0x1, 0x1, 0x80, 0x7, 0x0, 0x100, 0x4, 0x1, 0x298f, 0x400, 0x3, 0x3, 0x80, 0x4, 0x9a44, 0xfffffffc, 0x3f01, 0x8, 0xcd, 0x2, 0x5ad8, 0x2, 0x7ff, 0x2bc, 0x80, 0x6, 0x7ff, 0x7ff, 0x2, 0x1ff, 0x8, 0xc6, 0x7f, 0xd, 0x10001, 0x0, 0x6, 0x5, 0x59, 0x7, 0x9, 0x3f, 0x2, 0xfffffffa, 0x8, 0x8, 0xfffffff9, 0xffff, 0x1, 0x9ec, 0x8, 0x200, 0x6, 0x0, 0x1, 0x2, 0x7, 0x0, 0x2, 0x1, 0x66, 0x1, 0x8, 0x7f, 0x3, 0x5, 0x9, 0x80, 0x80, 0x1000, 0x80000001, 0x1, 0xffffffe0, 0x100, 0x20, 0xfb, 0x101, 0x3, 0x80000001, 0x400, 0x80, 0x10000, 0x9, 0x2, 0x1000, 0x9, 0x7fff, 0xb967, 0x6ac, 0x5, 0x200, 0x0, 0x2, 0x2, 0x7, 0x4, 0x0, 0x70, 0x10001, 0x3a, 0x8, 0xffff, 0x8, 0x800, 0x7fff, 0xa33, 0x7f, 0xde5f, 0x9, 0xffffffff, 0xffffff81, 0x100, 0x100, 0x6, 0x7, 0xaf000000, 0x5c, 0x1ff, 0x2eb, 0x2, 0x7fff, 0x2, 0xfb3, 0x2, 0xffffffff, 0x7, 0x8, 0x2, 0x8, 0xa27e, 0x4, 0xffffff90, 0x5, 0x4, 0x6, 0xca, 0x3, 0xa3, 0x4ab4, 0x6, 0x7d, 0x4, 0x0, 0x0, 0xb4, 0x80, 0x1, 0x1f, 0x7ff, 0x6, 0x100, 0x7, 0x0, 0x3, 0x7fff, 0x0, 0x7f, 0x40000000, 0x6, 0x10000, 0xcdc0, 0x933f, 0x7, 0x2, 0x1000, 0x1, 0xf0000000, 0x4, 0x7fff, 0xe2, 0xd55, 0x0, 0x6, 0x20, 0xd9f, 0x4, 0x6, 0x6, 0x788, 0xffffffff, 0x5, 0x7b5, 0x5, 0xd0, 0x8, 0x81, 0x5, 0x0, 0x80, 0x56a4, 0x99, 0x20, 0x4, 0x4, 0xfffffc6b, 0x3, 0x8, 0x1ff, 0x5, 0x1, 0x710a, 0x5, 0x80, 0x101, 0x4, 0xd3a2, 0x80000001, 0x5, 0x6, 0x6, 0x6, 0xfff, 0x7ff, 0x5, 0xfff, 0x7fff, 0x7, 0xf0000000, 0x4, 0x2, 0x5, 0x6, 0x9, 0x0, 0x6, 0x8, 0x7b, 0x11fd, 0x5, 0x0, 0x8, 0x3, 0x3, 0x400, 0x96b, 0x7, 0x5, 0x3, 0x0, 0x9, 0x7c3, 0x5, 0x80]}]]}, {0xc4, 0x6, "b46f2165b06c639d0537883b440e56365d0b075fcec1a23b2ae4e90fe4e0b4ded1d6e6227913113aaf65feb1a4a3a7bc97d937508eca279c42b76118ffd1cc6eedcf3b1db570137ffe6a1e29538c5de02d9b663f63d1d15b2358178f47275410fb9a7f67903608aadd7194a1475965a2321e06719d51f0052411573785719ffeb0c51c894449d1de031720e579f7c495f84f3e2ba6f8a3ee4ef4923ffec338dcaa42d589752359a6ae1c1b677499194e6040f47c04ab85d3ad2327f56c4b1086"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_simple={0x17c, 0xd, 0x0, 0x0, {{0xb}, {0x9c, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x5, 0x3, '\x00'}, @TCA_DEF_DATA={0xa, 0x3, 'team0\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x5, 0x67, 0x1, 0x0, 0x6}}, @TCA_DEF_DATA={0x6, 0x3, '(\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x800, 0x6, 0x1, 0x6, 0x6}}, @TCA_DEF_PARMS={0x18, 0x2, {0x7fff, 0xb34, 0xffffffffdffffffc, 0x4, 0x3}}, @TCA_DEF_DATA={0x10, 0x3, '\\-*-)]}4+w-\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x0, 0x9, 0x2, 0xf4, 0x8}}, @TCA_DEF_DATA={0xa, 0x3, 'team0\x00'}]}, {0xb6, 0x6, "46d9f1bb2cd1141f7086424973ed931f34322c9714f3ac49603f8705bcc0a3685ab633a53026a666025fe695aed73563c8d4057efa33aa146967c4d938753664d7a07a4c98180d795a45da7dec5c314ff8adac456c186ff767caedc2e530d029fce94a69e7a4cfa3d3ba89060fe7d03976f159ca82d62cc850d7cb54cae9cb0e11be362e6a9b268fd336eb18c7016ad4313c8b2b7c38ad8846fafbea231bf4cc9381aaa4e6275520c8ddcde66ec18e268808"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}, @TCA_RSVP_ACT={0xaf8, 0x6, [@m_skbedit={0x104, 0x20, 0x0, 0x0, {{0xc}, {0x54, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x373b, 0x7, 0x20000000, 0x6, 0x1f}}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0xfffffffc}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x401, 0x5, 0x2, 0x19a0, 0x1f}}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x8}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x6}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x6}]}, {0x85, 0x6, "755ec42d380402883fb3a3693bb006319454f5601cac9ff52f7a2b4c3f315cfe13bbb45923eaaff056aefaa1b180625f650b78b519343b29630c589ab7cc94ee851fb56c983f8ebe1b6916c1dc2dc7175b5c4b732d2308b1b93d1c20039915b9c94a36bf3337b0621fd09aa8229beef66a291a7526cf25de61bca4ec80e70ac919"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_sample={0xe8, 0x11, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x40}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x1ff}, @TCA_SAMPLE_RATE={0x8, 0x3, 0xc0cc}, @TCA_SAMPLE_TRUNC_SIZE={0x8}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x6}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x9}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x3}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x3}]}, {0x7c, 0x6, "b3a8514738451c3d32c86f3edf285a6719f0fe4d23720e81fd1657cfcf3b63c1eb0954c9f5ff35b680e80ce29ab6b54760e480c951b2503d43a979e6e32b346a8973e9c449a59127e69110ed306c8f006c4d85a5b8e903f5e7031d0d7dbfc407a2b88c9d1a707ca6ff0250d4c212a313b31d6303db841ca8"}, {0xc}, {0xc, 0x8, {0x2, 0x1}}}}, @m_sample={0x84, 0x20, 0x0, 0x0, {{0xb}, {0x14, 0x2, 0x0, 0x1, [@TCA_SAMPLE_RATE={0x8, 0x3, 0xd096}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x5}]}, {0x47, 0x6, "7fc38967fd144a8d03e72cf42745abd15c90e5113245040fd5ec1d8178a2fa248a33afe33e1d11e6c4b8616ee1091a378fd449315a16dfc7bedc71abb749b1eda0e62b"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_ife={0x110, 0xa, 0x0, 0x0, {{0x8}, {0x60, 0x2, 0x0, 0x1, [@TCA_IFE_METALST={0x10, 0x6, [@IFE_META_SKBMARK={0x8, 0x1, @val=0xd7}, @IFE_META_SKBMARK={0x4, 0x1, @void}]}, @TCA_IFE_TYPE={0x6, 0x5, 0xf5}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x135, 0x0, 0x4, 0x80}, 0x1}}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x8, 0xcd73, 0x2, 0x401, 0x5}}}, @TCA_IFE_SMAC={0xa, 0x4, @local}]}, {0x8c, 0x6, "bb5614a152decc1bb39b59c6fce91223bb70a1718ba53b6775e8e51f13a6675033ccb6a6d727ffaedd5f8d34a8306dec9f7d4aa05378b11cb84183b8e23842af2a08803dbd73212460a9b276dfd7bdde472ece1468845e236d08583a8082e03792acab1ac9506f4b93d044abc35bb22e6b1cb7bbf83248785666494f5eb90ea78a576047f7544599"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x4}}}}, @m_vlan={0x134, 0x13, 0x0, 0x0, {{0x9}, {0x90, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x7e5}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x5, 0x64, 0x6, 0x20000, 0x6}, 0x2}}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x7}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x145}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0xffff8000, 0xc6, 0x3, 0x9, 0xfffffffc}, 0x2}}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0xe40}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x1, 0x4, 0x8, 0x6, 0x5}, 0x3}}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x7}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x7}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0xc13}]}, {0x7c, 0x6, "2f14171b7d89937297d6cb9e76f4631dfad56da8bf5c803b626a6fca5e7c2a57af7ccce86a4b9ffcaf0cbf3d149321fd12ce88ae2bd4ea409d89bad456012d754c37653211c20cabf63d7b8c348373cb6a09529ddc0adc0b346b20a3b0697f88236e60ef55f5bf85ebfe0eb432505fcb2512a01da84cddc7"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x3}}}}, @m_nat={0x22c, 0x12, 0x0, 0x0, {{0x8}, {0x194, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x3, 0x5, 0x8, 0x0, 0x5}, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xffffffff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x9, 0x3, 0x0, 0x9, 0x4f7}, @empty, @broadcast, 0xffffff00, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x7, 0x1430, 0x5, 0x6, 0x3}, @multicast1, @multicast1, 0xffffff00}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xff, 0x2a56, 0x7, 0x4a, 0x9}, @remote, @local, 0xffffffff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x2, 0x800, 0x4, 0x0, 0xff}, @dev={0xac, 0x14, 0x14, 0x30}, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x400, 0xfff, 0x20000000, 0x1, 0xcdb}, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xffffff00}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x1ff, 0x3fb, 0xffffffffffffffff, 0x80, 0x5}, @multicast1, @empty, 0xff000000, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x100, 0x101, 0x0, 0x40, 0xfffff800}, @multicast1, @loopback, 0xffffff00}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x5387, 0x80, 0x6, 0x200, 0x3}, @multicast1, @remote, 0xffffffff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x2c, 0x4, 0x10000000, 0x6, 0x1}, @empty, @local}}]}, {0x72, 0x6, "e8f9083d8fb061c84adc5456a0e20f049dba5f3ee3bde0ff5ab2a1a053e8efab5f34b545af88cb6e9c4b584b14dcdc7c0e965451bbe5ee0bb987581f625ce07f773b0e82794c7f26e03b512154db7218364338c51dbb6bb7566189d912d1abc8018b23513fef8e2b547a6b41baf1"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3}}}}, @m_xt={0x1c0, 0xd, 0x0, 0x0, {{0x7}, {0xdc, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8, 0x2, 0x3}, @TCA_IPT_TARG={0xb8, 0x6, {0x81, 'mangle\x00', 0x0, 0x7ff, "5e52f7285592448ba43e764d8c74f620c9690fc5b9c90d387ef3abf0c9134d872ff4f762783cba5b1e4748f8c2d179d29d16a5274add94b738af3c0dff664fd5c8bbe3ad4e6c24cc8fe1e7b36749a1200ac4245ee71aae178d82f41339ca7feb44c9d797d52034a4bbee3d03d5c9985919e96bb730198c1270f64d24b693e4f24dadafae3a529ece90eb341775f1"}}, @TCA_IPT_INDEX={0x8, 0x3, 0x6}, @TCA_IPT_INDEX={0x8, 0x3, 0x1}, @TCA_IPT_INDEX={0x8, 0x3, 0x81}]}, {0xbf, 0x6, "fef4cbea263d994e24deaeafb64eaa947b2b0a2fd0163b1b7c634d45e18b34838abdd2fbead488a73cc1d9c0a0023a1839f6480c840d6b08020cdd5bf17f720a29c81928eb98fbf60e8908723f26b51be7373ccc520b7b78a062e825500fefd7dfbac8deb24e547fecf79b05b09b8988048210b8e22e8e776410bc24bbab4fd873d87e13ca461f9b3720cae7d67b3c652c0724d5c336d75b1a3e125b147140e667d9d89c20c46ff3e21f7da107c9c8eb29774cb7301feb86507272"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_mpls={0x108, 0x1a, 0x0, 0x0, {{0x9}, {0x58, 0x2, 0x0, 0x1, [@TCA_MPLS_TC={0x5, 0x6, 0x5}, @TCA_MPLS_BOS={0x5}, @TCA_MPLS_LABEL={0x8, 0x5, 0x99fcb}, @TCA_MPLS_BOS={0x5}, @TCA_MPLS_PROTO={0x6, 0x4, 0x88fb}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x9, 0x3, 0x10000000, 0x1, 0x7}, 0x2}}, @TCA_MPLS_TC={0x5, 0x6, 0x5}, @TCA_MPLS_BOS={0x5, 0x8, 0x1}]}, {0x85, 0x6, "e1a6e6c3e40c6fb7e158505031bcf43095c1a35095ed84e4b7d2fa66525499c2ddec3e42c1888cefda34482be7afb1191aca99c8d2a34344ca70d28bfbfea9ed3e2e60fc27a05805bcba6a4ff6759a25ff9e395f012d2e64501432596c0916fdea9155393c06813e58697afc633ca35c44c3b00b7537a206eaf83790f49040dffc"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_tunnel_key={0x84, 0x9, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0x8}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, {0x35, 0x6, "8cebf4b13520a674f321ef620c3d9f92c51875f237c79e85bbcf7b23c2c28157b6e38840c45a4d795d8a737c5527c6b9f7"}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}, @m_simple={0xc8, 0xb, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x5727, 0x8, 0x2, 0x3, 0x4}}]}, {0x82, 0x6, "5c1d5275478489fcdf59013db47c82e43d0bce5f1da5a085ef1465f21f350fb5bd7a37201fe7f334b79c2f1e407ec1a122180277cb0c7d4428dc460423a21d30ac4b79f8034da9b81b94df5d80748ab0893777e8363d083b0f4f457b039661d1f63d6bf4bf2fd8ae0a9a3c14d1b1837f756bc1b5b9886752da5eb57ea15f"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0x212c}, 0x1, 0x0, 0x0, 0x20004000}, 0x4020804) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) setsockopt$inet6_int(r6, 0x29, 0x4e, &(0x7f0000000180)=0x40, 0x4) (async) setsockopt$inet6_int(r6, 0x29, 0x4e, &(0x7f0000000180)=0x40, 0x4) recvfrom$inet6(r0, &(0x7f0000000000)=""/114, 0xfffffffffffffd1b, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000040)) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="00281c80", @ANYRES16=r0, @ANYBLOB="ff"], 0x34}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="f4997c3794"], 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="58ad000010", 0x5, 0x0, 0x0, 0x0) socket$inet6(0x10, 0x3, 0x0) (async) r7 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r7, &(0x7f0000000000)='s', 0x10a73, 0x81e, 0x0, 0x4b6ae4f95a5de35b) 06:26:35 executing program 1: add_key$fscrypt_provisioning(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) [ 3422.437015][T31422] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=31422 comm=syz-executor.4 [ 3422.454721][T31427] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=31427 comm=syz-executor.4 [ 3422.495135][T31421] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 3422.539442][T31422] netlink: 'syz-executor.4': attribute type 41 has an invalid length. [ 3422.547797][T31422] netlink: 41311 bytes leftover after parsing attributes in process `syz-executor.4'. 06:26:39 executing program 0: r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$cgroup_subtree(r0, &(0x7f00000003c0)=ANY=[], 0x8) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x0, 0x1, 0x0, 0x0, 0x4, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x3) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) 06:26:39 executing program 1: r0 = add_key$keyring(&(0x7f0000000340), &(0x7f0000000380)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) add_key$user(&(0x7f00000016c0), 0x0, &(0x7f0000001740)=':', 0x1, r0) 06:26:39 executing program 2: add_key$fscrypt_provisioning(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) request_key(&(0x7f00000005c0)='dns_resolver\x00', &(0x7f0000000600)={'syz', 0x1}, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$nvram(0xffffffffffffff9c, 0x0, 0x200000, 0x0) syz_clone(0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000003240), 0x0, 0x0) 06:26:39 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) recvmsg(r0, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) sendto$inet6(r0, &(0x7f00000001c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0) recvmsg(r0, &(0x7f00000003c0)={0x0, 0x3, 0x0}, 0x0) recvmsg(r0, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) recvfrom$inet6(r0, &(0x7f0000000000)=""/114, 0xfffffffffffffd1b, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000040)) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="00281c80", @ANYRES16=r0, @ANYBLOB="ff"], 0x34}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="f4997c3794"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="58ad000010", 0x5, 0x0, 0x0, 0x0) r1 = socket$inet6(0x10, 0x3, 0x0) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) ioctl$FICLONERANGE(r2, 0x4020940d, &(0x7f0000000140)={{r1}, 0x101, 0x3d, 0x2}) sendto$inet6(r1, &(0x7f0000000000)='s', 0x10a73, 0x81e, 0x0, 0x4b6ae4f95a5de35b) 06:26:39 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000005c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e24, @local}, 0x10) writev(r0, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) recvmmsg(r0, &(0x7f0000003e40)=[{{&(0x7f0000000100)=@phonet, 0x80, 0x0, 0x0, &(0x7f00000024c0)=""/4096, 0x1000, 0x20000}}, {{0x0, 0x80100200, 0x0, 0x0, &(0x7f00000035c0)=""/241, 0xf1}}, {{&(0x7f00000036c0)=@un=@abs, 0x80, &(0x7f0000003780)=[{&(0x7f0000003740)=""/4, 0xfffffd07}], 0x1, &(0x7f00000037c0)=""/236, 0xec}}, {{&(0x7f00000038c0)=@l2tp6={0xa, 0x0, 0x0, @private1}, 0x80, &(0x7f0000003bc0)=[{0x0}, {&(0x7f0000003a00)=""/190, 0xbe}, {&(0x7f0000003ac0)=""/131, 0x83}, {0x0}], 0x4, &(0x7f0000003c00)=""/73, 0x49}}, {{&(0x7f0000003c80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, 0x0, 0x0, &(0x7f0000003e00)=""/48, 0x30}}], 0x5, 0x40000121, 0x0) 06:26:39 executing program 5: r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e24, @local}, 0x10) writev(r0, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) recvmmsg(r0, &(0x7f0000003e40)=[{{&(0x7f0000000100)=@phonet, 0x80, 0x0, 0x0, &(0x7f00000024c0)=""/4096, 0x1000, 0xf401}}, {{0x0, 0x80100200, 0x0, 0x0, &(0x7f00000035c0)=""/241, 0xf1}}, {{&(0x7f00000036c0)=@un=@abs, 0x80, &(0x7f0000003780)=[{&(0x7f0000003740)=""/4, 0xfffffd07}], 0x1, &(0x7f00000037c0)=""/236, 0xec}}, {{&(0x7f00000038c0)=@l2tp6={0xa, 0x0, 0x0, @private1}, 0x80, &(0x7f0000003bc0)=[{0x0}, {&(0x7f0000003a00)=""/190, 0xbe}, {&(0x7f0000003ac0)=""/131, 0x83}, {0x0}], 0x4, &(0x7f0000003c00)=""/73, 0x49}}, {{&(0x7f0000003c80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, 0x0, 0x0, &(0x7f0000003e00)=""/48, 0x30}}], 0x5, 0x40000121, 0x0) 06:26:39 executing program 1: syz_clone(0x30006000, &(0x7f0000000000), 0x0, &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0)="94d9243f836803d22e470ea9249e3f55a9b943a3acd49dcf85ed401104c688cf2c30ca5f3d64a878c8fde4d56eedbf9d2799562311d5dcf5c4c2a05b815a6d6299457ffc9e37cd852bddf7f3e6f5f2e4c784d0e5af3845ccdfcee6f794077157ecc4c20a97fef81b40e2778c1b5964015c290f462dd3337830d21e4af4c2fb") r0 = syz_clone(0x1020000, &(0x7f0000000180)="4959d6d42ed245995c1e0e9d399280f1fa3a8aa1e5852f3642486939ebe60c08db07e52fdd3ddeaf267f9181f8330d43026e4a24b592de8b9d19aaa84e9930d15549de56b35e335397db544e2b274637842a2523ce437a05cc589772103d43e96960a04355d8bc33ead3dc1447d48500c1df467354b2d54309a405e79bb6696b8e7e40b0d386a16eb36e39589ca2f038928d3b4b269154b32dc955d43c921246c3ba2b0a9e7e101f73e08282cc7c358a9642ee6372272eb4048ae72a3d92b1fc46db2d180c92ff3913d75a7318f01f3814125a359df46334cf13fc3efc287f8e98f5a365c2bb172604929902a8", 0xed, &(0x7f0000000000), &(0x7f0000000280), &(0x7f00000002c0)="4082b760e86caa1f110bd015b3834b0672b6a75b64048ad0e189") getpgid(r0) r1 = syz_clone(0x48200000, &(0x7f0000000300)="dd2da94c8415bbc0e7f3c3dafd1310258f70ded91477ece7034d66d53b3b3cd6ba18a0", 0x23, &(0x7f0000000340), &(0x7f0000000380), &(0x7f00000003c0)="12f5a3e25226e8d6d819f96e36fdc2a7539833a14157787be7814b580c6120eae66f9efc603abb31b89039e22037e5cb204ccba328dcb7a49818b9353906ac25413aaa694a7afbf2ab5dc00169879a81934a12bdc8176f9582abe81d0bc6056b1d44db497529a5202be6572481cef4434d3c19cc710add8053d9732611551b23e9e6481eba37cf9d7b142b12dc07fe95296198297e9202890b1fdde9850cf25ab381cd556474984f725f2df8b3b5e3ae7035bb3b9e1252ef1edbceb27deab6156a1300105650d5e67a09c163cba0676f") sched_rr_get_interval(r1, &(0x7f00000004c0)) 06:26:39 executing program 2: openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000480), 0x22241, 0x0) ioctl$TUNSETVNETBE(r0, 0x400454de, 0x0) 06:26:39 executing program 2: request_key(&(0x7f00000005c0)='dns_resolver\x00', &(0x7f0000000600)={'syz', 0x1}, 0x0, 0x0) [ 3426.509271][ T23] audit: type=1400 audit(1679379999.622:403): avc: denied { ioctl } for pid=31445 comm="syz-executor.2" path="/dev/nvram" dev="devtmpfs" ino=98 ioctlcmd=0x54de scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 3426.539218][T31437] netlink: 'syz-executor.4': attribute type 41 has an invalid length. [ 3426.547734][T31437] netlink: 44123 bytes leftover after parsing attributes in process `syz-executor.4'. 06:26:39 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000003240), 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000003300)='./file0\x00', &(0x7f0000003340), 0x0, &(0x7f00000033c0)) 06:26:39 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) recvmsg(r0, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) (async) sendto$inet6(r0, &(0x7f00000001c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0) recvmsg(r0, &(0x7f00000003c0)={0x0, 0x3, 0x0}, 0x0) (async) recvmsg(r0, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x0) (async) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) (async) recvfrom$inet6(r0, &(0x7f0000000000)=""/114, 0xfffffffffffffd1b, 0x0, 0x0, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000040)) (async) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="00281c80", @ANYRES16=r0, @ANYBLOB="ff"], 0x34}}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="f4997c3794"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="58ad000010", 0x5, 0x0, 0x0, 0x0) r1 = socket$inet6(0x10, 0x3, 0x0) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) (async) ioctl$FICLONERANGE(r2, 0x4020940d, &(0x7f0000000140)={{r1}, 0x101, 0x3d, 0x2}) (async) sendto$inet6(r1, &(0x7f0000000000)='s', 0x10a73, 0x81e, 0x0, 0x4b6ae4f95a5de35b) [ 3426.563627][T31437] A link change request failed with some changes committed already. Interface ip6tnl0 may have been left with an inconsistent configuration, please check. 06:26:39 executing program 2: add_key$fscrypt_provisioning(&(0x7f00000001c0), 0x0, 0x0, 0x0, 0xfffffffffffffffe) 06:26:46 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder0\x00', 0x0, 0x0) r1 = epoll_create(0x9) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)) 06:26:46 executing program 0: r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$cgroup_subtree(r0, &(0x7f00000003c0)=ANY=[], 0x8) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x0, 0x1, 0x0, 0x0, 0x4, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x3) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) 06:26:46 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @timestamp, @window, @mss, @window, @window], 0x200002d4) bind$inet(0xffffffffffffffff, 0x0, 0x0) 06:26:46 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) recvmsg(r0, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) sendto$inet6(r0, &(0x7f00000001c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0) recvmsg(r0, &(0x7f00000003c0)={0x0, 0x3, 0x0}, 0x0) (async, rerun: 64) recvmsg(r0, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x0) (async, rerun: 64) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) (async) recvfrom$inet6(r0, &(0x7f0000000000)=""/114, 0xfffffffffffffd1b, 0x0, 0x0, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000040)) (async, rerun: 64) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="00281c80", @ANYRES16=r0, @ANYBLOB="ff"], 0x34}}, 0x0) (async, rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="f4997c3794"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="58ad000010", 0x5, 0x0, 0x0, 0x0) (async) r1 = socket$inet6(0x10, 0x3, 0x0) (async, rerun: 32) r2 = socket(0x1, 0x803, 0x0) (rerun: 32) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) (async) ioctl$FICLONERANGE(r2, 0x4020940d, &(0x7f0000000140)={{r1}, 0x101, 0x3d, 0x2}) (async) sendto$inet6(r1, &(0x7f0000000000)='s', 0x10a73, 0x81e, 0x0, 0x4b6ae4f95a5de35b) 06:26:46 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000005c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e24, @local}, 0x10) writev(r0, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) recvmmsg(r0, &(0x7f0000003e40)=[{{&(0x7f0000000100)=@phonet, 0x80, 0x0, 0x0, &(0x7f00000024c0)=""/4096, 0x1000, 0x21080}}, {{0x0, 0x80100200, 0x0, 0x0, &(0x7f00000035c0)=""/241, 0xf1}}, {{&(0x7f00000036c0)=@un=@abs, 0x80, &(0x7f0000003780)=[{&(0x7f0000003740)=""/4, 0xfffffd07}], 0x1, &(0x7f00000037c0)=""/236, 0xec}}, {{&(0x7f00000038c0)=@l2tp6={0xa, 0x0, 0x0, @private1}, 0x80, &(0x7f0000003bc0)=[{0x0}, {&(0x7f0000003a00)=""/190, 0xbe}, {&(0x7f0000003ac0)=""/131, 0x83}, {0x0}], 0x4, &(0x7f0000003c00)=""/73, 0x49}}, {{&(0x7f0000003c80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, 0x0, 0x0, &(0x7f0000003e00)=""/48, 0x30}}], 0x5, 0x40000121, 0x0) 06:26:46 executing program 5: r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e24, @local}, 0x10) writev(r0, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) recvmmsg(r0, &(0x7f0000003e40)=[{{&(0x7f0000000100)=@phonet, 0x80, 0x0, 0x0, &(0x7f00000024c0)=""/4096, 0x1000, 0xff00}}, {{0x0, 0x80100200, 0x0, 0x0, &(0x7f00000035c0)=""/241, 0xf1}}, {{&(0x7f00000036c0)=@un=@abs, 0x80, &(0x7f0000003780)=[{&(0x7f0000003740)=""/4, 0xfffffd07}], 0x1, &(0x7f00000037c0)=""/236, 0xec}}, {{&(0x7f00000038c0)=@l2tp6={0xa, 0x0, 0x0, @private1}, 0x80, &(0x7f0000003bc0)=[{0x0}, {&(0x7f0000003a00)=""/190, 0xbe}, {&(0x7f0000003ac0)=""/131, 0x83}, {0x0}], 0x4, &(0x7f0000003c00)=""/73, 0x49}}, {{&(0x7f0000003c80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, 0x0, 0x0, &(0x7f0000003e00)=""/48, 0x30}}], 0x5, 0x40000121, 0x0) 06:26:46 executing program 2: add_key$fscrypt_provisioning(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x0}, &(0x7f0000000180)={0x0, 0x0, @c}, 0x29, 0x0) 06:26:46 executing program 2: add_key(&(0x7f0000000000)='dns_resolver\x00', 0x0, &(0x7f0000000080)="23a7", 0x2, 0xfffffffffffffffe) 06:26:46 executing program 4: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, r0) add_key(&(0x7f00000000c0)='asymmetric\x00', 0x0, &(0x7f0000000080)='?S', 0x2, r1) keyctl$setperm(0x5, r1, 0x12000005) r2 = socket$inet6(0x10, 0x3, 0x101) recvmsg(r2, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) socket$inet6(0xa, 0x800, 0x6778) sendto$inet6(r3, &(0x7f0000000680)="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", 0x19d, 0x0, 0x0, 0x0) recvmsg(r2, &(0x7f00000003c0)={0x0, 0x3, 0x0}, 0x0) recvmsg(r2, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x0) recvmsg(r2, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_misc(r4, &(0x7f0000000040)=ANY=[], 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) fdatasync(r4) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockopt$SO_BINDTODEVICE(r5, 0x1, 0x2a, &(0x7f0000000000), 0x20000000) recvfrom$inet6(r2, &(0x7f0000000000)=""/114, 0xfffffffffffffd1b, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000040)) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="002820adbece35af68befd2a0dec2c5bc2491c80", @ANYRES16=r2, @ANYBLOB="ff"], 0x34}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="f4997c3794"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="58ad000010", 0x5, 0x0, 0x0, 0x0) r6 = socket$inet6(0x10, 0x3, 0x1) sendto$inet6(r6, &(0x7f0000000000)='s', 0x10a73, 0x81e, 0x0, 0x4b6ae4f95a5de35b) 06:26:46 executing program 2: add_key$fscrypt_provisioning(&(0x7f00000001c0), 0x0, 0x0, 0x0, 0xfffffffffffffffe) openat$nvram(0xffffffffffffff9c, &(0x7f0000000940), 0x0, 0x0) syz_clone(0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0) 06:26:46 executing program 4: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, r0) add_key(&(0x7f00000000c0)='asymmetric\x00', 0x0, &(0x7f0000000080)='?S', 0x2, r1) (async) keyctl$setperm(0x5, r1, 0x12000005) (async) r2 = socket$inet6(0x10, 0x3, 0x101) recvmsg(r2, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) (async) socket$inet6(0xa, 0x800, 0x6778) (async) sendto$inet6(r3, &(0x7f0000000680)="1c00000900000000000000000049b23e9b200a04000000c00000000125c338a00ab74af6ec6db19aeec41ab4e3668b4c050000006f8f8ef0446e3f61283a06d4832c593dc8b1d7ee727257010000002633a8e37df667a61486b66114b1cc73bad191ead25a3b5adfc2fc188b8a71a7bafd9149d38f672ca6fdad2c9b81872187fdd7f8927807d25b73346f119e3bedd5f8197d3a3666aa3d80dfc8c8a28ec87b0fb2f24c03a34d8e988ab460ade24b7d950cb901ba8bb76b949672ea4ea396e4e66f6f956bfc158c9dec5995dc3be859c19e2f373bf88c3540ace5b7c504c73df44fa2adff3970585a27adb297809cc7d6628ef528a03236902d6678ef1c0d3b312ca021ad8f13b9847cab2a0be7b3bedbe99ab221f78c863ac0b66b0a206df2dfb7c58938106138691ea61369d75e8b3e7e873cfb806425b85eb6c907b8d4eb2d3b976ac8a63af0ad0a7700e9d81cd56286c0c2f0defff8393b681cc848f32aca35692ee83a116c71b5ff00b23fbcc889fbb9213032dac788e76bfb97b9715060feb2ebff464417b1b440d96b3ce0dae6b76946792a9132d9b406aa60", 0x19d, 0x0, 0x0, 0x0) recvmsg(r2, &(0x7f00000003c0)={0x0, 0x3, 0x0}, 0x0) (async) recvmsg(r2, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x0) recvmsg(r2, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_misc(r4, &(0x7f0000000040)=ANY=[], 0x4) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) (async) fdatasync(r4) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockopt$SO_BINDTODEVICE(r5, 0x1, 0x2a, &(0x7f0000000000), 0x20000000) recvfrom$inet6(r2, &(0x7f0000000000)=""/114, 0xfffffffffffffd1b, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000040)) (async) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="002820adbece35af68befd2a0dec2c5bc2491c80", @ANYRES16=r2, @ANYBLOB="ff"], 0x34}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="f4997c3794"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="58ad000010", 0x5, 0x0, 0x0, 0x0) (async) r6 = socket$inet6(0x10, 0x3, 0x1) sendto$inet6(r6, &(0x7f0000000000)='s', 0x10a73, 0x81e, 0x0, 0x4b6ae4f95a5de35b) 06:26:46 executing program 2: r0 = syz_genetlink_get_family_id$fou(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000240)={0x0, 0x30000, &(0x7f0000000000)={&(0x7f0000000100)={0x2c, r0, 0x1, 0x0, 0x0, {}, [@FOU_ATTR_PEER_PORT={0x6}, @FOU_ATTR_PEER_V4={0x8, 0x8, @remote}, @FOU_ATTR_TYPE={0x5, 0x4, 0x2}]}, 0x2c}}, 0x0) 06:26:46 executing program 2: openat$tun(0xffffffffffffff9c, &(0x7f0000003240), 0x0, 0x0) 06:26:53 executing program 0: r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$cgroup_subtree(r0, &(0x7f00000003c0)=ANY=[], 0x8) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x0, 0x1, 0x0, 0x0, 0x4, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x3) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) 06:26:53 executing program 4: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f00000001c0), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, r0) (async) r1 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, r0) add_key(&(0x7f00000000c0)='asymmetric\x00', 0x0, &(0x7f0000000080)='?S', 0x2, r1) keyctl$setperm(0x5, r1, 0x12000005) r2 = socket$inet6(0x10, 0x3, 0x101) recvmsg(r2, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) socket(0x1, 0x803, 0x0) (async) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) (async) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) socket$inet6(0xa, 0x800, 0x6778) sendto$inet6(r3, &(0x7f0000000680)="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", 0x19d, 0x0, 0x0, 0x0) (async) sendto$inet6(r3, &(0x7f0000000680)="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", 0x19d, 0x0, 0x0, 0x0) recvmsg(r2, &(0x7f00000003c0)={0x0, 0x3, 0x0}, 0x0) recvmsg(r2, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x0) recvmsg(r2, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) (async) recvmsg(r2, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_misc(r4, &(0x7f0000000040)=ANY=[], 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) fdatasync(r4) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockopt$SO_BINDTODEVICE(r5, 0x1, 0x2a, &(0x7f0000000000), 0x20000000) (async) getsockopt$SO_BINDTODEVICE(r5, 0x1, 0x2a, &(0x7f0000000000), 0x20000000) recvfrom$inet6(r2, &(0x7f0000000000)=""/114, 0xfffffffffffffd1b, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000040)) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="002820adbece35af68befd2a0dec2c5bc2491c80", @ANYRES16=r2, @ANYBLOB="ff"], 0x34}}, 0x0) (async) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="002820adbece35af68befd2a0dec2c5bc2491c80", @ANYRES16=r2, @ANYBLOB="ff"], 0x34}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="f4997c3794"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="58ad000010", 0x5, 0x0, 0x0, 0x0) r6 = socket$inet6(0x10, 0x3, 0x1) sendto$inet6(r6, &(0x7f0000000000)='s', 0x10a73, 0x81e, 0x0, 0x4b6ae4f95a5de35b) (async) sendto$inet6(r6, &(0x7f0000000000)='s', 0x10a73, 0x81e, 0x0, 0x4b6ae4f95a5de35b) 06:26:53 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) io_setup(0x5, &(0x7f00000001c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000800)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x9}]) 06:26:53 executing program 1: pipe2$watch_queue(&(0x7f0000000900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, 0x0, 0x0) 06:26:53 executing program 5: r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e24, @local}, 0x10) writev(r0, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) recvmmsg(r0, &(0x7f0000003e40)=[{{&(0x7f0000000100)=@phonet, 0x80, 0x0, 0x0, &(0x7f00000024c0)=""/4096, 0x1000, 0x10380}}, {{0x0, 0x80100200, 0x0, 0x0, &(0x7f00000035c0)=""/241, 0xf1}}, {{&(0x7f00000036c0)=@un=@abs, 0x80, &(0x7f0000003780)=[{&(0x7f0000003740)=""/4, 0xfffffd07}], 0x1, &(0x7f00000037c0)=""/236, 0xec}}, {{&(0x7f00000038c0)=@l2tp6={0xa, 0x0, 0x0, @private1}, 0x80, &(0x7f0000003bc0)=[{0x0}, {&(0x7f0000003a00)=""/190, 0xbe}, {&(0x7f0000003ac0)=""/131, 0x83}, {0x0}], 0x4, &(0x7f0000003c00)=""/73, 0x49}}, {{&(0x7f0000003c80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, 0x0, 0x0, &(0x7f0000003e00)=""/48, 0x30}}], 0x5, 0x40000121, 0x0) 06:26:53 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000005c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e24, @local}, 0x10) writev(r0, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) recvmmsg(r0, &(0x7f0000003e40)=[{{&(0x7f0000000100)=@phonet, 0x80, 0x0, 0x0, &(0x7f00000024c0)=""/4096, 0x1000, 0x40000}}, {{0x0, 0x80100200, 0x0, 0x0, &(0x7f00000035c0)=""/241, 0xf1}}, {{&(0x7f00000036c0)=@un=@abs, 0x80, &(0x7f0000003780)=[{&(0x7f0000003740)=""/4, 0xfffffd07}], 0x1, &(0x7f00000037c0)=""/236, 0xec}}, {{&(0x7f00000038c0)=@l2tp6={0xa, 0x0, 0x0, @private1}, 0x80, &(0x7f0000003bc0)=[{0x0}, {&(0x7f0000003a00)=""/190, 0xbe}, {&(0x7f0000003ac0)=""/131, 0x83}, {0x0}], 0x4, &(0x7f0000003c00)=""/73, 0x49}}, {{&(0x7f0000003c80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, 0x0, 0x0, &(0x7f0000003e00)=""/48, 0x30}}], 0x5, 0x40000121, 0x0) 06:26:53 executing program 1: openat$vsock(0xffffffffffffff9c, &(0x7f0000000700), 0x200000, 0x0) 06:26:53 executing program 1: getrusage(0x83e73181580c71a2, 0x0) 06:26:53 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f00000001c0), 0x0, 0x0) read$usbmon(r0, &(0x7f0000000000)=""/23, 0x17) 06:26:53 executing program 2: add_key$fscrypt_provisioning(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x0}, 0x0, 0x0, 0x0) 06:26:53 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) sendfile(r1, r2, &(0x7f0000000100)=0x5, 0x8) recvmsg(r0, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) sendto$inet6(r0, &(0x7f00000001c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0) recvmsg(r0, &(0x7f00000003c0)={0x0, 0x3, 0x0}, 0x0) recvmsg(r0, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) recvfrom$inet6(r0, &(0x7f0000000000)=""/114, 0xfffffffffffffd1b, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000040)) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="00281c80", @ANYRES16=r0, @ANYBLOB="ff"], 0x34}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xfffffe29}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) signalfd4(r3, &(0x7f0000000140)={[0x200]}, 0x8, 0x1000) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'bridge_slave_1\x00'}, @IFLA_MASTER={0x8, 0xa, r6}, @IFLA_MTU={0x8, 0x4, 0x1da}]}, 0x44}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x18, 0x803, 0x40000000) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=@getlink={0x30, 0x12, 0x4, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, 0xe41b, 0x59108}, [@IFLA_NET_NS_FD={0x8}, @IFLA_MTU={0x8, 0x4, 0x5}]}, 0x30}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRESHEX=r4, @ANYRES32=r7], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="58ad000010", 0x5, 0x0, 0x0, 0x0) r9 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r9, &(0x7f0000000000)='s', 0x10a73, 0x81e, 0x0, 0x4b6ae4f95a5de35b) getsockname$packet(r3, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000240)=0x14) 06:26:53 executing program 2: r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) getsockopt$IPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x43, 0x0, 0x0) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @dev}, 0x10) ioctl$FS_IOC_MEASURE_VERITY(r0, 0xc0046686, 0x0) [ 3440.789573][ T23] audit: type=1400 audit(1679380013.902:404): avc: denied { connect } for pid=31538 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 3440.814971][T31537] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 3440.859120][T31537] netlink: 44335 bytes leftover after parsing attributes in process `syz-executor.4'. 06:27:00 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) (async, rerun: 32) r1 = socket(0x1, 0x803, 0x0) (rerun: 32) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) sendfile(r1, r2, &(0x7f0000000100)=0x5, 0x8) recvmsg(r0, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) (async) sendto$inet6(r0, &(0x7f00000001c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0) (async) recvmsg(r0, &(0x7f00000003c0)={0x0, 0x3, 0x0}, 0x0) (async) recvmsg(r0, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x0) (async) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) recvfrom$inet6(r0, &(0x7f0000000000)=""/114, 0xfffffffffffffd1b, 0x0, 0x0, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000040)) (async) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="00281c80", @ANYRES16=r0, @ANYBLOB="ff"], 0x34}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xfffffe29}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) signalfd4(r3, &(0x7f0000000140)={[0x200]}, 0x8, 0x1000) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'bridge_slave_1\x00'}, @IFLA_MASTER={0x8, 0xa, r6}, @IFLA_MTU={0x8, 0x4, 0x1da}]}, 0x44}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x18, 0x803, 0x40000000) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=@getlink={0x30, 0x12, 0x4, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, 0xe41b, 0x59108}, [@IFLA_NET_NS_FD={0x8}, @IFLA_MTU={0x8, 0x4, 0x5}]}, 0x30}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRESHEX=r4, @ANYRES32=r7], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="58ad000010", 0x5, 0x0, 0x0, 0x0) r9 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r9, &(0x7f0000000000)='s', 0x10a73, 0x81e, 0x0, 0x4b6ae4f95a5de35b) getsockname$packet(r3, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000240)=0x14) 06:27:00 executing program 0: r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$cgroup_subtree(r0, &(0x7f00000003c0)=ANY=[], 0x8) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x3) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) 06:27:00 executing program 5: r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e24, @local}, 0x10) writev(r0, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) recvmmsg(r0, &(0x7f0000003e40)=[{{&(0x7f0000000100)=@phonet, 0x80, 0x0, 0x0, &(0x7f00000024c0)=""/4096, 0x1000, 0x10700}}, {{0x0, 0x80100200, 0x0, 0x0, &(0x7f00000035c0)=""/241, 0xf1}}, {{&(0x7f00000036c0)=@un=@abs, 0x80, &(0x7f0000003780)=[{&(0x7f0000003740)=""/4, 0xfffffd07}], 0x1, &(0x7f00000037c0)=""/236, 0xec}}, {{&(0x7f00000038c0)=@l2tp6={0xa, 0x0, 0x0, @private1}, 0x80, &(0x7f0000003bc0)=[{0x0}, {&(0x7f0000003a00)=""/190, 0xbe}, {&(0x7f0000003ac0)=""/131, 0x83}, {0x0}], 0x4, &(0x7f0000003c00)=""/73, 0x49}}, {{&(0x7f0000003c80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, 0x0, 0x0, &(0x7f0000003e00)=""/48, 0x30}}], 0x5, 0x40000121, 0x0) 06:27:00 executing program 2: syz_clone(0x30006000, &(0x7f0000000000), 0x0, &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0)="94d9243f836803d22e470ea9249e3f55a9b943a3acd49dcf85ed401104c688cf2c30ca5f3d64a878c8fde4d56eedbf9d2799562311d5dcf5c4c2a05b815a6d6299457ffc9e37cd852bddf7f3e6f5f2e4c784d0e5af3845ccdfcee6f794077157ecc4c20a97fef81b40e2778c1b5964015c290f462dd3337830d21e4af4c2fbdbcb56a9c4113a0b3a17439d9abc5196fdfe") r0 = syz_clone(0x1020000, &(0x7f0000000180)="4959d6d42ed245995c1e0e9d399280f1fa3a8aa1e5852f3642486939ebe60c08db07e52fdd3ddeaf267f9181f8330d43026e4a24b592de8b9d19aaa84e9930d15549de56b35e335397db544e2b274637842a2523ce437a05cc589772103d43e96960a04355d8bc33ead3dc1447d48500c1df467354b2d54309a405e79bb6696b8e7e40b0d386a16eb36e39589ca2f038928d3b4b269154b32dc955d43c921246c3ba2b0a9e7e101f73e08282cc7c358a9642ee6372272eb4048ae72a3d92b1fc46db2d180c92ff3913d75a7318f01f3814125a359df46334cf13fc3efc287f8e98f5a365c2bb172604929902a8", 0xed, &(0x7f0000000000), &(0x7f0000000280), &(0x7f00000002c0)="4082b760e86caa1f110bd015b3834b0672b6a75b64048ad0e189") getpgid(r0) r1 = syz_clone(0x48200000, &(0x7f0000000300)="dd2da94c8415bbc0e7f3c3dafd1310258f70ded91477ece7034d66d53b3b3cd6ba18a0", 0x23, &(0x7f0000000340), &(0x7f0000000380), &(0x7f00000003c0)="12f5a3e25226e8d6d819f96e36fdc2a7539833a14157787be7814b580c6120eae66f9efc603abb31b89039e22037e5cb204ccba328dcb7a49818b9353906ac25413aaa694a7afbf2ab5dc00169879a81934a12bdc8176f9582abe81d0bc6056b1d44db497529a5202be6572481cef4434d3c19cc710add8053d9732611551b23e9e6481eba37cf9d7b142b12dc07fe95296198297e9202890b1fdde9850cf25ab381cd556474984f725f2df8b3b5e3ae7035bb3b9e1252ef1edbceb27deab6156a1300105650d5e67a09c163cba0676f") sched_rr_get_interval(r1, &(0x7f00000004c0)) 06:27:00 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000005c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e24, @local}, 0x10) writev(r0, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) recvmmsg(r0, &(0x7f0000003e40)=[{{&(0x7f0000000100)=@phonet, 0x80, 0x0, 0x0, &(0x7f00000024c0)=""/4096, 0x1000, 0x70100}}, {{0x0, 0x80100200, 0x0, 0x0, &(0x7f00000035c0)=""/241, 0xf1}}, {{&(0x7f00000036c0)=@un=@abs, 0x80, &(0x7f0000003780)=[{&(0x7f0000003740)=""/4, 0xfffffd07}], 0x1, &(0x7f00000037c0)=""/236, 0xec}}, {{&(0x7f00000038c0)=@l2tp6={0xa, 0x0, 0x0, @private1}, 0x80, &(0x7f0000003bc0)=[{0x0}, {&(0x7f0000003a00)=""/190, 0xbe}, {&(0x7f0000003ac0)=""/131, 0x83}, {0x0}], 0x4, &(0x7f0000003c00)=""/73, 0x49}}, {{&(0x7f0000003c80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, 0x0, 0x0, &(0x7f0000003e00)=""/48, 0x30}}], 0x5, 0x40000121, 0x0) 06:27:00 executing program 1: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480)={0xffffffffffffffff}) sendmsg$unix(r2, &(0x7f0000000d80)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0x0) 06:27:00 executing program 1: syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) pipe(0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, 0x0, 0x0) add_key$keyring(&(0x7f0000000340), &(0x7f0000000380)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) socket(0x0, 0x0, 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f0000000400), 0xffffffffffffffff) 06:27:00 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) (async) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) (async) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) sendfile(r1, r2, &(0x7f0000000100)=0x5, 0x8) recvmsg(r0, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) sendto$inet6(r0, &(0x7f00000001c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0) (async) sendto$inet6(r0, &(0x7f00000001c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0) recvmsg(r0, &(0x7f00000003c0)={0x0, 0x3, 0x0}, 0x0) (async) recvmsg(r0, &(0x7f00000003c0)={0x0, 0x3, 0x0}, 0x0) recvmsg(r0, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) recvfrom$inet6(r0, &(0x7f0000000000)=""/114, 0xfffffffffffffd1b, 0x0, 0x0, 0x0) (async) recvfrom$inet6(r0, &(0x7f0000000000)=""/114, 0xfffffffffffffd1b, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000040)) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="00281c80", @ANYRES16=r0, @ANYBLOB="ff"], 0x34}}, 0x0) (async) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="00281c80", @ANYRES16=r0, @ANYBLOB="ff"], 0x34}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xfffffe29}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) signalfd4(r3, &(0x7f0000000140)={[0x200]}, 0x8, 0x1000) r4 = socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) (async) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) (async) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'bridge_slave_1\x00'}, @IFLA_MASTER={0x8, 0xa, r6}, @IFLA_MTU={0x8, 0x4, 0x1da}]}, 0x44}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) socket(0x18, 0x803, 0x40000000) (async) r8 = socket(0x18, 0x803, 0x40000000) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=@getlink={0x30, 0x12, 0x4, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, 0xe41b, 0x59108}, [@IFLA_NET_NS_FD={0x8}, @IFLA_MTU={0x8, 0x4, 0x5}]}, 0x30}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRESHEX=r4, @ANYRES32=r7], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="58ad000010", 0x5, 0x0, 0x0, 0x0) socket$inet6(0x10, 0x3, 0x0) (async) r9 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r9, &(0x7f0000000000)='s', 0x10a73, 0x81e, 0x0, 0x4b6ae4f95a5de35b) getsockname$packet(r3, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000240)=0x14) 06:27:00 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) accept4$unix(r0, 0x0, 0x0, 0x100000) 06:27:00 executing program 1: unlinkat$binderfs_device(0xffffffffffffff9c, &(0x7f0000000b40)='./binderfs2/custom0\x00') 06:27:00 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000000700)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}}], 0x1, 0x0) [ 3447.033281][T31560] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. 06:27:00 executing program 1: getresuid(&(0x7f00000101c0), 0x0, 0x0) 06:27:00 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) recvmsg(r0, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) sendto$inet6(r0, &(0x7f00000001c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0) recvmsg(r0, &(0x7f00000003c0)={0x0, 0x3, 0x0}, 0x0) recvmsg(r0, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) recvfrom$inet6(r0, &(0x7f0000000000)=""/114, 0xfffffffffffffd1b, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000040)) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="00281c80", @ANYRES16=r0, @ANYBLOB="ff"], 0x34}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="f4997c3794"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="58ad000010", 0x5, 0x0, 0x0, 0x0) r1 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f00000000c0)="d76389eadfdff4c7abfd73444ef9ac3700e5004f760e67020d46f7e3cd5f96c69c8753624f74a28def50baba1bbc6112c01b71c437361df7eeda8851a8094f5873c0050cb736ca7b70fdbd", 0x4b, 0x40004, 0x0, 0x3d) [ 3447.115266][T31560] netlink: 44335 bytes leftover after parsing attributes in process `syz-executor.4'. 06:27:07 executing program 0: r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$cgroup_subtree(r0, &(0x7f00000003c0)=ANY=[], 0x8) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x3) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) 06:27:07 executing program 1: socket$packet(0x11, 0x2, 0x300) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, 0x0, 0x0) 06:27:07 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) recvmsg(r0, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) sendto$inet6(r0, &(0x7f00000001c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0) (async) sendto$inet6(r0, &(0x7f00000001c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0) recvmsg(r0, &(0x7f00000003c0)={0x0, 0x3, 0x0}, 0x0) recvmsg(r0, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x0) (async) recvmsg(r0, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) recvfrom$inet6(r0, &(0x7f0000000000)=""/114, 0xfffffffffffffd1b, 0x0, 0x0, 0x0) (async) recvfrom$inet6(r0, &(0x7f0000000000)=""/114, 0xfffffffffffffd1b, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000040)) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="00281c80", @ANYRES16=r0, @ANYBLOB="ff"], 0x34}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="f4997c3794"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="58ad000010", 0x5, 0x0, 0x0, 0x0) r1 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f00000000c0)="d76389eadfdff4c7abfd73444ef9ac3700e5004f760e67020d46f7e3cd5f96c69c8753624f74a28def50baba1bbc6112c01b71c437361df7eeda8851a8094f5873c0050cb736ca7b70fdbd", 0x4b, 0x40004, 0x0, 0x3d) (async) sendto$inet6(r1, &(0x7f00000000c0)="d76389eadfdff4c7abfd73444ef9ac3700e5004f760e67020d46f7e3cd5f96c69c8753624f74a28def50baba1bbc6112c01b71c437361df7eeda8851a8094f5873c0050cb736ca7b70fdbd", 0x4b, 0x40004, 0x0, 0x3d) 06:27:07 executing program 2: syz_clone(0x30006000, &(0x7f0000000000), 0x0, &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0)="94d9243f836803d22e470ea9249e3f55a9b943a3acd49dcf85ed401104c688cf2c30ca5f3d64a878c8fde4d56eedbf9d2799562311d5dcf5c4c2a05b815a6d6299457ffc9e37cd852bddf7f3e6f5f2e4c784d0e5af3845ccdfcee6f794077157ecc4c20a97fef81b40e2778c1b5964015c290f462dd3337830d21e4af4c2fbdbcb56a9c4113a0b3a17439d9abc5196fdfe") r0 = syz_clone(0x1020000, &(0x7f0000000180)="4959d6d42ed245995c1e0e9d399280f1fa3a8aa1e5852f3642486939ebe60c08db07e52fdd3ddeaf267f9181f8330d43026e4a24b592de8b9d19aaa84e9930d15549de56b35e335397db544e2b274637842a2523ce437a05cc589772103d43e96960a04355d8bc33ead3dc1447d48500c1df467354b2d54309a405e79bb6696b8e7e40b0d386a16eb36e39589ca2f038928d3b4b269154b32dc955d43c921246c3ba2b0a9e7e101f73e08282cc7c358a9642ee6372272eb4048ae72a3d92b1fc46db2d180c92ff3913d75a7318f01f3814125a359df46334cf13fc3efc287f8e98f5a365c2bb172604929902a8", 0xed, &(0x7f0000000000), &(0x7f0000000280), &(0x7f00000002c0)="4082b760e86caa1f110bd015b3834b0672b6a75b64048ad0e189") getpgid(r0) r1 = syz_clone(0x48200000, &(0x7f0000000300)="dd2da94c8415bbc0e7f3c3dafd1310258f70ded91477ece7034d66d53b3b3cd6ba18a0", 0x23, &(0x7f0000000340), &(0x7f0000000380), &(0x7f00000003c0)="12f5a3e25226e8d6d819f96e36fdc2a7539833a14157787be7814b580c6120eae66f9efc603abb31b89039e22037e5cb204ccba328dcb7a49818b9353906ac25413aaa694a7afbf2ab5dc00169879a81934a12bdc8176f9582abe81d0bc6056b1d44db497529a5202be6572481cef4434d3c19cc710add8053d9732611551b23e9e6481eba37cf9d7b142b12dc07fe95296198297e9202890b1fdde9850cf25ab381cd556474984f725f2df8b3b5e3ae7035bb3b9e1252ef1edbceb27deab6156a1300105650d5e67a09c163cba0676f") sched_rr_get_interval(r1, &(0x7f00000004c0)) 06:27:07 executing program 5: r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e24, @local}, 0x10) writev(r0, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) recvmmsg(r0, &(0x7f0000003e40)=[{{&(0x7f0000000100)=@phonet, 0x80, 0x0, 0x0, &(0x7f00000024c0)=""/4096, 0x1000, 0x20000}}, {{0x0, 0x80100200, 0x0, 0x0, &(0x7f00000035c0)=""/241, 0xf1}}, {{&(0x7f00000036c0)=@un=@abs, 0x80, &(0x7f0000003780)=[{&(0x7f0000003740)=""/4, 0xfffffd07}], 0x1, &(0x7f00000037c0)=""/236, 0xec}}, {{&(0x7f00000038c0)=@l2tp6={0xa, 0x0, 0x0, @private1}, 0x80, &(0x7f0000003bc0)=[{0x0}, {&(0x7f0000003a00)=""/190, 0xbe}, {&(0x7f0000003ac0)=""/131, 0x83}, {0x0}], 0x4, &(0x7f0000003c00)=""/73, 0x49}}, {{&(0x7f0000003c80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, 0x0, 0x0, &(0x7f0000003e00)=""/48, 0x30}}], 0x5, 0x40000121, 0x0) 06:27:07 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000005c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e24, @local}, 0x10) writev(r0, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) recvmmsg(r0, &(0x7f0000003e40)=[{{&(0x7f0000000100)=@phonet, 0x80, 0x0, 0x0, &(0x7f00000024c0)=""/4096, 0x1000, 0x142800}}, {{0x0, 0x80100200, 0x0, 0x0, &(0x7f00000035c0)=""/241, 0xf1}}, {{&(0x7f00000036c0)=@un=@abs, 0x80, &(0x7f0000003780)=[{&(0x7f0000003740)=""/4, 0xfffffd07}], 0x1, &(0x7f00000037c0)=""/236, 0xec}}, {{&(0x7f00000038c0)=@l2tp6={0xa, 0x0, 0x0, @private1}, 0x80, &(0x7f0000003bc0)=[{0x0}, {&(0x7f0000003a00)=""/190, 0xbe}, {&(0x7f0000003ac0)=""/131, 0x83}, {0x0}], 0x4, &(0x7f0000003c00)=""/73, 0x49}}, {{&(0x7f0000003c80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, 0x0, 0x0, &(0x7f0000003e00)=""/48, 0x30}}], 0x5, 0x40000121, 0x0) 06:27:07 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000009080)={0x0, 0x0, 0x0}, 0x0) 06:27:07 executing program 1: select(0x40, &(0x7f0000000000), 0x0, &(0x7f0000000100), &(0x7f0000000140)) 06:27:07 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) recvmsg(r0, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) sendto$inet6(r0, &(0x7f00000001c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0) recvmsg(r0, &(0x7f00000003c0)={0x0, 0x3, 0x0}, 0x0) recvmsg(r0, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) recvfrom$inet6(r0, &(0x7f0000000000)=""/114, 0xfffffffffffffd1b, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000040)) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="00281c80", @ANYRES16=r0, @ANYBLOB="ff"], 0x34}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="f4997c3794"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="58ad000010", 0x5, 0x0, 0x0, 0x0) r1 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f00000000c0)="d76389eadfdff4c7abfd73444ef9ac3700e5004f760e67020d46f7e3cd5f96c69c8753624f74a28def50baba1bbc6112c01b71c437361df7eeda8851a8094f5873c0050cb736ca7b70fdbd", 0x4b, 0x40004, 0x0, 0x3d) socket$inet6(0x10, 0x3, 0x0) (async) recvmsg(r0, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) (async) sendto$inet6(r0, &(0x7f00000001c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0) (async) recvmsg(r0, &(0x7f00000003c0)={0x0, 0x3, 0x0}, 0x0) (async) recvmsg(r0, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x0) (async) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) (async) recvfrom$inet6(r0, &(0x7f0000000000)=""/114, 0xfffffffffffffd1b, 0x0, 0x0, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000040)) (async) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="00281c80", @ANYRES16=r0, @ANYBLOB="ff"], 0x34}}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="f4997c3794"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="58ad000010", 0x5, 0x0, 0x0, 0x0) (async) socket$inet6(0x10, 0x3, 0x0) (async) sendto$inet6(r1, &(0x7f00000000c0)="d76389eadfdff4c7abfd73444ef9ac3700e5004f760e67020d46f7e3cd5f96c69c8753624f74a28def50baba1bbc6112c01b71c437361df7eeda8851a8094f5873c0050cb736ca7b70fdbd", 0x4b, 0x40004, 0x0, 0x3d) (async) 06:27:07 executing program 1: socketpair(0x2a, 0x0, 0x0, &(0x7f0000000140)) 06:27:07 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) sendto(r0, 0x0, 0x0, 0x0, &(0x7f0000000100)=@rc, 0x80) 06:27:07 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={0x0}}, 0xc001) 06:27:14 executing program 0: r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$cgroup_subtree(r0, &(0x7f00000003c0)=ANY=[], 0x8) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x3) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) 06:27:14 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) recvmsg(r0, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) sendto$inet6(r0, &(0x7f00000001c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0) recvmsg(r0, &(0x7f00000003c0)={0x0, 0x3, 0x0}, 0x0) recvmsg(r0, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) recvfrom$inet6(r0, &(0x7f0000000000)=""/114, 0xfffffffffffffd1b, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000040)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000100)={&(0x7f0000000a40)=@newtaction={0x2c98, 0x30, 0x300, 0x70bd27, 0x25dfdbfe, {}, [{0x14c, 0x1, [@m_connmark={0x148, 0x1, 0x0, 0x0, {{0xd}, {0xc8, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x0, 0x8, 0x10000002, 0x9, 0x1}, 0x8}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3, 0x0, 0xffffffffffffffff, 0x7fffffff, 0x1}, 0x7}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3, 0x4, 0x6, 0xe00000, 0x800}, 0x3}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x9, 0x0, 0x2, 0x2, 0xfa7}, 0xff}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x7f, 0x9, 0x8, 0x6, 0xfffffff7}, 0x4}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x5d, 0x5e, 0xffffffffffffffff, 0x3f53, 0x82}, 0x43e}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x91, 0x7, 0x1, 0xfffeffff, 0x800}, 0x400}}]}, {0x51, 0x6, "d426ef0467b4d49d113fc8a698a2eb4a037424906989e0fce842f5c29647577c4209434be28714ca762d5ef95f9caa885bd59d60a79df2cfb2ab9411421d948c103cff354d80ffad174b816b3e"}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}]}, {0xfc, 0x1, [@m_ipt={0xf8, 0x1f, 0x0, 0x0, {{0x8}, {0xd0, 0x2, 0x0, 0x1, [@TCA_IPT_TABLE={0x24, 0x1, 'mangle\x00'}, @TCA_IPT_TABLE={0x24, 0x1, 'nat\x00'}, @TCA_IPT_TARG={0x82, 0x6, {0x401, 'mangle\x00', 0xfc, 0x100, "91f43e3d31b6804d906525773ac03de282324c606c16e92f26e6af3adea0f0448b057dfdc04a9393f043ca6e4f71a3dfb70a00308fee90601bc5df34c2b9f17b539c6e2263d0da5818beabc3166e2ad504b77299912208e1"}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x4}}}}]}, {0x2a3c, 0x1, [@m_connmark={0x1ec, 0x1, 0x0, 0x0, {{0xd}, {0x11c, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xfffffc00, 0x4, 0x1, 0x2, 0xffff0001}}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xfffffffb, 0x7ff, 0x1, 0x54b, 0x80000001}, 0x9}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x0, 0x8, 0xffffffffffffffff, 0x0, 0x1}, 0x7}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x80000000, 0x87, 0x6, 0xffff}, 0x40}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x80, 0x8001, 0x10000000, 0x6, 0x8001}, 0x9}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xd, 0x9, 0x7, 0x9, 0x6000}, 0x2}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x6, 0x1000, 0x6, 0xffffffff, 0x1}, 0x1f}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x0, 0x8, 0x5, 0x10001, 0x81}, 0x1}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xeee, 0x5, 0x20000000, 0xc29, 0xce}, 0x3ff}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x7, 0x3bc6, 0x2, 0x59, 0x7f}, 0x100}}]}, {0xa1, 0x6, "3078bba76efc85088a0c59aa50b360a097a9ba414fdbb98487374605c61b63b4013d82ff15dbc5622331a07a92897a2de171ef7df7922fb751e8029d782405cb34b11a03cc118a7d5bea56144cc41280a6d823193e303a8c37cff370c78e0c0eedf6a80b1f1e683d16b79cf8de307ec8006a76f1431efcdef90abee6f0e0c6596fe0904ff4e007d3314ca3e7a30ac84c1b137af69baf8393ef1541393a"}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}, @m_ife={0x17c, 0xe, 0x0, 0x0, {{0x8}, {0xd8, 0x2, 0x0, 0x1, [@TCA_IFE_METALST={0x34, 0x6, [@IFE_META_PRIO={0x8, 0x3, @val=0x7}, @IFE_META_TCINDEX={0x6, 0x5, @val=0x81}, @IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_PRIO={0x8, 0x3, @val=0x788}, @IFE_META_SKBMARK={0x8, 0x1, @val=0x4}, @IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_TCINDEX={0x4, 0x5, @void}]}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x246, 0x1, 0x7, 0x8000}}}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x8, 0x1000, 0x3, 0x213}}}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x48c, 0x3, 0x20000000, 0x4, 0x2}}}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x3ff, 0x7, 0x1, 0x9, 0x8}, 0x1}}, @TCA_IFE_METALST={0x24, 0x6, [@IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_PRIO={0x8, 0x3, @val=0x3}, @IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_SKBMARK={0x8, 0x1, @val=0x40}]}, @TCA_IFE_DMAC={0xa}]}, {0x80, 0x6, "3d000c20a7f0419aa27a3fcf717a579a46477b26b0139cfc711c3bd51b55653e443ce54f5da67261df76eedc896a62113e5e78d59f3af8b430a8871699f6372536cfbd377715bffbd6945eb73734cbd3ed9b3e06f110b330d2633872e51c4a783f83fcd5e6bf9add4776ead4ce669b936d290acb8ea05d22a3e3fc25"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1}}}}, @m_csum={0x10c, 0x11, 0x0, 0x0, {{0x9}, {0xc8, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x4, 0x3, 0xffffffffffffffff, 0x5, 0x3}, 0x6a}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0xc3, 0x362, 0x3, 0x4, 0x60}, 0x28}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0xfffffffb, 0x1, 0x1, 0x280000}, 0x38}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x61, 0xdf73, 0x2, 0x3f, 0x8}, 0x48}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x1e6ba8c4, 0x1ff, 0x7, 0x3f, 0x8}, 0x26}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x0, 0x10000, 0x0, 0x1, 0x8000}, 0x67}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x6, 0x902, 0x20000000, 0x10000, 0x1000}, 0x6c}}]}, {0x1b, 0x6, "7cc1255dd8c7b1819320465c7a424d5777541cdfd8fc62"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_police={0x1184, 0x1e, 0x0, 0x0, {{0xb}, {0x10f8, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE64={0xc, 0x8, 0x8ed}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x8, 0xfffffffc, 0xffffff81, 0xff, 0x8, 0x8003, 0x81, 0x65f5, 0x6, 0x7, 0x5, 0x100, 0x7, 0xfffffffd, 0xfafde386, 0x3, 0x2, 0x100, 0x6, 0x1000, 0x7, 0x10001, 0x101, 0xff, 0xfffffffe, 0x8, 0x4, 0x7, 0xa9, 0x1, 0x5, 0x8000, 0x29e, 0xffff, 0xfffffffd, 0x4429, 0x3, 0x4, 0x7f, 0x0, 0xfffffff8, 0x5e9e, 0xffffff80, 0x1, 0x3f, 0xac, 0x7092b5fc, 0x9, 0x5, 0x0, 0xda2, 0x8, 0x3f, 0x4, 0x6, 0x4, 0x1, 0xf42, 0x1, 0x5, 0x6, 0x0, 0x3, 0xffffffe0, 0x79c1bfe0, 0x7, 0x3, 0x80000001, 0xd, 0x1f, 0xa6, 0xfffff37c, 0x6, 0x9, 0x0, 0x8000, 0x0, 0x81, 0x7, 0x2efe343a, 0x3b867cb8, 0x10001, 0x9, 0x50000, 0x4000, 0xffffff00, 0x2, 0x401, 0x5, 0x8000, 0x8, 0x8, 0x5, 0x3, 0x7, 0x7fffffff, 0x8, 0x8000, 0x1, 0x80, 0x0, 0x7, 0x1, 0xffff, 0x7, 0x80000000, 0x9, 0x3, 0x7, 0x8a, 0x30f, 0x1, 0x401, 0x10000, 0x6, 0x4, 0x6, 0x5402, 0x1, 0x8, 0xffff, 0x3, 0x4, 0x10, 0x7f, 0x8001, 0x61c, 0xada, 0x9, 0x2, 0x81, 0x1000, 0x0, 0x1, 0x8, 0x1, 0xffff, 0x3f, 0x12cd933f, 0x7fffffff, 0x1f, 0x2, 0x4, 0x1ff, 0x9, 0x40, 0xb82, 0xb8, 0x0, 0xbd7, 0x5, 0x5, 0xfffffeff, 0xd03, 0x800, 0xa761, 0x6, 0x8000, 0x7, 0x9d, 0x9, 0x31, 0x0, 0xfd, 0xb05, 0x9, 0x6, 0x1ff, 0x3ff, 0x7f, 0x3f, 0x7, 0x4, 0x6, 0x40, 0x1000, 0x650, 0x80000001, 0x3800, 0x101, 0x9, 0x7f, 0xfff, 0x7, 0x1ff, 0x9, 0x5, 0x1, 0x401, 0x1, 0x5, 0x8001, 0x2, 0x0, 0xffffffe1, 0x2, 0x8, 0x1, 0x80000000, 0x0, 0x7, 0x0, 0x4, 0x4, 0x17, 0x6, 0x40, 0x5, 0x4, 0x6, 0x8, 0x3, 0x5, 0x80, 0x4, 0xfffffffc, 0x3ff, 0xbc, 0x2, 0x1, 0x800, 0x100, 0x9, 0x553e, 0x20000, 0x6, 0x9, 0x2, 0x2, 0x400, 0x8001, 0x5, 0x1fffe000, 0x1, 0xfff, 0x2, 0xffffffff, 0x8, 0x4, 0x2, 0x3, 0x9, 0x4, 0x6, 0x0, 0xe20b, 0x2, 0x1, 0x4, 0x8, 0x0, 0x5, 0x7, 0x80, 0x9, 0x4cd5dbe]}, @TCA_POLICE_RATE64={0xc, 0x8, 0xc0000000}, @TCA_POLICE_TBF={0x3c, 0x1, {0x3, 0x4, 0x27, 0x2, 0x971, {0x5, 0x1, 0x7, 0x1, 0x8, 0x38cc}, {0x40, 0x1, 0x9, 0xfff9, 0x1ff, 0x8000}, 0x3, 0x22, 0x8}}, @TCA_POLICE_RESULT={0x8, 0x5, 0x7}, @TCA_POLICE_AVRATE={0x8}, @TCA_POLICE_RATE64={0xc}], [@TCA_POLICE_AVRATE={0x8, 0x4, 0x8000}, @TCA_POLICE_RATE={0x404, 0x2, [0x25, 0x100, 0x2, 0x2, 0x2, 0x5, 0x6, 0x5, 0x0, 0xc65, 0x5, 0x1, 0x236a, 0xff, 0x200, 0x5, 0x1, 0x5, 0x8000, 0x3, 0x4, 0x7fff, 0x8, 0x0, 0x9, 0x3b9, 0x400, 0x7fff, 0x1, 0x6, 0x3ca7, 0x61, 0x7fff, 0x1, 0x6, 0x5cbc, 0x0, 0x7, 0x9, 0x7, 0x2, 0xfffffffd, 0x5, 0x8001, 0x8, 0x4, 0x7, 0x6, 0x8001, 0x40, 0x10001, 0x6, 0x0, 0x4, 0x3, 0xfce, 0x1, 0x7ed, 0x5, 0x7fffffff, 0x1, 0xffffffc0, 0x200, 0x1c, 0x7, 0x81, 0x7, 0x4, 0x101, 0x80000001, 0x1, 0x7fff, 0x2, 0xffff, 0x0, 0xffffff89, 0x81, 0x9, 0xffffffff, 0xdc9e, 0x9, 0x0, 0x101, 0x3, 0x18d3, 0x7, 0x33, 0x1, 0x9, 0x8, 0x40, 0x8001, 0xfff, 0x747, 0x2, 0x0, 0x7, 0x0, 0x5, 0x3f, 0x4, 0x7, 0xffff, 0x1, 0xf252, 0x1f, 0x1f, 0xffff, 0x7, 0x697, 0x9, 0x6, 0x20, 0x80000000, 0xcb4, 0x1, 0x100, 0x3de0, 0x400, 0xc1d, 0x3, 0x2, 0x80000000, 0xbe, 0x1000, 0x2, 0xf, 0xca, 0x4, 0x7, 0x4898, 0x8d0, 0x0, 0x9, 0xfffffffa, 0x1, 0x5, 0x1c0000, 0x4, 0x63c, 0x6, 0x1ff, 0x1, 0x10001, 0x7f, 0x6, 0x4, 0x80000000, 0x3, 0x7fff, 0x4, 0x8, 0xffff032e, 0x3, 0x9, 0xf5, 0x8f22, 0xffff, 0x8, 0x5, 0x8, 0xe512, 0x6, 0x101, 0x1f, 0xffffffff, 0x72a, 0xfff, 0x2, 0x3a, 0x7ff, 0x1, 0x21ba, 0x80000000, 0x20000000, 0x2, 0x9fa8000, 0xff, 0xe11, 0xfffffffe, 0x71b8c8bd, 0xfff, 0x2, 0x4, 0x907a, 0x0, 0xffffffff, 0x8, 0x3d4c, 0x9, 0x2, 0x9, 0x32a60, 0x3, 0xffff121e, 0x7, 0x0, 0x100, 0xfffffff8, 0x2, 0x1, 0xffffffff, 0x0, 0x2, 0x80, 0x2, 0x10001000, 0x4, 0x8, 0x7, 0x5b, 0x8, 0x1, 0x0, 0x7fffffff, 0x0, 0xf78, 0xb4d5, 0xffff, 0x3ff, 0x4, 0x10000, 0x7, 0xfff, 0x0, 0x5, 0x7300, 0xdf7, 0x9, 0x400, 0x3, 0x401, 0x9, 0x583, 0x6c4f, 0x8, 0x80, 0xffff72ee, 0x8000, 0x4, 0x6, 0x8000, 0x1, 0x7, 0xffffffff, 0x1800, 0x6, 0x3, 0x3, 0x5, 0x401, 0x20, 0x1, 0x4, 0x36, 0x7]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x80000000}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x6}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x8, 0x9, 0x1a919c15, 0x172, 0x9, 0xfffffffc, 0x9e, 0x70, 0x400, 0x0, 0xffffffff, 0x4, 0x9, 0x6, 0x9a82, 0x5, 0x2, 0xf75d, 0x9, 0x8, 0x6, 0x6, 0x7, 0x6, 0x3ff, 0x9, 0x7, 0x40, 0xfffffff9, 0x15a156ec, 0x7, 0x8000, 0x800, 0x81, 0x1, 0x10000, 0x1, 0x3, 0x9, 0x5, 0xd360, 0x20, 0x4, 0xffffffc0, 0x4a, 0x7f, 0x0, 0x0, 0x0, 0x2b8, 0x7, 0x2, 0x3, 0x7, 0x7, 0x8, 0x261, 0x1, 0xfffffffd, 0x9fe, 0x0, 0x1, 0x3ff, 0x1, 0x9, 0x7fff, 0x4a23, 0x20, 0x6, 0x1, 0x101, 0x2, 0x8, 0x7, 0x1, 0x1, 0x0, 0x5, 0x80, 0xda2, 0x400, 0x8, 0x8, 0x4, 0x3f, 0xffff, 0x1, 0x0, 0x8001, 0x20, 0x3ff, 0x4e, 0xb40, 0x10001, 0x7ff, 0x5, 0x4, 0x8000, 0x7, 0xfffffff9, 0x8, 0x9, 0x9, 0x7b1, 0x9, 0x38, 0x7, 0x6, 0x8, 0x6, 0x7, 0x80000001, 0x3f, 0xada, 0x2, 0x1, 0x1ff, 0x60fb, 0x9, 0x9, 0x5, 0x3, 0x0, 0x7fffffff, 0x101, 0x7fff, 0x6, 0x0, 0x0, 0x0, 0x7, 0x6, 0x3ff, 0x1, 0x8, 0x9, 0x81, 0x9, 0x7, 0x3, 0x351, 0xffff, 0x99, 0x401, 0x8001, 0x9, 0x1, 0x80000001, 0x2, 0x400, 0x1, 0x5, 0x34a, 0x1, 0x4, 0x6, 0x0, 0x8, 0xffff5911, 0x5, 0x8000, 0x3f, 0x0, 0x5, 0x85, 0x8, 0x34e8fdf2, 0xd1, 0x2, 0xdb, 0x7fff, 0x7, 0xfffffff8, 0x80000001, 0x4, 0x3, 0x40, 0x80000001, 0x7, 0x2, 0x2, 0xfff, 0x4, 0x3, 0x4, 0xea5, 0xffffffff, 0x81, 0x6, 0x800, 0x10001, 0x3, 0x8, 0xa8, 0x8, 0x71, 0x3ff, 0xc45c, 0x3ff, 0x9, 0x7fff, 0x8, 0x960, 0xa0, 0x7, 0x7, 0x3f, 0x2, 0x80, 0xff, 0x7f, 0x4114, 0x4, 0x2, 0x9, 0x7, 0x3, 0x3, 0xfd73, 0xffff, 0x5, 0x6d, 0x7, 0x5, 0xec, 0x2, 0x4, 0x2, 0x7, 0x7f, 0x25, 0x2c92, 0x3, 0x8, 0x8001, 0x500, 0x6, 0xdea, 0x7, 0x2e6aeac9, 0x5, 0x4, 0x3ff, 0xa6d, 0x414d3c1a, 0x80000000, 0x7, 0x7, 0xfaa, 0x8, 0x80000000, 0x7fff, 0x2, 0x1, 0x432477cf, 0x9]}], [@TCA_POLICE_TBF={0x3c, 0x1, {0x1f, 0x20000000, 0x7, 0xffff, 0x8, {0x2, 0x2, 0x7f, 0x20, 0x6, 0xffffffe0}, {0x81, 0x0, 0x5, 0x0, 0x8, 0x4}, 0xe98, 0x800, 0x5c4e}}, @TCA_POLICE_RATE={0x404, 0x2, [0x3, 0x7, 0x8, 0xcc5, 0x9, 0xff8, 0xfffffffd, 0x6, 0x0, 0x8001, 0x9, 0x101, 0x0, 0x2, 0x3ff, 0x7, 0x3, 0x8, 0xb20, 0xd5, 0x80, 0x20, 0x4bc5042e, 0x9, 0x3ff, 0x1, 0x43e6, 0x1, 0x7ff, 0x8, 0x80000001, 0x4, 0x3, 0x7ff, 0xffffffff, 0x8001, 0x7d2, 0x7, 0xfffffffe, 0x9, 0x1f, 0x9, 0x5, 0x3ff, 0xfffffffe, 0x1, 0x9, 0x8, 0x1, 0x40, 0xff, 0x9, 0xffff12cb, 0x20, 0x2, 0x5, 0x9, 0x5, 0x4, 0x80000001, 0x1000, 0x40, 0x1, 0x401, 0x6000000, 0x9, 0x8, 0x7fff, 0x5, 0x1ff, 0xfffffffe, 0x9, 0x80000000, 0x8, 0x1f, 0x2, 0x1f, 0x6, 0x6a, 0x2, 0x5, 0x9108131, 0x8, 0x9, 0x1f, 0x10001, 0xe, 0x7b5, 0x7f, 0x4, 0x400, 0x8001, 0x8001, 0x3f, 0xffffffff, 0x4, 0xfffffff8, 0x1000, 0x10001, 0xa00000, 0x8, 0xdb9, 0xff, 0x80000000, 0x2c6, 0x8, 0x1, 0x293d, 0xfff, 0x0, 0x4, 0x6, 0x12b, 0x7ff, 0x1, 0x4, 0x800, 0x87b, 0x6, 0x2, 0x9, 0x1, 0x3ff, 0x33, 0xffffc9aa, 0x0, 0x5, 0x9, 0x3, 0xa3d3, 0x3, 0x7, 0x0, 0x2fa6, 0x8, 0x3, 0x7, 0x2, 0x4, 0x818, 0x6, 0x8, 0x8000, 0x2, 0x9, 0x7f, 0x3, 0x3, 0x3ff, 0x2dc1, 0x8, 0x2, 0x3, 0x9, 0x40, 0x6, 0x3, 0x6, 0x800, 0x1, 0x56b, 0x3, 0x401, 0x10001, 0x7ff, 0x4ebf, 0x2, 0x4, 0xda3, 0x8001, 0x3, 0xfffffffc, 0x9, 0xfffffff8, 0x8, 0xff, 0x8000, 0x9, 0xfffffff9, 0x5, 0x0, 0x7d1, 0x7ea46b5d, 0x7f, 0x101, 0xe6, 0x7ff, 0x4, 0x5, 0x20, 0x3, 0x1, 0x6, 0x6d4, 0x5, 0x7fffffff, 0x6, 0x200, 0x1000, 0x5, 0x6, 0x9, 0x7eb, 0xb57, 0xd9ac, 0x3, 0x7fff, 0x0, 0xe17d, 0x8000, 0xfffffffa, 0x8, 0x2, 0x0, 0x6, 0xfff, 0x1000, 0x0, 0x7, 0xc2, 0x3, 0x3, 0xfff, 0x2, 0x800, 0x1, 0x9, 0x9d, 0x7fffffff, 0x1f, 0x321a, 0x9, 0x2, 0xfffffffc, 0x7, 0x9, 0x100000, 0x8001, 0x4000, 0x8, 0x71c6, 0x10000, 0x10000, 0xfc, 0x3ff, 0x5, 0x7, 0xa345, 0x2, 0x9, 0xffff, 0x0, 0x7, 0x2, 0x3, 0x80000000]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x20}], [@TCA_POLICE_RATE64={0xc}, @TCA_POLICE_RATE64={0xc, 0x8, 0x1}]]}, {0x64, 0x6, "bf5d80b304f1096a63e916b257df5452dd901e144d066faecdb62446d3b86fcbd558705938263094ac6dcda2615c00a79ffa25052b424544fe15e462100d3ac82e8c45d4bd69974e089b5d837e1765879940bc01db23e11a4bc5ddd2789f7bbf"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_connmark={0x120, 0xd, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xffff170b, 0xfffffffb, 0x20000000, 0x6, 0x3}, 0xdd}}]}, {0xd2, 0x6, "58087a0f37cbff6a0c59eff74dfd57d7aa57b2f3f88ca27735906b023641ef166aa976b86879b4b59818114e7b0c78900525ecd78590d0948f7bc9c594b18a5f3d09f4f4cdeeef500a62658dacac1297338de071e63efeca1cbbc89939fb850b2ded405601845666936b7aa33ab81e0b336e0ab2eae8dd0c119a82b14d14c8378b0ec228edd4c02c0b4bae981d1b9a0376c86746affc4bb02f9fba6127f5cb00a3ec7b303335d24a603fdb58bfa1f5f0584e8e5aa255a5951efc0b880c1be4b68c93b8943b0d1b1e893103c890c5"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x4d22f854cfa5c7e4}}}}, @m_gact={0x88, 0x12, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x8bce1016d95b85f2, 0x1756, 0x10000000}}, @TCA_GACT_PARMS={0x18, 0x2, {0xa1, 0x4, 0x6, 0x1, 0x7ff}}]}, {0x36, 0x6, "d94ec7c4f9f9fefd5873f10f80bca3bd81e9024dfb591d3282ceabaf54b5d261f9559806f4e5d04b82a1ce56d9571069fded"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_skbmod={0x118, 0x20, 0x0, 0x0, {{0xb}, {0x34, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x5c0, 0x360, 0x6, 0x8e3d, 0x3}, 0xf}}, @TCA_SKBMOD_SMAC={0xa, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x24}}]}, {0xbb, 0x6, "a91f6f2c2bc3f93254d6994dad51a497e14bccbd3345bde60fdfce3098a1629855322e7d95853d877ceedc37a51140081756754d71336c381094fca33694cae1ffc0b971cb144a3f2b9d9687d6a6529ff4a733174ec95301aaaf2e594eeee57aeb73dbdeea3fd3744bbf0e83a3bf27c8fed7fb58e1eeca3e133a44b28b83a5de9b02131a8a5168f742f151f9d6d1e88edc6968f90439235a0e977808121e2f40037e4d304387d4525ed6907b040eeaad19e23ae37f2a7e"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_mpls={0x1074, 0x13, 0x0, 0x0, {{0x9}, {0x48, 0x2, 0x0, 0x1, [@TCA_MPLS_TC={0x5}, @TCA_MPLS_BOS={0x5}, @TCA_MPLS_BOS={0x5}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x0, 0x40, 0x10000004, 0x1, 0x10001}, 0x3}}, @TCA_MPLS_PROTO={0x6, 0x4, 0x8863}, @TCA_MPLS_BOS={0x5}]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2}}}}, @m_vlan={0x10c, 0xe, 0x0, 0x0, {{0x9}, {0x54, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x9, 0x6, 0x20000000, 0x4, 0x2}, 0x2}}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0xfffffffb, 0xd8012f4f, 0x10000000, 0x81, 0x4}, 0x2}}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x3}]}, {0x8d, 0x6, "e2e606f7fb8885b31a241fb522c51737587026409eebad16fdd07efbfb062e4a67973742bbdef1a4766fb77744f3cbd97bc304f958f3f2e88286e98491aa071d723e0e512a22c05bd0a3007465b4f6c9e4b40c5edbc265f381bce2a0e6dec3d20fb97c7d17c25d6e63a3840f62228c884319123b7f7380dd9d0eff4d351341cf2df816b111933eb54b"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x4}}}}]}]}, 0x2c98}, 0x1, 0x0, 0x0, 0x24008000}, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="00281c80", @ANYRES16=r0, @ANYBLOB="ff"], 0x34}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="f4917c3794"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="58ad000010", 0x5, 0x0, 0x0, 0x0) r1 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f0000000000)='s', 0x10a73, 0x81e, 0x0, 0x4b6ae4f95a5de35b) 06:27:14 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_GET(r0, 0x0, 0x0) 06:27:14 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e40), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_NAN(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000e80)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 06:27:14 executing program 5: r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e24, @local}, 0x10) writev(r0, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) recvmmsg(r0, &(0x7f0000003e40)=[{{&(0x7f0000000100)=@phonet, 0x80, 0x0, 0x0, &(0x7f00000024c0)=""/4096, 0x1000, 0x21080}}, {{0x0, 0x80100200, 0x0, 0x0, &(0x7f00000035c0)=""/241, 0xf1}}, {{&(0x7f00000036c0)=@un=@abs, 0x80, &(0x7f0000003780)=[{&(0x7f0000003740)=""/4, 0xfffffd07}], 0x1, &(0x7f00000037c0)=""/236, 0xec}}, {{&(0x7f00000038c0)=@l2tp6={0xa, 0x0, 0x0, @private1}, 0x80, &(0x7f0000003bc0)=[{0x0}, {&(0x7f0000003a00)=""/190, 0xbe}, {&(0x7f0000003ac0)=""/131, 0x83}, {0x0}], 0x4, &(0x7f0000003c00)=""/73, 0x49}}, {{&(0x7f0000003c80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, 0x0, 0x0, &(0x7f0000003e00)=""/48, 0x30}}], 0x5, 0x40000121, 0x0) 06:27:14 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000005c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e24, @local}, 0x10) writev(r0, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) recvmmsg(r0, &(0x7f0000003e40)=[{{&(0x7f0000000100)=@phonet, 0x80, 0x0, 0x0, &(0x7f00000024c0)=""/4096, 0x1000, 0x281400}}, {{0x0, 0x80100200, 0x0, 0x0, &(0x7f00000035c0)=""/241, 0xf1}}, {{&(0x7f00000036c0)=@un=@abs, 0x80, &(0x7f0000003780)=[{&(0x7f0000003740)=""/4, 0xfffffd07}], 0x1, &(0x7f00000037c0)=""/236, 0xec}}, {{&(0x7f00000038c0)=@l2tp6={0xa, 0x0, 0x0, @private1}, 0x80, &(0x7f0000003bc0)=[{0x0}, {&(0x7f0000003a00)=""/190, 0xbe}, {&(0x7f0000003ac0)=""/131, 0x83}, {0x0}], 0x4, &(0x7f0000003c00)=""/73, 0x49}}, {{&(0x7f0000003c80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, 0x0, 0x0, &(0x7f0000003e00)=""/48, 0x30}}], 0x5, 0x40000121, 0x0) [ 3461.234296][ T3143] ================================================================== [ 3461.242517][ T3143] BUG: KCSAN: data-race in __cgroup_account_cputime_field / cgroup_rstat_flush_locked [ 3461.252098][ T3143] [ 3461.254439][ T3143] read-write to 0xffffe8ffffc6dc90 of 8 bytes by interrupt on cpu 0: [ 3461.262497][ T3143] __cgroup_account_cputime_field+0xae/0x100 [ 3461.268482][ T3143] account_system_index_time+0x7e/0x90 [ 3461.274065][ T3143] update_process_times+0x22/0x120 [ 3461.279181][ T3143] tick_sched_timer+0x23f/0x2c0 [ 3461.284041][ T3143] __hrtimer_run_queues+0x217/0x700 [ 3461.289240][ T3143] hrtimer_interrupt+0x224/0x7c0 [ 3461.294187][ T3143] __sysvec_apic_timer_interrupt+0xa7/0x250 [ 3461.300097][ T3143] sysvec_apic_timer_interrupt+0x8c/0xb0 [ 3461.305758][ T3143] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 3461.311757][ T3143] kcsan_setup_watchpoint+0x3fe/0x410 [ 3461.317134][ T3143] release_pages+0x82/0x7f0 [ 3461.321633][ T3143] free_pages_and_swap_cache+0x6e/0x80 [ 3461.327116][ T3143] tlb_flush_mmu+0x2e2/0x360 [ 3461.331709][ T3143] unmap_page_range+0x1a66/0x1e60 [ 3461.336738][ T3143] unmap_single_vma+0x13c/0x1c0 [ 3461.341597][ T3143] unmap_vmas+0x157/0x200 [ 3461.346077][ T3143] exit_mmap+0x158/0x520 [ 3461.350331][ T3143] __mmput+0x28/0x1c0 [ 3461.354322][ T3143] mmput+0x49/0x60 [ 3461.358050][ T3143] exit_mm+0xe1/0x180 [ 3461.362407][ T3143] do_exit+0x589/0x1710 [ 3461.366659][ T3143] do_group_exit+0x101/0x150 [ 3461.371254][ T3143] get_signal+0xea9/0xfe0 [ 3461.375603][ T3143] arch_do_signal_or_restart+0x89/0x2b0 [ 3461.381160][ T3143] exit_to_user_mode_loop+0x6d/0xe0 [ 3461.386543][ T3143] exit_to_user_mode_prepare+0x6a/0xa0 [ 3461.392012][ T3143] syscall_exit_to_user_mode+0x26/0x140 [ 3461.397578][ T3143] do_syscall_64+0x4d/0xc0 [ 3461.402029][ T3143] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3461.407976][ T3143] [ 3461.410304][ T3143] read to 0xffffe8ffffc6dc90 of 8 bytes by task 3143 on cpu 1: [ 3461.417846][ T3143] cgroup_rstat_flush_locked+0x2c3/0x700 [ 3461.423487][ T3143] cgroup_rstat_flush_irqsafe+0x28/0x40 [ 3461.429124][ T3143] mem_cgroup_flush_stats+0xc5/0x120 [ 3461.434428][ T3143] shrink_node+0x321/0x14f0 [ 3461.438936][ T3143] do_try_to_free_pages+0x40d/0xc80 [ 3461.444133][ T3143] try_to_free_mem_cgroup_pages+0x1e2/0x480 [ 3461.450028][ T3143] reclaim_high+0xca/0x110 [ 3461.454451][ T3143] mem_cgroup_handle_over_high+0x8c/0x1a0 [ 3461.460187][ T3143] exit_to_user_mode_loop+0x99/0xe0 [ 3461.465485][ T3143] exit_to_user_mode_prepare+0x6a/0xa0 [ 3461.470967][ T3143] syscall_exit_to_user_mode+0x26/0x140 [ 3461.476521][ T3143] do_syscall_64+0x4d/0xc0 06:27:14 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000b80)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e40), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_NAN(r0, &(0x7f0000000f00)={&(0x7f0000000e00), 0xc, &(0x7f0000000ec0)={&(0x7f0000000e80)={0x24, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x3}]}, 0x24}}, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r3, 0x0, 0xca, &(0x7f0000000000)={0x0, 0x0, 0xd2, 0x0, @vifc_lcl_addr=@remote, @local}, 0x10) [ 3461.480938][ T3143] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3461.486831][ T3143] [ 3461.489146][ T3143] value changed: 0x0000000f6b3b6df5 -> 0x0000000f6bd3d491 [ 3461.496371][ T3143] [ 3461.498685][ T3143] Reported by Kernel Concurrency Sanitizer on: [ 3461.504823][ T3143] CPU: 1 PID: 3143 Comm: syz-executor.0 Not tainted 6.3.0-rc3-syzkaller-00005-g7d31677bb7b1 #0 [ 3461.515154][ T3143] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/02/2023 [ 3461.525202][ T3143] ================================================================== 06:27:14 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000080)={0x0}}, 0x0) 06:27:14 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_REMOVEDEF(r0, &(0x7f0000002000)={0x0, 0x0, &(0x7f0000001fc0)={&(0x7f0000001f80)={0x14}, 0x14}}, 0x0) [ 3461.550599][T31637] netlink: 'syz-executor.4': attribute type 41 has an invalid length. [ 3461.558974][T31637] netlink: 44123 bytes leftover after parsing attributes in process `syz-executor.4'. 06:27:14 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_STATION(r0, 0x0, 0x0) bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000000a40), 0x4) 06:27:14 executing program 2: syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) openat$zero(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) 06:27:14 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000e40), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_ADD_TX_TS(r0, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000e00)={&(0x7f0000000dc0)={0x20, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}}, 0x20}}, 0x0) syz_clone3(&(0x7f00000003c0)={0x100002000, &(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000240), {0x9}, &(0x7f0000000280)=""/163, 0xa3, &(0x7f0000000340)=""/19, &(0x7f0000000380)=[0xffffffffffffffff], 0x1}, 0x58) sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f0000000580)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000540)={0x0}, 0x1, 0x0, 0x0, 0x24004080}, 0x24000010) syz_genetlink_get_family_id$nl80211(&(0x7f0000000e40), 0xffffffffffffffff) [ 3461.634981][T31637] A link change request failed with some changes committed already. Interface ip6tnl0 may have been left with an inconsistent configuration, please check. [ 3461.654109][T31642] lo: entered allmulticast mode 06:27:21 executing program 0: r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$cgroup_subtree(r0, &(0x7f00000003c0)=ANY=[], 0x8) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x3) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) 06:27:21 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) recvmsg(r0, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) (async, rerun: 32) sendto$inet6(r0, &(0x7f00000001c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0) (async, rerun: 32) recvmsg(r0, &(0x7f00000003c0)={0x0, 0x3, 0x0}, 0x0) (async) recvmsg(r0, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x0) (async) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) recvfrom$inet6(r0, &(0x7f0000000000)=""/114, 0xfffffffffffffd1b, 0x0, 0x0, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000040)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000100)={&(0x7f0000000a40)=@newtaction={0x2c98, 0x30, 0x300, 0x70bd27, 0x25dfdbfe, {}, [{0x14c, 0x1, [@m_connmark={0x148, 0x1, 0x0, 0x0, {{0xd}, {0xc8, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x0, 0x8, 0x10000002, 0x9, 0x1}, 0x8}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3, 0x0, 0xffffffffffffffff, 0x7fffffff, 0x1}, 0x7}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3, 0x4, 0x6, 0xe00000, 0x800}, 0x3}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x9, 0x0, 0x2, 0x2, 0xfa7}, 0xff}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x7f, 0x9, 0x8, 0x6, 0xfffffff7}, 0x4}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x5d, 0x5e, 0xffffffffffffffff, 0x3f53, 0x82}, 0x43e}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x91, 0x7, 0x1, 0xfffeffff, 0x800}, 0x400}}]}, {0x51, 0x6, "d426ef0467b4d49d113fc8a698a2eb4a037424906989e0fce842f5c29647577c4209434be28714ca762d5ef95f9caa885bd59d60a79df2cfb2ab9411421d948c103cff354d80ffad174b816b3e"}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}]}, {0xfc, 0x1, [@m_ipt={0xf8, 0x1f, 0x0, 0x0, {{0x8}, {0xd0, 0x2, 0x0, 0x1, [@TCA_IPT_TABLE={0x24, 0x1, 'mangle\x00'}, @TCA_IPT_TABLE={0x24, 0x1, 'nat\x00'}, @TCA_IPT_TARG={0x82, 0x6, {0x401, 'mangle\x00', 0xfc, 0x100, "91f43e3d31b6804d906525773ac03de282324c606c16e92f26e6af3adea0f0448b057dfdc04a9393f043ca6e4f71a3dfb70a00308fee90601bc5df34c2b9f17b539c6e2263d0da5818beabc3166e2ad504b77299912208e1"}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x4}}}}]}, {0x2a3c, 0x1, [@m_connmark={0x1ec, 0x1, 0x0, 0x0, {{0xd}, {0x11c, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xfffffc00, 0x4, 0x1, 0x2, 0xffff0001}}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xfffffffb, 0x7ff, 0x1, 0x54b, 0x80000001}, 0x9}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x0, 0x8, 0xffffffffffffffff, 0x0, 0x1}, 0x7}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x80000000, 0x87, 0x6, 0xffff}, 0x40}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x80, 0x8001, 0x10000000, 0x6, 0x8001}, 0x9}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xd, 0x9, 0x7, 0x9, 0x6000}, 0x2}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x6, 0x1000, 0x6, 0xffffffff, 0x1}, 0x1f}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x0, 0x8, 0x5, 0x10001, 0x81}, 0x1}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xeee, 0x5, 0x20000000, 0xc29, 0xce}, 0x3ff}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x7, 0x3bc6, 0x2, 0x59, 0x7f}, 0x100}}]}, {0xa1, 0x6, "3078bba76efc85088a0c59aa50b360a097a9ba414fdbb98487374605c61b63b4013d82ff15dbc5622331a07a92897a2de171ef7df7922fb751e8029d782405cb34b11a03cc118a7d5bea56144cc41280a6d823193e303a8c37cff370c78e0c0eedf6a80b1f1e683d16b79cf8de307ec8006a76f1431efcdef90abee6f0e0c6596fe0904ff4e007d3314ca3e7a30ac84c1b137af69baf8393ef1541393a"}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}, @m_ife={0x17c, 0xe, 0x0, 0x0, {{0x8}, {0xd8, 0x2, 0x0, 0x1, [@TCA_IFE_METALST={0x34, 0x6, [@IFE_META_PRIO={0x8, 0x3, @val=0x7}, @IFE_META_TCINDEX={0x6, 0x5, @val=0x81}, @IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_PRIO={0x8, 0x3, @val=0x788}, @IFE_META_SKBMARK={0x8, 0x1, @val=0x4}, @IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_TCINDEX={0x4, 0x5, @void}]}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x246, 0x1, 0x7, 0x8000}}}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x8, 0x1000, 0x3, 0x213}}}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x48c, 0x3, 0x20000000, 0x4, 0x2}}}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x3ff, 0x7, 0x1, 0x9, 0x8}, 0x1}}, @TCA_IFE_METALST={0x24, 0x6, [@IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_PRIO={0x8, 0x3, @val=0x3}, @IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_SKBMARK={0x8, 0x1, @val=0x40}]}, @TCA_IFE_DMAC={0xa}]}, {0x80, 0x6, "3d000c20a7f0419aa27a3fcf717a579a46477b26b0139cfc711c3bd51b55653e443ce54f5da67261df76eedc896a62113e5e78d59f3af8b430a8871699f6372536cfbd377715bffbd6945eb73734cbd3ed9b3e06f110b330d2633872e51c4a783f83fcd5e6bf9add4776ead4ce669b936d290acb8ea05d22a3e3fc25"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1}}}}, @m_csum={0x10c, 0x11, 0x0, 0x0, {{0x9}, {0xc8, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x4, 0x3, 0xffffffffffffffff, 0x5, 0x3}, 0x6a}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0xc3, 0x362, 0x3, 0x4, 0x60}, 0x28}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0xfffffffb, 0x1, 0x1, 0x280000}, 0x38}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x61, 0xdf73, 0x2, 0x3f, 0x8}, 0x48}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x1e6ba8c4, 0x1ff, 0x7, 0x3f, 0x8}, 0x26}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x0, 0x10000, 0x0, 0x1, 0x8000}, 0x67}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x6, 0x902, 0x20000000, 0x10000, 0x1000}, 0x6c}}]}, {0x1b, 0x6, "7cc1255dd8c7b1819320465c7a424d5777541cdfd8fc62"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_police={0x1184, 0x1e, 0x0, 0x0, {{0xb}, {0x10f8, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE64={0xc, 0x8, 0x8ed}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x8, 0xfffffffc, 0xffffff81, 0xff, 0x8, 0x8003, 0x81, 0x65f5, 0x6, 0x7, 0x5, 0x100, 0x7, 0xfffffffd, 0xfafde386, 0x3, 0x2, 0x100, 0x6, 0x1000, 0x7, 0x10001, 0x101, 0xff, 0xfffffffe, 0x8, 0x4, 0x7, 0xa9, 0x1, 0x5, 0x8000, 0x29e, 0xffff, 0xfffffffd, 0x4429, 0x3, 0x4, 0x7f, 0x0, 0xfffffff8, 0x5e9e, 0xffffff80, 0x1, 0x3f, 0xac, 0x7092b5fc, 0x9, 0x5, 0x0, 0xda2, 0x8, 0x3f, 0x4, 0x6, 0x4, 0x1, 0xf42, 0x1, 0x5, 0x6, 0x0, 0x3, 0xffffffe0, 0x79c1bfe0, 0x7, 0x3, 0x80000001, 0xd, 0x1f, 0xa6, 0xfffff37c, 0x6, 0x9, 0x0, 0x8000, 0x0, 0x81, 0x7, 0x2efe343a, 0x3b867cb8, 0x10001, 0x9, 0x50000, 0x4000, 0xffffff00, 0x2, 0x401, 0x5, 0x8000, 0x8, 0x8, 0x5, 0x3, 0x7, 0x7fffffff, 0x8, 0x8000, 0x1, 0x80, 0x0, 0x7, 0x1, 0xffff, 0x7, 0x80000000, 0x9, 0x3, 0x7, 0x8a, 0x30f, 0x1, 0x401, 0x10000, 0x6, 0x4, 0x6, 0x5402, 0x1, 0x8, 0xffff, 0x3, 0x4, 0x10, 0x7f, 0x8001, 0x61c, 0xada, 0x9, 0x2, 0x81, 0x1000, 0x0, 0x1, 0x8, 0x1, 0xffff, 0x3f, 0x12cd933f, 0x7fffffff, 0x1f, 0x2, 0x4, 0x1ff, 0x9, 0x40, 0xb82, 0xb8, 0x0, 0xbd7, 0x5, 0x5, 0xfffffeff, 0xd03, 0x800, 0xa761, 0x6, 0x8000, 0x7, 0x9d, 0x9, 0x31, 0x0, 0xfd, 0xb05, 0x9, 0x6, 0x1ff, 0x3ff, 0x7f, 0x3f, 0x7, 0x4, 0x6, 0x40, 0x1000, 0x650, 0x80000001, 0x3800, 0x101, 0x9, 0x7f, 0xfff, 0x7, 0x1ff, 0x9, 0x5, 0x1, 0x401, 0x1, 0x5, 0x8001, 0x2, 0x0, 0xffffffe1, 0x2, 0x8, 0x1, 0x80000000, 0x0, 0x7, 0x0, 0x4, 0x4, 0x17, 0x6, 0x40, 0x5, 0x4, 0x6, 0x8, 0x3, 0x5, 0x80, 0x4, 0xfffffffc, 0x3ff, 0xbc, 0x2, 0x1, 0x800, 0x100, 0x9, 0x553e, 0x20000, 0x6, 0x9, 0x2, 0x2, 0x400, 0x8001, 0x5, 0x1fffe000, 0x1, 0xfff, 0x2, 0xffffffff, 0x8, 0x4, 0x2, 0x3, 0x9, 0x4, 0x6, 0x0, 0xe20b, 0x2, 0x1, 0x4, 0x8, 0x0, 0x5, 0x7, 0x80, 0x9, 0x4cd5dbe]}, @TCA_POLICE_RATE64={0xc, 0x8, 0xc0000000}, @TCA_POLICE_TBF={0x3c, 0x1, {0x3, 0x4, 0x27, 0x2, 0x971, {0x5, 0x1, 0x7, 0x1, 0x8, 0x38cc}, {0x40, 0x1, 0x9, 0xfff9, 0x1ff, 0x8000}, 0x3, 0x22, 0x8}}, @TCA_POLICE_RESULT={0x8, 0x5, 0x7}, @TCA_POLICE_AVRATE={0x8}, @TCA_POLICE_RATE64={0xc}], [@TCA_POLICE_AVRATE={0x8, 0x4, 0x8000}, @TCA_POLICE_RATE={0x404, 0x2, [0x25, 0x100, 0x2, 0x2, 0x2, 0x5, 0x6, 0x5, 0x0, 0xc65, 0x5, 0x1, 0x236a, 0xff, 0x200, 0x5, 0x1, 0x5, 0x8000, 0x3, 0x4, 0x7fff, 0x8, 0x0, 0x9, 0x3b9, 0x400, 0x7fff, 0x1, 0x6, 0x3ca7, 0x61, 0x7fff, 0x1, 0x6, 0x5cbc, 0x0, 0x7, 0x9, 0x7, 0x2, 0xfffffffd, 0x5, 0x8001, 0x8, 0x4, 0x7, 0x6, 0x8001, 0x40, 0x10001, 0x6, 0x0, 0x4, 0x3, 0xfce, 0x1, 0x7ed, 0x5, 0x7fffffff, 0x1, 0xffffffc0, 0x200, 0x1c, 0x7, 0x81, 0x7, 0x4, 0x101, 0x80000001, 0x1, 0x7fff, 0x2, 0xffff, 0x0, 0xffffff89, 0x81, 0x9, 0xffffffff, 0xdc9e, 0x9, 0x0, 0x101, 0x3, 0x18d3, 0x7, 0x33, 0x1, 0x9, 0x8, 0x40, 0x8001, 0xfff, 0x747, 0x2, 0x0, 0x7, 0x0, 0x5, 0x3f, 0x4, 0x7, 0xffff, 0x1, 0xf252, 0x1f, 0x1f, 0xffff, 0x7, 0x697, 0x9, 0x6, 0x20, 0x80000000, 0xcb4, 0x1, 0x100, 0x3de0, 0x400, 0xc1d, 0x3, 0x2, 0x80000000, 0xbe, 0x1000, 0x2, 0xf, 0xca, 0x4, 0x7, 0x4898, 0x8d0, 0x0, 0x9, 0xfffffffa, 0x1, 0x5, 0x1c0000, 0x4, 0x63c, 0x6, 0x1ff, 0x1, 0x10001, 0x7f, 0x6, 0x4, 0x80000000, 0x3, 0x7fff, 0x4, 0x8, 0xffff032e, 0x3, 0x9, 0xf5, 0x8f22, 0xffff, 0x8, 0x5, 0x8, 0xe512, 0x6, 0x101, 0x1f, 0xffffffff, 0x72a, 0xfff, 0x2, 0x3a, 0x7ff, 0x1, 0x21ba, 0x80000000, 0x20000000, 0x2, 0x9fa8000, 0xff, 0xe11, 0xfffffffe, 0x71b8c8bd, 0xfff, 0x2, 0x4, 0x907a, 0x0, 0xffffffff, 0x8, 0x3d4c, 0x9, 0x2, 0x9, 0x32a60, 0x3, 0xffff121e, 0x7, 0x0, 0x100, 0xfffffff8, 0x2, 0x1, 0xffffffff, 0x0, 0x2, 0x80, 0x2, 0x10001000, 0x4, 0x8, 0x7, 0x5b, 0x8, 0x1, 0x0, 0x7fffffff, 0x0, 0xf78, 0xb4d5, 0xffff, 0x3ff, 0x4, 0x10000, 0x7, 0xfff, 0x0, 0x5, 0x7300, 0xdf7, 0x9, 0x400, 0x3, 0x401, 0x9, 0x583, 0x6c4f, 0x8, 0x80, 0xffff72ee, 0x8000, 0x4, 0x6, 0x8000, 0x1, 0x7, 0xffffffff, 0x1800, 0x6, 0x3, 0x3, 0x5, 0x401, 0x20, 0x1, 0x4, 0x36, 0x7]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x80000000}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x6}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x8, 0x9, 0x1a919c15, 0x172, 0x9, 0xfffffffc, 0x9e, 0x70, 0x400, 0x0, 0xffffffff, 0x4, 0x9, 0x6, 0x9a82, 0x5, 0x2, 0xf75d, 0x9, 0x8, 0x6, 0x6, 0x7, 0x6, 0x3ff, 0x9, 0x7, 0x40, 0xfffffff9, 0x15a156ec, 0x7, 0x8000, 0x800, 0x81, 0x1, 0x10000, 0x1, 0x3, 0x9, 0x5, 0xd360, 0x20, 0x4, 0xffffffc0, 0x4a, 0x7f, 0x0, 0x0, 0x0, 0x2b8, 0x7, 0x2, 0x3, 0x7, 0x7, 0x8, 0x261, 0x1, 0xfffffffd, 0x9fe, 0x0, 0x1, 0x3ff, 0x1, 0x9, 0x7fff, 0x4a23, 0x20, 0x6, 0x1, 0x101, 0x2, 0x8, 0x7, 0x1, 0x1, 0x0, 0x5, 0x80, 0xda2, 0x400, 0x8, 0x8, 0x4, 0x3f, 0xffff, 0x1, 0x0, 0x8001, 0x20, 0x3ff, 0x4e, 0xb40, 0x10001, 0x7ff, 0x5, 0x4, 0x8000, 0x7, 0xfffffff9, 0x8, 0x9, 0x9, 0x7b1, 0x9, 0x38, 0x7, 0x6, 0x8, 0x6, 0x7, 0x80000001, 0x3f, 0xada, 0x2, 0x1, 0x1ff, 0x60fb, 0x9, 0x9, 0x5, 0x3, 0x0, 0x7fffffff, 0x101, 0x7fff, 0x6, 0x0, 0x0, 0x0, 0x7, 0x6, 0x3ff, 0x1, 0x8, 0x9, 0x81, 0x9, 0x7, 0x3, 0x351, 0xffff, 0x99, 0x401, 0x8001, 0x9, 0x1, 0x80000001, 0x2, 0x400, 0x1, 0x5, 0x34a, 0x1, 0x4, 0x6, 0x0, 0x8, 0xffff5911, 0x5, 0x8000, 0x3f, 0x0, 0x5, 0x85, 0x8, 0x34e8fdf2, 0xd1, 0x2, 0xdb, 0x7fff, 0x7, 0xfffffff8, 0x80000001, 0x4, 0x3, 0x40, 0x80000001, 0x7, 0x2, 0x2, 0xfff, 0x4, 0x3, 0x4, 0xea5, 0xffffffff, 0x81, 0x6, 0x800, 0x10001, 0x3, 0x8, 0xa8, 0x8, 0x71, 0x3ff, 0xc45c, 0x3ff, 0x9, 0x7fff, 0x8, 0x960, 0xa0, 0x7, 0x7, 0x3f, 0x2, 0x80, 0xff, 0x7f, 0x4114, 0x4, 0x2, 0x9, 0x7, 0x3, 0x3, 0xfd73, 0xffff, 0x5, 0x6d, 0x7, 0x5, 0xec, 0x2, 0x4, 0x2, 0x7, 0x7f, 0x25, 0x2c92, 0x3, 0x8, 0x8001, 0x500, 0x6, 0xdea, 0x7, 0x2e6aeac9, 0x5, 0x4, 0x3ff, 0xa6d, 0x414d3c1a, 0x80000000, 0x7, 0x7, 0xfaa, 0x8, 0x80000000, 0x7fff, 0x2, 0x1, 0x432477cf, 0x9]}], [@TCA_POLICE_TBF={0x3c, 0x1, {0x1f, 0x20000000, 0x7, 0xffff, 0x8, {0x2, 0x2, 0x7f, 0x20, 0x6, 0xffffffe0}, {0x81, 0x0, 0x5, 0x0, 0x8, 0x4}, 0xe98, 0x800, 0x5c4e}}, @TCA_POLICE_RATE={0x404, 0x2, [0x3, 0x7, 0x8, 0xcc5, 0x9, 0xff8, 0xfffffffd, 0x6, 0x0, 0x8001, 0x9, 0x101, 0x0, 0x2, 0x3ff, 0x7, 0x3, 0x8, 0xb20, 0xd5, 0x80, 0x20, 0x4bc5042e, 0x9, 0x3ff, 0x1, 0x43e6, 0x1, 0x7ff, 0x8, 0x80000001, 0x4, 0x3, 0x7ff, 0xffffffff, 0x8001, 0x7d2, 0x7, 0xfffffffe, 0x9, 0x1f, 0x9, 0x5, 0x3ff, 0xfffffffe, 0x1, 0x9, 0x8, 0x1, 0x40, 0xff, 0x9, 0xffff12cb, 0x20, 0x2, 0x5, 0x9, 0x5, 0x4, 0x80000001, 0x1000, 0x40, 0x1, 0x401, 0x6000000, 0x9, 0x8, 0x7fff, 0x5, 0x1ff, 0xfffffffe, 0x9, 0x80000000, 0x8, 0x1f, 0x2, 0x1f, 0x6, 0x6a, 0x2, 0x5, 0x9108131, 0x8, 0x9, 0x1f, 0x10001, 0xe, 0x7b5, 0x7f, 0x4, 0x400, 0x8001, 0x8001, 0x3f, 0xffffffff, 0x4, 0xfffffff8, 0x1000, 0x10001, 0xa00000, 0x8, 0xdb9, 0xff, 0x80000000, 0x2c6, 0x8, 0x1, 0x293d, 0xfff, 0x0, 0x4, 0x6, 0x12b, 0x7ff, 0x1, 0x4, 0x800, 0x87b, 0x6, 0x2, 0x9, 0x1, 0x3ff, 0x33, 0xffffc9aa, 0x0, 0x5, 0x9, 0x3, 0xa3d3, 0x3, 0x7, 0x0, 0x2fa6, 0x8, 0x3, 0x7, 0x2, 0x4, 0x818, 0x6, 0x8, 0x8000, 0x2, 0x9, 0x7f, 0x3, 0x3, 0x3ff, 0x2dc1, 0x8, 0x2, 0x3, 0x9, 0x40, 0x6, 0x3, 0x6, 0x800, 0x1, 0x56b, 0x3, 0x401, 0x10001, 0x7ff, 0x4ebf, 0x2, 0x4, 0xda3, 0x8001, 0x3, 0xfffffffc, 0x9, 0xfffffff8, 0x8, 0xff, 0x8000, 0x9, 0xfffffff9, 0x5, 0x0, 0x7d1, 0x7ea46b5d, 0x7f, 0x101, 0xe6, 0x7ff, 0x4, 0x5, 0x20, 0x3, 0x1, 0x6, 0x6d4, 0x5, 0x7fffffff, 0x6, 0x200, 0x1000, 0x5, 0x6, 0x9, 0x7eb, 0xb57, 0xd9ac, 0x3, 0x7fff, 0x0, 0xe17d, 0x8000, 0xfffffffa, 0x8, 0x2, 0x0, 0x6, 0xfff, 0x1000, 0x0, 0x7, 0xc2, 0x3, 0x3, 0xfff, 0x2, 0x800, 0x1, 0x9, 0x9d, 0x7fffffff, 0x1f, 0x321a, 0x9, 0x2, 0xfffffffc, 0x7, 0x9, 0x100000, 0x8001, 0x4000, 0x8, 0x71c6, 0x10000, 0x10000, 0xfc, 0x3ff, 0x5, 0x7, 0xa345, 0x2, 0x9, 0xffff, 0x0, 0x7, 0x2, 0x3, 0x80000000]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x20}], [@TCA_POLICE_RATE64={0xc}, @TCA_POLICE_RATE64={0xc, 0x8, 0x1}]]}, {0x64, 0x6, "bf5d80b304f1096a63e916b257df5452dd901e144d066faecdb62446d3b86fcbd558705938263094ac6dcda2615c00a79ffa25052b424544fe15e462100d3ac82e8c45d4bd69974e089b5d837e1765879940bc01db23e11a4bc5ddd2789f7bbf"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_connmark={0x120, 0xd, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xffff170b, 0xfffffffb, 0x20000000, 0x6, 0x3}, 0xdd}}]}, {0xd2, 0x6, "58087a0f37cbff6a0c59eff74dfd57d7aa57b2f3f88ca27735906b023641ef166aa976b86879b4b59818114e7b0c78900525ecd78590d0948f7bc9c594b18a5f3d09f4f4cdeeef500a62658dacac1297338de071e63efeca1cbbc89939fb850b2ded405601845666936b7aa33ab81e0b336e0ab2eae8dd0c119a82b14d14c8378b0ec228edd4c02c0b4bae981d1b9a0376c86746affc4bb02f9fba6127f5cb00a3ec7b303335d24a603fdb58bfa1f5f0584e8e5aa255a5951efc0b880c1be4b68c93b8943b0d1b1e893103c890c5"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x4d22f854cfa5c7e4}}}}, @m_gact={0x88, 0x12, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x8bce1016d95b85f2, 0x1756, 0x10000000}}, @TCA_GACT_PARMS={0x18, 0x2, {0xa1, 0x4, 0x6, 0x1, 0x7ff}}]}, {0x36, 0x6, "d94ec7c4f9f9fefd5873f10f80bca3bd81e9024dfb591d3282ceabaf54b5d261f9559806f4e5d04b82a1ce56d9571069fded"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_skbmod={0x118, 0x20, 0x0, 0x0, {{0xb}, {0x34, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x5c0, 0x360, 0x6, 0x8e3d, 0x3}, 0xf}}, @TCA_SKBMOD_SMAC={0xa, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x24}}]}, {0xbb, 0x6, "a91f6f2c2bc3f93254d6994dad51a497e14bccbd3345bde60fdfce3098a1629855322e7d95853d877ceedc37a51140081756754d71336c381094fca33694cae1ffc0b971cb144a3f2b9d9687d6a6529ff4a733174ec95301aaaf2e594eeee57aeb73dbdeea3fd3744bbf0e83a3bf27c8fed7fb58e1eeca3e133a44b28b83a5de9b02131a8a5168f742f151f9d6d1e88edc6968f90439235a0e977808121e2f40037e4d304387d4525ed6907b040eeaad19e23ae37f2a7e"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_mpls={0x1074, 0x13, 0x0, 0x0, {{0x9}, {0x48, 0x2, 0x0, 0x1, [@TCA_MPLS_TC={0x5}, @TCA_MPLS_BOS={0x5}, @TCA_MPLS_BOS={0x5}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x0, 0x40, 0x10000004, 0x1, 0x10001}, 0x3}}, @TCA_MPLS_PROTO={0x6, 0x4, 0x8863}, @TCA_MPLS_BOS={0x5}]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2}}}}, @m_vlan={0x10c, 0xe, 0x0, 0x0, {{0x9}, {0x54, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x9, 0x6, 0x20000000, 0x4, 0x2}, 0x2}}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0xfffffffb, 0xd8012f4f, 0x10000000, 0x81, 0x4}, 0x2}}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x3}]}, {0x8d, 0x6, "e2e606f7fb8885b31a241fb522c51737587026409eebad16fdd07efbfb062e4a67973742bbdef1a4766fb77744f3cbd97bc304f958f3f2e88286e98491aa071d723e0e512a22c05bd0a3007465b4f6c9e4b40c5edbc265f381bce2a0e6dec3d20fb97c7d17c25d6e63a3840f62228c884319123b7f7380dd9d0eff4d351341cf2df816b111933eb54b"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x4}}}}]}]}, 0x2c98}, 0x1, 0x0, 0x0, 0x24008000}, 0x0) (async, rerun: 64) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="00281c80", @ANYRES16=r0, @ANYBLOB="ff"], 0x34}}, 0x0) (async, rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="f4917c3794"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="58ad000010", 0x5, 0x0, 0x0, 0x0) r1 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f0000000000)='s', 0x10a73, 0x81e, 0x0, 0x4b6ae4f95a5de35b) 06:27:21 executing program 2: dup(0xffffffffffffffff) io_setup(0x488a, &(0x7f00000000c0)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x49, &(0x7f0000000040)={0x77359400}, 0x10) 06:27:21 executing program 1: openat$dir(0xffffffffffffff9c, &(0x7f0000002300)='./file0\x00', 0x2bf25b81e3806664, 0x0) 06:27:21 executing program 5: r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e24, @local}, 0x10) writev(r0, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) recvmmsg(r0, &(0x7f0000003e40)=[{{&(0x7f0000000100)=@phonet, 0x80, 0x0, 0x0, &(0x7f00000024c0)=""/4096, 0x1000, 0x40000}}, {{0x0, 0x80100200, 0x0, 0x0, &(0x7f00000035c0)=""/241, 0xf1}}, {{&(0x7f00000036c0)=@un=@abs, 0x80, &(0x7f0000003780)=[{&(0x7f0000003740)=""/4, 0xfffffd07}], 0x1, &(0x7f00000037c0)=""/236, 0xec}}, {{&(0x7f00000038c0)=@l2tp6={0xa, 0x0, 0x0, @private1}, 0x80, &(0x7f0000003bc0)=[{0x0}, {&(0x7f0000003a00)=""/190, 0xbe}, {&(0x7f0000003ac0)=""/131, 0x83}, {0x0}], 0x4, &(0x7f0000003c00)=""/73, 0x49}}, {{&(0x7f0000003c80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, 0x0, 0x0, &(0x7f0000003e00)=""/48, 0x30}}], 0x5, 0x40000121, 0x0) 06:27:21 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000005c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e24, @local}, 0x10) writev(r0, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) recvmmsg(r0, &(0x7f0000003e40)=[{{&(0x7f0000000100)=@phonet, 0x80, 0x0, 0x0, &(0x7f00000024c0)=""/4096, 0x1000, 0x400000}}, {{0x0, 0x80100200, 0x0, 0x0, &(0x7f00000035c0)=""/241, 0xf1}}, {{&(0x7f00000036c0)=@un=@abs, 0x80, &(0x7f0000003780)=[{&(0x7f0000003740)=""/4, 0xfffffd07}], 0x1, &(0x7f00000037c0)=""/236, 0xec}}, {{&(0x7f00000038c0)=@l2tp6={0xa, 0x0, 0x0, @private1}, 0x80, &(0x7f0000003bc0)=[{0x0}, {&(0x7f0000003a00)=""/190, 0xbe}, {&(0x7f0000003ac0)=""/131, 0x83}, {0x0}], 0x4, &(0x7f0000003c00)=""/73, 0x49}}, {{&(0x7f0000003c80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, 0x0, 0x0, &(0x7f0000003e00)=""/48, 0x30}}], 0x5, 0x40000121, 0x0) 06:27:21 executing program 1: syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) 06:27:21 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) recvmsg(r0, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) (async) sendto$inet6(r0, &(0x7f00000001c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0) recvmsg(r0, &(0x7f00000003c0)={0x0, 0x3, 0x0}, 0x0) (async) recvmsg(r0, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x0) (async) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) (async) recvfrom$inet6(r0, &(0x7f0000000000)=""/114, 0xfffffffffffffd1b, 0x0, 0x0, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000040)) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000100)={&(0x7f0000000a40)=@newtaction={0x2c98, 0x30, 0x300, 0x70bd27, 0x25dfdbfe, {}, [{0x14c, 0x1, [@m_connmark={0x148, 0x1, 0x0, 0x0, {{0xd}, {0xc8, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x0, 0x8, 0x10000002, 0x9, 0x1}, 0x8}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3, 0x0, 0xffffffffffffffff, 0x7fffffff, 0x1}, 0x7}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3, 0x4, 0x6, 0xe00000, 0x800}, 0x3}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x9, 0x0, 0x2, 0x2, 0xfa7}, 0xff}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x7f, 0x9, 0x8, 0x6, 0xfffffff7}, 0x4}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x5d, 0x5e, 0xffffffffffffffff, 0x3f53, 0x82}, 0x43e}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x91, 0x7, 0x1, 0xfffeffff, 0x800}, 0x400}}]}, {0x51, 0x6, "d426ef0467b4d49d113fc8a698a2eb4a037424906989e0fce842f5c29647577c4209434be28714ca762d5ef95f9caa885bd59d60a79df2cfb2ab9411421d948c103cff354d80ffad174b816b3e"}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}]}, {0xfc, 0x1, [@m_ipt={0xf8, 0x1f, 0x0, 0x0, {{0x8}, {0xd0, 0x2, 0x0, 0x1, [@TCA_IPT_TABLE={0x24, 0x1, 'mangle\x00'}, @TCA_IPT_TABLE={0x24, 0x1, 'nat\x00'}, @TCA_IPT_TARG={0x82, 0x6, {0x401, 'mangle\x00', 0xfc, 0x100, "91f43e3d31b6804d906525773ac03de282324c606c16e92f26e6af3adea0f0448b057dfdc04a9393f043ca6e4f71a3dfb70a00308fee90601bc5df34c2b9f17b539c6e2263d0da5818beabc3166e2ad504b77299912208e1"}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x4}}}}]}, {0x2a3c, 0x1, [@m_connmark={0x1ec, 0x1, 0x0, 0x0, {{0xd}, {0x11c, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xfffffc00, 0x4, 0x1, 0x2, 0xffff0001}}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xfffffffb, 0x7ff, 0x1, 0x54b, 0x80000001}, 0x9}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x0, 0x8, 0xffffffffffffffff, 0x0, 0x1}, 0x7}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x80000000, 0x87, 0x6, 0xffff}, 0x40}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x80, 0x8001, 0x10000000, 0x6, 0x8001}, 0x9}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xd, 0x9, 0x7, 0x9, 0x6000}, 0x2}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x6, 0x1000, 0x6, 0xffffffff, 0x1}, 0x1f}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x0, 0x8, 0x5, 0x10001, 0x81}, 0x1}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xeee, 0x5, 0x20000000, 0xc29, 0xce}, 0x3ff}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x7, 0x3bc6, 0x2, 0x59, 0x7f}, 0x100}}]}, {0xa1, 0x6, "3078bba76efc85088a0c59aa50b360a097a9ba414fdbb98487374605c61b63b4013d82ff15dbc5622331a07a92897a2de171ef7df7922fb751e8029d782405cb34b11a03cc118a7d5bea56144cc41280a6d823193e303a8c37cff370c78e0c0eedf6a80b1f1e683d16b79cf8de307ec8006a76f1431efcdef90abee6f0e0c6596fe0904ff4e007d3314ca3e7a30ac84c1b137af69baf8393ef1541393a"}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}, @m_ife={0x17c, 0xe, 0x0, 0x0, {{0x8}, {0xd8, 0x2, 0x0, 0x1, [@TCA_IFE_METALST={0x34, 0x6, [@IFE_META_PRIO={0x8, 0x3, @val=0x7}, @IFE_META_TCINDEX={0x6, 0x5, @val=0x81}, @IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_PRIO={0x8, 0x3, @val=0x788}, @IFE_META_SKBMARK={0x8, 0x1, @val=0x4}, @IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_TCINDEX={0x4, 0x5, @void}]}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x246, 0x1, 0x7, 0x8000}}}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x8, 0x1000, 0x3, 0x213}}}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x48c, 0x3, 0x20000000, 0x4, 0x2}}}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x3ff, 0x7, 0x1, 0x9, 0x8}, 0x1}}, @TCA_IFE_METALST={0x24, 0x6, [@IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_PRIO={0x8, 0x3, @val=0x3}, @IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_SKBMARK={0x8, 0x1, @val=0x40}]}, @TCA_IFE_DMAC={0xa}]}, {0x80, 0x6, "3d000c20a7f0419aa27a3fcf717a579a46477b26b0139cfc711c3bd51b55653e443ce54f5da67261df76eedc896a62113e5e78d59f3af8b430a8871699f6372536cfbd377715bffbd6945eb73734cbd3ed9b3e06f110b330d2633872e51c4a783f83fcd5e6bf9add4776ead4ce669b936d290acb8ea05d22a3e3fc25"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1}}}}, @m_csum={0x10c, 0x11, 0x0, 0x0, {{0x9}, {0xc8, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x4, 0x3, 0xffffffffffffffff, 0x5, 0x3}, 0x6a}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0xc3, 0x362, 0x3, 0x4, 0x60}, 0x28}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0xfffffffb, 0x1, 0x1, 0x280000}, 0x38}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x61, 0xdf73, 0x2, 0x3f, 0x8}, 0x48}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x1e6ba8c4, 0x1ff, 0x7, 0x3f, 0x8}, 0x26}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x0, 0x10000, 0x0, 0x1, 0x8000}, 0x67}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x6, 0x902, 0x20000000, 0x10000, 0x1000}, 0x6c}}]}, {0x1b, 0x6, "7cc1255dd8c7b1819320465c7a424d5777541cdfd8fc62"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_police={0x1184, 0x1e, 0x0, 0x0, {{0xb}, {0x10f8, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE64={0xc, 0x8, 0x8ed}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x8, 0xfffffffc, 0xffffff81, 0xff, 0x8, 0x8003, 0x81, 0x65f5, 0x6, 0x7, 0x5, 0x100, 0x7, 0xfffffffd, 0xfafde386, 0x3, 0x2, 0x100, 0x6, 0x1000, 0x7, 0x10001, 0x101, 0xff, 0xfffffffe, 0x8, 0x4, 0x7, 0xa9, 0x1, 0x5, 0x8000, 0x29e, 0xffff, 0xfffffffd, 0x4429, 0x3, 0x4, 0x7f, 0x0, 0xfffffff8, 0x5e9e, 0xffffff80, 0x1, 0x3f, 0xac, 0x7092b5fc, 0x9, 0x5, 0x0, 0xda2, 0x8, 0x3f, 0x4, 0x6, 0x4, 0x1, 0xf42, 0x1, 0x5, 0x6, 0x0, 0x3, 0xffffffe0, 0x79c1bfe0, 0x7, 0x3, 0x80000001, 0xd, 0x1f, 0xa6, 0xfffff37c, 0x6, 0x9, 0x0, 0x8000, 0x0, 0x81, 0x7, 0x2efe343a, 0x3b867cb8, 0x10001, 0x9, 0x50000, 0x4000, 0xffffff00, 0x2, 0x401, 0x5, 0x8000, 0x8, 0x8, 0x5, 0x3, 0x7, 0x7fffffff, 0x8, 0x8000, 0x1, 0x80, 0x0, 0x7, 0x1, 0xffff, 0x7, 0x80000000, 0x9, 0x3, 0x7, 0x8a, 0x30f, 0x1, 0x401, 0x10000, 0x6, 0x4, 0x6, 0x5402, 0x1, 0x8, 0xffff, 0x3, 0x4, 0x10, 0x7f, 0x8001, 0x61c, 0xada, 0x9, 0x2, 0x81, 0x1000, 0x0, 0x1, 0x8, 0x1, 0xffff, 0x3f, 0x12cd933f, 0x7fffffff, 0x1f, 0x2, 0x4, 0x1ff, 0x9, 0x40, 0xb82, 0xb8, 0x0, 0xbd7, 0x5, 0x5, 0xfffffeff, 0xd03, 0x800, 0xa761, 0x6, 0x8000, 0x7, 0x9d, 0x9, 0x31, 0x0, 0xfd, 0xb05, 0x9, 0x6, 0x1ff, 0x3ff, 0x7f, 0x3f, 0x7, 0x4, 0x6, 0x40, 0x1000, 0x650, 0x80000001, 0x3800, 0x101, 0x9, 0x7f, 0xfff, 0x7, 0x1ff, 0x9, 0x5, 0x1, 0x401, 0x1, 0x5, 0x8001, 0x2, 0x0, 0xffffffe1, 0x2, 0x8, 0x1, 0x80000000, 0x0, 0x7, 0x0, 0x4, 0x4, 0x17, 0x6, 0x40, 0x5, 0x4, 0x6, 0x8, 0x3, 0x5, 0x80, 0x4, 0xfffffffc, 0x3ff, 0xbc, 0x2, 0x1, 0x800, 0x100, 0x9, 0x553e, 0x20000, 0x6, 0x9, 0x2, 0x2, 0x400, 0x8001, 0x5, 0x1fffe000, 0x1, 0xfff, 0x2, 0xffffffff, 0x8, 0x4, 0x2, 0x3, 0x9, 0x4, 0x6, 0x0, 0xe20b, 0x2, 0x1, 0x4, 0x8, 0x0, 0x5, 0x7, 0x80, 0x9, 0x4cd5dbe]}, @TCA_POLICE_RATE64={0xc, 0x8, 0xc0000000}, @TCA_POLICE_TBF={0x3c, 0x1, {0x3, 0x4, 0x27, 0x2, 0x971, {0x5, 0x1, 0x7, 0x1, 0x8, 0x38cc}, {0x40, 0x1, 0x9, 0xfff9, 0x1ff, 0x8000}, 0x3, 0x22, 0x8}}, @TCA_POLICE_RESULT={0x8, 0x5, 0x7}, @TCA_POLICE_AVRATE={0x8}, @TCA_POLICE_RATE64={0xc}], [@TCA_POLICE_AVRATE={0x8, 0x4, 0x8000}, @TCA_POLICE_RATE={0x404, 0x2, [0x25, 0x100, 0x2, 0x2, 0x2, 0x5, 0x6, 0x5, 0x0, 0xc65, 0x5, 0x1, 0x236a, 0xff, 0x200, 0x5, 0x1, 0x5, 0x8000, 0x3, 0x4, 0x7fff, 0x8, 0x0, 0x9, 0x3b9, 0x400, 0x7fff, 0x1, 0x6, 0x3ca7, 0x61, 0x7fff, 0x1, 0x6, 0x5cbc, 0x0, 0x7, 0x9, 0x7, 0x2, 0xfffffffd, 0x5, 0x8001, 0x8, 0x4, 0x7, 0x6, 0x8001, 0x40, 0x10001, 0x6, 0x0, 0x4, 0x3, 0xfce, 0x1, 0x7ed, 0x5, 0x7fffffff, 0x1, 0xffffffc0, 0x200, 0x1c, 0x7, 0x81, 0x7, 0x4, 0x101, 0x80000001, 0x1, 0x7fff, 0x2, 0xffff, 0x0, 0xffffff89, 0x81, 0x9, 0xffffffff, 0xdc9e, 0x9, 0x0, 0x101, 0x3, 0x18d3, 0x7, 0x33, 0x1, 0x9, 0x8, 0x40, 0x8001, 0xfff, 0x747, 0x2, 0x0, 0x7, 0x0, 0x5, 0x3f, 0x4, 0x7, 0xffff, 0x1, 0xf252, 0x1f, 0x1f, 0xffff, 0x7, 0x697, 0x9, 0x6, 0x20, 0x80000000, 0xcb4, 0x1, 0x100, 0x3de0, 0x400, 0xc1d, 0x3, 0x2, 0x80000000, 0xbe, 0x1000, 0x2, 0xf, 0xca, 0x4, 0x7, 0x4898, 0x8d0, 0x0, 0x9, 0xfffffffa, 0x1, 0x5, 0x1c0000, 0x4, 0x63c, 0x6, 0x1ff, 0x1, 0x10001, 0x7f, 0x6, 0x4, 0x80000000, 0x3, 0x7fff, 0x4, 0x8, 0xffff032e, 0x3, 0x9, 0xf5, 0x8f22, 0xffff, 0x8, 0x5, 0x8, 0xe512, 0x6, 0x101, 0x1f, 0xffffffff, 0x72a, 0xfff, 0x2, 0x3a, 0x7ff, 0x1, 0x21ba, 0x80000000, 0x20000000, 0x2, 0x9fa8000, 0xff, 0xe11, 0xfffffffe, 0x71b8c8bd, 0xfff, 0x2, 0x4, 0x907a, 0x0, 0xffffffff, 0x8, 0x3d4c, 0x9, 0x2, 0x9, 0x32a60, 0x3, 0xffff121e, 0x7, 0x0, 0x100, 0xfffffff8, 0x2, 0x1, 0xffffffff, 0x0, 0x2, 0x80, 0x2, 0x10001000, 0x4, 0x8, 0x7, 0x5b, 0x8, 0x1, 0x0, 0x7fffffff, 0x0, 0xf78, 0xb4d5, 0xffff, 0x3ff, 0x4, 0x10000, 0x7, 0xfff, 0x0, 0x5, 0x7300, 0xdf7, 0x9, 0x400, 0x3, 0x401, 0x9, 0x583, 0x6c4f, 0x8, 0x80, 0xffff72ee, 0x8000, 0x4, 0x6, 0x8000, 0x1, 0x7, 0xffffffff, 0x1800, 0x6, 0x3, 0x3, 0x5, 0x401, 0x20, 0x1, 0x4, 0x36, 0x7]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x80000000}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x6}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x8, 0x9, 0x1a919c15, 0x172, 0x9, 0xfffffffc, 0x9e, 0x70, 0x400, 0x0, 0xffffffff, 0x4, 0x9, 0x6, 0x9a82, 0x5, 0x2, 0xf75d, 0x9, 0x8, 0x6, 0x6, 0x7, 0x6, 0x3ff, 0x9, 0x7, 0x40, 0xfffffff9, 0x15a156ec, 0x7, 0x8000, 0x800, 0x81, 0x1, 0x10000, 0x1, 0x3, 0x9, 0x5, 0xd360, 0x20, 0x4, 0xffffffc0, 0x4a, 0x7f, 0x0, 0x0, 0x0, 0x2b8, 0x7, 0x2, 0x3, 0x7, 0x7, 0x8, 0x261, 0x1, 0xfffffffd, 0x9fe, 0x0, 0x1, 0x3ff, 0x1, 0x9, 0x7fff, 0x4a23, 0x20, 0x6, 0x1, 0x101, 0x2, 0x8, 0x7, 0x1, 0x1, 0x0, 0x5, 0x80, 0xda2, 0x400, 0x8, 0x8, 0x4, 0x3f, 0xffff, 0x1, 0x0, 0x8001, 0x20, 0x3ff, 0x4e, 0xb40, 0x10001, 0x7ff, 0x5, 0x4, 0x8000, 0x7, 0xfffffff9, 0x8, 0x9, 0x9, 0x7b1, 0x9, 0x38, 0x7, 0x6, 0x8, 0x6, 0x7, 0x80000001, 0x3f, 0xada, 0x2, 0x1, 0x1ff, 0x60fb, 0x9, 0x9, 0x5, 0x3, 0x0, 0x7fffffff, 0x101, 0x7fff, 0x6, 0x0, 0x0, 0x0, 0x7, 0x6, 0x3ff, 0x1, 0x8, 0x9, 0x81, 0x9, 0x7, 0x3, 0x351, 0xffff, 0x99, 0x401, 0x8001, 0x9, 0x1, 0x80000001, 0x2, 0x400, 0x1, 0x5, 0x34a, 0x1, 0x4, 0x6, 0x0, 0x8, 0xffff5911, 0x5, 0x8000, 0x3f, 0x0, 0x5, 0x85, 0x8, 0x34e8fdf2, 0xd1, 0x2, 0xdb, 0x7fff, 0x7, 0xfffffff8, 0x80000001, 0x4, 0x3, 0x40, 0x80000001, 0x7, 0x2, 0x2, 0xfff, 0x4, 0x3, 0x4, 0xea5, 0xffffffff, 0x81, 0x6, 0x800, 0x10001, 0x3, 0x8, 0xa8, 0x8, 0x71, 0x3ff, 0xc45c, 0x3ff, 0x9, 0x7fff, 0x8, 0x960, 0xa0, 0x7, 0x7, 0x3f, 0x2, 0x80, 0xff, 0x7f, 0x4114, 0x4, 0x2, 0x9, 0x7, 0x3, 0x3, 0xfd73, 0xffff, 0x5, 0x6d, 0x7, 0x5, 0xec, 0x2, 0x4, 0x2, 0x7, 0x7f, 0x25, 0x2c92, 0x3, 0x8, 0x8001, 0x500, 0x6, 0xdea, 0x7, 0x2e6aeac9, 0x5, 0x4, 0x3ff, 0xa6d, 0x414d3c1a, 0x80000000, 0x7, 0x7, 0xfaa, 0x8, 0x80000000, 0x7fff, 0x2, 0x1, 0x432477cf, 0x9]}], [@TCA_POLICE_TBF={0x3c, 0x1, {0x1f, 0x20000000, 0x7, 0xffff, 0x8, {0x2, 0x2, 0x7f, 0x20, 0x6, 0xffffffe0}, {0x81, 0x0, 0x5, 0x0, 0x8, 0x4}, 0xe98, 0x800, 0x5c4e}}, @TCA_POLICE_RATE={0x404, 0x2, [0x3, 0x7, 0x8, 0xcc5, 0x9, 0xff8, 0xfffffffd, 0x6, 0x0, 0x8001, 0x9, 0x101, 0x0, 0x2, 0x3ff, 0x7, 0x3, 0x8, 0xb20, 0xd5, 0x80, 0x20, 0x4bc5042e, 0x9, 0x3ff, 0x1, 0x43e6, 0x1, 0x7ff, 0x8, 0x80000001, 0x4, 0x3, 0x7ff, 0xffffffff, 0x8001, 0x7d2, 0x7, 0xfffffffe, 0x9, 0x1f, 0x9, 0x5, 0x3ff, 0xfffffffe, 0x1, 0x9, 0x8, 0x1, 0x40, 0xff, 0x9, 0xffff12cb, 0x20, 0x2, 0x5, 0x9, 0x5, 0x4, 0x80000001, 0x1000, 0x40, 0x1, 0x401, 0x6000000, 0x9, 0x8, 0x7fff, 0x5, 0x1ff, 0xfffffffe, 0x9, 0x80000000, 0x8, 0x1f, 0x2, 0x1f, 0x6, 0x6a, 0x2, 0x5, 0x9108131, 0x8, 0x9, 0x1f, 0x10001, 0xe, 0x7b5, 0x7f, 0x4, 0x400, 0x8001, 0x8001, 0x3f, 0xffffffff, 0x4, 0xfffffff8, 0x1000, 0x10001, 0xa00000, 0x8, 0xdb9, 0xff, 0x80000000, 0x2c6, 0x8, 0x1, 0x293d, 0xfff, 0x0, 0x4, 0x6, 0x12b, 0x7ff, 0x1, 0x4, 0x800, 0x87b, 0x6, 0x2, 0x9, 0x1, 0x3ff, 0x33, 0xffffc9aa, 0x0, 0x5, 0x9, 0x3, 0xa3d3, 0x3, 0x7, 0x0, 0x2fa6, 0x8, 0x3, 0x7, 0x2, 0x4, 0x818, 0x6, 0x8, 0x8000, 0x2, 0x9, 0x7f, 0x3, 0x3, 0x3ff, 0x2dc1, 0x8, 0x2, 0x3, 0x9, 0x40, 0x6, 0x3, 0x6, 0x800, 0x1, 0x56b, 0x3, 0x401, 0x10001, 0x7ff, 0x4ebf, 0x2, 0x4, 0xda3, 0x8001, 0x3, 0xfffffffc, 0x9, 0xfffffff8, 0x8, 0xff, 0x8000, 0x9, 0xfffffff9, 0x5, 0x0, 0x7d1, 0x7ea46b5d, 0x7f, 0x101, 0xe6, 0x7ff, 0x4, 0x5, 0x20, 0x3, 0x1, 0x6, 0x6d4, 0x5, 0x7fffffff, 0x6, 0x200, 0x1000, 0x5, 0x6, 0x9, 0x7eb, 0xb57, 0xd9ac, 0x3, 0x7fff, 0x0, 0xe17d, 0x8000, 0xfffffffa, 0x8, 0x2, 0x0, 0x6, 0xfff, 0x1000, 0x0, 0x7, 0xc2, 0x3, 0x3, 0xfff, 0x2, 0x800, 0x1, 0x9, 0x9d, 0x7fffffff, 0x1f, 0x321a, 0x9, 0x2, 0xfffffffc, 0x7, 0x9, 0x100000, 0x8001, 0x4000, 0x8, 0x71c6, 0x10000, 0x10000, 0xfc, 0x3ff, 0x5, 0x7, 0xa345, 0x2, 0x9, 0xffff, 0x0, 0x7, 0x2, 0x3, 0x80000000]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x20}], [@TCA_POLICE_RATE64={0xc}, @TCA_POLICE_RATE64={0xc, 0x8, 0x1}]]}, {0x64, 0x6, "bf5d80b304f1096a63e916b257df5452dd901e144d066faecdb62446d3b86fcbd558705938263094ac6dcda2615c00a79ffa25052b424544fe15e462100d3ac82e8c45d4bd69974e089b5d837e1765879940bc01db23e11a4bc5ddd2789f7bbf"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_connmark={0x120, 0xd, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xffff170b, 0xfffffffb, 0x20000000, 0x6, 0x3}, 0xdd}}]}, {0xd2, 0x6, "58087a0f37cbff6a0c59eff74dfd57d7aa57b2f3f88ca27735906b023641ef166aa976b86879b4b59818114e7b0c78900525ecd78590d0948f7bc9c594b18a5f3d09f4f4cdeeef500a62658dacac1297338de071e63efeca1cbbc89939fb850b2ded405601845666936b7aa33ab81e0b336e0ab2eae8dd0c119a82b14d14c8378b0ec228edd4c02c0b4bae981d1b9a0376c86746affc4bb02f9fba6127f5cb00a3ec7b303335d24a603fdb58bfa1f5f0584e8e5aa255a5951efc0b880c1be4b68c93b8943b0d1b1e893103c890c5"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x4d22f854cfa5c7e4}}}}, @m_gact={0x88, 0x12, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x8bce1016d95b85f2, 0x1756, 0x10000000}}, @TCA_GACT_PARMS={0x18, 0x2, {0xa1, 0x4, 0x6, 0x1, 0x7ff}}]}, {0x36, 0x6, "d94ec7c4f9f9fefd5873f10f80bca3bd81e9024dfb591d3282ceabaf54b5d261f9559806f4e5d04b82a1ce56d9571069fded"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_skbmod={0x118, 0x20, 0x0, 0x0, {{0xb}, {0x34, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x5c0, 0x360, 0x6, 0x8e3d, 0x3}, 0xf}}, @TCA_SKBMOD_SMAC={0xa, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x24}}]}, {0xbb, 0x6, "a91f6f2c2bc3f93254d6994dad51a497e14bccbd3345bde60fdfce3098a1629855322e7d95853d877ceedc37a51140081756754d71336c381094fca33694cae1ffc0b971cb144a3f2b9d9687d6a6529ff4a733174ec95301aaaf2e594eeee57aeb73dbdeea3fd3744bbf0e83a3bf27c8fed7fb58e1eeca3e133a44b28b83a5de9b02131a8a5168f742f151f9d6d1e88edc6968f90439235a0e977808121e2f40037e4d304387d4525ed6907b040eeaad19e23ae37f2a7e"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_mpls={0x1074, 0x13, 0x0, 0x0, {{0x9}, {0x48, 0x2, 0x0, 0x1, [@TCA_MPLS_TC={0x5}, @TCA_MPLS_BOS={0x5}, @TCA_MPLS_BOS={0x5}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x0, 0x40, 0x10000004, 0x1, 0x10001}, 0x3}}, @TCA_MPLS_PROTO={0x6, 0x4, 0x8863}, @TCA_MPLS_BOS={0x5}]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2}}}}, @m_vlan={0x10c, 0xe, 0x0, 0x0, {{0x9}, {0x54, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x9, 0x6, 0x20000000, 0x4, 0x2}, 0x2}}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0xfffffffb, 0xd8012f4f, 0x10000000, 0x81, 0x4}, 0x2}}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x3}]}, {0x8d, 0x6, "e2e606f7fb8885b31a241fb522c51737587026409eebad16fdd07efbfb062e4a67973742bbdef1a4766fb77744f3cbd97bc304f958f3f2e88286e98491aa071d723e0e512a22c05bd0a3007465b4f6c9e4b40c5edbc265f381bce2a0e6dec3d20fb97c7d17c25d6e63a3840f62228c884319123b7f7380dd9d0eff4d351341cf2df816b111933eb54b"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x4}}}}]}]}, 0x2c98}, 0x1, 0x0, 0x0, 0x24008000}, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="00281c80", @ANYRES16=r0, @ANYBLOB="ff"], 0x34}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="f4917c3794"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="58ad000010", 0x5, 0x0, 0x0, 0x0) r1 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f0000000000)='s', 0x10a73, 0x81e, 0x0, 0x4b6ae4f95a5de35b) 06:27:21 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername(r0, 0x0, &(0x7f00000000c0)) 06:27:21 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) recvmsg(r0, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) sendto$inet6(r0, &(0x7f00000001c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0) recvmsg(r0, &(0x7f00000003c0)={0x0, 0x3, 0x0}, 0x0) recvmsg(r0, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) recvfrom$inet6(r0, &(0x7f0000000000)=""/114, 0xfffffffffffffd1b, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000040)) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="a4cd2b6ff36ddeab285aedfa3ba976a3865a829c0c69d5783749c6", @ANYRES16=r0, @ANYBLOB="feec86b8eee1ef6acb36691a379866ebbcf337f1bcdbf408a4676dd728eab14800000080be7a71b8a1be8e321d723d23b4f533c05198fae029f64027ee5fa15759c3a0daeb42ee8021a644cdf61af51d84da5831111dff000cff297fa114ac44ca605f152e4fad4bb255dee7d3fc853730b80e31cc6b8d23ac34534f70f1e19f97f1bbcf61476a0fae7d3a5b4176a49b8712ef"], 0x34}}, 0x0) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000080), 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x341440, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r2, 0x29, 0x2a, &(0x7f0000000100)={0x8, {{0xa, 0x4e20, 0x1, @local, 0x3}}}, 0x88) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="58ad000010", 0x5, 0x0, 0x0, 0x0) r3 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r3, &(0x7f0000000000)='s', 0x10a73, 0x81e, 0x0, 0x4b6ae4f95a5de35b) 06:27:21 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000900), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_NAN(r0, &(0x7f0000000f00)={&(0x7f0000000e00), 0xc, &(0x7f0000000ec0)={&(0x7f0000000000)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@void}}, [@NL80211_ATTR_NAN_MASTER_PREF={0x5}]}, 0x62}}, 0x0) 06:27:21 executing program 1: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_int(r0, 0x6, 0x24, &(0x7f0000000100), &(0x7f0000000140)=0x26) [ 3468.016784][T31690] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.