Starting Load/Save RF Kill Switch Status...
[  OK  ] Started Load/Save RF Kill Switch Status.

Debian GNU/Linux 9 syzkaller ttyS0

Warning: Permanently added '10.128.1.87' (ECDSA) to the list of known hosts.
2021/10/18 15:16:15 fuzzer started
2021/10/18 15:16:16 dialing manager at 10.128.0.169:45165
2021/10/18 15:16:16 syscalls: 1698
2021/10/18 15:16:16 code coverage: enabled
2021/10/18 15:16:16 comparison tracing: enabled
2021/10/18 15:16:16 extra coverage: enabled
2021/10/18 15:16:16 setuid sandbox: enabled
2021/10/18 15:16:16 namespace sandbox: enabled
2021/10/18 15:16:16 Android sandbox: /sys/fs/selinux/policy does not exist
2021/10/18 15:16:16 fault injection: enabled
2021/10/18 15:16:16 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled
2021/10/18 15:16:16 net packet injection: enabled
2021/10/18 15:16:16 net device setup: enabled
2021/10/18 15:16:16 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist
2021/10/18 15:16:16 devlink PCI setup: PCI device 0000:00:10.0 is not available
2021/10/18 15:16:16 USB emulation: enabled
2021/10/18 15:16:16 hci packet injection: enabled
2021/10/18 15:16:16 wifi device emulation: enabled
2021/10/18 15:16:16 802.15.4 emulation: enabled
2021/10/18 15:16:16 fetching corpus: 0, signal 0/2000 (executing program)
syzkaller login: [   68.846953][ T6542] cgroup: Unknown subsys name 'net'
[   68.858243][ T6542] cgroup: Unknown subsys name 'rlimit'
2021/10/18 15:16:16 fetching corpus: 50, signal 39271/42817 (executing program)
2021/10/18 15:16:16 fetching corpus: 99, signal 51795/56935 (executing program)
2021/10/18 15:16:16 fetching corpus: 149, signal 63696/70307 (executing program)
2021/10/18 15:16:16 fetching corpus: 199, signal 70467/78518 (executing program)
2021/10/18 15:16:16 fetching corpus: 249, signal 75606/85088 (executing program)
2021/10/18 15:16:17 fetching corpus: 299, signal 80841/91689 (executing program)
2021/10/18 15:16:17 fetching corpus: 349, signal 85348/97540 (executing program)
2021/10/18 15:16:17 fetching corpus: 399, signal 89012/102534 (executing program)
2021/10/18 15:16:17 fetching corpus: 449, signal 94304/109003 (executing program)
2021/10/18 15:16:17 fetching corpus: 499, signal 96950/112945 (executing program)
2021/10/18 15:16:17 fetching corpus: 549, signal 101228/118390 (executing program)
2021/10/18 15:16:17 fetching corpus: 599, signal 103748/122168 (executing program)
2021/10/18 15:16:18 fetching corpus: 649, signal 106062/125664 (executing program)
2021/10/18 15:16:18 fetching corpus: 699, signal 110225/130854 (executing program)
2021/10/18 15:16:18 fetching corpus: 749, signal 113009/134753 (executing program)
[   71.123701][ T1358] ieee802154 phy0 wpan0: encryption failed: -22
[   71.130918][ T1358] ieee802154 phy1 wpan1: encryption failed: -22
2021/10/18 15:16:18 fetching corpus: 799, signal 115298/138163 (executing program)
2021/10/18 15:16:18 fetching corpus: 849, signal 118829/142693 (executing program)
2021/10/18 15:16:18 fetching corpus: 898, signal 121010/145943 (executing program)
2021/10/18 15:16:18 fetching corpus: 948, signal 123756/149712 (executing program)
2021/10/18 15:16:18 fetching corpus: 998, signal 126196/153179 (executing program)
2021/10/18 15:16:19 fetching corpus: 1047, signal 128689/156679 (executing program)
2021/10/18 15:16:19 fetching corpus: 1097, signal 130611/159622 (executing program)
2021/10/18 15:16:19 fetching corpus: 1147, signal 132537/162521 (executing program)
2021/10/18 15:16:19 fetching corpus: 1197, signal 134542/165488 (executing program)
2021/10/18 15:16:19 fetching corpus: 1247, signal 135964/167919 (executing program)
2021/10/18 15:16:19 fetching corpus: 1297, signal 137945/170864 (executing program)
2021/10/18 15:16:19 fetching corpus: 1347, signal 139562/173471 (executing program)
2021/10/18 15:16:19 fetching corpus: 1397, signal 140939/175830 (executing program)
2021/10/18 15:16:20 fetching corpus: 1447, signal 142082/178001 (executing program)
2021/10/18 15:16:20 fetching corpus: 1497, signal 143732/180560 (executing program)
2021/10/18 15:16:20 fetching corpus: 1547, signal 146118/183734 (executing program)
2021/10/18 15:16:20 fetching corpus: 1597, signal 148293/186667 (executing program)
2021/10/18 15:16:20 fetching corpus: 1647, signal 151102/190053 (executing program)
2021/10/18 15:16:20 fetching corpus: 1696, signal 152672/192394 (executing program)
2021/10/18 15:16:20 fetching corpus: 1746, signal 154460/194955 (executing program)
2021/10/18 15:16:20 fetching corpus: 1796, signal 155815/197156 (executing program)
2021/10/18 15:16:21 fetching corpus: 1846, signal 157408/199501 (executing program)
2021/10/18 15:16:21 fetching corpus: 1896, signal 159078/201954 (executing program)
2021/10/18 15:16:21 fetching corpus: 1946, signal 160486/204146 (executing program)
2021/10/18 15:16:21 fetching corpus: 1996, signal 161644/206121 (executing program)
2021/10/18 15:16:21 fetching corpus: 2046, signal 163359/208545 (executing program)
2021/10/18 15:16:21 fetching corpus: 2096, signal 164796/210677 (executing program)
2021/10/18 15:16:21 fetching corpus: 2145, signal 165883/212550 (executing program)
2021/10/18 15:16:21 fetching corpus: 2195, signal 166904/214418 (executing program)
2021/10/18 15:16:22 fetching corpus: 2245, signal 168189/216489 (executing program)
2021/10/18 15:16:22 fetching corpus: 2295, signal 169440/218493 (executing program)
2021/10/18 15:16:22 fetching corpus: 2345, signal 170158/220074 (executing program)
2021/10/18 15:16:22 fetching corpus: 2395, signal 172097/222469 (executing program)
2021/10/18 15:16:22 fetching corpus: 2445, signal 173589/224567 (executing program)
2021/10/18 15:16:22 fetching corpus: 2493, signal 175039/226616 (executing program)
2021/10/18 15:16:22 fetching corpus: 2543, signal 176266/228454 (executing program)
2021/10/18 15:16:23 fetching corpus: 2593, signal 177208/230120 (executing program)
2021/10/18 15:16:23 fetching corpus: 2643, signal 178192/231765 (executing program)
2021/10/18 15:16:23 fetching corpus: 2693, signal 179458/233612 (executing program)
2021/10/18 15:16:23 fetching corpus: 2743, signal 180437/235262 (executing program)
2021/10/18 15:16:23 fetching corpus: 2793, signal 181334/236854 (executing program)
2021/10/18 15:16:23 fetching corpus: 2843, signal 182454/238550 (executing program)
2021/10/18 15:16:23 fetching corpus: 2893, signal 183664/240278 (executing program)
2021/10/18 15:16:23 fetching corpus: 2943, signal 184888/242032 (executing program)
2021/10/18 15:16:24 fetching corpus: 2992, signal 185827/243610 (executing program)
2021/10/18 15:16:24 fetching corpus: 3042, signal 187258/245550 (executing program)
2021/10/18 15:16:24 fetching corpus: 3092, signal 188348/247166 (executing program)
2021/10/18 15:16:24 fetching corpus: 3141, signal 189210/248626 (executing program)
2021/10/18 15:16:24 fetching corpus: 3191, signal 190301/250239 (executing program)
2021/10/18 15:16:24 fetching corpus: 3241, signal 191089/251655 (executing program)
2021/10/18 15:16:24 fetching corpus: 3291, signal 191856/253041 (executing program)
2021/10/18 15:16:25 fetching corpus: 3341, signal 192823/254571 (executing program)
2021/10/18 15:16:25 fetching corpus: 3391, signal 193760/256020 (executing program)
2021/10/18 15:16:25 fetching corpus: 3441, signal 194591/257389 (executing program)
2021/10/18 15:16:25 fetching corpus: 3490, signal 195288/258703 (executing program)
2021/10/18 15:16:25 fetching corpus: 3540, signal 195994/260018 (executing program)
2021/10/18 15:16:25 fetching corpus: 3590, signal 196796/261371 (executing program)
2021/10/18 15:16:25 fetching corpus: 3640, signal 197710/262763 (executing program)
2021/10/18 15:16:26 fetching corpus: 3690, signal 198354/264039 (executing program)
2021/10/18 15:16:26 fetching corpus: 3740, signal 199288/265479 (executing program)
2021/10/18 15:16:26 fetching corpus: 3790, signal 200351/266918 (executing program)
2021/10/18 15:16:26 fetching corpus: 3840, signal 201617/268446 (executing program)
2021/10/18 15:16:26 fetching corpus: 3889, signal 202752/269988 (executing program)
2021/10/18 15:16:26 fetching corpus: 3939, signal 203562/271334 (executing program)
2021/10/18 15:16:26 fetching corpus: 3989, signal 204333/272584 (executing program)
2021/10/18 15:16:27 fetching corpus: 4039, signal 205210/273915 (executing program)
2021/10/18 15:16:27 fetching corpus: 4088, signal 206257/275318 (executing program)
2021/10/18 15:16:27 fetching corpus: 4138, signal 206875/276503 (executing program)
2021/10/18 15:16:27 fetching corpus: 4188, signal 208468/278186 (executing program)
2021/10/18 15:16:27 fetching corpus: 4238, signal 209089/279320 (executing program)
2021/10/18 15:16:27 fetching corpus: 4288, signal 209837/280545 (executing program)
2021/10/18 15:16:27 fetching corpus: 4338, signal 210489/281659 (executing program)
2021/10/18 15:16:27 fetching corpus: 4388, signal 211418/282955 (executing program)
2021/10/18 15:16:28 fetching corpus: 4438, signal 212301/284215 (executing program)
2021/10/18 15:16:28 fetching corpus: 4486, signal 212804/285266 (executing program)
2021/10/18 15:16:28 fetching corpus: 4536, signal 213429/286429 (executing program)
2021/10/18 15:16:28 fetching corpus: 4586, signal 214067/287463 (executing program)
2021/10/18 15:16:28 fetching corpus: 4635, signal 214964/288649 (executing program)
2021/10/18 15:16:28 fetching corpus: 4685, signal 215611/289698 (executing program)
2021/10/18 15:16:29 fetching corpus: 4735, signal 216245/290827 (executing program)
2021/10/18 15:16:29 fetching corpus: 4785, signal 217104/291946 (executing program)
2021/10/18 15:16:29 fetching corpus: 4835, signal 217694/292991 (executing program)
2021/10/18 15:16:29 fetching corpus: 4885, signal 218587/294172 (executing program)
2021/10/18 15:16:29 fetching corpus: 4935, signal 219497/295321 (executing program)
2021/10/18 15:16:29 fetching corpus: 4984, signal 220105/296362 (executing program)
2021/10/18 15:16:29 fetching corpus: 5033, signal 220804/297408 (executing program)
2021/10/18 15:16:30 fetching corpus: 5083, signal 221382/298402 (executing program)
2021/10/18 15:16:30 fetching corpus: 5132, signal 222116/299416 (executing program)
2021/10/18 15:16:30 fetching corpus: 5182, signal 222621/300408 (executing program)
2021/10/18 15:16:30 fetching corpus: 5232, signal 223235/301326 (executing program)
2021/10/18 15:16:30 fetching corpus: 5282, signal 223827/302303 (executing program)
2021/10/18 15:16:30 fetching corpus: 5332, signal 224291/303241 (executing program)
2021/10/18 15:16:30 fetching corpus: 5382, signal 224989/304232 (executing program)
2021/10/18 15:16:31 fetching corpus: 5432, signal 225547/305162 (executing program)
2021/10/18 15:16:31 fetching corpus: 5482, signal 226142/306125 (executing program)
2021/10/18 15:16:31 fetching corpus: 5532, signal 226883/307108 (executing program)
2021/10/18 15:16:31 fetching corpus: 5582, signal 227541/308031 (executing program)
2021/10/18 15:16:31 fetching corpus: 5632, signal 228138/308965 (executing program)
2021/10/18 15:16:31 fetching corpus: 5682, signal 228778/309884 (executing program)
2021/10/18 15:16:31 fetching corpus: 5732, signal 229433/310787 (executing program)
2021/10/18 15:16:32 fetching corpus: 5782, signal 230036/311706 (executing program)
2021/10/18 15:16:32 fetching corpus: 5832, signal 230490/312573 (executing program)
2021/10/18 15:16:32 fetching corpus: 5881, signal 230998/313441 (executing program)
2021/10/18 15:16:32 fetching corpus: 5931, signal 231547/314307 (executing program)
2021/10/18 15:16:32 fetching corpus: 5980, signal 232273/315261 (executing program)
2021/10/18 15:16:32 fetching corpus: 6030, signal 232896/316151 (executing program)
2021/10/18 15:16:32 fetching corpus: 6079, signal 233632/317053 (executing program)
2021/10/18 15:16:32 fetching corpus: 6129, signal 234303/317932 (executing program)
2021/10/18 15:16:33 fetching corpus: 6179, signal 234959/318793 (executing program)
2021/10/18 15:16:33 fetching corpus: 6229, signal 235454/319610 (executing program)
2021/10/18 15:16:33 fetching corpus: 6279, signal 235970/320455 (executing program)
2021/10/18 15:16:33 fetching corpus: 6329, signal 236433/321215 (executing program)
2021/10/18 15:16:33 fetching corpus: 6378, signal 237006/322041 (executing program)
2021/10/18 15:16:33 fetching corpus: 6427, signal 237316/322815 (executing program)
2021/10/18 15:16:33 fetching corpus: 6477, signal 237673/323594 (executing program)
2021/10/18 15:16:34 fetching corpus: 6526, signal 238276/324393 (executing program)
2021/10/18 15:16:34 fetching corpus: 6576, signal 238874/325204 (executing program)
2021/10/18 15:16:34 fetching corpus: 6625, signal 239433/325986 (executing program)
2021/10/18 15:16:34 fetching corpus: 6675, signal 239916/326742 (executing program)
2021/10/18 15:16:34 fetching corpus: 6725, signal 240737/327594 (executing program)
2021/10/18 15:16:34 fetching corpus: 6775, signal 241406/328382 (executing program)
2021/10/18 15:16:34 fetching corpus: 6824, signal 241819/329088 (executing program)
2021/10/18 15:16:34 fetching corpus: 6873, signal 242421/329840 (executing program)
2021/10/18 15:16:35 fetching corpus: 6923, signal 243090/330581 (executing program)
2021/10/18 15:16:35 fetching corpus: 6972, signal 243595/331310 (executing program)
2021/10/18 15:16:35 fetching corpus: 7021, signal 244013/332030 (executing program)
2021/10/18 15:16:35 fetching corpus: 7071, signal 244594/332779 (executing program)
2021/10/18 15:16:35 fetching corpus: 7120, signal 245124/333515 (executing program)
2021/10/18 15:16:35 fetching corpus: 7170, signal 245628/334218 (executing program)
2021/10/18 15:16:35 fetching corpus: 7220, signal 246118/334928 (executing program)
2021/10/18 15:16:36 fetching corpus: 7270, signal 246663/335645 (executing program)
2021/10/18 15:16:36 fetching corpus: 7319, signal 247017/336336 (executing program)
2021/10/18 15:16:36 fetching corpus: 7367, signal 247505/337025 (executing program)
2021/10/18 15:16:36 fetching corpus: 7416, signal 247945/337684 (executing program)
2021/10/18 15:16:36 fetching corpus: 7465, signal 248426/338376 (executing program)
2021/10/18 15:16:36 fetching corpus: 7514, signal 248907/339052 (executing program)
2021/10/18 15:16:36 fetching corpus: 7564, signal 249356/339751 (executing program)
2021/10/18 15:16:37 fetching corpus: 7614, signal 249927/340409 (executing program)
2021/10/18 15:16:37 fetching corpus: 7663, signal 250387/341054 (executing program)
2021/10/18 15:16:37 fetching corpus: 7713, signal 250981/341745 (executing program)
2021/10/18 15:16:37 fetching corpus: 7762, signal 251481/342410 (executing program)
2021/10/18 15:16:37 fetching corpus: 7811, signal 251980/343018 (executing program)
2021/10/18 15:16:37 fetching corpus: 7861, signal 252521/343635 (executing program)
2021/10/18 15:16:37 fetching corpus: 7910, signal 253260/344302 (executing program)
2021/10/18 15:16:38 fetching corpus: 7960, signal 253692/344918 (executing program)
2021/10/18 15:16:38 fetching corpus: 8009, signal 254233/345518 (executing program)
2021/10/18 15:16:38 fetching corpus: 8059, signal 254664/346107 (executing program)
2021/10/18 15:16:38 fetching corpus: 8108, signal 255076/346702 (executing program)
2021/10/18 15:16:38 fetching corpus: 8158, signal 255548/347309 (executing program)
2021/10/18 15:16:38 fetching corpus: 8207, signal 256856/347913 (executing program)
2021/10/18 15:16:38 fetching corpus: 8257, signal 257304/348500 (executing program)
2021/10/18 15:16:38 fetching corpus: 8307, signal 257770/349068 (executing program)
2021/10/18 15:16:39 fetching corpus: 8357, signal 258364/349623 (executing program)
2021/10/18 15:16:39 fetching corpus: 8406, signal 258853/350201 (executing program)
2021/10/18 15:16:39 fetching corpus: 8455, signal 259387/350732 (executing program)
2021/10/18 15:16:39 fetching corpus: 8505, signal 259789/351274 (executing program)
2021/10/18 15:16:39 fetching corpus: 8555, signal 260256/351846 (executing program)
2021/10/18 15:16:39 fetching corpus: 8604, signal 260624/352382 (executing program)
2021/10/18 15:16:39 fetching corpus: 8654, signal 260993/352959 (executing program)
2021/10/18 15:16:39 fetching corpus: 8704, signal 261469/353476 (executing program)
2021/10/18 15:16:40 fetching corpus: 8754, signal 261877/353992 (executing program)
2021/10/18 15:16:40 fetching corpus: 8804, signal 262307/354007 (executing program)
2021/10/18 15:16:40 fetching corpus: 8853, signal 262967/354007 (executing program)
2021/10/18 15:16:40 fetching corpus: 8903, signal 263436/354007 (executing program)
2021/10/18 15:16:40 fetching corpus: 8953, signal 264048/354008 (executing program)
2021/10/18 15:16:40 fetching corpus: 9003, signal 264586/354008 (executing program)
2021/10/18 15:16:40 fetching corpus: 9052, signal 264901/354015 (executing program)
2021/10/18 15:16:40 fetching corpus: 9102, signal 265401/354016 (executing program)
2021/10/18 15:16:41 fetching corpus: 9151, signal 265724/354017 (executing program)
2021/10/18 15:16:41 fetching corpus: 9200, signal 266147/354019 (executing program)
2021/10/18 15:16:41 fetching corpus: 9250, signal 266541/354019 (executing program)
2021/10/18 15:16:41 fetching corpus: 9299, signal 266878/354019 (executing program)
2021/10/18 15:16:41 fetching corpus: 9349, signal 267332/354019 (executing program)
2021/10/18 15:16:41 fetching corpus: 9398, signal 267635/354019 (executing program)
2021/10/18 15:16:41 fetching corpus: 9448, signal 268132/354019 (executing program)
2021/10/18 15:16:41 fetching corpus: 9498, signal 268691/354019 (executing program)
2021/10/18 15:16:42 fetching corpus: 9548, signal 269060/354019 (executing program)
2021/10/18 15:16:42 fetching corpus: 9595, signal 269726/354019 (executing program)
2021/10/18 15:16:42 fetching corpus: 9645, signal 270150/354019 (executing program)
2021/10/18 15:16:42 fetching corpus: 9695, signal 270532/354023 (executing program)
2021/10/18 15:16:42 fetching corpus: 9745, signal 270865/354023 (executing program)
2021/10/18 15:16:42 fetching corpus: 9795, signal 271235/354023 (executing program)
2021/10/18 15:16:42 fetching corpus: 9845, signal 271631/354023 (executing program)
2021/10/18 15:16:42 fetching corpus: 9894, signal 271957/354023 (executing program)
2021/10/18 15:16:43 fetching corpus: 9944, signal 272416/354025 (executing program)
2021/10/18 15:16:43 fetching corpus: 9993, signal 272772/354033 (executing program)
2021/10/18 15:16:43 fetching corpus: 10042, signal 273129/354033 (executing program)
2021/10/18 15:16:43 fetching corpus: 10090, signal 273620/354033 (executing program)
2021/10/18 15:16:43 fetching corpus: 10140, signal 273959/354033 (executing program)
2021/10/18 15:16:43 fetching corpus: 10189, signal 274366/354058 (executing program)
2021/10/18 15:16:43 fetching corpus: 10239, signal 274777/354063 (executing program)
2021/10/18 15:16:43 fetching corpus: 10289, signal 275049/354063 (executing program)
2021/10/18 15:16:44 fetching corpus: 10339, signal 275553/354063 (executing program)
2021/10/18 15:16:44 fetching corpus: 10389, signal 276142/354063 (executing program)
2021/10/18 15:16:44 fetching corpus: 10439, signal 276435/354063 (executing program)
2021/10/18 15:16:44 fetching corpus: 10489, signal 276674/354063 (executing program)
2021/10/18 15:16:44 fetching corpus: 10539, signal 276981/354063 (executing program)
2021/10/18 15:16:44 fetching corpus: 10588, signal 277314/354063 (executing program)
2021/10/18 15:16:44 fetching corpus: 10638, signal 277655/354063 (executing program)
2021/10/18 15:16:44 fetching corpus: 10688, signal 277992/354063 (executing program)
2021/10/18 15:16:44 fetching corpus: 10738, signal 278275/354063 (executing program)
2021/10/18 15:16:45 fetching corpus: 10788, signal 278622/354063 (executing program)
2021/10/18 15:16:45 fetching corpus: 10838, signal 279018/354063 (executing program)
2021/10/18 15:16:45 fetching corpus: 10888, signal 279425/354063 (executing program)
2021/10/18 15:16:45 fetching corpus: 10937, signal 279734/354063 (executing program)
2021/10/18 15:16:45 fetching corpus: 10986, signal 280262/354063 (executing program)
2021/10/18 15:16:45 fetching corpus: 11036, signal 280470/354063 (executing program)
2021/10/18 15:16:45 fetching corpus: 11086, signal 280850/354063 (executing program)
2021/10/18 15:16:45 fetching corpus: 11136, signal 281132/354065 (executing program)
2021/10/18 15:16:46 fetching corpus: 11186, signal 281475/354065 (executing program)
2021/10/18 15:16:46 fetching corpus: 11236, signal 281832/354065 (executing program)
2021/10/18 15:16:46 fetching corpus: 11286, signal 282226/354065 (executing program)
2021/10/18 15:16:46 fetching corpus: 11336, signal 282657/354065 (executing program)
2021/10/18 15:16:46 fetching corpus: 11386, signal 282931/354065 (executing program)
2021/10/18 15:16:46 fetching corpus: 11436, signal 283335/354070 (executing program)
2021/10/18 15:16:46 fetching corpus: 11486, signal 283802/354070 (executing program)
2021/10/18 15:16:46 fetching corpus: 11536, signal 284162/354076 (executing program)
2021/10/18 15:16:47 fetching corpus: 11586, signal 284530/354077 (executing program)
2021/10/18 15:16:47 fetching corpus: 11636, signal 284836/354077 (executing program)
2021/10/18 15:16:47 fetching corpus: 11686, signal 285690/354093 (executing program)
2021/10/18 15:16:47 fetching corpus: 11735, signal 285976/354093 (executing program)
2021/10/18 15:16:47 fetching corpus: 11784, signal 286269/354093 (executing program)
2021/10/18 15:16:47 fetching corpus: 11834, signal 286566/354093 (executing program)
2021/10/18 15:16:47 fetching corpus: 11884, signal 286870/354093 (executing program)
2021/10/18 15:16:47 fetching corpus: 11934, signal 287267/354093 (executing program)
2021/10/18 15:16:48 fetching corpus: 11983, signal 287633/354093 (executing program)
2021/10/18 15:16:48 fetching corpus: 12033, signal 288218/354093 (executing program)
2021/10/18 15:16:48 fetching corpus: 12082, signal 288862/354093 (executing program)
2021/10/18 15:16:48 fetching corpus: 12131, signal 289128/354094 (executing program)
2021/10/18 15:16:48 fetching corpus: 12180, signal 289317/354094 (executing program)
2021/10/18 15:16:48 fetching corpus: 12229, signal 289660/354094 (executing program)
2021/10/18 15:16:48 fetching corpus: 12279, signal 289991/354094 (executing program)
2021/10/18 15:16:49 fetching corpus: 12329, signal 290340/354098 (executing program)
2021/10/18 15:16:49 fetching corpus: 12378, signal 290705/354099 (executing program)
2021/10/18 15:16:49 fetching corpus: 12427, signal 291037/354099 (executing program)
2021/10/18 15:16:49 fetching corpus: 12477, signal 291400/354099 (executing program)
2021/10/18 15:16:49 fetching corpus: 12526, signal 291682/354099 (executing program)
2021/10/18 15:16:49 fetching corpus: 12576, signal 291977/354099 (executing program)
2021/10/18 15:16:49 fetching corpus: 12626, signal 292216/354107 (executing program)
2021/10/18 15:16:49 fetching corpus: 12676, signal 292614/354107 (executing program)
2021/10/18 15:16:49 fetching corpus: 12726, signal 292946/354136 (executing program)
2021/10/18 15:16:50 fetching corpus: 12775, signal 293270/354136 (executing program)
2021/10/18 15:16:50 fetching corpus: 12825, signal 293617/354136 (executing program)
2021/10/18 15:16:50 fetching corpus: 12875, signal 293979/354137 (executing program)
2021/10/18 15:16:50 fetching corpus: 12923, signal 294255/354137 (executing program)
2021/10/18 15:16:50 fetching corpus: 12972, signal 294607/354137 (executing program)
2021/10/18 15:16:50 fetching corpus: 13021, signal 294877/354137 (executing program)
2021/10/18 15:16:51 fetching corpus: 13071, signal 295207/354137 (executing program)
2021/10/18 15:16:51 fetching corpus: 13121, signal 295537/354137 (executing program)
2021/10/18 15:16:51 fetching corpus: 13169, signal 295842/354138 (executing program)
2021/10/18 15:16:51 fetching corpus: 13219, signal 296121/354138 (executing program)
2021/10/18 15:16:51 fetching corpus: 13269, signal 296405/354138 (executing program)
2021/10/18 15:16:51 fetching corpus: 13319, signal 296858/354138 (executing program)
2021/10/18 15:16:51 fetching corpus: 13368, signal 297262/354138 (executing program)
2021/10/18 15:16:52 fetching corpus: 13418, signal 297577/354138 (executing program)
2021/10/18 15:16:52 fetching corpus: 13466, signal 297932/354138 (executing program)
2021/10/18 15:16:52 fetching corpus: 13516, signal 298131/354144 (executing program)
2021/10/18 15:16:52 fetching corpus: 13566, signal 298462/354144 (executing program)
2021/10/18 15:16:52 fetching corpus: 13614, signal 298800/354144 (executing program)
2021/10/18 15:16:52 fetching corpus: 13664, signal 299160/354144 (executing program)
2021/10/18 15:16:52 fetching corpus: 13714, signal 299434/354144 (executing program)
2021/10/18 15:16:52 fetching corpus: 13764, signal 299746/354156 (executing program)
2021/10/18 15:16:52 fetching corpus: 13814, signal 300015/354167 (executing program)
2021/10/18 15:16:53 fetching corpus: 13864, signal 300286/354167 (executing program)
2021/10/18 15:16:53 fetching corpus: 13913, signal 300485/354167 (executing program)
2021/10/18 15:16:53 fetching corpus: 13962, signal 300935/354171 (executing program)
2021/10/18 15:16:53 fetching corpus: 14012, signal 301204/354171 (executing program)
2021/10/18 15:16:53 fetching corpus: 14061, signal 301520/354171 (executing program)
2021/10/18 15:16:53 fetching corpus: 14109, signal 301851/354171 (executing program)
2021/10/18 15:16:53 fetching corpus: 14159, signal 302258/354171 (executing program)
2021/10/18 15:16:54 fetching corpus: 14208, signal 302523/354171 (executing program)
2021/10/18 15:16:54 fetching corpus: 14258, signal 302759/354171 (executing program)
2021/10/18 15:16:54 fetching corpus: 14308, signal 302989/354171 (executing program)
2021/10/18 15:16:54 fetching corpus: 14358, signal 303293/354176 (executing program)
2021/10/18 15:16:54 fetching corpus: 14407, signal 303515/354183 (executing program)
2021/10/18 15:16:54 fetching corpus: 14456, signal 303781/354183 (executing program)
2021/10/18 15:16:54 fetching corpus: 14506, signal 304061/354183 (executing program)
2021/10/18 15:16:54 fetching corpus: 14556, signal 304557/354183 (executing program)
2021/10/18 15:16:54 fetching corpus: 14606, signal 304943/354183 (executing program)
2021/10/18 15:16:55 fetching corpus: 14656, signal 305280/354183 (executing program)
2021/10/18 15:16:55 fetching corpus: 14706, signal 305566/354183 (executing program)
2021/10/18 15:16:55 fetching corpus: 14754, signal 305900/354183 (executing program)
2021/10/18 15:16:55 fetching corpus: 14803, signal 306222/354183 (executing program)
2021/10/18 15:16:55 fetching corpus: 14852, signal 306429/354186 (executing program)
2021/10/18 15:16:55 fetching corpus: 14901, signal 306711/354186 (executing program)
2021/10/18 15:16:55 fetching corpus: 14951, signal 306996/354200 (executing program)
2021/10/18 15:16:56 fetching corpus: 15000, signal 307212/354200 (executing program)
2021/10/18 15:16:56 fetching corpus: 15049, signal 307486/354200 (executing program)
2021/10/18 15:16:56 fetching corpus: 15097, signal 307722/354200 (executing program)
2021/10/18 15:16:56 fetching corpus: 15147, signal 307960/354222 (executing program)
2021/10/18 15:16:56 fetching corpus: 15197, signal 308200/354222 (executing program)
2021/10/18 15:16:56 fetching corpus: 15247, signal 308576/354222 (executing program)
2021/10/18 15:16:56 fetching corpus: 15297, signal 308844/354222 (executing program)
2021/10/18 15:16:57 fetching corpus: 15346, signal 309114/354222 (executing program)
2021/10/18 15:16:57 fetching corpus: 15396, signal 309326/354222 (executing program)
2021/10/18 15:16:57 fetching corpus: 15445, signal 309714/354222 (executing program)
2021/10/18 15:16:57 fetching corpus: 15494, signal 310039/354222 (executing program)
2021/10/18 15:16:57 fetching corpus: 15544, signal 310352/354222 (executing program)
2021/10/18 15:16:57 fetching corpus: 15594, signal 310694/354222 (executing program)
2021/10/18 15:16:57 fetching corpus: 15644, signal 310982/354222 (executing program)
2021/10/18 15:16:57 fetching corpus: 15694, signal 311259/354229 (executing program)
2021/10/18 15:16:57 fetching corpus: 15743, signal 311490/354229 (executing program)
2021/10/18 15:16:58 fetching corpus: 15792, signal 311734/354229 (executing program)
2021/10/18 15:16:58 fetching corpus: 15840, signal 312022/354229 (executing program)
2021/10/18 15:16:58 fetching corpus: 15889, signal 312359/354234 (executing program)
2021/10/18 15:16:58 fetching corpus: 15939, signal 312568/354234 (executing program)
2021/10/18 15:16:58 fetching corpus: 15989, signal 312838/354234 (executing program)
2021/10/18 15:16:58 fetching corpus: 16038, signal 313140/354238 (executing program)
2021/10/18 15:16:58 fetching corpus: 16087, signal 313476/354238 (executing program)
2021/10/18 15:16:59 fetching corpus: 16137, signal 313612/354240 (executing program)
2021/10/18 15:16:59 fetching corpus: 16185, signal 314031/354240 (executing program)
2021/10/18 15:16:59 fetching corpus: 16234, signal 314239/354240 (executing program)
2021/10/18 15:16:59 fetching corpus: 16284, signal 314456/354240 (executing program)
2021/10/18 15:16:59 fetching corpus: 16334, signal 314727/354264 (executing program)
2021/10/18 15:16:59 fetching corpus: 16383, signal 315223/354265 (executing program)
2021/10/18 15:16:59 fetching corpus: 16433, signal 315445/354265 (executing program)
2021/10/18 15:16:59 fetching corpus: 16481, signal 315711/354265 (executing program)
2021/10/18 15:16:59 fetching corpus: 16530, signal 315908/354265 (executing program)
2021/10/18 15:17:00 fetching corpus: 16578, signal 316116/354265 (executing program)
2021/10/18 15:17:00 fetching corpus: 16627, signal 316352/354273 (executing program)
2021/10/18 15:17:00 fetching corpus: 16676, signal 316735/354273 (executing program)
2021/10/18 15:17:00 fetching corpus: 16722, signal 316956/354273 (executing program)
2021/10/18 15:17:00 fetching corpus: 16772, signal 317188/354273 (executing program)
2021/10/18 15:17:00 fetching corpus: 16822, signal 317393/354275 (executing program)
2021/10/18 15:17:00 fetching corpus: 16872, signal 317591/354275 (executing program)
2021/10/18 15:17:01 fetching corpus: 16922, signal 317805/354275 (executing program)
2021/10/18 15:17:01 fetching corpus: 16971, signal 318059/354276 (executing program)
2021/10/18 15:17:01 fetching corpus: 17021, signal 318302/354276 (executing program)
2021/10/18 15:17:01 fetching corpus: 17071, signal 318511/354276 (executing program)
2021/10/18 15:17:01 fetching corpus: 17119, signal 318785/354277 (executing program)
2021/10/18 15:17:01 fetching corpus: 17169, signal 319062/354291 (executing program)
2021/10/18 15:17:01 fetching corpus: 17219, signal 319305/354299 (executing program)
2021/10/18 15:17:01 fetching corpus: 17267, signal 319565/354335 (executing program)
[  114.741938][ T6555] cron (6555) used greatest stack depth: 22688 bytes left
2021/10/18 15:17:02 fetching corpus: 17317, signal 319767/354335 (executing program)
2021/10/18 15:17:02 fetching corpus: 17366, signal 319986/354335 (executing program)
2021/10/18 15:17:02 fetching corpus: 17415, signal 320167/354335 (executing program)
2021/10/18 15:17:02 fetching corpus: 17465, signal 320556/354335 (executing program)
2021/10/18 15:17:02 fetching corpus: 17515, signal 320801/354339 (executing program)
2021/10/18 15:17:02 fetching corpus: 17565, signal 321036/354339 (executing program)
2021/10/18 15:17:02 fetching corpus: 17615, signal 321267/354341 (executing program)
2021/10/18 15:17:03 fetching corpus: 17665, signal 321498/354341 (executing program)
2021/10/18 15:17:03 fetching corpus: 17715, signal 321729/354341 (executing program)
2021/10/18 15:17:03 fetching corpus: 17765, signal 321988/354341 (executing program)
2021/10/18 15:17:03 fetching corpus: 17815, signal 322181/354341 (executing program)
2021/10/18 15:17:03 fetching corpus: 17864, signal 322429/354346 (executing program)
2021/10/18 15:17:03 fetching corpus: 17913, signal 322698/354346 (executing program)
2021/10/18 15:17:03 fetching corpus: 17962, signal 322988/354346 (executing program)
2021/10/18 15:17:04 fetching corpus: 18011, signal 323250/354352 (executing program)
2021/10/18 15:17:04 fetching corpus: 18060, signal 323475/354352 (executing program)
2021/10/18 15:17:04 fetching corpus: 18106, signal 323681/354352 (executing program)
2021/10/18 15:17:04 fetching corpus: 18154, signal 323905/354361 (executing program)
2021/10/18 15:17:04 fetching corpus: 18204, signal 324069/354361 (executing program)
2021/10/18 15:17:04 fetching corpus: 18253, signal 324309/354371 (executing program)
2021/10/18 15:17:04 fetching corpus: 18303, signal 324566/354380 (executing program)
2021/10/18 15:17:04 fetching corpus: 18353, signal 324797/354384 (executing program)
2021/10/18 15:17:05 fetching corpus: 18402, signal 325108/354384 (executing program)
2021/10/18 15:17:05 fetching corpus: 18452, signal 325344/354385 (executing program)
2021/10/18 15:17:05 fetching corpus: 18501, signal 325539/354389 (executing program)
2021/10/18 15:17:05 fetching corpus: 18551, signal 325803/354389 (executing program)
2021/10/18 15:17:05 fetching corpus: 18601, signal 326020/354389 (executing program)
2021/10/18 15:17:05 fetching corpus: 18649, signal 326313/354389 (executing program)
2021/10/18 15:17:05 fetching corpus: 18697, signal 326500/354389 (executing program)
2021/10/18 15:17:05 fetching corpus: 18746, signal 326746/354389 (executing program)
2021/10/18 15:17:06 fetching corpus: 18795, signal 326988/354389 (executing program)
2021/10/18 15:17:06 fetching corpus: 18843, signal 327280/354389 (executing program)
2021/10/18 15:17:06 fetching corpus: 18892, signal 327538/354389 (executing program)
2021/10/18 15:17:06 fetching corpus: 18940, signal 327757/354389 (executing program)
2021/10/18 15:17:06 fetching corpus: 18989, signal 327927/354390 (executing program)
2021/10/18 15:17:06 fetching corpus: 19037, signal 328148/354390 (executing program)
2021/10/18 15:17:06 fetching corpus: 19086, signal 328383/354391 (executing program)
2021/10/18 15:17:06 fetching corpus: 19135, signal 328594/354403 (executing program)
2021/10/18 15:17:07 fetching corpus: 19185, signal 328824/354404 (executing program)
2021/10/18 15:17:07 fetching corpus: 19235, signal 329105/354404 (executing program)
2021/10/18 15:17:07 fetching corpus: 19285, signal 329319/354404 (executing program)
2021/10/18 15:17:07 fetching corpus: 19333, signal 329503/354413 (executing program)
2021/10/18 15:17:07 fetching corpus: 19381, signal 329720/354416 (executing program)
2021/10/18 15:17:07 fetching corpus: 19430, signal 329908/354416 (executing program)
2021/10/18 15:17:07 fetching corpus: 19479, signal 330163/354416 (executing program)
2021/10/18 15:17:07 fetching corpus: 19529, signal 330420/354416 (executing program)
2021/10/18 15:17:08 fetching corpus: 19579, signal 330568/354417 (executing program)
2021/10/18 15:17:08 fetching corpus: 19628, signal 330872/354417 (executing program)
2021/10/18 15:17:08 fetching corpus: 19675, signal 331135/354429 (executing program)
2021/10/18 15:17:08 fetching corpus: 19725, signal 331450/354429 (executing program)
2021/10/18 15:17:08 fetching corpus: 19773, signal 331695/354429 (executing program)
2021/10/18 15:17:08 fetching corpus: 19823, signal 331942/354429 (executing program)
2021/10/18 15:17:09 fetching corpus: 19872, signal 332193/354429 (executing program)
2021/10/18 15:17:09 fetching corpus: 19921, signal 332403/354438 (executing program)
2021/10/18 15:17:09 fetching corpus: 19969, signal 332648/354441 (executing program)
2021/10/18 15:17:09 fetching corpus: 20015, signal 332861/354441 (executing program)
2021/10/18 15:17:09 fetching corpus: 20065, signal 333121/354449 (executing program)
2021/10/18 15:17:09 fetching corpus: 20115, signal 333297/354449 (executing program)
2021/10/18 15:17:09 fetching corpus: 20164, signal 333519/354456 (executing program)
2021/10/18 15:17:09 fetching corpus: 20213, signal 333706/354456 (executing program)
2021/10/18 15:17:10 fetching corpus: 20263, signal 333929/354456 (executing program)
2021/10/18 15:17:10 fetching corpus: 20312, signal 334133/354457 (executing program)
2021/10/18 15:17:10 fetching corpus: 20362, signal 334432/354457 (executing program)
2021/10/18 15:17:10 fetching corpus: 20411, signal 334600/354460 (executing program)
2021/10/18 15:17:10 fetching corpus: 20460, signal 334784/354461 (executing program)
2021/10/18 15:17:10 fetching corpus: 20509, signal 334949/354461 (executing program)
2021/10/18 15:17:10 fetching corpus: 20556, signal 335128/354469 (executing program)
2021/10/18 15:17:10 fetching corpus: 20605, signal 335326/354474 (executing program)
2021/10/18 15:17:11 fetching corpus: 20655, signal 335530/354477 (executing program)
2021/10/18 15:17:11 fetching corpus: 20705, signal 335746/354477 (executing program)
2021/10/18 15:17:11 fetching corpus: 20753, signal 336023/354477 (executing program)
2021/10/18 15:17:11 fetching corpus: 20801, signal 336206/354477 (executing program)
2021/10/18 15:17:11 fetching corpus: 20850, signal 336371/354477 (executing program)
2021/10/18 15:17:11 fetching corpus: 20899, signal 336637/354477 (executing program)
2021/10/18 15:17:11 fetching corpus: 20949, signal 336832/354477 (executing program)
2021/10/18 15:17:11 fetching corpus: 20999, signal 337088/354477 (executing program)
2021/10/18 15:17:11 fetching corpus: 21049, signal 337366/354477 (executing program)
2021/10/18 15:17:11 fetching corpus: 21099, signal 337564/354477 (executing program)
2021/10/18 15:17:12 fetching corpus: 21149, signal 337736/354477 (executing program)
2021/10/18 15:17:12 fetching corpus: 21199, signal 337984/354477 (executing program)
2021/10/18 15:17:12 fetching corpus: 21249, signal 338227/354477 (executing program)
2021/10/18 15:17:12 fetching corpus: 21299, signal 338415/354477 (executing program)
2021/10/18 15:17:12 fetching corpus: 21348, signal 338630/354477 (executing program)
2021/10/18 15:17:12 fetching corpus: 21397, signal 338829/354477 (executing program)
2021/10/18 15:17:12 fetching corpus: 21446, signal 338991/354495 (executing program)
2021/10/18 15:17:13 fetching corpus: 21495, signal 339220/354495 (executing program)
2021/10/18 15:17:13 fetching corpus: 21544, signal 339383/354495 (executing program)
2021/10/18 15:17:13 fetching corpus: 21592, signal 339512/354495 (executing program)
2021/10/18 15:17:13 fetching corpus: 21641, signal 339692/354495 (executing program)
2021/10/18 15:17:13 fetching corpus: 21691, signal 339869/354495 (executing program)
2021/10/18 15:17:13 fetching corpus: 21740, signal 340101/354500 (executing program)
2021/10/18 15:17:13 fetching corpus: 21789, signal 340308/354501 (executing program)
2021/10/18 15:17:13 fetching corpus: 21838, signal 340520/354501 (executing program)
2021/10/18 15:17:14 fetching corpus: 21887, signal 340693/354501 (executing program)
2021/10/18 15:17:14 fetching corpus: 21933, signal 340868/354509 (executing program)
2021/10/18 15:17:14 fetching corpus: 21982, signal 341032/354515 (executing program)
2021/10/18 15:17:14 fetching corpus: 22032, signal 341225/354515 (executing program)
2021/10/18 15:17:14 fetching corpus: 22081, signal 341402/354515 (executing program)
2021/10/18 15:17:14 fetching corpus: 22131, signal 341594/354515 (executing program)
2021/10/18 15:17:14 fetching corpus: 22180, signal 341816/354515 (executing program)
2021/10/18 15:17:14 fetching corpus: 22230, signal 342011/354515 (executing program)
2021/10/18 15:17:15 fetching corpus: 22280, signal 342269/354516 (executing program)
2021/10/18 15:17:15 fetching corpus: 22330, signal 342436/354516 (executing program)
2021/10/18 15:17:15 fetching corpus: 22380, signal 342632/354516 (executing program)
2021/10/18 15:17:15 fetching corpus: 22429, signal 342794/354516 (executing program)
2021/10/18 15:17:15 fetching corpus: 22478, signal 342967/354516 (executing program)
2021/10/18 15:17:15 fetching corpus: 22528, signal 343126/354516 (executing program)
2021/10/18 15:17:15 fetching corpus: 22577, signal 343330/354516 (executing program)
2021/10/18 15:17:15 fetching corpus: 22627, signal 343524/354516 (executing program)
2021/10/18 15:17:15 fetching corpus: 22677, signal 343720/354516 (executing program)
2021/10/18 15:17:16 fetching corpus: 22727, signal 343920/354516 (executing program)
2021/10/18 15:17:16 fetching corpus: 22776, signal 344210/354516 (executing program)
2021/10/18 15:17:16 fetching corpus: 22826, signal 344407/354516 (executing program)
2021/10/18 15:17:16 fetching corpus: 22876, signal 344607/354517 (executing program)
2021/10/18 15:17:16 fetching corpus: 22926, signal 344781/354517 (executing program)
2021/10/18 15:17:16 fetching corpus: 22974, signal 344990/354533 (executing program)
2021/10/18 15:17:16 fetching corpus: 23024, signal 345334/354533 (executing program)
2021/10/18 15:17:16 fetching corpus: 23073, signal 345641/354536 (executing program)
2021/10/18 15:17:17 fetching corpus: 23123, signal 345846/354543 (executing program)
2021/10/18 15:17:17 fetching corpus: 23169, signal 345985/354543 (executing program)
2021/10/18 15:17:17 fetching corpus: 23219, signal 346176/354551 (executing program)
2021/10/18 15:17:17 fetching corpus: 23269, signal 346357/354551 (executing program)
2021/10/18 15:17:17 fetching corpus: 23316, signal 346520/354551 (executing program)
2021/10/18 15:17:17 fetching corpus: 23366, signal 346731/354551 (executing program)
2021/10/18 15:17:17 fetching corpus: 23416, signal 346916/354551 (executing program)
2021/10/18 15:17:17 fetching corpus: 23465, signal 347065/354551 (executing program)
2021/10/18 15:17:18 fetching corpus: 23513, signal 347348/354551 (executing program)
2021/10/18 15:17:18 fetching corpus: 23561, signal 347499/354551 (executing program)
2021/10/18 15:17:18 fetching corpus: 23610, signal 347741/354553 (executing program)
2021/10/18 15:17:18 fetching corpus: 23659, signal 347933/354553 (executing program)
2021/10/18 15:17:18 fetching corpus: 23706, signal 348195/354553 (executing program)
2021/10/18 15:17:18 fetching corpus: 23756, signal 348314/354553 (executing program)
2021/10/18 15:17:18 fetching corpus: 23805, signal 348487/354553 (executing program)
2021/10/18 15:17:18 fetching corpus: 23854, signal 348706/354553 (executing program)
2021/10/18 15:17:18 fetching corpus: 23902, signal 348878/354555 (executing program)
2021/10/18 15:17:19 fetching corpus: 23952, signal 349051/354558 (executing program)
2021/10/18 15:17:19 fetching corpus: 24001, signal 349238/354558 (executing program)
2021/10/18 15:17:19 fetching corpus: 24047, signal 349443/354558 (executing program)
2021/10/18 15:17:19 fetching corpus: 24096, signal 349646/354558 (executing program)
2021/10/18 15:17:19 fetching corpus: 24142, signal 349883/354561 (executing program)
2021/10/18 15:17:19 fetching corpus: 24190, signal 350052/354563 (executing program)
[  132.556169][ T1358] ieee802154 phy0 wpan0: encryption failed: -22
[  132.562967][ T1358] ieee802154 phy1 wpan1: encryption failed: -22
2021/10/18 15:17:20 fetching corpus: 24239, signal 350274/354566 (executing program)
2021/10/18 15:17:20 fetching corpus: 24288, signal 350431/354574 (executing program)
2021/10/18 15:17:20 fetching corpus: 24337, signal 350575/354574 (executing program)
2021/10/18 15:17:20 fetching corpus: 24386, signal 350764/354578 (executing program)
2021/10/18 15:17:20 fetching corpus: 24418, signal 350854/354578 (executing program)
2021/10/18 15:17:20 fetching corpus: 24419, signal 350858/354579 (executing program)
2021/10/18 15:17:20 fetching corpus: 24419, signal 350858/354579 (executing program)
2021/10/18 15:17:21 starting 6 fuzzer processes
15:17:21 executing program 0:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[], 0x2343a726)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$TUNSETLINK(r2, 0x8912, 0x400308)
mmap(&(0x7f000006f000/0x1000)=nil, 0x1000, 0x0, 0x8013, r1, 0x0)
ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611)

15:17:22 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_DISASSOCIATE(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)={0x9c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}, @NL80211_ATTR_IE={0x74, 0x2a, [@ht={0x2d, 0x1a}, @fast_bss_trans={0x37, 0x52, {0x0, 0x0, "82bbf225304337f0045740ad5ba26146", "980d2bbfe848c6e16279da34075845e4a3084e00355b9f72eacbc7bde7fbdaff", "35cacda4dc8450ebf5917344c2ed725fc9f8fefd49f0e32a9df3d512591b32b4"}}]}]}, 0x9c}}, 0x0)

15:17:22 executing program 2:
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f0000000600)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x40, 0x40, 0x8, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x5, 0x4}}, @datasec={0x6, 0x1, 0x0, 0xf, 0x3, [{0x4, 0x1, 0x3}], '\x00\x00\x00'}, @datasec={0x0, 0x0, 0x0, 0xf, 0x1, [], "d7"}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x61]}}, &(0x7f0000000380)=""/215, 0x60, 0xd7, 0x1}, 0x20)

15:17:22 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
sendmmsg$sock(r0, &(0x7f0000000340)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)

15:17:23 executing program 4:
r0 = socket$l2tp(0x2, 0x2, 0x73)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, 0x0)

15:17:23 executing program 5:
socket$inet(0x2, 0x1, 0x2)

[  136.329537][ T6559] chnl_net:caif_netlink_parms(): no params data found
[  136.448356][ T6559] bridge0: port 1(bridge_slave_0) entered blocking state
[  136.461355][ T6559] bridge0: port 1(bridge_slave_0) entered disabled state
[  136.472113][ T6559] device bridge_slave_0 entered promiscuous mode
[  136.528338][ T6559] bridge0: port 2(bridge_slave_1) entered blocking state
[  136.544441][ T6559] bridge0: port 2(bridge_slave_1) entered disabled state
[  136.574665][ T6559] device bridge_slave_1 entered promiscuous mode
[  136.666597][ T6559] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  136.683987][ T6559] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  136.793484][ T6559] team0: Port device team_slave_0 added
[  136.826873][ T6559] team0: Port device team_slave_1 added
[  136.882783][ T6559] batman_adv: batadv0: Adding interface: batadv_slave_0
[  136.891989][ T6559] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  136.919105][ T6559] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  136.933847][ T6559] batman_adv: batadv0: Adding interface: batadv_slave_1
[  136.941429][ T6559] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  136.968428][ T6559] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  137.030640][ T6559] device hsr_slave_0 entered promiscuous mode
[  137.041280][ T6559] device hsr_slave_1 entered promiscuous mode
[  137.262967][ T6563] chnl_net:caif_netlink_parms(): no params data found
[  137.452864][ T6565] chnl_net:caif_netlink_parms(): no params data found
[  137.587776][ T6563] bridge0: port 1(bridge_slave_0) entered blocking state
[  137.595841][ T6563] bridge0: port 1(bridge_slave_0) entered disabled state
[  137.603550][ T6563] device bridge_slave_0 entered promiscuous mode
[  137.622082][ T6563] bridge0: port 2(bridge_slave_1) entered blocking state
[  137.630020][ T6563] bridge0: port 2(bridge_slave_1) entered disabled state
[  137.640131][ T6563] device bridge_slave_1 entered promiscuous mode
[  137.772762][ T6577] chnl_net:caif_netlink_parms(): no params data found
[  137.833888][ T6563] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  137.853680][ T6565] bridge0: port 1(bridge_slave_0) entered blocking state
[  137.866834][ T6565] bridge0: port 1(bridge_slave_0) entered disabled state
[  137.875058][ T6565] device bridge_slave_0 entered promiscuous mode
[  137.895603][ T6563] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  137.928932][ T6565] bridge0: port 2(bridge_slave_1) entered blocking state
[  137.939299][ T6565] bridge0: port 2(bridge_slave_1) entered disabled state
[  137.948946][ T6565] device bridge_slave_1 entered promiscuous mode
[  137.995866][ T2950] Bluetooth: hci0: command 0x0409 tx timeout
[  138.016548][ T6563] team0: Port device team_slave_0 added
[  138.063552][ T6565] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  138.075114][ T6563] team0: Port device team_slave_1 added
[  138.098405][ T6559] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  138.122494][ T6565] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  138.149429][ T6563] batman_adv: batadv0: Adding interface: batadv_slave_0
[  138.158411][ T6563] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  138.184543][ T6563] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  138.196349][ T6559] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  138.205499][ T6559] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  138.243639][ T6563] batman_adv: batadv0: Adding interface: batadv_slave_1
[  138.250782][ T6563] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  138.278596][ T6563] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  138.292481][ T6559] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  138.306467][ T6577] bridge0: port 1(bridge_slave_0) entered blocking state
[  138.313547][ T6577] bridge0: port 1(bridge_slave_0) entered disabled state
[  138.322699][ T6577] device bridge_slave_0 entered promiscuous mode
[  138.351611][ T6565] team0: Port device team_slave_0 added
[  138.371315][ T6577] bridge0: port 2(bridge_slave_1) entered blocking state
[  138.379010][ T6577] bridge0: port 2(bridge_slave_1) entered disabled state
[  138.387320][ T6577] device bridge_slave_1 entered promiscuous mode
[  138.411750][ T6565] team0: Port device team_slave_1 added
[  138.502861][ T6577] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  138.517377][ T6563] device hsr_slave_0 entered promiscuous mode
[  138.523986][ T6563] device hsr_slave_1 entered promiscuous mode
[  138.531155][ T6563] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  138.540022][ T6563] Cannot create hsr debugfs directory
[  138.555037][   T25] Bluetooth: hci2: command 0x0409 tx timeout
[  138.570887][ T6565] batman_adv: batadv0: Adding interface: batadv_slave_0
[  138.578671][ T6565] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  138.606068][ T6565] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  138.619269][ T6577] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  138.659003][ T6565] batman_adv: batadv0: Adding interface: batadv_slave_1
[  138.667086][ T6565] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  138.693933][ T6565] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  138.724039][ T6577] team0: Port device team_slave_0 added
[  138.762575][ T6577] team0: Port device team_slave_1 added
[  138.794490][   T25] Bluetooth: hci3: command 0x0409 tx timeout
[  138.883074][ T6577] batman_adv: batadv0: Adding interface: batadv_slave_0
[  138.891691][ T6577] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  138.920783][ T6577] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  138.954934][ T6755] chnl_net:caif_netlink_parms(): no params data found
[  138.975070][ T6577] batman_adv: batadv0: Adding interface: batadv_slave_1
[  138.982022][ T6577] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  139.010779][ T6577] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  139.042254][ T6565] device hsr_slave_0 entered promiscuous mode
[  139.049732][ T6565] device hsr_slave_1 entered promiscuous mode
[  139.057599][ T6565] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  139.065787][ T6565] Cannot create hsr debugfs directory
[  139.114272][ T1052] Bluetooth: hci4: command 0x0409 tx timeout
[  139.222649][ T6577] device hsr_slave_0 entered promiscuous mode
[  139.230424][ T6577] device hsr_slave_1 entered promiscuous mode
[  139.242422][ T6577] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  139.251194][ T6577] Cannot create hsr debugfs directory
[  139.316555][ T6563] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  139.363061][ T6563] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  139.377205][ T6755] bridge0: port 1(bridge_slave_0) entered blocking state
[  139.386077][ T6755] bridge0: port 1(bridge_slave_0) entered disabled state
[  139.393901][ T6755] device bridge_slave_0 entered promiscuous mode
[  139.404999][ T6755] bridge0: port 2(bridge_slave_1) entered blocking state
[  139.412061][ T6755] bridge0: port 2(bridge_slave_1) entered disabled state
[  139.421121][ T6755] device bridge_slave_1 entered promiscuous mode
[  139.449643][ T6563] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  139.511135][ T6563] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  139.550669][ T6755] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  139.581740][ T6755] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  139.596900][ T6559] 8021q: adding VLAN 0 to HW filter on device bond0
[  139.696875][ T2950] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  139.706686][ T2950] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  139.729173][ T6755] team0: Port device team_slave_0 added
[  139.742288][ T6755] team0: Port device team_slave_1 added
[  139.757102][ T6559] 8021q: adding VLAN 0 to HW filter on device team0
[  139.773671][    T7] Bluetooth: hci5: command 0x0409 tx timeout
[  139.817337][   T25] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  139.827451][   T25] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  139.837318][   T25] bridge0: port 1(bridge_slave_0) entered blocking state
[  139.844804][   T25] bridge0: port 1(bridge_slave_0) entered forwarding state
[  139.853323][   T25] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  139.862577][   T25] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  139.871209][   T25] bridge0: port 2(bridge_slave_1) entered blocking state
[  139.878367][   T25] bridge0: port 2(bridge_slave_1) entered forwarding state
[  139.891712][ T6755] batman_adv: batadv0: Adding interface: batadv_slave_0
[  139.902545][ T6755] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  139.929198][ T6755] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  139.944682][ T6755] batman_adv: batadv0: Adding interface: batadv_slave_1
[  139.951689][ T6755] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  139.978350][ T6755] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  140.003987][ T6565] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  140.013533][ T2950] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  140.027604][ T2950] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  140.036892][ T2950] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  140.046652][ T2950] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  140.056478][ T2950] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  140.069763][ T2950] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  140.084359][    T7] Bluetooth: hci0: command 0x041b tx timeout
[  140.117024][ T6565] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  140.130617][ T6565] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  140.147078][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  140.159149][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  140.170997][ T6755] device hsr_slave_0 entered promiscuous mode
[  140.180054][ T6755] device hsr_slave_1 entered promiscuous mode
[  140.188230][ T6755] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  140.196286][ T6755] Cannot create hsr debugfs directory
[  140.214431][ T6565] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  140.266212][ T6559] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  140.277771][ T6559] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  140.291464][ T1052] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  140.300757][ T1052] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  140.310214][ T1052] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  140.320018][ T1052] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  140.329171][ T1052] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  140.346672][ T6577] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  140.390907][ T6577] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  140.449633][ T6563] 8021q: adding VLAN 0 to HW filter on device bond0
[  140.456795][ T6577] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  140.505592][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  140.513073][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  140.521638][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  140.530666][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  140.538812][ T6577] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  140.552906][ T6559] 8021q: adding VLAN 0 to HW filter on device batadv0
[  140.578373][ T6563] 8021q: adding VLAN 0 to HW filter on device team0
[  140.590844][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  140.599823][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  140.609463][    T7] bridge0: port 1(bridge_slave_0) entered blocking state
[  140.616598][    T7] bridge0: port 1(bridge_slave_0) entered forwarding state
[  140.627411][ T1052] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  140.635958][ T7402] Bluetooth: hci2: command 0x041b tx timeout
[  140.687700][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  140.696819][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  140.706567][    T7] bridge0: port 2(bridge_slave_1) entered blocking state
[  140.713615][    T7] bridge0: port 2(bridge_slave_1) entered forwarding state
[  140.721877][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  140.769742][ T7402] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  140.781459][ T7402] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  140.791470][ T7402] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  140.801441][ T7402] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  140.810516][ T7402] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  140.820106][ T7402] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  140.829604][ T7402] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  140.839631][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  140.865101][   T25] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  140.873725][   T25] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  140.884355][    T7] Bluetooth: hci3: command 0x041b tx timeout
[  140.898243][ T6755] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  140.926874][ T6563] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  140.938358][ T6563] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  140.950036][ T8208] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  140.959546][ T8208] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  140.969478][ T6755] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  140.984382][ T6755] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  141.001311][ T6755] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  141.022999][ T6565] 8021q: adding VLAN 0 to HW filter on device bond0
[  141.056829][ T6559] device veth0_vlan entered promiscuous mode
[  141.064873][ T7402] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  141.073832][ T7402] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  141.083094][ T7402] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  141.092303][ T7402] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  141.100799][ T7402] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  141.108985][ T7402] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  141.118034][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  141.126362][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  141.146669][ T6565] 8021q: adding VLAN 0 to HW filter on device team0
[  141.160199][ T6559] device veth1_vlan entered promiscuous mode
[  141.175071][ T6563] 8021q: adding VLAN 0 to HW filter on device batadv0
[  141.204249][    T7] Bluetooth: hci4: command 0x041b tx timeout
[  141.218311][ T8208] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  141.228010][ T8208] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  141.237486][ T8208] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  141.247145][ T8208] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  141.256668][ T8208] bridge0: port 1(bridge_slave_0) entered blocking state
[  141.263720][ T8208] bridge0: port 1(bridge_slave_0) entered forwarding state
[  141.272781][ T8208] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  141.304215][ T8109] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  141.312790][ T8109] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  141.322158][ T8109] bridge0: port 2(bridge_slave_1) entered blocking state
[  141.329255][ T8109] bridge0: port 2(bridge_slave_1) entered forwarding state
[  141.339164][ T8109] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  141.374569][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  141.383228][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  141.395960][ T6577] 8021q: adding VLAN 0 to HW filter on device bond0
[  141.433209][ T1052] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  141.443792][ T1052] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  141.453757][ T1052] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  141.463892][ T1052] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  141.474271][ T1052] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  141.485549][ T6559] device veth0_macvtap entered promiscuous mode
[  141.495607][ T1052] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  141.503609][ T1052] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  141.512457][ T1052] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  141.522025][ T1052] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  141.540940][ T6563] device veth0_vlan entered promiscuous mode
[  141.557338][ T6559] device veth1_macvtap entered promiscuous mode
[  141.578138][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  141.586606][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  141.598791][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  141.608991][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  141.617944][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  141.626842][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  141.635992][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  141.643781][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  141.658083][ T6563] device veth1_vlan entered promiscuous mode
[  141.689644][ T6755] 8021q: adding VLAN 0 to HW filter on device bond0
[  141.700362][ T8208] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  141.709270][ T8208] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  141.718231][ T8208] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  141.745747][ T6577] 8021q: adding VLAN 0 to HW filter on device team0
[  141.755795][ T6559] batman_adv: batadv0: Interface activated: batadv_slave_0
[  141.769614][ T6565] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  141.787160][ T8208] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  141.795671][ T8208] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  141.805136][ T8208] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  141.822497][ T6755] 8021q: adding VLAN 0 to HW filter on device team0
[  141.831568][ T6559] batman_adv: batadv0: Interface activated: batadv_slave_1
[  141.844643][    T7] Bluetooth: hci5: command 0x041b tx timeout
[  141.857203][ T8208] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  141.865393][ T8208] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  141.873385][ T8208] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  141.883401][ T8208] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  141.892835][ T8208] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  141.902123][ T8208] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  141.911074][ T8208] bridge0: port 1(bridge_slave_0) entered blocking state
[  141.918197][ T8208] bridge0: port 1(bridge_slave_0) entered forwarding state
[  141.926445][ T8208] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  141.935545][ T8208] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  141.943894][ T8208] bridge0: port 2(bridge_slave_1) entered blocking state
[  141.951046][ T8208] bridge0: port 2(bridge_slave_1) entered forwarding state
[  141.959138][ T8208] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  141.967749][ T8208] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  141.986095][ T6559] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  141.995724][ T6559] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  142.005569][ T6559] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  142.014693][ T6559] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  142.037658][ T8109] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  142.046725][ T8109] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  142.056453][ T8109] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  142.065451][ T8109] bridge0: port 1(bridge_slave_0) entered blocking state
[  142.072509][ T8109] bridge0: port 1(bridge_slave_0) entered forwarding state
[  142.081191][ T8109] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  142.090845][ T8109] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  142.099845][ T8109] bridge0: port 2(bridge_slave_1) entered blocking state
[  142.106988][ T8109] bridge0: port 2(bridge_slave_1) entered forwarding state
[  142.115160][ T8109] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  142.139056][ T6563] device veth0_macvtap entered promiscuous mode
[  142.161397][   T20] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  142.164433][ T7949] Bluetooth: hci0: command 0x040f tx timeout
[  142.169687][   T20] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  142.183254][   T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  142.192200][   T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  142.201451][   T20] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  142.209552][   T20] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  142.217520][   T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  142.237461][ T6565] 8021q: adding VLAN 0 to HW filter on device batadv0
[  142.258859][ T7519] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  142.268390][ T7519] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  142.277540][ T7519] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  142.286872][ T7519] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  142.295805][ T7519] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  142.305267][ T7519] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  142.323228][ T6755] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  142.340834][ T6755] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  142.379286][ T6563] device veth1_macvtap entered promiscuous mode
[  142.393411][ T7519] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  142.401628][ T7519] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  142.410316][ T7519] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  142.418988][ T7519] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  142.427759][ T7519] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  142.436925][ T7519] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  142.446185][ T7519] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  142.455065][ T7519] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  142.463454][ T7519] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  142.472268][ T7519] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  142.481687][ T7519] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  142.527257][ T6577] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  142.542239][ T6577] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  142.558827][ T7519] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  142.568240][ T7519] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  142.577644][ T7519] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  142.586724][ T7519] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  142.598736][ T7519] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  142.681943][ T8223] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  142.690454][ T8223] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  142.699638][ T8223] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  142.708808][ T8223] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  142.727790][ T8223] Bluetooth: hci2: command 0x040f tx timeout
[  142.734797][ T6563] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[  142.748117][ T6563] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  142.759680][ T6563] batman_adv: batadv0: Interface activated: batadv_slave_0
[  142.782788][ T6565] device veth0_vlan entered promiscuous mode
[  142.790280][ T2950] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  142.799191][ T2950] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  142.809296][ T2950] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  142.818642][ T2950] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  142.829694][ T6755] 8021q: adding VLAN 0 to HW filter on device batadv0
[  142.839196][ T6563] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[  142.857433][ T6563] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  142.873590][ T6563] batman_adv: batadv0: Interface activated: batadv_slave_1
[  142.902312][ T6577] 8021q: adding VLAN 0 to HW filter on device batadv0
[  142.913166][ T2950] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  142.929213][ T2950] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  142.939386][ T2950] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  142.954308][    T5] Bluetooth: hci3: command 0x040f tx timeout
[  142.980132][ T2950] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  142.998198][  T148] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  143.009613][ T6565] device veth1_vlan entered promiscuous mode
[  143.031043][  T148] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  143.035644][ T6563] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  143.065479][ T6563] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  143.089910][ T6563] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  143.110050][ T6563] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  143.149245][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  143.158798][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  143.167131][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  143.215603][  T148] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  143.228248][  T148] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  143.266802][ T8219] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  143.282580][ T8219] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  143.299846][ T8219] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  143.317782][ T6565] device veth0_macvtap entered promiscuous mode
[  143.331284][    T5] Bluetooth: hci4: command 0x040f tx timeout
[  143.371551][ T6565] device veth1_macvtap entered promiscuous mode
[  143.441232][   T20] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  143.457539][   T20] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  143.473701][   T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  143.483079][   T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  143.499309][   T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  143.510066][   T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  143.552374][   T10] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  143.601538][   T10] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  143.640784][ T6565] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[  143.671326][ T6565] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  143.700255][ T6565] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
15:17:31 executing program 0:
r0 = socket(0x1000000010, 0x80002, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000000029bcf152", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="380000002400ffffff7f00000000400000000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newtfilter={0x7c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xe}}, [@filter_kind_options=@f_rsvp={{0x9}, {0x4c, 0x2, [@TCA_RSVP_POLICE={0x40, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x20000002}}]}, @TCA_RSVP_DST={0x8, 0x2, @dev}]}}]}, 0x7c}}, 0x0)
sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0)

[  143.726162][ T6565] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  143.740651][ T6565] batman_adv: batadv0: Interface activated: batadv_slave_0
[  143.781034][ T6755] device veth0_vlan entered promiscuous mode
[  143.802780][ T2950] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  143.813241][ T2950] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  143.822241][ T2950] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  143.832616][ T2950] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  143.842743][ T2950] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  143.859772][   T25] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  143.869553][   T25] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  143.892629][ T8277] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'.
[  143.921787][ T6565] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[  143.925767][   T10] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  143.932872][ T8219] Bluetooth: hci5: command 0x040f tx timeout
[  143.949923][   T10] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  143.952031][ T6565] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  143.969890][ T6565] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[  143.981119][ T6565] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  143.993066][ T6565] batman_adv: batadv0: Interface activated: batadv_slave_1
[  144.013048][ T2950] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  144.022997][ T2950] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  144.032085][ T2950] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  144.042552][ T2950] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  144.051499][ T2950] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  144.060765][ T8278] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'.
15:17:31 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
setsockopt(r0, 0x10e, 0xb, &(0x7f0000000000)="9a365972", 0x4)
sendmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)="240000001a0007041dfffd946f610500020000001500000000000800050009000400ff7e", 0x24}], 0x1}, 0x0)

[  144.088931][ T6565] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  144.100742][ T6565] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  144.112989][ T6565] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  144.122250][ T6565] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
15:17:31 executing program 2:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, 0x0, 0x0)
syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff)

[  144.149208][ T6755] device veth1_vlan entered promiscuous mode
[  144.206417][ T7519] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  144.230838][ T7519] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  144.245415][ T8223] Bluetooth: hci0: command 0x0419 tx timeout
[  144.257895][ T7519] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
15:17:31 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000001400)={0x0, 0x0, &(0x7f00000013c0)={&(0x7f0000001300)=@bridge_getneigh={0x20, 0x1e, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x1008}}, 0x20}}, 0x0)

[  144.314476][ T6577] device veth0_vlan entered promiscuous mode
15:17:31 executing program 2:
r0 = socket(0x25, 0x5, 0x0)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f00000000c0)={'syztnl2\x00', &(0x7f0000000040)={'gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @private=0xa010102, @multicast1}}}})

[  144.399703][ T6755] device veth0_macvtap entered promiscuous mode
[  144.429584][ T6577] device veth1_vlan entered promiscuous mode
[  144.454021][   T20] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  144.463302][   T20] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  144.481171][   T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  144.524767][   T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
15:17:31 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000001400)={0x0, 0x0, &(0x7f00000013c0)={&(0x7f0000001300)=@bridge_getneigh={0x20, 0x1e, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x1008}}, 0x20}}, 0x0)

[  144.569287][ T6755] device veth1_macvtap entered promiscuous mode
[  144.591571][ T2950] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  144.611510][ T2950] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
15:17:32 executing program 2:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x275a, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000280)=0x20)
ioctl$FITRIM(r0, 0x40305839, &(0x7f0000000000)={0x0, 0x0, 0x22})

[  144.656390][   T10] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  144.690713][   T10] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  144.742306][ T6577] device veth0_macvtap entered promiscuous mode
[  144.801531][ T6755] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[  144.804381][    T5] Bluetooth: hci2: command 0x0419 tx timeout
[  144.834480][ T6755] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  144.863893][ T6755] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[  144.884760][ T6755] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  144.895650][ T6755] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[  144.906602][ T6755] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  144.922208][ T6755] batman_adv: batadv0: Interface activated: batadv_slave_0
[  144.938212][ T7402] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  144.951136][ T7402] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  144.970440][ T7402] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  144.994367][ T7402] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  145.003113][ T7402] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  145.018147][ T6577] device veth1_macvtap entered promiscuous mode
[  145.035379][ T7402] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  145.043542][ T7402] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  145.056611][ T7402] Bluetooth: hci3: command 0x0419 tx timeout
[  145.063515][ T6755] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[  145.076115][ T6755] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  145.088139][ T6755] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[  145.099668][ T6755] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  145.110697][ T6755] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[  145.123043][ T6755] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  145.142542][ T6755] batman_adv: batadv0: Interface activated: batadv_slave_1
[  145.158335][   T10] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  145.171895][   T10] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  145.184423][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  145.193208][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  145.220746][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  145.233414][ T6755] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  145.274401][ T6755] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  145.299509][ T6755] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  145.316670][ T6755] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  145.338183][ T6577] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[  145.353991][    T5] Bluetooth: hci4: command 0x0419 tx timeout
[  145.363932][ T6577] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  145.382666][ T6577] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[  145.393607][ T6577] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  145.411673][ T6577] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[  145.422962][ T6577] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  145.449631][ T6577] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[  145.460687][ T6577] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  145.476577][ T6577] batman_adv: batadv0: Interface activated: batadv_slave_0
[  145.486980][ T7402] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  145.499804][ T7402] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  145.525911][ T6577] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[  145.536983][ T6577] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  145.547869][ T6577] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[  145.558701][ T6577] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  145.568989][ T6577] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[  145.580640][ T6577] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  145.591851][ T6577] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[  145.603575][ T6577] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  145.616028][ T6577] batman_adv: batadv0: Interface activated: batadv_slave_1
[  145.630191][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  145.643003][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  145.657330][ T6577] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  145.666785][ T6577] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  145.679428][ T6577] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  145.691446][ T6577] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  145.816579][   T10] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  145.851679][   T10] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  145.899639][ T8109] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  145.921596][ T1182] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  145.945424][   T10] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  145.947806][ T1182] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  145.954573][   T10] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  145.997259][ T7519] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  146.005185][    T5] Bluetooth: hci5: command 0x0419 tx timeout
[  146.017461][ T7519] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  146.044188][ T1182] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  146.070100][ T1182] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  146.111414][ T1055] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  149.791702][ T8396] chnl_net:caif_netlink_parms(): no params data found
[  149.872159][ T8396] bridge0: port 1(bridge_slave_0) entered blocking state
[  149.879775][ T8396] bridge0: port 1(bridge_slave_0) entered disabled state
[  149.888947][ T8396] device bridge_slave_0 entered promiscuous mode
[  149.900949][ T8396] bridge0: port 2(bridge_slave_1) entered blocking state
[  149.909261][ T8396] bridge0: port 2(bridge_slave_1) entered disabled state
[  149.920657][ T8396] device bridge_slave_1 entered promiscuous mode
[  149.956752][ T8396] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  149.969157][ T8396] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  150.010354][ T8396] team0: Port device team_slave_0 added
[  150.019011][ T8396] team0: Port device team_slave_1 added
[  150.051196][ T8396] batman_adv: batadv0: Adding interface: batadv_slave_0
[  150.058956][ T8396] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  150.088867][ T8396] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  150.102664][ T8396] batman_adv: batadv0: Adding interface: batadv_slave_1
[  150.110767][ T8396] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  150.138402][ T8396] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  150.179255][ T8396] device hsr_slave_0 entered promiscuous mode
[  150.186880][ T8396] device hsr_slave_1 entered promiscuous mode
[  150.194849][ T8396] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  150.202530][ T8396] Cannot create hsr debugfs directory
[  150.340430][ T8396] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  150.349583][ T8396] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  150.359622][ T8396] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  150.371464][ T8396] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  150.400826][ T8396] bridge0: port 2(bridge_slave_1) entered blocking state
[  150.408212][ T8396] bridge0: port 2(bridge_slave_1) entered forwarding state
[  150.416373][ T8396] bridge0: port 1(bridge_slave_0) entered blocking state
[  150.423557][ T8396] bridge0: port 1(bridge_slave_0) entered forwarding state
[  150.479294][ T8396] 8021q: adding VLAN 0 to HW filter on device bond0
[  150.496418][ T8109] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  150.508291][ T8109] bridge0: port 1(bridge_slave_0) entered disabled state
[  150.517555][ T8109] bridge0: port 2(bridge_slave_1) entered disabled state
[  150.529841][ T8109] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready
[  150.547087][ T8396] 8021q: adding VLAN 0 to HW filter on device team0
[  150.559264][ T8109] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  150.567926][ T8109] bridge0: port 1(bridge_slave_0) entered blocking state
[  150.575095][ T8109] bridge0: port 1(bridge_slave_0) entered forwarding state
[  150.589070][ T1052] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  150.598019][ T1052] bridge0: port 2(bridge_slave_1) entered blocking state
[  150.605192][ T1052] bridge0: port 2(bridge_slave_1) entered forwarding state
[  150.626668][ T8109] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  150.637051][ T8109] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  150.656623][ T8109] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  150.665363][ T8109] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  150.681498][   T20] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  150.692373][ T8396] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  150.717636][   T20] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  150.725338][   T20] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  150.740306][ T8396] 8021q: adding VLAN 0 to HW filter on device batadv0
[  150.766289][ T8109] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  150.782124][ T1052] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  150.790361][ T1052] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  150.805732][ T8219] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  150.815357][ T8219] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  150.828002][ T8396] device veth0_vlan entered promiscuous mode
[  150.840748][ T8396] device veth1_vlan entered promiscuous mode
[  150.867691][ T8109] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  150.877456][ T8109] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  150.886297][ T8109] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  150.894927][ T8109] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  150.907606][ T8396] device veth0_macvtap entered promiscuous mode
[  150.920042][ T8396] device veth1_macvtap entered promiscuous mode
[  150.939299][ T8396] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[  150.950975][ T8396] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  150.962224][ T8396] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[  150.973500][ T8396] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  150.983361][ T8396] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[  150.994913][ T8396] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  151.005903][ T8396] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[  151.018098][ T8396] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  151.028406][ T8396] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[  151.041002][ T8396] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  151.052550][ T8396] batman_adv: batadv0: Interface activated: batadv_slave_0
[  151.062312][ T1052] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  151.070520][ T1052] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  151.078843][ T1052] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  151.088031][ T1052] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  151.100105][ T8396] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[  151.111534][ T8396] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  151.122783][ T8396] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[  151.134523][ T8396] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  151.145381][ T8396] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[  151.156260][ T8396] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  151.166342][ T8396] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[  151.177255][ T8396] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  151.187158][ T8396] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[  151.198838][ T8396] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  151.211955][ T8396] batman_adv: batadv0: Interface activated: batadv_slave_1
[  151.220917][ T8223] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  151.230331][ T8223] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  151.244302][ T8396] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  151.252990][ T8396] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  151.265044][ T8396] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  151.275245][ T8396] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  151.366992][ T1148] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  151.387564][ T1148] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  151.415014][  T254] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  151.417491][ T8109] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  151.423011][  T254] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  151.440051][ T8109] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
15:17:38 executing program 1:
socketpair(0x25, 0x0, 0x0, &(0x7f0000006c80))

15:17:38 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000001400)={0x0, 0x0, &(0x7f00000013c0)={&(0x7f0000001300)=@bridge_getneigh={0x20, 0x1e, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x1008}}, 0x20}}, 0x0)

15:17:38 executing program 2:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x28, 0x2, 0x3, 0x201, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x0, 0x3}}]}, 0x28}}, 0x0)

15:17:38 executing program 3:
syz_emit_ethernet(0x7a, &(0x7f00000004c0)={@multicast, @local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "a8a28b", 0x44, 0x2f, 0x0, @private0, @private1, {[], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x1}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21}}}}}}}, 0x0)

15:17:38 executing program 5:
r0 = socket(0x11, 0x800000003, 0x0)
bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r0, &(0x7f0000000040)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14)
setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000140)={r1, 0x3, 0x6, @local}, 0x10)
r2 = socket$netlink(0x10, 0x3, 0x4)
write(r2, &(0x7f0000000100)="270000001400ff07030e000012030ae311000100f5fe0012fe400000078a151f75080039000500", 0x27)

15:17:38 executing program 4:
r0 = socket$tipc(0x1e, 0x2, 0x0)
r1 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000000)={0x43, 0x0, 0x3}, 0x10)
setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x43, 0x0, 0x3}, 0x10)

[  151.580006][ T8749] device lo entered promiscuous mode
[  151.594179][ T8109] Bluetooth: hci1: command 0x0409 tx timeout
[  151.630756][ T8745] device lo left promiscuous mode
15:17:39 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000001400)={0x0, 0x0, &(0x7f00000013c0)={&(0x7f0000001300)=@bridge_getneigh={0x20, 0x1e, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x1008}}, 0x20}}, 0x0)

[  151.657864][ T8749] device lo entered promiscuous mode
[  151.670046][ T8749] device lo left promiscuous mode
15:17:39 executing program 4:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c)
listen(r0, 0x0)
setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000000)=0xd4c5, 0x4)
syz_emit_ethernet(0x8a, &(0x7f0000000080)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "ff00", 0x54, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x15, 0xc2, 0x0, 0x0, 0x0, {[@exp_fastopen={0x4, 0x4}, @mss={0x2, 0x4}, @sack_perm={0x4, 0x2}, @timestamp={0x8, 0xa}, @mptcp=@synack={0x1e, 0x10}, @window={0x22, 0x3}, @sack={0x5, 0x6, [0x0]}, @mptcp=@mp_fclose={0x1e, 0xc}, @exp_fastopen={0xfe, 0x4}]}}}}}}}}, 0x0)

15:17:39 executing program 2:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x28, 0x2, 0x3, 0x201, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x0, 0x3}}]}, 0x28}}, 0x0)

15:17:39 executing program 3:
r0 = socket(0x2000000000000021, 0x2, 0x10000000000002)
connect$rxrpc(r0, &(0x7f0000000380)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @private}}, 0x24)
r1 = socket(0x1e, 0x1, 0x0)
sendmsg(r1, &(0x7f0000000000)={&(0x7f0000000080)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0)
recvmmsg(r1, &(0x7f0000005c40)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)=""/145, 0x91}], 0x1, &(0x7f0000000280)=""/183, 0xb7}}], 0x1, 0x0, 0x0)
write$binfmt_elf32(r1, &(0x7f0000000100)=ANY=[], 0xfffffd6d)
sendmmsg(r0, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0)
recvmmsg(r0, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2ae}}], 0x400000000000953, 0x42, 0x0)
r2 = socket(0x2000000000000021, 0x2, 0x10000000000002)
sendmsg(0xffffffffffffffff, &(0x7f000001d000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000600)="24000000100007031dff22946fa2830020200a0009000300001d85687f0000000400ff7e28000000050a43ba5d806055b6fdd80b400000c13900060008000029ec2400020cd37e99d69cda45a95e", 0xffffffc2}], 0x1}, 0x0)
connect$rxrpc(r2, &(0x7f0000000080)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e1d, @dev}}, 0x24)
sendmmsg(r2, &(0x7f0000005c00), 0x40000000000037b, 0xff6c)

15:17:39 executing program 1:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_GROUP_ADDR={0xa, 0x14, @link_local}, @IFLA_BR_AGEING_TIME={0x8}]}}}]}, 0x48}}, 0x0)

15:17:39 executing program 5:
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x3d, 0xa}, [@ldst={0x3, 0x0, 0x3, 0xa, 0x0, 0xff00}]}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0xe, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51}, 0x48)

[  151.831139][ T8762] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies.  Check SNMP counters.
[  151.891293][ T8769] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies.  Check SNMP counters.
15:17:39 executing program 2:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x28, 0x2, 0x3, 0x201, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x0, 0x3}}]}, 0x28}}, 0x0)

15:17:39 executing program 0:
r0 = socket$inet6_sctp(0xa, 0x801, 0x84)
setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8)
setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000040), 0x1)
getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f00000000c0), &(0x7f0000000000)=0x8)

15:17:39 executing program 1:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@getnexthop={0x20, 0x6a, 0x221, 0x0, 0x0, {0x0, 0x2}, [@NHA_MASTER={0x8}]}, 0x20}}, 0x0)
write$binfmt_script(r0, &(0x7f0000001280)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28011, r0, 0x1000)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700)
sendfile(r3, r2, 0x0, 0x100000001)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0xb00000000065808, 0x0)
preadv(r4, &(0x7f0000001300)=[{&(0x7f0000000200)=""/4096, 0x3ff800}], 0x1, 0x0, 0x0)

15:17:39 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000940)={0xac, r1, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @c}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e22}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @a}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @a}, @WGDEVICE_A_FLAGS={0x8}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x8}]}, 0xac}, 0x1, 0x0, 0x0, 0x4000}, 0x10)

15:17:39 executing program 4:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c)
listen(r0, 0x0)
setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000000)=0xd4c5, 0x4)
syz_emit_ethernet(0x8a, &(0x7f0000000080)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "ff00", 0x54, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x15, 0xc2, 0x0, 0x0, 0x0, {[@exp_fastopen={0x4, 0x4}, @mss={0x2, 0x4}, @sack_perm={0x4, 0x2}, @timestamp={0x8, 0xa}, @mptcp=@synack={0x1e, 0x10}, @window={0x22, 0x3}, @sack={0x5, 0x6, [0x0]}, @mptcp=@mp_fclose={0x1e, 0xc}, @exp_fastopen={0xfe, 0x4}]}}}}}}}}, 0x0)

15:17:39 executing program 2:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x28, 0x2, 0x3, 0x201, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x0, 0x3}}]}, 0x28}}, 0x0)

15:17:39 executing program 0:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0)
syz_init_net_socket$ax25(0x3, 0x3, 0x0)
ioctl$BTRFS_IOC_BALANCE_CTL(0xffffffffffffffff, 0x40049421, 0x2)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_cpus\x00', 0x26e1, 0x0)
ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000004c0)={0x0, 0x0, 0x61bd, 0x1c2dbfffd})
write$cgroup_int(r1, &(0x7f0000000300), 0xfffffe8c)
syz_init_net_socket$ax25(0x3, 0x3, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000200), 0xf3c8)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000100))
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_type(r2, &(0x7f0000000000), 0xb1d000)
r3 = syz_init_net_socket$ax25(0x3, 0x0, 0x0)
getsockopt$ax25_int(r3, 0x101, 0x0, 0x0, &(0x7f0000000140))
ioctl$FS_IOC_GETFSMAP(r3, 0xc0c0583b, 0x0)

[  152.269905][ T8787] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies.  Check SNMP counters.
[  152.290945][   T26] audit: type=1804 audit(1634570259.606:2): pid=8788 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir039577603/syzkaller.VeoG5X/3/cgroup.controllers" dev="sda1" ino=13937 res=1 errno=0
[  152.455273][   T26] audit: type=1804 audit(1634570259.716:3): pid=8788 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir039577603/syzkaller.VeoG5X/3/memory.events" dev="sda1" ino=13935 res=1 errno=0
15:17:39 executing program 4:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c)
listen(r0, 0x0)
setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000000)=0xd4c5, 0x4)
syz_emit_ethernet(0x8a, &(0x7f0000000080)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "ff00", 0x54, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x15, 0xc2, 0x0, 0x0, 0x0, {[@exp_fastopen={0x4, 0x4}, @mss={0x2, 0x4}, @sack_perm={0x4, 0x2}, @timestamp={0x8, 0xa}, @mptcp=@synack={0x1e, 0x10}, @window={0x22, 0x3}, @sack={0x5, 0x6, [0x0]}, @mptcp=@mp_fclose={0x1e, 0xc}, @exp_fastopen={0xfe, 0x4}]}}}}}}}}, 0x0)

15:17:39 executing program 2:
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x6)
sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, 0x0}, 0x0)
ioctl$sock_bt_hci(r0, 0x400448c9, &(0x7f0000000000))

15:17:39 executing program 3:
r0 = socket(0x2000000000000021, 0x2, 0x10000000000002)
connect$rxrpc(r0, &(0x7f0000000380)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @private}}, 0x24)
r1 = socket(0x1e, 0x1, 0x0)
sendmsg(r1, &(0x7f0000000000)={&(0x7f0000000080)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0)
recvmmsg(r1, &(0x7f0000005c40)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)=""/145, 0x91}], 0x1, &(0x7f0000000280)=""/183, 0xb7}}], 0x1, 0x0, 0x0)
write$binfmt_elf32(r1, &(0x7f0000000100)=ANY=[], 0xfffffd6d)
sendmmsg(r0, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0)
recvmmsg(r0, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2ae}}], 0x400000000000953, 0x42, 0x0)
r2 = socket(0x2000000000000021, 0x2, 0x10000000000002)
sendmsg(0xffffffffffffffff, &(0x7f000001d000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000600)="24000000100007031dff22946fa2830020200a0009000300001d85687f0000000400ff7e28000000050a43ba5d806055b6fdd80b400000c13900060008000029ec2400020cd37e99d69cda45a95e", 0xffffffc2}], 0x1}, 0x0)
connect$rxrpc(r2, &(0x7f0000000080)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e1d, @dev}}, 0x24)
sendmmsg(r2, &(0x7f0000005c00), 0x40000000000037b, 0xff6c)

15:17:39 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000940)={0xac, r1, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @c}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e22}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @a}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @a}, @WGDEVICE_A_FLAGS={0x8}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x8}]}, 0xac}, 0x1, 0x0, 0x0, 0x4000}, 0x10)

[  152.635476][   T26] audit: type=1800 audit(1634570259.716:4): pid=8788 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="memory.events" dev="sda1" ino=13935 res=0 errno=0
[  152.651093][ T8801] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies.  Check SNMP counters.
15:17:40 executing program 1:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@getnexthop={0x20, 0x6a, 0x221, 0x0, 0x0, {0x0, 0x2}, [@NHA_MASTER={0x8}]}, 0x20}}, 0x0)
write$binfmt_script(r0, &(0x7f0000001280)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28011, r0, 0x1000)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700)
sendfile(r3, r2, 0x0, 0x100000001)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0xb00000000065808, 0x0)
preadv(r4, &(0x7f0000001300)=[{&(0x7f0000000200)=""/4096, 0x3ff800}], 0x1, 0x0, 0x0)

15:17:40 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@getnexthop={0x20, 0x6a, 0x221, 0x0, 0x0, {0x0, 0x2}, [@NHA_MASTER={0x8}]}, 0x20}}, 0x0)
write$binfmt_script(r0, &(0x7f0000001280)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28011, r0, 0x1000)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700)
sendfile(r3, r2, 0x0, 0x100000001)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0xb00000000065808, 0x0)
preadv(r4, &(0x7f0000001300)=[{&(0x7f0000000200)=""/4096, 0x3ff800}], 0x1, 0x0, 0x0)

[  152.791085][   T26] audit: type=1804 audit(1634570259.826:5): pid=8796 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir115108790/syzkaller.Qlbxm5/8/memory.events" dev="sda1" ino=13941 res=1 errno=0
15:17:40 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000940)={0xac, r1, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @c}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e22}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @a}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @a}, @WGDEVICE_A_FLAGS={0x8}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x8}]}, 0xac}, 0x1, 0x0, 0x0, 0x4000}, 0x10)

15:17:40 executing program 4:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c)
listen(r0, 0x0)
setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000000)=0xd4c5, 0x4)
syz_emit_ethernet(0x8a, &(0x7f0000000080)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "ff00", 0x54, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x15, 0xc2, 0x0, 0x0, 0x0, {[@exp_fastopen={0x4, 0x4}, @mss={0x2, 0x4}, @sack_perm={0x4, 0x2}, @timestamp={0x8, 0xa}, @mptcp=@synack={0x1e, 0x10}, @window={0x22, 0x3}, @sack={0x5, 0x6, [0x0]}, @mptcp=@mp_fclose={0x1e, 0xc}, @exp_fastopen={0xfe, 0x4}]}}}}}}}}, 0x0)

[  152.958897][   T26] audit: type=1804 audit(1634570260.056:6): pid=8804 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir115108790/syzkaller.Qlbxm5/8/memory.events" dev="sda1" ino=13941 res=1 errno=0
[  153.006465][ T8817] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies.  Check SNMP counters.
15:17:40 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000940)={0xac, r1, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @c}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e22}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @a}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @a}, @WGDEVICE_A_FLAGS={0x8}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x8}]}, 0xac}, 0x1, 0x0, 0x0, 0x4000}, 0x10)

[  153.160570][   T26] audit: type=1804 audit(1634570260.306:7): pid=8800 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir115108790/syzkaller.Qlbxm5/8/memory.events" dev="sda1" ino=13941 res=1 errno=0
15:17:40 executing program 0:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0)
syz_init_net_socket$ax25(0x3, 0x3, 0x0)
ioctl$BTRFS_IOC_BALANCE_CTL(0xffffffffffffffff, 0x40049421, 0x2)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_cpus\x00', 0x26e1, 0x0)
ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000004c0)={0x0, 0x0, 0x61bd, 0x1c2dbfffd})
write$cgroup_int(r1, &(0x7f0000000300), 0xfffffe8c)
syz_init_net_socket$ax25(0x3, 0x3, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000200), 0xf3c8)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000100))
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_type(r2, &(0x7f0000000000), 0xb1d000)
r3 = syz_init_net_socket$ax25(0x3, 0x0, 0x0)
getsockopt$ax25_int(r3, 0x101, 0x0, 0x0, &(0x7f0000000140))
ioctl$FS_IOC_GETFSMAP(r3, 0xc0c0583b, 0x0)

15:17:40 executing program 4:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0)
syz_init_net_socket$ax25(0x3, 0x3, 0x0)
ioctl$BTRFS_IOC_BALANCE_CTL(0xffffffffffffffff, 0x40049421, 0x2)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_cpus\x00', 0x26e1, 0x0)
ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000004c0)={0x0, 0x0, 0x61bd, 0x1c2dbfffd})
write$cgroup_int(r1, &(0x7f0000000300), 0xfffffe8c)
syz_init_net_socket$ax25(0x3, 0x3, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000200), 0xf3c8)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000100))
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_type(r2, &(0x7f0000000000), 0xb1d000)
r3 = syz_init_net_socket$ax25(0x3, 0x0, 0x0)
getsockopt$ax25_int(r3, 0x101, 0x0, 0x0, &(0x7f0000000140))
ioctl$FS_IOC_GETFSMAP(r3, 0xc0c0583b, 0x0)

[  153.355346][   T26] audit: type=1804 audit(1634570260.326:8): pid=8815 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir039577603/syzkaller.VeoG5X/4/cgroup.controllers" dev="sda1" ino=13922 res=1 errno=0
15:17:40 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@getnexthop={0x20, 0x6a, 0x221, 0x0, 0x0, {0x0, 0x2}, [@NHA_MASTER={0x8}]}, 0x20}}, 0x0)
write$binfmt_script(r0, &(0x7f0000001280)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28011, r0, 0x1000)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700)
sendfile(r3, r2, 0x0, 0x100000001)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0xb00000000065808, 0x0)
preadv(r4, &(0x7f0000001300)=[{&(0x7f0000000200)=""/4096, 0x3ff800}], 0x1, 0x0, 0x0)

15:17:40 executing program 1:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@getnexthop={0x20, 0x6a, 0x221, 0x0, 0x0, {0x0, 0x2}, [@NHA_MASTER={0x8}]}, 0x20}}, 0x0)
write$binfmt_script(r0, &(0x7f0000001280)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28011, r0, 0x1000)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700)
sendfile(r3, r2, 0x0, 0x100000001)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0xb00000000065808, 0x0)
preadv(r4, &(0x7f0000001300)=[{&(0x7f0000000200)=""/4096, 0x3ff800}], 0x1, 0x0, 0x0)

[  153.504179][   T26] audit: type=1804 audit(1634570260.366:9): pid=8797 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir115108790/syzkaller.Qlbxm5/8/memory.events" dev="sda1" ino=13941 res=1 errno=0
15:17:40 executing program 5:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0)
syz_init_net_socket$ax25(0x3, 0x3, 0x0)
ioctl$BTRFS_IOC_BALANCE_CTL(0xffffffffffffffff, 0x40049421, 0x2)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_cpus\x00', 0x26e1, 0x0)
ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000004c0)={0x0, 0x0, 0x61bd, 0x1c2dbfffd})
write$cgroup_int(r1, &(0x7f0000000300), 0xfffffe8c)
syz_init_net_socket$ax25(0x3, 0x3, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000200), 0xf3c8)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000100))
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_type(r2, &(0x7f0000000000), 0xb1d000)
r3 = syz_init_net_socket$ax25(0x3, 0x0, 0x0)
getsockopt$ax25_int(r3, 0x101, 0x0, 0x0, &(0x7f0000000140))
ioctl$FS_IOC_GETFSMAP(r3, 0xc0c0583b, 0x0)

15:17:40 executing program 3:
r0 = socket(0x2000000000000021, 0x2, 0x10000000000002)
connect$rxrpc(r0, &(0x7f0000000380)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @private}}, 0x24)
r1 = socket(0x1e, 0x1, 0x0)
sendmsg(r1, &(0x7f0000000000)={&(0x7f0000000080)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0)
recvmmsg(r1, &(0x7f0000005c40)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)=""/145, 0x91}], 0x1, &(0x7f0000000280)=""/183, 0xb7}}], 0x1, 0x0, 0x0)
write$binfmt_elf32(r1, &(0x7f0000000100)=ANY=[], 0xfffffd6d)
sendmmsg(r0, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0)
recvmmsg(r0, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2ae}}], 0x400000000000953, 0x42, 0x0)
r2 = socket(0x2000000000000021, 0x2, 0x10000000000002)
sendmsg(0xffffffffffffffff, &(0x7f000001d000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000600)="24000000100007031dff22946fa2830020200a0009000300001d85687f0000000400ff7e28000000050a43ba5d806055b6fdd80b400000c13900060008000029ec2400020cd37e99d69cda45a95e", 0xffffffc2}], 0x1}, 0x0)
connect$rxrpc(r2, &(0x7f0000000080)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e1d, @dev}}, 0x24)
sendmmsg(r2, &(0x7f0000005c00), 0x40000000000037b, 0xff6c)

[  153.685113][ T8223] Bluetooth: hci1: command 0x041b tx timeout
15:17:41 executing program 4:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0)
syz_init_net_socket$ax25(0x3, 0x3, 0x0)
ioctl$BTRFS_IOC_BALANCE_CTL(0xffffffffffffffff, 0x40049421, 0x2)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_cpus\x00', 0x26e1, 0x0)
ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000004c0)={0x0, 0x0, 0x61bd, 0x1c2dbfffd})
write$cgroup_int(r1, &(0x7f0000000300), 0xfffffe8c)
syz_init_net_socket$ax25(0x3, 0x3, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000200), 0xf3c8)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000100))
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_type(r2, &(0x7f0000000000), 0xb1d000)
r3 = syz_init_net_socket$ax25(0x3, 0x0, 0x0)
getsockopt$ax25_int(r3, 0x101, 0x0, 0x0, &(0x7f0000000140))
ioctl$FS_IOC_GETFSMAP(r3, 0xc0c0583b, 0x0)

[  153.724642][   T26] audit: type=1800 audit(1634570260.376:10): pid=8796 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.0" name="memory.events" dev="sda1" ino=13941 res=0 errno=0
[  153.842445][   T26] audit: type=1804 audit(1634570260.436:11): pid=8815 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir039577603/syzkaller.VeoG5X/4/memory.events" dev="sda1" ino=13920 res=1 errno=0
15:17:41 executing program 0:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0)
syz_init_net_socket$ax25(0x3, 0x3, 0x0)
ioctl$BTRFS_IOC_BALANCE_CTL(0xffffffffffffffff, 0x40049421, 0x2)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_cpus\x00', 0x26e1, 0x0)
ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000004c0)={0x0, 0x0, 0x61bd, 0x1c2dbfffd})
write$cgroup_int(r1, &(0x7f0000000300), 0xfffffe8c)
syz_init_net_socket$ax25(0x3, 0x3, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000200), 0xf3c8)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000100))
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_type(r2, &(0x7f0000000000), 0xb1d000)
r3 = syz_init_net_socket$ax25(0x3, 0x0, 0x0)
getsockopt$ax25_int(r3, 0x101, 0x0, 0x0, &(0x7f0000000140))
ioctl$FS_IOC_GETFSMAP(r3, 0xc0c0583b, 0x0)

15:17:41 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@getnexthop={0x20, 0x6a, 0x221, 0x0, 0x0, {0x0, 0x2}, [@NHA_MASTER={0x8}]}, 0x20}}, 0x0)
write$binfmt_script(r0, &(0x7f0000001280)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28011, r0, 0x1000)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700)
sendfile(r3, r2, 0x0, 0x100000001)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0xb00000000065808, 0x0)
preadv(r4, &(0x7f0000001300)=[{&(0x7f0000000200)=""/4096, 0x3ff800}], 0x1, 0x0, 0x0)

15:17:41 executing program 3:
r0 = socket(0x2000000000000021, 0x2, 0x10000000000002)
connect$rxrpc(r0, &(0x7f0000000380)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @private}}, 0x24)
r1 = socket(0x1e, 0x1, 0x0)
sendmsg(r1, &(0x7f0000000000)={&(0x7f0000000080)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0)
recvmmsg(r1, &(0x7f0000005c40)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)=""/145, 0x91}], 0x1, &(0x7f0000000280)=""/183, 0xb7}}], 0x1, 0x0, 0x0)
write$binfmt_elf32(r1, &(0x7f0000000100)=ANY=[], 0xfffffd6d)
sendmmsg(r0, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0)
recvmmsg(r0, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2ae}}], 0x400000000000953, 0x42, 0x0)
r2 = socket(0x2000000000000021, 0x2, 0x10000000000002)
sendmsg(0xffffffffffffffff, &(0x7f000001d000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000600)="24000000100007031dff22946fa2830020200a0009000300001d85687f0000000400ff7e28000000050a43ba5d806055b6fdd80b400000c13900060008000029ec2400020cd37e99d69cda45a95e", 0xffffffc2}], 0x1}, 0x0)
connect$rxrpc(r2, &(0x7f0000000080)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e1d, @dev}}, 0x24)
sendmmsg(r2, &(0x7f0000005c00), 0x40000000000037b, 0xff6c)

15:17:41 executing program 1:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@getnexthop={0x20, 0x6a, 0x221, 0x0, 0x0, {0x0, 0x2}, [@NHA_MASTER={0x8}]}, 0x20}}, 0x0)
write$binfmt_script(r0, &(0x7f0000001280)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28011, r0, 0x1000)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700)
sendfile(r3, r2, 0x0, 0x100000001)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0xb00000000065808, 0x0)
preadv(r4, &(0x7f0000001300)=[{&(0x7f0000000200)=""/4096, 0x3ff800}], 0x1, 0x0, 0x0)

15:17:41 executing program 4:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0)
syz_init_net_socket$ax25(0x3, 0x3, 0x0)
ioctl$BTRFS_IOC_BALANCE_CTL(0xffffffffffffffff, 0x40049421, 0x2)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_cpus\x00', 0x26e1, 0x0)
ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000004c0)={0x0, 0x0, 0x61bd, 0x1c2dbfffd})
write$cgroup_int(r1, &(0x7f0000000300), 0xfffffe8c)
syz_init_net_socket$ax25(0x3, 0x3, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000200), 0xf3c8)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000100))
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_type(r2, &(0x7f0000000000), 0xb1d000)
r3 = syz_init_net_socket$ax25(0x3, 0x0, 0x0)
getsockopt$ax25_int(r3, 0x101, 0x0, 0x0, &(0x7f0000000140))
ioctl$FS_IOC_GETFSMAP(r3, 0xc0c0583b, 0x0)

15:17:42 executing program 5:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0)
syz_init_net_socket$ax25(0x3, 0x3, 0x0)
ioctl$BTRFS_IOC_BALANCE_CTL(0xffffffffffffffff, 0x40049421, 0x2)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_cpus\x00', 0x26e1, 0x0)
ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000004c0)={0x0, 0x0, 0x61bd, 0x1c2dbfffd})
write$cgroup_int(r1, &(0x7f0000000300), 0xfffffe8c)
syz_init_net_socket$ax25(0x3, 0x3, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000200), 0xf3c8)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000100))
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_type(r2, &(0x7f0000000000), 0xb1d000)
r3 = syz_init_net_socket$ax25(0x3, 0x0, 0x0)
getsockopt$ax25_int(r3, 0x101, 0x0, 0x0, &(0x7f0000000140))
ioctl$FS_IOC_GETFSMAP(r3, 0xc0c0583b, 0x0)

15:17:42 executing program 0:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0)
syz_init_net_socket$ax25(0x3, 0x3, 0x0)
ioctl$BTRFS_IOC_BALANCE_CTL(0xffffffffffffffff, 0x40049421, 0x2)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_cpus\x00', 0x26e1, 0x0)
ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000004c0)={0x0, 0x0, 0x61bd, 0x1c2dbfffd})
write$cgroup_int(r1, &(0x7f0000000300), 0xfffffe8c)
syz_init_net_socket$ax25(0x3, 0x3, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000200), 0xf3c8)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000100))
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_type(r2, &(0x7f0000000000), 0xb1d000)
r3 = syz_init_net_socket$ax25(0x3, 0x0, 0x0)
getsockopt$ax25_int(r3, 0x101, 0x0, 0x0, &(0x7f0000000140))
ioctl$FS_IOC_GETFSMAP(r3, 0xc0c0583b, 0x0)

15:17:42 executing program 3:
r0 = socket(0x2000000000000021, 0x2, 0x10000000000002)
connect$rxrpc(r0, &(0x7f0000000380)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @private}}, 0x24)
r1 = socket(0x1e, 0x1, 0x0)
sendmsg(r1, &(0x7f0000000000)={&(0x7f0000000080)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0)
recvmmsg(r1, &(0x7f0000005c40)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)=""/145, 0x91}], 0x1, &(0x7f0000000280)=""/183, 0xb7}}], 0x1, 0x0, 0x0)
write$binfmt_elf32(r1, &(0x7f0000000100)=ANY=[], 0xfffffd6d)
sendmmsg(r0, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0)
recvmmsg(r0, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2ae}}], 0x400000000000953, 0x42, 0x0)
r2 = socket(0x2000000000000021, 0x2, 0x10000000000002)
sendmsg(0xffffffffffffffff, &(0x7f000001d000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000600)="24000000100007031dff22946fa2830020200a0009000300001d85687f0000000400ff7e28000000050a43ba5d806055b6fdd80b400000c13900060008000029ec2400020cd37e99d69cda45a95e", 0xffffffc2}], 0x1}, 0x0)
connect$rxrpc(r2, &(0x7f0000000080)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e1d, @dev}}, 0x24)
sendmmsg(r2, &(0x7f0000005c00), 0x40000000000037b, 0xff6c)

15:17:42 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x900000000000000, 0x80, &(0x7f0000000140)=@nat={'nat\x00', 0x19, 0x1, 0x190, [0x200002c0, 0x0, 0x0, 0x200002f0, 0x20000320], 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff000000000000000000000000000000000000000000000000ff00000000000000000000000000000000000000ffffffff01000000110000000000000008060300736630000010000000000000000064756d6d793000000000000000000000696662300000000000000000000000006c6f0000000000000000000000000000ffffffffffff000000000000ffffffffffff0000000000000000d0000000d000000000010000617270000000000000000000000000000000000000000000000000000000000038000000000000000000000000000000e0000001000000007f00000118000000000000000000000000000000aaaaaaaaaa00000000000800000000000000000072656469726563740000000000000000b20000000000080000000000000000000800"/400]}, 0x208)

15:17:43 executing program 1:
r0 = socket$packet(0x11, 0x3, 0x300)
sendmsg$inet6(0xffffffffffffffff, &(0x7f0000001580)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=ANY=[], 0x6}, 0x0)
setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={<r1=>0xffffffffffffffff})
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000640)={'batadv_slave_1\x00', <r2=>0x0})
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$TUNSETLINK(r3, 0x8912, 0x400308)
bind$packet(r0, &(0x7f0000000140)={0x11, 0x0, r2}, 0x14)
sendmmsg(r0, &(0x7f0000000c80), 0x400000000000345, 0x0)

[  155.763735][ T8219] Bluetooth: hci1: command 0x040f tx timeout
[  155.788084][ T8898] x_tables: eb_tables: redirect target: used from hooks POSTROUTING, but only usable from PREROUTING/BROUTING
15:17:43 executing program 5:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0)
syz_init_net_socket$ax25(0x3, 0x3, 0x0)
ioctl$BTRFS_IOC_BALANCE_CTL(0xffffffffffffffff, 0x40049421, 0x2)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_cpus\x00', 0x26e1, 0x0)
ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000004c0)={0x0, 0x0, 0x61bd, 0x1c2dbfffd})
write$cgroup_int(r1, &(0x7f0000000300), 0xfffffe8c)
syz_init_net_socket$ax25(0x3, 0x3, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000200), 0xf3c8)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000100))
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_type(r2, &(0x7f0000000000), 0xb1d000)
r3 = syz_init_net_socket$ax25(0x3, 0x0, 0x0)
getsockopt$ax25_int(r3, 0x101, 0x0, 0x0, &(0x7f0000000140))
ioctl$FS_IOC_GETFSMAP(r3, 0xc0c0583b, 0x0)

15:17:43 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$inet6_mreq(r0, 0x29, 0x5, 0x0, &(0x7f0000000040))

15:17:43 executing program 4:
sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000002000)=[{0x0}], 0x1}, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000002000)=[{&(0x7f000000dfaa)="5500000018007f5f00fe01b2a4a28093020600010001fd01020000003900090035000c00060000001900054006000000000022dc1338d54400009b84136ef75afb83de4411000b00c43ab8220000060cec4fab91d4", 0x55}], 0x1, 0x0, 0x356}, 0x0)
r0 = socket(0x10, 0x3, 0x0)
sendmmsg$alg(r0, &(0x7f0000000140), 0x4924924924924f6, 0x0)

15:17:43 executing program 1:
r0 = socket$packet(0x11, 0x3, 0x300)
sendmsg$inet6(0xffffffffffffffff, &(0x7f0000001580)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=ANY=[], 0x6}, 0x0)
setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={<r1=>0xffffffffffffffff})
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000640)={'batadv_slave_1\x00', <r2=>0x0})
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$TUNSETLINK(r3, 0x8912, 0x400308)
bind$packet(r0, &(0x7f0000000140)={0x11, 0x0, r2}, 0x14)
sendmmsg(r0, &(0x7f0000000c80), 0x400000000000345, 0x0)

15:17:43 executing program 0:
r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x12, 0x4, 0x8, 0x9fb}, 0x40)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f00000006c0)=0x2000000000000001, 0x4)
setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000001c0)='macvlan1\x00', 0x10)
connect$inet(r1, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10)
sendmsg$IPCTNL_MSG_CT_GET_DYING(0xffffffffffffffff, 0x0, 0x40)
setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000), 0x4)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r0, &(0x7f0000000340), &(0x7f0000000100)=@tcp=r1}, 0x20)
shutdown(r1, 0x0)
recvmmsg(r1, &(0x7f0000000540)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}}], 0x422, 0x0, 0x0)

15:17:43 executing program 3:
r0 = socket(0x2000000000000021, 0x2, 0x10000000000002)
connect$rxrpc(r0, &(0x7f0000000380)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @private}}, 0x24)
r1 = socket(0x1e, 0x1, 0x0)
sendmsg(r1, &(0x7f0000000000)={&(0x7f0000000080)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0)
recvmmsg(r1, &(0x7f0000005c40)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)=""/145, 0x91}], 0x1, &(0x7f0000000280)=""/183, 0xb7}}], 0x1, 0x0, 0x0)
write$binfmt_elf32(r1, &(0x7f0000000100)=ANY=[], 0xfffffd6d)
sendmmsg(r0, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0)
recvmmsg(r0, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2ae}}], 0x400000000000953, 0x42, 0x0)
r2 = socket(0x2000000000000021, 0x2, 0x10000000000002)
sendmsg(0xffffffffffffffff, &(0x7f000001d000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000600)="24000000100007031dff22946fa2830020200a0009000300001d85687f0000000400ff7e28000000050a43ba5d806055b6fdd80b400000c13900060008000029ec2400020cd37e99d69cda45a95e", 0xffffffc2}], 0x1}, 0x0)
connect$rxrpc(r2, &(0x7f0000000080)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e1d, @dev}}, 0x24)
sendmmsg(r2, &(0x7f0000005c00), 0x40000000000037b, 0xff6c)

15:17:43 executing program 2:
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e24, 0x0, @loopback}], 0x1c)

15:17:43 executing program 4:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0)
write$binfmt_script(0xffffffffffffffff, 0x0, 0x3af4701e)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_RESVSP(r1, 0x40305839, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8000000})
ioctl$FS_IOC_RESVSP(r0, 0x40305829, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x7fff})
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$TUNSETLINK(r3, 0x8912, 0x400308)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendfile(r5, r4, 0x0, 0x100000002)

15:17:43 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x28, r1, 0x639, 0x0, 0x0, {{0x7e}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0)

15:17:43 executing program 1:
r0 = socket$packet(0x11, 0x3, 0x300)
sendmsg$inet6(0xffffffffffffffff, &(0x7f0000001580)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=ANY=[], 0x6}, 0x0)
setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={<r1=>0xffffffffffffffff})
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000640)={'batadv_slave_1\x00', <r2=>0x0})
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$TUNSETLINK(r3, 0x8912, 0x400308)
bind$packet(r0, &(0x7f0000000140)={0x11, 0x0, r2}, 0x14)
sendmmsg(r0, &(0x7f0000000c80), 0x400000000000345, 0x0)

15:17:44 executing program 0:
r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x12, 0x4, 0x8, 0x9fb}, 0x40)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f00000006c0)=0x2000000000000001, 0x4)
setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000001c0)='macvlan1\x00', 0x10)
connect$inet(r1, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10)
sendmsg$IPCTNL_MSG_CT_GET_DYING(0xffffffffffffffff, 0x0, 0x40)
setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000), 0x4)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r0, &(0x7f0000000340), &(0x7f0000000100)=@tcp=r1}, 0x20)
shutdown(r1, 0x0)
recvmmsg(r1, &(0x7f0000000540)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}}], 0x422, 0x0, 0x0)

[  156.768230][ T8932] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  156.832181][ T8932] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
15:17:44 executing program 3:
r0 = socket(0x2000000000000021, 0x2, 0x10000000000002)
connect$rxrpc(r0, &(0x7f0000000380)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @private}}, 0x24)
r1 = socket(0x1e, 0x1, 0x0)
sendmsg(r1, &(0x7f0000000000)={&(0x7f0000000080)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0)
recvmmsg(r1, &(0x7f0000005c40)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)=""/145, 0x91}], 0x1, &(0x7f0000000280)=""/183, 0xb7}}], 0x1, 0x0, 0x0)
write$binfmt_elf32(r1, &(0x7f0000000100)=ANY=[], 0xfffffd6d)
sendmmsg(r0, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0)
recvmmsg(r0, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2ae}}], 0x400000000000953, 0x42, 0x0)
r2 = socket(0x2000000000000021, 0x2, 0x10000000000002)
sendmsg(0xffffffffffffffff, &(0x7f000001d000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000600)="24000000100007031dff22946fa2830020200a0009000300001d85687f0000000400ff7e28000000050a43ba5d806055b6fdd80b400000c13900060008000029ec2400020cd37e99d69cda45a95e", 0xffffffc2}], 0x1}, 0x0)
connect$rxrpc(r2, &(0x7f0000000080)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e1d, @dev}}, 0x24)
sendmmsg(r2, &(0x7f0000005c00), 0x40000000000037b, 0xff6c)

15:17:44 executing program 1:
r0 = socket$packet(0x11, 0x3, 0x300)
sendmsg$inet6(0xffffffffffffffff, &(0x7f0000001580)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=ANY=[], 0x6}, 0x0)
setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={<r1=>0xffffffffffffffff})
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000640)={'batadv_slave_1\x00', <r2=>0x0})
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$TUNSETLINK(r3, 0x8912, 0x400308)
bind$packet(r0, &(0x7f0000000140)={0x11, 0x0, r2}, 0x14)
sendmmsg(r0, &(0x7f0000000c80), 0x400000000000345, 0x0)

15:17:44 executing program 5:
r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0)
setsockopt$X25_QBITINCL(r0, 0x106, 0x1, 0x0, 0x0)

[  157.023378][ T8940] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
15:17:44 executing program 0:
r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x12, 0x4, 0x8, 0x9fb}, 0x40)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f00000006c0)=0x2000000000000001, 0x4)
setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000001c0)='macvlan1\x00', 0x10)
connect$inet(r1, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10)
sendmsg$IPCTNL_MSG_CT_GET_DYING(0xffffffffffffffff, 0x0, 0x40)
setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000), 0x4)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r0, &(0x7f0000000340), &(0x7f0000000100)=@tcp=r1}, 0x20)
shutdown(r1, 0x0)
recvmmsg(r1, &(0x7f0000000540)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}}], 0x422, 0x0, 0x0)

[  157.098576][ T8940] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
15:17:44 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x80, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x61, 0x33, @beacon={@with_ht, 0x0, @random, 0x0, @val, @val={0x1, 0x1, [{0x30}]}, @void, @void, @val={0x6, 0x2}, @val={0x5, 0x3}, @void, @val={0x2a, 0x1}, @void, @val={0x2d, 0x1a}, @void, @void, @val={0x76, 0x6}}}]}, 0x80}}, 0x0)

15:17:44 executing program 4:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0)
write$binfmt_script(0xffffffffffffffff, 0x0, 0x3af4701e)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_RESVSP(r1, 0x40305839, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8000000})
ioctl$FS_IOC_RESVSP(r0, 0x40305829, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x7fff})
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$TUNSETLINK(r3, 0x8912, 0x400308)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendfile(r5, r4, 0x0, 0x100000002)

15:17:44 executing program 5:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x68, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2e}, @NFTA_SET_EXPR={0x2c, 0x11, 0x0, 0x1, @match={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_MATCH_INFO={0x4}, @NFTA_MATCH_NAME={0xa, 0x1, 'limit\x00'}, @NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}], {0x14, 0x10}}, 0xb0}}, 0x0)

15:17:44 executing program 1:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)={0x14, 0x0, 0x1}, 0x14}}, 0x0)

15:17:44 executing program 0:
r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x12, 0x4, 0x8, 0x9fb}, 0x40)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f00000006c0)=0x2000000000000001, 0x4)
setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000001c0)='macvlan1\x00', 0x10)
connect$inet(r1, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10)
sendmsg$IPCTNL_MSG_CT_GET_DYING(0xffffffffffffffff, 0x0, 0x40)
setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000), 0x4)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r0, &(0x7f0000000340), &(0x7f0000000100)=@tcp=r1}, 0x20)
shutdown(r1, 0x0)
recvmmsg(r1, &(0x7f0000000540)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}}], 0x422, 0x0, 0x0)

15:17:44 executing program 2:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000052ffe7fdffffff0010", @ANYRES32=r4, @ANYBLOB="00000000e60000001c0012000c000100626f6e64"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=@newqdisc={0x38, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=@newtfilter={0x24, 0x66, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xf0, 0xffff}}}, 0x24}}, 0x0)

15:17:45 executing program 3:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000ac0)={0x3, 0x3, &(0x7f0000000840)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}}, &(0x7f00000008c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x74)

15:17:45 executing program 5:
r0 = socket(0x1000000010, 0x80002, 0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x2, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x60, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xfff3}}, [@filter_kind_options=@f_basic={{0xa}, {0x30, 0x2, [@TCA_BASIC_EMATCHES={0x2c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x20, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x0, 0x3, 0x8}}}]}]}]}}]}, 0x60}}, 0x0)
sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0)

15:17:45 executing program 1:
r0 = socket$inet(0x2b, 0x1, 0x0)
ioctl$int_in(r0, 0x5421, &(0x7f0000000080)=0x6f)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000140)=0x1, 0x4)
connect$inet(r0, &(0x7f00000002c0)={0x2, 0x0, @local}, 0x10)
close(r0)

[  157.780510][ T8970] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'.
[  157.843225][ T8223] Bluetooth: hci1: command 0x0419 tx timeout
[  157.849856][ T8975] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'.
[  157.876827][ T8974] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'.
15:17:45 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000003dc0)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000090000000a20000000000a05140000000000000000010000000900010073797a300000000058000000160a03000900000000000000010000000900010073797a30000000000900020073797a32000000002c00038018000380150001006d6163736563300000000000000000000800024000000000080001400000000014000000110001"], 0xa0}}, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
write$cgroup_int(r2, &(0x7f0000000200), 0xf000)
sendfile(r2, r3, 0x0, 0xf03b0000)
sendfile(r2, r1, 0x0, 0x8000000000004)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000000)={{0x14}, [@NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x101}], {0x14}}, 0x3c}}, 0x0)

[  157.923938][   T26] kauditd_printk_skb: 34 callbacks suppressed
[  157.923955][   T26] audit: type=1804 audit(1634570265.236:46): pid=8958 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir136193074/syzkaller.vAechG/11/cgroup.controllers" dev="sda1" ino=13968 res=1 errno=0
[  157.960956][ T8977] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'.
15:17:45 executing program 2:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000002c0)={0x0, 0xfffffffffffffea1, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="38000000240007750000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newtfilter={0x38, 0x64, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@filter_kind_options=@f_flower={{0xb}, {0x8, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x4}]}}]}, 0x38}}, 0x0)

15:17:45 executing program 3:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x8001000000000000, 0x40, &(0x7f0000000280)=@raw={'raw\x00', 0x8, 0x3, 0x2e0, 0x158, 0x0, 0x148, 0x158, 0x0, 0x248, 0x2a8, 0x2a8, 0x248, 0x2a8, 0x3, 0x0, {[{{@ip={@remote, @loopback, 0x0, 0x0, 'wg0\x00', 'nr0\x00'}, 0x0, 0x130, 0x158, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x0, 0x0, 0xffffe0e8, 0x0, 0x2d000000, 0x20000003, 0x7}}}, @common=@unspec=@physdev={{0x68}, {'veth1_to_batadv\x00', {}, 'wlan1\x00'}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@ip={@local, @multicast2, 0x0, 0x0, 'xfrm0\x00', 'team0\x00'}, 0x0, 0xc0, 0xf0, 0x0, {}, [@common=@socket0={{0x20}}, @common=@ah={{0x30}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x340)

15:17:45 executing program 5:
unshare(0x40000000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x8031, 0xffffffffffffffff, 0x0)
unshare(0x0)
r0 = socket$inet_sctp(0x2, 0x800000000001, 0x84)
connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x72)
listen(r0, 0xfffff92b)
r1 = accept(r0, 0x0, 0x0)
getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f0000000240), &(0x7f0000000280)=0x8)

[  158.146700][ T8984] xt_hashlimit: max too large, truncated to 1048576
[  158.157456][ T8983] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'.
[  158.193425][ T8983] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'.
15:17:45 executing program 4:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0)
write$binfmt_script(0xffffffffffffffff, 0x0, 0x3af4701e)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_RESVSP(r1, 0x40305839, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8000000})
ioctl$FS_IOC_RESVSP(r0, 0x40305829, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x7fff})
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$TUNSETLINK(r3, 0x8912, 0x400308)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendfile(r5, r4, 0x0, 0x100000002)

15:17:45 executing program 1:
r0 = socket$inet(0x2b, 0x1, 0x0)
ioctl$int_in(r0, 0x5421, &(0x7f0000000080)=0x6f)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000140)=0x1, 0x4)
connect$inet(r0, &(0x7f00000002c0)={0x2, 0x0, @local}, 0x10)
close(r0)

15:17:45 executing program 2:
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000003480)='dctcp\x00', 0x6)

15:17:45 executing program 3:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x5, &(0x7f0000001080)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3d8, 0x0, 0xe0, 0x0, 0x2a0, 0x1d0, 0x400, 0x400, 0x400, 0x400, 0x400, 0x6, 0x0, {[{{@ip={@broadcast, @remote, 0x0, 0x0, 'ip6gretap0\x00', 'rose0\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@broadcast, @empty, 0x0, 0x0, 'team_slave_0\x00', 'wlan1\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@ip={@rand_addr, @loopback, 0x0, 0x0, '\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}, {{@uncond, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @multicast2}}}, {{@ip={@empty, @loopback, 0x0, 0x0, 'veth0\x00', 'wg0\x00'}, 0x0, 0x70, 0x98}, @TTL={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x438)

15:17:45 executing program 3:
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001840)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001780)=ANY=[@ANYBLOB="7008000025000705dffe0f00000000ebff000000", @ANYRES32=r0, @ANYBLOB="00000000ffffffff00000000080001"], 0x870}}, 0x0)
r1 = socket(0x10, 0x80002, 0x0)
sendmmsg$alg(r1, &(0x7f0000000180)=[{0x2, 0x1000000000000, &(0x7f0000000080), 0xe, &(0x7f0000000100)}], 0x492492492492642, 0x0)

15:17:45 executing program 2:
r0 = socket$inet6(0x10, 0x3, 0x0)
sendto$inet6(r0, &(0x7f00000001c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0)
recvmsg(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000980)=""/4100, 0x1004}, {&(0x7f0000003a00)=""/4106, 0x100a}, {&(0x7f00000029c0)=""/4085, 0xff5}], 0x3}, 0x0)
recvfrom$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0)
recvfrom$inet6(r0, &(0x7f0000000000)=""/114, 0xfffffffffffffd1b, 0x0, 0x0, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0xfffffdfc, @empty}, 0x1c)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="900000002000", 0x6, 0x0, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="00a5000010", 0x5, 0x0, 0x0, 0xffffffffffffffc6)
r1 = socket$inet6(0x10, 0x2, 0x0)
sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[], 0x14}}, 0x0)
sendto$inet6(r1, &(0x7f0000000000)='%', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b)

15:17:45 executing program 1:
r0 = socket$inet(0x2b, 0x1, 0x0)
ioctl$int_in(r0, 0x5421, &(0x7f0000000080)=0x6f)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000140)=0x1, 0x4)
connect$inet(r0, &(0x7f00000002c0)={0x2, 0x0, @local}, 0x10)
close(r0)

[  158.732189][ T9025] netlink: 2116 bytes leftover after parsing attributes in process `syz-executor.3'.
[  158.755592][ T9026] netlink: 42081 bytes leftover after parsing attributes in process `syz-executor.2'.
[  158.778777][ T9026] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check.
[  158.825111][ T9025] netlink: 2116 bytes leftover after parsing attributes in process `syz-executor.3'.
[  158.858782][ T9028] netlink: 42081 bytes leftover after parsing attributes in process `syz-executor.2'.
15:17:46 executing program 1:
r0 = socket$inet(0x2b, 0x1, 0x0)
ioctl$int_in(r0, 0x5421, &(0x7f0000000080)=0x6f)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000140)=0x1, 0x4)
connect$inet(r0, &(0x7f00000002c0)={0x2, 0x0, @local}, 0x10)
close(r0)

[  158.878246][ T9028] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check.
[  158.984165][   T26] audit: type=1804 audit(1634570266.306:47): pid=9019 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir136193074/syzkaller.vAechG/12/cgroup.controllers" dev="sda1" ino=13989 res=1 errno=0
15:17:46 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000003dc0)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000090000000a20000000000a05140000000000000000010000000900010073797a300000000058000000160a03000900000000000000010000000900010073797a30000000000900020073797a32000000002c00038018000380150001006d6163736563300000000000000000000800024000000000080001400000000014000000110001"], 0xa0}}, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
write$cgroup_int(r2, &(0x7f0000000200), 0xf000)
sendfile(r2, r3, 0x0, 0xf03b0000)
sendfile(r2, r1, 0x0, 0x8000000000004)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000000)={{0x14}, [@NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x101}], {0x14}}, 0x3c}}, 0x0)

15:17:46 executing program 3:
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001840)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001780)=ANY=[@ANYBLOB="7008000025000705dffe0f00000000ebff000000", @ANYRES32=r0, @ANYBLOB="00000000ffffffff00000000080001"], 0x870}}, 0x0)
r1 = socket(0x10, 0x80002, 0x0)
sendmmsg$alg(r1, &(0x7f0000000180)=[{0x2, 0x1000000000000, &(0x7f0000000080), 0xe, &(0x7f0000000100)}], 0x492492492492642, 0x0)

15:17:46 executing program 2:
r0 = socket$inet6(0x10, 0x3, 0x0)
sendto$inet6(r0, &(0x7f00000001c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0)
recvmsg(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000980)=""/4100, 0x1004}, {&(0x7f0000003a00)=""/4106, 0x100a}, {&(0x7f00000029c0)=""/4085, 0xff5}], 0x3}, 0x0)
recvfrom$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0)
recvfrom$inet6(r0, &(0x7f0000000000)=""/114, 0xfffffffffffffd1b, 0x0, 0x0, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0xfffffdfc, @empty}, 0x1c)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="900000002000", 0x6, 0x0, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="00a5000010", 0x5, 0x0, 0x0, 0xffffffffffffffc6)
r1 = socket$inet6(0x10, 0x2, 0x0)
sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[], 0x14}}, 0x0)
sendto$inet6(r1, &(0x7f0000000000)='%', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b)

[  159.175633][ T9036] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check.
15:17:47 executing program 5:
unshare(0x40000000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x8031, 0xffffffffffffffff, 0x0)
unshare(0x0)
r0 = socket$inet_sctp(0x2, 0x800000000001, 0x84)
connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x72)
listen(r0, 0xfffff92b)
r1 = accept(r0, 0x0, 0x0)
getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f0000000240), &(0x7f0000000280)=0x8)

15:17:47 executing program 1:
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x18}, [@ldst={0x6, 0x3}]}, &(0x7f0000000080)='GPL\x00', 0x4, 0x3f7, &(0x7f000000cf3d)=""/195}, 0x48)

15:17:47 executing program 3:
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001840)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001780)=ANY=[@ANYBLOB="7008000025000705dffe0f00000000ebff000000", @ANYRES32=r0, @ANYBLOB="00000000ffffffff00000000080001"], 0x870}}, 0x0)
r1 = socket(0x10, 0x80002, 0x0)
sendmmsg$alg(r1, &(0x7f0000000180)=[{0x2, 0x1000000000000, &(0x7f0000000080), 0xe, &(0x7f0000000100)}], 0x492492492492642, 0x0)

15:17:47 executing program 4:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0)
write$binfmt_script(0xffffffffffffffff, 0x0, 0x3af4701e)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_RESVSP(r1, 0x40305839, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8000000})
ioctl$FS_IOC_RESVSP(r0, 0x40305829, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x7fff})
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$TUNSETLINK(r3, 0x8912, 0x400308)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendfile(r5, r4, 0x0, 0x100000002)

15:17:47 executing program 2:
r0 = socket$inet6(0x10, 0x3, 0x0)
sendto$inet6(r0, &(0x7f00000001c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0)
recvmsg(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000980)=""/4100, 0x1004}, {&(0x7f0000003a00)=""/4106, 0x100a}, {&(0x7f00000029c0)=""/4085, 0xff5}], 0x3}, 0x0)
recvfrom$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0)
recvfrom$inet6(r0, &(0x7f0000000000)=""/114, 0xfffffffffffffd1b, 0x0, 0x0, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0xfffffdfc, @empty}, 0x1c)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="900000002000", 0x6, 0x0, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="00a5000010", 0x5, 0x0, 0x0, 0xffffffffffffffc6)
r1 = socket$inet6(0x10, 0x2, 0x0)
sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[], 0x14}}, 0x0)
sendto$inet6(r1, &(0x7f0000000000)='%', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b)

[  160.069506][ T9078] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check.
15:17:47 executing program 3:
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001840)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001780)=ANY=[@ANYBLOB="7008000025000705dffe0f00000000ebff000000", @ANYRES32=r0, @ANYBLOB="00000000ffffffff00000000080001"], 0x870}}, 0x0)
r1 = socket(0x10, 0x80002, 0x0)
sendmmsg$alg(r1, &(0x7f0000000180)=[{0x2, 0x1000000000000, &(0x7f0000000080), 0xe, &(0x7f0000000100)}], 0x492492492492642, 0x0)

15:17:47 executing program 1:
unshare(0x40000000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x8031, 0xffffffffffffffff, 0x0)
unshare(0x0)
r0 = socket$inet_sctp(0x2, 0x800000000001, 0x84)
connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x72)
listen(r0, 0xfffff92b)
r1 = accept(r0, 0x0, 0x0)
getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f0000000240), &(0x7f0000000280)=0x8)

15:17:47 executing program 2:
r0 = socket$inet6(0x10, 0x3, 0x0)
sendto$inet6(r0, &(0x7f00000001c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0)
recvmsg(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000980)=""/4100, 0x1004}, {&(0x7f0000003a00)=""/4106, 0x100a}, {&(0x7f00000029c0)=""/4085, 0xff5}], 0x3}, 0x0)
recvfrom$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0)
recvfrom$inet6(r0, &(0x7f0000000000)=""/114, 0xfffffffffffffd1b, 0x0, 0x0, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0xfffffdfc, @empty}, 0x1c)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="900000002000", 0x6, 0x0, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="00a5000010", 0x5, 0x0, 0x0, 0xffffffffffffffc6)
r1 = socket$inet6(0x10, 0x2, 0x0)
sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[], 0x14}}, 0x0)
sendto$inet6(r1, &(0x7f0000000000)='%', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b)

15:17:47 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000003dc0)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000090000000a20000000000a05140000000000000000010000000900010073797a300000000058000000160a03000900000000000000010000000900010073797a30000000000900020073797a32000000002c00038018000380150001006d6163736563300000000000000000000800024000000000080001400000000014000000110001"], 0xa0}}, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
write$cgroup_int(r2, &(0x7f0000000200), 0xf000)
sendfile(r2, r3, 0x0, 0xf03b0000)
sendfile(r2, r1, 0x0, 0x8000000000004)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000000)={{0x14}, [@NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x101}], {0x14}}, 0x3c}}, 0x0)

[  160.526347][   T26] audit: type=1804 audit(1634570267.846:48): pid=9081 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir136193074/syzkaller.vAechG/13/cgroup.controllers" dev="sda1" ino=14008 res=1 errno=0
15:17:47 executing program 3:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000000)={0x84, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x1, 'lblcr\x00'}, 0x2c)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$TUNSETLINK(r1, 0x8912, 0x400308)
setsockopt$IP_VS_SO_SET_DEL(r0, 0x0, 0x484, &(0x7f0000001280)={0x20000000000084, @rand_addr, 0x0, 0x200000001, 'none\x00', 0x10, 0xc9b}, 0x2c)

[  160.578932][ T9112] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check.
15:17:48 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
write$cgroup_int(r1, &(0x7f0000000200), 0xf000)
sendfile(r1, r0, 0x0, 0xf03affff)
sendfile(r1, r0, 0x0, 0x8000000000004)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cgroup.stat\x00', 0x0, 0x0)

15:17:48 executing program 3:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000000)={0x84, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x1, 'lblcr\x00'}, 0x2c)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$TUNSETLINK(r1, 0x8912, 0x400308)
setsockopt$IP_VS_SO_SET_DEL(r0, 0x0, 0x484, &(0x7f0000001280)={0x20000000000084, @rand_addr, 0x0, 0x200000001, 'none\x00', 0x10, 0xc9b}, 0x2c)

15:17:49 executing program 5:
unshare(0x40000000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x8031, 0xffffffffffffffff, 0x0)
unshare(0x0)
r0 = socket$inet_sctp(0x2, 0x800000000001, 0x84)
connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x72)
listen(r0, 0xfffff92b)
r1 = accept(r0, 0x0, 0x0)
getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f0000000240), &(0x7f0000000280)=0x8)

15:17:49 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000400)=ANY=[@ANYBLOB="3c00000024000b0f00000000e4ff000000000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000b00010064736d61726b00000c0002000600010020"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000840)=@newtfilter={0x24, 0x28, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xfff2}}}, 0x24}}, 0x0)

15:17:49 executing program 3:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000000)={0x84, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x1, 'lblcr\x00'}, 0x2c)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$TUNSETLINK(r1, 0x8912, 0x400308)
setsockopt$IP_VS_SO_SET_DEL(r0, 0x0, 0x484, &(0x7f0000001280)={0x20000000000084, @rand_addr, 0x0, 0x200000001, 'none\x00', 0x10, 0xc9b}, 0x2c)

15:17:49 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000003dc0)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000090000000a20000000000a05140000000000000000010000000900010073797a300000000058000000160a03000900000000000000010000000900010073797a30000000000900020073797a32000000002c00038018000380150001006d6163736563300000000000000000000800024000000000080001400000000014000000110001"], 0xa0}}, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
write$cgroup_int(r2, &(0x7f0000000200), 0xf000)
sendfile(r2, r3, 0x0, 0xf03b0000)
sendfile(r2, r1, 0x0, 0x8000000000004)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000000)={{0x14}, [@NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x101}], {0x14}}, 0x3c}}, 0x0)

15:17:49 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
write$cgroup_int(r1, &(0x7f0000000200), 0xf000)
sendfile(r1, r0, 0x0, 0xf03affff)
sendfile(r1, r0, 0x0, 0x8000000000004)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cgroup.stat\x00', 0x0, 0x0)

15:17:49 executing program 4:
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
write$cgroup_int(r1, &(0x7f0000000200), 0xf000)
sendfile(r1, r0, 0x0, 0xf03affff)
sendfile(r1, r0, 0x0, 0x8000000000004)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cgroup.stat\x00', 0x0, 0x0)

15:17:49 executing program 1:
unshare(0x40000000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x8031, 0xffffffffffffffff, 0x0)
unshare(0x0)
r0 = socket$inet_sctp(0x2, 0x800000000001, 0x84)
connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x72)
listen(r0, 0xfffff92b)
r1 = accept(r0, 0x0, 0x0)
getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f0000000240), &(0x7f0000000280)=0x8)

15:17:49 executing program 3:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000000)={0x84, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x1, 'lblcr\x00'}, 0x2c)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$TUNSETLINK(r1, 0x8912, 0x400308)
setsockopt$IP_VS_SO_SET_DEL(r0, 0x0, 0x484, &(0x7f0000001280)={0x20000000000084, @rand_addr, 0x0, 0x200000001, 'none\x00', 0x10, 0xc9b}, 0x2c)

15:17:50 executing program 3:
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
write$cgroup_int(r1, &(0x7f0000000200), 0xf000)
sendfile(r1, r0, 0x0, 0xf03affff)
sendfile(r1, r0, 0x0, 0x8000000000004)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cgroup.stat\x00', 0x0, 0x0)

15:17:50 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
write$cgroup_int(r1, &(0x7f0000000200), 0xf000)
sendfile(r1, r0, 0x0, 0xf03affff)
sendfile(r1, r0, 0x0, 0x8000000000004)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cgroup.stat\x00', 0x0, 0x0)

15:17:50 executing program 0:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$ARPT_SO_SET_REPLACE(r0, 0xa02000000000000, 0x60, &(0x7f0000000b00)={'filter\x00', 0x1001, 0x4, 0x3c8, 0x0, 0xe8, 0x1f8, 0x2e0, 0x2e0, 0x2e0, 0x4, 0x0, {[{{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0x1f8}}, {{@arp={@multicast1, @multicast2, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'wg0\x00', 'ip6tnl0\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @remote, @multicast2}}}, {{@arp={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'wg2\x00', 'team_slave_1\x00'}, 0xc0, 0xe8}, @unspec=@CONNSECMARK={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418)

15:17:50 executing program 4:
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
write$cgroup_int(r1, &(0x7f0000000200), 0xf000)
sendfile(r1, r0, 0x0, 0xf03affff)
sendfile(r1, r0, 0x0, 0x8000000000004)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cgroup.stat\x00', 0x0, 0x0)

15:17:51 executing program 5:
unshare(0x40000000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x8031, 0xffffffffffffffff, 0x0)
unshare(0x0)
r0 = socket$inet_sctp(0x2, 0x800000000001, 0x84)
connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x72)
listen(r0, 0xfffff92b)
r1 = accept(r0, 0x0, 0x0)
getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f0000000240), &(0x7f0000000280)=0x8)

15:17:51 executing program 0:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$ARPT_SO_SET_REPLACE(r0, 0xa02000000000000, 0x60, &(0x7f0000000b00)={'filter\x00', 0x1001, 0x4, 0x3c8, 0x0, 0xe8, 0x1f8, 0x2e0, 0x2e0, 0x2e0, 0x4, 0x0, {[{{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0x1f8}}, {{@arp={@multicast1, @multicast2, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'wg0\x00', 'ip6tnl0\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @remote, @multicast2}}}, {{@arp={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'wg2\x00', 'team_slave_1\x00'}, 0xc0, 0xe8}, @unspec=@CONNSECMARK={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418)

15:17:51 executing program 3:
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
write$cgroup_int(r1, &(0x7f0000000200), 0xf000)
sendfile(r1, r0, 0x0, 0xf03affff)
sendfile(r1, r0, 0x0, 0x8000000000004)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cgroup.stat\x00', 0x0, 0x0)

15:17:51 executing program 4:
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
write$cgroup_int(r1, &(0x7f0000000200), 0xf000)
sendfile(r1, r0, 0x0, 0xf03affff)
sendfile(r1, r0, 0x0, 0x8000000000004)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cgroup.stat\x00', 0x0, 0x0)

15:17:51 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
write$cgroup_int(r1, &(0x7f0000000200), 0xf000)
sendfile(r1, r0, 0x0, 0xf03affff)
sendfile(r1, r0, 0x0, 0x8000000000004)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cgroup.stat\x00', 0x0, 0x0)

15:17:51 executing program 1:
unshare(0x40000000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x8031, 0xffffffffffffffff, 0x0)
unshare(0x0)
r0 = socket$inet_sctp(0x2, 0x800000000001, 0x84)
connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x72)
listen(r0, 0xfffff92b)
r1 = accept(r0, 0x0, 0x0)
getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f0000000240), &(0x7f0000000280)=0x8)

15:17:51 executing program 0:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$ARPT_SO_SET_REPLACE(r0, 0xa02000000000000, 0x60, &(0x7f0000000b00)={'filter\x00', 0x1001, 0x4, 0x3c8, 0x0, 0xe8, 0x1f8, 0x2e0, 0x2e0, 0x2e0, 0x4, 0x0, {[{{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0x1f8}}, {{@arp={@multicast1, @multicast2, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'wg0\x00', 'ip6tnl0\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @remote, @multicast2}}}, {{@arp={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'wg2\x00', 'team_slave_1\x00'}, 0xc0, 0xe8}, @unspec=@CONNSECMARK={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418)

15:17:52 executing program 0:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$ARPT_SO_SET_REPLACE(r0, 0xa02000000000000, 0x60, &(0x7f0000000b00)={'filter\x00', 0x1001, 0x4, 0x3c8, 0x0, 0xe8, 0x1f8, 0x2e0, 0x2e0, 0x2e0, 0x4, 0x0, {[{{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0x1f8}}, {{@arp={@multicast1, @multicast2, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'wg0\x00', 'ip6tnl0\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @remote, @multicast2}}}, {{@arp={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'wg2\x00', 'team_slave_1\x00'}, 0xc0, 0xe8}, @unspec=@CONNSECMARK={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418)

15:17:52 executing program 0:
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$TUNSETLINK(r0, 0x8912, 0x400308)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x6, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x4}, [@ldst={0x5, 0x5, 0xe009}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2}, 0x48)

15:17:52 executing program 3:
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
write$cgroup_int(r1, &(0x7f0000000200), 0xf000)
sendfile(r1, r0, 0x0, 0xf03affff)
sendfile(r1, r0, 0x0, 0x8000000000004)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cgroup.stat\x00', 0x0, 0x0)

15:17:52 executing program 4:
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x600, 0x0)

15:17:53 executing program 2:
r0 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000002c0)="5500000018007f04c0fe15b282a380930a60000200a84302916d0200390009003500ff6c0200000015000500fc060000070b566881b18432119b1100b1df13000000fb0000400014000040970de3b3000000000900", 0x55}], 0x1}, 0x0)

15:17:54 executing program 3:
socket$kcm(0x11, 0x0, 0x300)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r3, &(0x7f0000000600)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c0000001000850600000000fe612231c24a0008", @ANYRES32=r4, @ANYBLOB="2277f292252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000840)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x44190}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x3c}}, 0x0)
bpf$OBJ_GET_MAP(0x7, &(0x7f00000002c0)={0x0, 0x0, 0x18}, 0x10)
sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000700)=ANY=[@ANYBLOB="c00000001100010025bd7000fddbdf2500000000", @ANYRES32=r4], 0xc0}}, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)

15:17:54 executing program 0:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
close(r0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r2, &(0x7f0000000200), 0xf000)
sendfile(r0, r1, 0x0, 0x47ffffffffffc)
sendfile(r0, r1, 0x0, 0x10000000000000)
socket$inet_sctp(0x2, 0x0, 0x84)
socket$inet(0x2, 0xa, 0x0)
getuid()
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00'})
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)

15:17:54 executing program 2:
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
connect(r0, &(0x7f0000000200)=@nl=@unspec, 0x80)
sendmsg(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0)
connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c)

15:17:54 executing program 4:
clock_gettime(0x6, &(0x7f0000000180))

15:17:54 executing program 5:
r0 = socket$inet(0x2, 0x1, 0x0)
getsockopt$inet_buf(r0, 0x0, 0x50, &(0x7f0000001280)=""/4068, &(0x7f0000000040)=0xfe4)

15:17:54 executing program 4:
r0 = syz_init_net_socket$bt_l2cap(0x9, 0x5, 0x0)
setsockopt$bt_l2cap_L2CAP_LM(r0, 0x106, 0x3, 0x0, 0x0)

15:17:54 executing program 1:
socket$kcm(0xa, 0x3, 0x11)
r0 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000000c0)="48000000140081fb7059ae08060c04000aff0f03000004000411000000006fabca1b4e7d06a6bd7c493872f750375ed08a562ad6e74703c48f93b82a02000000461eb886a5e54e8f", 0x48}], 0x1}, 0x0)

15:17:54 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f00000093c0)={0x0, 0x0, &(0x7f00000092c0)=[{&(0x7f0000000200)={0x28, 0x28, 0x1, 0x0, 0x0, "", [@generic="f165d42f", @typed={0xc, 0x0, 0x0, 0x0, @u64=0xfffffffffffff000}, @typed={0x8, 0x0, 0x0, 0x0, @ipv4=@multicast2}]}, 0x28}], 0x1}, 0x0)

[  167.079092][ T9337] netlink: 'syz-executor.3': attribute type 1 has an invalid length.
[  167.094828][ T9342] syz-executor.0 uses obsolete (PF_INET,SOCK_PACKET)
15:17:54 executing program 2:
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
connect(r0, &(0x7f0000000200)=@nl=@unspec, 0x80)
sendmsg(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0)
connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c)

15:17:54 executing program 4:
r0 = syz_init_net_socket$bt_l2cap(0x9, 0x5, 0x0)
setsockopt$bt_l2cap_L2CAP_LM(r0, 0x106, 0x3, 0x0, 0x0)

[  167.333933][ T9337] device bond1 entered promiscuous mode
15:17:54 executing program 1:
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, 0x0, 0x300)

[  167.375451][ T9344] device bridge1 entered promiscuous mode
[  167.467811][ T9344] bond1: (slave bridge1): making interface the new active one
15:17:54 executing program 4:
r0 = syz_init_net_socket$bt_l2cap(0x9, 0x5, 0x0)
setsockopt$bt_l2cap_L2CAP_LM(r0, 0x106, 0x3, 0x0, 0x0)

[  167.521786][ T9344] bond1: (slave bridge1): Enslaving as an active interface with an up link
[  167.561150][ T9359] __nla_validate_parse: 11 callbacks suppressed
[  167.561171][ T9359] netlink: 160 bytes leftover after parsing attributes in process `syz-executor.3'.
[  167.651880][ T9359] bond1 (unregistering): (slave bridge1): Releasing backup interface
[  167.747224][ T9359] bond1 (unregistering): Released all slaves
[  167.884775][ T9386] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'.
[  167.903298][ T9337] netlink: 'syz-executor.3': attribute type 1 has an invalid length.
[  168.003231][ T9337] device bond1 entered promiscuous mode
[  168.014788][ T9344] device bridge2 entered promiscuous mode
[  168.057125][ T9344] bond1: (slave bridge2): making interface the new active one
[  168.071534][ T9344] bond1: (slave bridge2): Enslaving as an active interface with an up link
[  168.115410][ T9436] netlink: 160 bytes leftover after parsing attributes in process `syz-executor.3'.
[  168.146303][ T9436] bond1 (unregistering): (slave bridge2): Releasing backup interface
[  168.185621][ T9436] bond1 (unregistering): Released all slaves
15:17:55 executing program 3:
socket$kcm(0x11, 0x0, 0x300)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r3, &(0x7f0000000600)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c0000001000850600000000fe612231c24a0008", @ANYRES32=r4, @ANYBLOB="2277f292252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000840)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x44190}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x3c}}, 0x0)
bpf$OBJ_GET_MAP(0x7, &(0x7f00000002c0)={0x0, 0x0, 0x18}, 0x10)
sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000700)=ANY=[@ANYBLOB="c00000001100010025bd7000fddbdf2500000000", @ANYRES32=r4], 0xc0}}, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)

15:17:55 executing program 4:
r0 = syz_init_net_socket$bt_l2cap(0x9, 0x5, 0x0)
setsockopt$bt_l2cap_L2CAP_LM(r0, 0x106, 0x3, 0x0, 0x0)

15:17:55 executing program 2:
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
connect(r0, &(0x7f0000000200)=@nl=@unspec, 0x80)
sendmsg(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0)
connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c)

15:17:55 executing program 0:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
close(r0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r2, &(0x7f0000000200), 0xf000)
sendfile(r0, r1, 0x0, 0x47ffffffffffc)
sendfile(r0, r1, 0x0, 0x10000000000000)
socket$inet_sctp(0x2, 0x0, 0x84)
socket$inet(0x2, 0xa, 0x0)
getuid()
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00'})
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)

15:17:55 executing program 1:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
close(r0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r2, &(0x7f0000000200), 0xf000)
sendfile(r0, r1, 0x0, 0x47ffffffffffc)
sendfile(r0, r1, 0x0, 0x10000000000000)
socket$inet_sctp(0x2, 0x0, 0x84)
socket$inet(0x2, 0xa, 0x0)
getuid()
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00'})
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)

15:17:55 executing program 5:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
close(r0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r2, &(0x7f0000000200), 0xf000)
sendfile(r0, r1, 0x0, 0x47ffffffffffc)
sendfile(r0, r1, 0x0, 0x10000000000000)
socket$inet_sctp(0x2, 0x0, 0x84)
socket$inet(0x2, 0xa, 0x0)
getuid()
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00'})
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)

15:17:55 executing program 4:
socket$kcm(0x11, 0x0, 0x300)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r3, &(0x7f0000000600)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c0000001000850600000000fe612231c24a0008", @ANYRES32=r4, @ANYBLOB="2277f292252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000840)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x44190}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x3c}}, 0x0)
bpf$OBJ_GET_MAP(0x7, &(0x7f00000002c0)={0x0, 0x0, 0x18}, 0x10)
sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000700)=ANY=[@ANYBLOB="c00000001100010025bd7000fddbdf2500000000", @ANYRES32=r4], 0xc0}}, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)

[  168.574760][ T9520] netlink: 'syz-executor.3': attribute type 1 has an invalid length.
15:17:55 executing program 2:
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
connect(r0, &(0x7f0000000200)=@nl=@unspec, 0x80)
sendmsg(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0)
connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c)

[  168.758254][ T9520] device bond1 entered promiscuous mode
[  168.779688][ T9524] device bridge3 entered promiscuous mode
[  168.813833][ T9524] bond1: (slave bridge3): making interface the new active one
[  168.894912][ T9524] bond1: (slave bridge3): Enslaving as an active interface with an up link
[  168.980731][ T9533] netlink: 160 bytes leftover after parsing attributes in process `syz-executor.3'.
[  169.044035][ T9533] bond1 (unregistering): (slave bridge3): Releasing backup interface
15:17:56 executing program 2:
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x10, 0x4, 0x4, 0x3}, 0x40)
bpf$BPF_GET_MAP_INFO(0x3, &(0x7f00000000c0)={r0, 0x28, &(0x7f00000003c0)}, 0x30)

15:17:56 executing program 5:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
close(r0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r2, &(0x7f0000000200), 0xf000)
sendfile(r0, r1, 0x0, 0x47ffffffffffc)
sendfile(r0, r1, 0x0, 0x10000000000000)
socket$inet_sctp(0x2, 0x0, 0x84)
socket$inet(0x2, 0xa, 0x0)
getuid()
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00'})
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)

[  169.136191][ T9533] bond1 (unregistering): Released all slaves
15:17:56 executing program 1:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
close(r0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r2, &(0x7f0000000200), 0xf000)
sendfile(r0, r1, 0x0, 0x47ffffffffffc)
sendfile(r0, r1, 0x0, 0x10000000000000)
socket$inet_sctp(0x2, 0x0, 0x84)
socket$inet(0x2, 0xa, 0x0)
getuid()
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00'})
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)

[  169.288382][ T9570] netlink: 'syz-executor.4': attribute type 1 has an invalid length.
[  169.310417][ T9574] device bridge1 entered promiscuous mode
15:17:56 executing program 2:
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r0, &(0x7f00000023c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000f00)={0x18, 0x2a, 0x105, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @binary="d47d8309"}]}, 0x18}], 0x1}, 0x0)

[  169.486678][ T9579] netlink: 160 bytes leftover after parsing attributes in process `syz-executor.4'.
[  169.607068][ T9629] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'.
15:17:57 executing program 3:
socket$kcm(0x11, 0x0, 0x300)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r3, &(0x7f0000000600)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c0000001000850600000000fe612231c24a0008", @ANYRES32=r4, @ANYBLOB="2277f292252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000840)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x44190}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x3c}}, 0x0)
bpf$OBJ_GET_MAP(0x7, &(0x7f00000002c0)={0x0, 0x0, 0x18}, 0x10)
sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000700)=ANY=[@ANYBLOB="c00000001100010025bd7000fddbdf2500000000", @ANYRES32=r4], 0xc0}}, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)

15:17:57 executing program 0:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
close(r0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r2, &(0x7f0000000200), 0xf000)
sendfile(r0, r1, 0x0, 0x47ffffffffffc)
sendfile(r0, r1, 0x0, 0x10000000000000)
socket$inet_sctp(0x2, 0x0, 0x84)
socket$inet(0x2, 0xa, 0x0)
getuid()
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00'})
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)

15:17:57 executing program 4:
socket$kcm(0x11, 0x0, 0x300)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r3, &(0x7f0000000600)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c0000001000850600000000fe612231c24a0008", @ANYRES32=r4, @ANYBLOB="2277f292252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000840)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x44190}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x3c}}, 0x0)
bpf$OBJ_GET_MAP(0x7, &(0x7f00000002c0)={0x0, 0x0, 0x18}, 0x10)
sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000700)=ANY=[@ANYBLOB="c00000001100010025bd7000fddbdf2500000000", @ANYRES32=r4], 0xc0}}, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)

15:17:57 executing program 2:
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r0, &(0x7f00000023c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000f00)={0x18, 0x2a, 0x105, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @binary="d47d8309"}]}, 0x18}], 0x1}, 0x0)

[  169.933540][ T9649] netlink: 'syz-executor.3': attribute type 1 has an invalid length.
[  170.070769][ T9664] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'.
[  170.116313][ T9649] device bond1 entered promiscuous mode
[  170.161880][ T9654] device bridge4 entered promiscuous mode
15:17:57 executing program 2:
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r0, &(0x7f00000023c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000f00)={0x18, 0x2a, 0x105, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @binary="d47d8309"}]}, 0x18}], 0x1}, 0x0)

[  170.223132][ T9654] bond1: (slave bridge4): making interface the new active one
15:17:57 executing program 1:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
close(r0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r2, &(0x7f0000000200), 0xf000)
sendfile(r0, r1, 0x0, 0x47ffffffffffc)
sendfile(r0, r1, 0x0, 0x10000000000000)
socket$inet_sctp(0x2, 0x0, 0x84)
socket$inet(0x2, 0xa, 0x0)
getuid()
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00'})
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)

[  170.284705][ T9654] bond1: (slave bridge4): Enslaving as an active interface with an up link
15:17:57 executing program 5:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
close(r0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r2, &(0x7f0000000200), 0xf000)
sendfile(r0, r1, 0x0, 0x47ffffffffffc)
sendfile(r0, r1, 0x0, 0x10000000000000)
socket$inet_sctp(0x2, 0x0, 0x84)
socket$inet(0x2, 0xa, 0x0)
getuid()
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00'})
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)

[  170.348380][ T9660] netlink: 'syz-executor.4': attribute type 1 has an invalid length.
15:17:57 executing program 2:
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r0, &(0x7f00000023c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000f00)={0x18, 0x2a, 0x105, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @binary="d47d8309"}]}, 0x18}], 0x1}, 0x0)

[  170.466555][ T9727] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'.
[  170.531407][ T9660] device bond1 entered promiscuous mode
[  170.585026][ T9673] netlink: 160 bytes leftover after parsing attributes in process `syz-executor.3'.
[  170.685024][ T9673] bond1 (unregistering): (slave bridge4): Releasing backup interface
[  170.798240][ T9751] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'.
[  170.811523][ T9673] bond1 (unregistering): Released all slaves
[  170.995563][ T9679] device bridge1 entered promiscuous mode
15:17:58 executing program 2:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000000), 0x8)

[  171.036587][ T9679] bond1: (slave bridge1): making interface the new active one
15:17:58 executing program 0:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
close(r0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r2, &(0x7f0000000200), 0xf000)
sendfile(r0, r1, 0x0, 0x47ffffffffffc)
sendfile(r0, r1, 0x0, 0x10000000000000)
socket$inet_sctp(0x2, 0x0, 0x84)
socket$inet(0x2, 0xa, 0x0)
getuid()
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00'})
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)

[  171.080075][ T9679] bond1: (slave bridge1): Enslaving as an active interface with an up link
[  171.136802][ T9692] bond1 (unregistering): (slave bridge1): Releasing backup interface
15:17:58 executing program 5:
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
setsockopt$PNPIPE_INITSTATE(r0, 0x28, 0x4, 0x0, 0x0)

[  171.228298][ T9692] bond1 (unregistering): Released all slaves
15:17:58 executing program 2:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
ioctl$SIOCAX25GETINFO(r1, 0x89ed, &(0x7f00000000c0))
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)
write$cgroup_int(r2, &(0x7f0000000200), 0xf000)
sendfile(r2, r3, 0x0, 0xf03b0000)
write$cgroup_int(r1, &(0x7f0000000200), 0x806000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28012, r0, 0x0)
mmap(&(0x7f0000389000/0x1000)=nil, 0x1000, 0x1000000, 0x10, 0xffffffffffffffff, 0x0)
r4 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/18, 0x30c000, 0x800}, 0x400920)

15:17:58 executing program 3:
socket$kcm(0x11, 0x0, 0x300)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r3, &(0x7f0000000600)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c0000001000850600000000fe612231c24a0008", @ANYRES32=r4, @ANYBLOB="2277f292252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000840)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x44190}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x3c}}, 0x0)
bpf$OBJ_GET_MAP(0x7, &(0x7f00000002c0)={0x0, 0x0, 0x18}, 0x10)
sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000700)=ANY=[@ANYBLOB="c00000001100010025bd7000fddbdf2500000000", @ANYRES32=r4], 0xc0}}, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)

15:17:58 executing program 5:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_DELFLOWTABLE={0x30, 0x18, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x4}]}], {0x14, 0x10}}, 0xb8}}, 0x0)

15:17:58 executing program 4:
socket$kcm(0x11, 0x0, 0x300)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r3, &(0x7f0000000600)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c0000001000850600000000fe612231c24a0008", @ANYRES32=r4, @ANYBLOB="2277f292252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000840)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x44190}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x3c}}, 0x0)
bpf$OBJ_GET_MAP(0x7, &(0x7f00000002c0)={0x0, 0x0, 0x18}, 0x10)
sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000700)=ANY=[@ANYBLOB="c00000001100010025bd7000fddbdf2500000000", @ANYRES32=r4], 0xc0}}, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)

15:17:58 executing program 1:
r0 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10)
r1 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10)
recvmsg$unix(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000100)=""/180, 0xb4}], 0x1, 0x0, 0x58}, 0x0)
sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x92, 0x0)
sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x92, 0x0)
recvfrom$inet6(r0, &(0x7f0000000080)=""/124, 0x7c, 0x0, 0x0, 0x0)

15:17:59 executing program 5:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x2}, 0xe)
sendmmsg$inet(r0, &(0x7f00000039c0)=[{{0x0, 0x0, &(0x7f00000023c0)=[{&(0x7f00000001c0)="cc6e8ceba8e2848c64fd51773f8efc2bbf5ca67c99cad71e0e62285ffd2a6fe9bea2e85c71c695b95e54c88da803099c800668924a39ed10e3adec0236acea863ed0c86f68b2", 0x46}, {&(0x7f0000000240)="e2e923285a0b4f0f16f68b7de621e12476d7a4ad739e55991df246651e177870f7c3086c247d14fe5fdc238993674d506af47a209dfbb3088112b899052b24e4e8029f13905671b942e679d706550a595bdec73c74e35e1f08af84ff720ff5c751e69ca561da616e18ac01a3a7f34f448f9c7294278de38947ef668b2df6bdb7f610cc97ec25d5584d49f9269ee3819400afa9310c4f", 0x96}, {&(0x7f0000000300)="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", 0x31c}], 0x3}}], 0x1, 0x0)

[  171.916148][ T9841] netlink: 'syz-executor.3': attribute type 1 has an invalid length.
[  172.126160][ T9841] device bond1 entered promiscuous mode
15:17:59 executing program 5:
syz_genetlink_get_family_id$nl802154(&(0x7f00000020c0), 0xffffffffffffffff)
sendmsg$NL802154_CMD_DEL_SEC_KEY(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0)
socket$inet_mptcp(0x2, 0x1, 0x106)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r0, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x24, 0x0, 0x400, 0x70bd2b, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x2)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0)
unshare(0x40060400)

[  172.170947][ T9842] netlink: 'syz-executor.4': attribute type 1 has an invalid length.
[  172.459796][ T9842] device bond1 entered promiscuous mode
[  172.500558][ T9844] device bridge5 entered promiscuous mode
15:17:59 executing program 0:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
sendto$inet(r1, &(0x7f00000000c0)="1f1b0178bd652aa9613bf658cc46758ccd15738d09616932321d39c97c3834072f1a195b6d0d57cf2d6fd42f0c970bdb45b57477642f35343836e1da", 0x3c, 0x20000014, &(0x7f0000000180)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x3d}}, 0x10)
getsockopt$ARPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000100)={'filter\x00', 0x0, [0xfffffffe, 0x3, 0xfffffffc]}, &(0x7f0000000040)=0x44)
socket(0x0, 0x0, 0x0)
getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0)
ioctl$sock_TIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000280)=0x7fe, 0x4)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x3654}]}, 0x10)
sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='nv\x00', 0x3)
socket(0x28, 0x4, 0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0)
recvmsg(r0, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1}, 0x700)

[  172.542309][ T9844] bond1: (slave bridge5): making interface the new active one
[  172.576886][ T9844] bond1: (slave bridge5): Enslaving as an active interface with an up link
15:17:59 executing program 1:
r0 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10)
r1 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10)
recvmsg$unix(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000100)=""/180, 0xb4}], 0x1, 0x0, 0x58}, 0x0)
sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x92, 0x0)
sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x92, 0x0)
recvfrom$inet6(r0, &(0x7f0000000080)=""/124, 0x7c, 0x0, 0x0, 0x0)

[  172.642198][ T9845] device bridge2 entered promiscuous mode
15:18:00 executing program 2:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
ioctl$SIOCAX25GETINFO(r1, 0x89ed, &(0x7f00000000c0))
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)
write$cgroup_int(r2, &(0x7f0000000200), 0xf000)
sendfile(r2, r3, 0x0, 0xf03b0000)
write$cgroup_int(r1, &(0x7f0000000200), 0x806000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28012, r0, 0x0)
mmap(&(0x7f0000389000/0x1000)=nil, 0x1000, 0x1000000, 0x10, 0xffffffffffffffff, 0x0)
r4 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/18, 0x30c000, 0x800}, 0x400920)

[  172.691765][ T9845] bond1: (slave bridge2): making interface the new active one
[  172.734360][ T9845] bond1: (slave bridge2): Enslaving as an active interface with an up link
[  172.747875][ T9848] __nla_validate_parse: 1 callbacks suppressed
[  172.747892][ T9848] netlink: 160 bytes leftover after parsing attributes in process `syz-executor.3'.
[  172.792894][ T9848] bond1 (unregistering): (slave bridge5): Releasing backup interface
[  172.864867][ T9848] bond1 (unregistering): Released all slaves
[  172.889549][ T9935] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  173.054975][ T9850] netlink: 160 bytes leftover after parsing attributes in process `syz-executor.4'.
[  173.129183][ T9850] bond1 (unregistering): (slave bridge2): Releasing backup interface
[  173.202236][ T9850] bond1 (unregistering): Released all slaves
15:18:00 executing program 1:
r0 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10)
r1 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10)
recvmsg$unix(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000100)=""/180, 0xb4}], 0x1, 0x0, 0x58}, 0x0)
sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x92, 0x0)
sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x92, 0x0)
recvfrom$inet6(r0, &(0x7f0000000080)=""/124, 0x7c, 0x0, 0x0, 0x0)

15:18:01 executing program 0:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
sendto$inet(r1, &(0x7f00000000c0)="1f1b0178bd652aa9613bf658cc46758ccd15738d09616932321d39c97c3834072f1a195b6d0d57cf2d6fd42f0c970bdb45b57477642f35343836e1da", 0x3c, 0x20000014, &(0x7f0000000180)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x3d}}, 0x10)
getsockopt$ARPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000100)={'filter\x00', 0x0, [0xfffffffe, 0x3, 0xfffffffc]}, &(0x7f0000000040)=0x44)
socket(0x0, 0x0, 0x0)
getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0)
ioctl$sock_TIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000280)=0x7fe, 0x4)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x3654}]}, 0x10)
sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='nv\x00', 0x3)
socket(0x28, 0x4, 0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0)
recvmsg(r0, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1}, 0x700)

15:18:01 executing program 4:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
sendto$inet(r1, &(0x7f00000000c0)="1f1b0178bd652aa9613bf658cc46758ccd15738d09616932321d39c97c3834072f1a195b6d0d57cf2d6fd42f0c970bdb45b57477642f35343836e1da", 0x3c, 0x20000014, &(0x7f0000000180)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x3d}}, 0x10)
getsockopt$ARPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000100)={'filter\x00', 0x0, [0xfffffffe, 0x3, 0xfffffffc]}, &(0x7f0000000040)=0x44)
socket(0x0, 0x0, 0x0)
getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0)
ioctl$sock_TIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000280)=0x7fe, 0x4)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x3654}]}, 0x10)
sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='nv\x00', 0x3)
socket(0x28, 0x4, 0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0)
recvmsg(r0, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1}, 0x700)

15:18:01 executing program 3:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
ioctl$SIOCAX25GETINFO(r1, 0x89ed, &(0x7f00000000c0))
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)
write$cgroup_int(r2, &(0x7f0000000200), 0xf000)
sendfile(r2, r3, 0x0, 0xf03b0000)
write$cgroup_int(r1, &(0x7f0000000200), 0x806000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28012, r0, 0x0)
mmap(&(0x7f0000389000/0x1000)=nil, 0x1000, 0x1000000, 0x10, 0xffffffffffffffff, 0x0)
r4 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/18, 0x30c000, 0x800}, 0x400920)

[  173.994741][T10064] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
15:18:01 executing program 1:
r0 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10)
r1 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10)
recvmsg$unix(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000100)=""/180, 0xb4}], 0x1, 0x0, 0x58}, 0x0)
sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x92, 0x0)
sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x92, 0x0)
recvfrom$inet6(r0, &(0x7f0000000080)=""/124, 0x7c, 0x0, 0x0, 0x0)

15:18:01 executing program 2:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
ioctl$SIOCAX25GETINFO(r1, 0x89ed, &(0x7f00000000c0))
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)
write$cgroup_int(r2, &(0x7f0000000200), 0xf000)
sendfile(r2, r3, 0x0, 0xf03b0000)
write$cgroup_int(r1, &(0x7f0000000200), 0x806000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28012, r0, 0x0)
mmap(&(0x7f0000389000/0x1000)=nil, 0x1000, 0x1000000, 0x10, 0xffffffffffffffff, 0x0)
r4 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/18, 0x30c000, 0x800}, 0x400920)

15:18:02 executing program 4:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
sendto$inet(r1, &(0x7f00000000c0)="1f1b0178bd652aa9613bf658cc46758ccd15738d09616932321d39c97c3834072f1a195b6d0d57cf2d6fd42f0c970bdb45b57477642f35343836e1da", 0x3c, 0x20000014, &(0x7f0000000180)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x3d}}, 0x10)
getsockopt$ARPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000100)={'filter\x00', 0x0, [0xfffffffe, 0x3, 0xfffffffc]}, &(0x7f0000000040)=0x44)
socket(0x0, 0x0, 0x0)
getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0)
ioctl$sock_TIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000280)=0x7fe, 0x4)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x3654}]}, 0x10)
sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='nv\x00', 0x3)
socket(0x28, 0x4, 0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0)
recvmsg(r0, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1}, 0x700)

15:18:02 executing program 1:
r0 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10)
r1 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10)
recvmsg$unix(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000100)=""/180, 0xb4}], 0x1, 0x0, 0x58}, 0x0)
sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x92, 0x0)
sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x92, 0x0)
recvfrom$inet6(r0, &(0x7f0000000080)=""/124, 0x7c, 0x0, 0x0, 0x0)

15:18:05 executing program 5:
r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0)
setsockopt$ax25_int(r0, 0x101, 0x4, &(0x7f0000000140), 0x4)

15:18:05 executing program 0:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
sendto$inet(r1, &(0x7f00000000c0)="1f1b0178bd652aa9613bf658cc46758ccd15738d09616932321d39c97c3834072f1a195b6d0d57cf2d6fd42f0c970bdb45b57477642f35343836e1da", 0x3c, 0x20000014, &(0x7f0000000180)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x3d}}, 0x10)
getsockopt$ARPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000100)={'filter\x00', 0x0, [0xfffffffe, 0x3, 0xfffffffc]}, &(0x7f0000000040)=0x44)
socket(0x0, 0x0, 0x0)
getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0)
ioctl$sock_TIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000280)=0x7fe, 0x4)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x3654}]}, 0x10)
sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='nv\x00', 0x3)
socket(0x28, 0x4, 0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0)
recvmsg(r0, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1}, 0x700)

15:18:05 executing program 3:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
ioctl$SIOCAX25GETINFO(r1, 0x89ed, &(0x7f00000000c0))
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)
write$cgroup_int(r2, &(0x7f0000000200), 0xf000)
sendfile(r2, r3, 0x0, 0xf03b0000)
write$cgroup_int(r1, &(0x7f0000000200), 0x806000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28012, r0, 0x0)
mmap(&(0x7f0000389000/0x1000)=nil, 0x1000, 0x1000000, 0x10, 0xffffffffffffffff, 0x0)
r4 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/18, 0x30c000, 0x800}, 0x400920)

15:18:05 executing program 1:
r0 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10)
r1 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10)
recvmsg$unix(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000100)=""/180, 0xb4}], 0x1, 0x0, 0x58}, 0x0)
sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x92, 0x0)
sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x92, 0x0)
recvfrom$inet6(r0, &(0x7f0000000080)=""/124, 0x7c, 0x0, 0x0, 0x0)

15:18:05 executing program 2:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
ioctl$SIOCAX25GETINFO(r1, 0x89ed, &(0x7f00000000c0))
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)
write$cgroup_int(r2, &(0x7f0000000200), 0xf000)
sendfile(r2, r3, 0x0, 0xf03b0000)
write$cgroup_int(r1, &(0x7f0000000200), 0x806000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28012, r0, 0x0)
mmap(&(0x7f0000389000/0x1000)=nil, 0x1000, 0x1000000, 0x10, 0xffffffffffffffff, 0x0)
r4 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/18, 0x30c000, 0x800}, 0x400920)

15:18:05 executing program 4:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
sendto$inet(r1, &(0x7f00000000c0)="1f1b0178bd652aa9613bf658cc46758ccd15738d09616932321d39c97c3834072f1a195b6d0d57cf2d6fd42f0c970bdb45b57477642f35343836e1da", 0x3c, 0x20000014, &(0x7f0000000180)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x3d}}, 0x10)
getsockopt$ARPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000100)={'filter\x00', 0x0, [0xfffffffe, 0x3, 0xfffffffc]}, &(0x7f0000000040)=0x44)
socket(0x0, 0x0, 0x0)
getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0)
ioctl$sock_TIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000280)=0x7fe, 0x4)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x3654}]}, 0x10)
sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='nv\x00', 0x3)
socket(0x28, 0x4, 0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0)
recvmsg(r0, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1}, 0x700)

15:18:06 executing program 5:
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r0, 0x107, 0xa, 0x0, 0x0)

15:18:06 executing program 5:
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x5, &(0x7f0000000040)=0x8, 0x4)
bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c)
recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2b, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x4, &(0x7f0000000000)=0x800, 0x4)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)

15:18:06 executing program 1:
r0 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10)
r1 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10)
recvmsg$unix(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000100)=""/180, 0xb4}], 0x1, 0x0, 0x58}, 0x0)
sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x92, 0x0)
sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x92, 0x0)
recvfrom$inet6(r0, &(0x7f0000000080)=""/124, 0x7c, 0x0, 0x0, 0x0)

[  179.503970][T10155] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
15:18:06 executing program 0:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
sendto$inet(r1, &(0x7f00000000c0)="1f1b0178bd652aa9613bf658cc46758ccd15738d09616932321d39c97c3834072f1a195b6d0d57cf2d6fd42f0c970bdb45b57477642f35343836e1da", 0x3c, 0x20000014, &(0x7f0000000180)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x3d}}, 0x10)
getsockopt$ARPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000100)={'filter\x00', 0x0, [0xfffffffe, 0x3, 0xfffffffc]}, &(0x7f0000000040)=0x44)
socket(0x0, 0x0, 0x0)
getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0)
ioctl$sock_TIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000280)=0x7fe, 0x4)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x3654}]}, 0x10)
sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='nv\x00', 0x3)
socket(0x28, 0x4, 0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0)
recvmsg(r0, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1}, 0x700)

15:18:06 executing program 2:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4)
ioctl$sock_bt_bnep_BNEPGETCONNLIST(r0, 0x800442d2, &(0x7f0000000040)={0x2, 0x0})

15:18:07 executing program 4:
pipe(&(0x7f0000000240)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
close(r2)
write$binfmt_misc(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="7a00080200000000000000ff02000010"], 0x4240a2a0)
socket$inet(0x2, 0x200000003, 0x84)
bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
connect$inet(r2, &(0x7f0000001280)={0x2, 0x0, @multicast1}, 0x10)
splice(r0, 0x0, r2, 0x0, 0x1f, 0x0)

15:18:07 executing program 3:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
ioctl$SIOCAX25GETINFO(r1, 0x89ed, &(0x7f00000000c0))
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)
write$cgroup_int(r2, &(0x7f0000000200), 0xf000)
sendfile(r2, r3, 0x0, 0xf03b0000)
write$cgroup_int(r1, &(0x7f0000000200), 0x806000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28012, r0, 0x0)
mmap(&(0x7f0000389000/0x1000)=nil, 0x1000, 0x1000000, 0x10, 0xffffffffffffffff, 0x0)
r4 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/18, 0x30c000, 0x800}, 0x400920)

15:18:07 executing program 5:
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x5, &(0x7f0000000040)=0x8, 0x4)
bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c)
recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2b, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x4, &(0x7f0000000000)=0x800, 0x4)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)

15:18:07 executing program 2:
r0 = socket(0x1000000010, 0x80002, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x20}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB='L\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r3, @ANYBLOB="00001000000000000300020009000100666c6f77000000001c0002000800010001"], 0x4c}}, 0x0)
sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0)

15:18:07 executing program 5:
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x5, &(0x7f0000000040)=0x8, 0x4)
bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c)
recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2b, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x4, &(0x7f0000000000)=0x800, 0x4)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)

15:18:07 executing program 1:
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0xf1a}, 0x2c)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000000)={r0, &(0x7f0000000480)}, 0x20)

[  180.146345][T10178] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'.
[  180.247663][T10180] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'.
[  180.279261][T10180] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'.
[  180.349638][T10178] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'.
15:18:07 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', <r1=>0x0})
r2 = socket(0xa, 0x5, 0x0)
setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4)
getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={<r3=>0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x48, 0x10, 0xffffff0f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}, @IFLA_HSR_VERSION={0x5, 0x6, 0x8}]}}}]}, 0x48}}, 0x0)

15:18:07 executing program 5:
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x5, &(0x7f0000000040)=0x8, 0x4)
bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c)
recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2b, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x4, &(0x7f0000000000)=0x800, 0x4)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)

15:18:07 executing program 2:
r0 = socket(0x1000000010, 0x80002, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x20}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB='L\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r3, @ANYBLOB="00001000000000000300020009000100666c6f77000000001c0002000800010001"], 0x4c}}, 0x0)
sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0)

15:18:07 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', <r1=>0x0})
r2 = socket(0xa, 0x5, 0x0)
setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4)
getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={<r3=>0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x48, 0x10, 0xffffff0f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}, @IFLA_HSR_VERSION={0x5, 0x6, 0x8}]}}}]}, 0x48}}, 0x0)

[  180.657696][T10209] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'.
[  180.744162][T10217] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'.
15:18:08 executing program 4:
pipe(&(0x7f0000000240)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
close(r2)
write$binfmt_misc(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="7a00080200000000000000ff02000010"], 0x4240a2a0)
socket$inet(0x2, 0x200000003, 0x84)
bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
connect$inet(r2, &(0x7f0000001280)={0x2, 0x0, @multicast1}, 0x10)
splice(r0, 0x0, r2, 0x0, 0x1f, 0x0)

[  180.802541][T10217] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'.
15:18:08 executing program 0:
socketpair$unix(0x1, 0x4000000000002, 0x0, &(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
clock_gettime(0x0, &(0x7f0000000180)={0x0, <r2=>0x0})
socket$vsock_stream(0x28, 0x1, 0x0)
r3 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r3, &(0x7f0000000140)={0x28, 0x0, 0x0, @my=0x0}, 0x10)
ppoll(&(0x7f00000000c0)=[{r1, 0x8124, 0x64}, {r3, 0x0, 0x64}], 0x2, &(0x7f00000002c0)={0x0, r2+10000000}, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8b05, 0x0)

15:18:08 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', <r1=>0x0})
r2 = socket(0xa, 0x5, 0x0)
setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4)
getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={<r3=>0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x48, 0x10, 0xffffff0f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}, @IFLA_HSR_VERSION={0x5, 0x6, 0x8}]}}}]}, 0x48}}, 0x0)

15:18:08 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$TIPC_NL_MEDIA_SET(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000e0ffffffff19"], 0x2c}}, 0x0)
sendfile(r2, r1, 0x0, 0x100000022)

15:18:08 executing program 2:
r0 = socket(0x1000000010, 0x80002, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x20}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB='L\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r3, @ANYBLOB="00001000000000000300020009000100666c6f77000000001c0002000800010001"], 0x4c}}, 0x0)
sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0)

15:18:08 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', <r1=>0x0})
r2 = socket(0xa, 0x5, 0x0)
setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4)
getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={<r3=>0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x48, 0x10, 0xffffff0f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}, @IFLA_HSR_VERSION={0x5, 0x6, 0x8}]}}}]}, 0x48}}, 0x0)

15:18:08 executing program 3:
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000180)='ns/net\x00')
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)

[  181.192939][T10241] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'.
[  181.249116][   T26] audit: type=1804 audit(1634570288.567:49): pid=10240 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir585321012/syzkaller.wTbFMp/32/cgroup.controllers" dev="sda1" ino=14105 res=1 errno=0
[  181.278719][T10240] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'.
[  181.362599][T10245] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'.
15:18:08 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x0)
clock_gettime(0x0, &(0x7f00000065c0)={0x0, <r1=>0x0})
recvmmsg(r0, &(0x7f0000006480)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f0000006600)={0x0, r1+10000000})
sendmsg$ETHTOOL_MSG_COALESCE_GET(r0, &(0x7f00000068c0)={0x0, 0x0, &(0x7f0000006880)={&(0x7f00000007c0)=ANY=[@ANYBLOB="a80100007bc0d3"], 0x1a8}}, 0x0)

15:18:08 executing program 2:
r0 = socket(0x1000000010, 0x80002, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x20}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB='L\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r3, @ANYBLOB="00001000000000000300020009000100666c6f77000000001c0002000800010001"], 0x4c}}, 0x0)
sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0)

15:18:08 executing program 3:
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000180)='ns/net\x00')
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)

15:18:09 executing program 4:
pipe(&(0x7f0000000240)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
close(r2)
write$binfmt_misc(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="7a00080200000000000000ff02000010"], 0x4240a2a0)
socket$inet(0x2, 0x200000003, 0x84)
bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
connect$inet(r2, &(0x7f0000001280)={0x2, 0x0, @multicast1}, 0x10)
splice(r0, 0x0, r2, 0x0, 0x1f, 0x0)

15:18:09 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_GET_BYNAME(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0xe, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0)

15:18:09 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$TIPC_NL_MEDIA_SET(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000e0ffffffff19"], 0x2c}}, 0x0)
sendfile(r2, r1, 0x0, 0x100000022)

[  182.274586][   T26] audit: type=1804 audit(1634570289.597:50): pid=10294 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir585321012/syzkaller.wTbFMp/33/cgroup.controllers" dev="sda1" ino=14091 res=1 errno=0
15:18:10 executing program 0:
socketpair$unix(0x1, 0x4000000000002, 0x0, &(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
clock_gettime(0x0, &(0x7f0000000180)={0x0, <r2=>0x0})
socket$vsock_stream(0x28, 0x1, 0x0)
r3 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r3, &(0x7f0000000140)={0x28, 0x0, 0x0, @my=0x0}, 0x10)
ppoll(&(0x7f00000000c0)=[{r1, 0x8124, 0x64}, {r3, 0x0, 0x64}], 0x2, &(0x7f00000002c0)={0x0, r2+10000000}, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8b05, 0x0)

15:18:10 executing program 2:
pipe(&(0x7f00000002c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='qdisc_dequeue\x00', r1}, 0x10)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r2, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c)
socket(0x10, 0x0, 0x0)
r3 = socket(0x11, 0x0, 0x0)
bind(r3, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f00000003c0), 0xc, &(0x7f0000000400)={&(0x7f0000000900)=@newchain={0x2c, 0x64, 0x200, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x0, 0x6}}, [@TCA_CHAIN={0x8}]}, 0x2c}}, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendto$inet6(r2, 0x0, 0x0, 0x22004001, &(0x7f0000000280)={0xa, 0x2, 0x0, @loopback}, 0x1c)
sendto$inet6(r2, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd0d0c2ac, 0x1, 0x0, 0x0)
splice(r2, 0x0, r0, 0x0, 0x406f408, 0x0)

15:18:10 executing program 3:
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000180)='ns/net\x00')
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)

15:18:10 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_GET_BYNAME(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0xe, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0)

15:18:10 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$TIPC_NL_MEDIA_SET(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000e0ffffffff19"], 0x2c}}, 0x0)
sendfile(r2, r1, 0x0, 0x100000022)

15:18:10 executing program 4:
pipe(&(0x7f0000000240)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
close(r2)
write$binfmt_misc(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="7a00080200000000000000ff02000010"], 0x4240a2a0)
socket$inet(0x2, 0x200000003, 0x84)
bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
connect$inet(r2, &(0x7f0000001280)={0x2, 0x0, @multicast1}, 0x10)
splice(r0, 0x0, r2, 0x0, 0x1f, 0x0)

15:18:10 executing program 3:
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000180)='ns/net\x00')
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)

15:18:10 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_GET_BYNAME(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0xe, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0)

[  183.404968][   T26] audit: type=1804 audit(1634570290.727:51): pid=10305 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir585321012/syzkaller.wTbFMp/34/cgroup.controllers" dev="sda1" ino=14096 res=1 errno=0
15:18:10 executing program 3:
socketpair$unix(0x1, 0x4000000000002, 0x0, &(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
clock_gettime(0x0, &(0x7f0000000180)={0x0, <r2=>0x0})
socket$vsock_stream(0x28, 0x1, 0x0)
r3 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r3, &(0x7f0000000140)={0x28, 0x0, 0x0, @my=0x0}, 0x10)
ppoll(&(0x7f00000000c0)=[{r1, 0x8124, 0x64}, {r3, 0x0, 0x64}], 0x2, &(0x7f00000002c0)={0x0, r2+10000000}, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8b05, 0x0)

15:18:10 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_GET_BYNAME(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0xe, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0)

15:18:11 executing program 1:
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f0000001c40)={0x0, 0x0, &(0x7f0000001c00)={&(0x7f0000000380)={0x38, 0x1412, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x12}]}, 0x38}}, 0x0)

15:18:11 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$TIPC_NL_MEDIA_SET(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000e0ffffffff19"], 0x2c}}, 0x0)
sendfile(r2, r1, 0x0, 0x100000022)

[  184.253227][   T26] audit: type=1804 audit(1634570291.577:52): pid=10337 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir585321012/syzkaller.wTbFMp/35/cgroup.controllers" dev="sda1" ino=14121 res=1 errno=0
15:18:12 executing program 0:
socketpair$unix(0x1, 0x4000000000002, 0x0, &(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
clock_gettime(0x0, &(0x7f0000000180)={0x0, <r2=>0x0})
socket$vsock_stream(0x28, 0x1, 0x0)
r3 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r3, &(0x7f0000000140)={0x28, 0x0, 0x0, @my=0x0}, 0x10)
ppoll(&(0x7f00000000c0)=[{r1, 0x8124, 0x64}, {r3, 0x0, 0x64}], 0x2, &(0x7f00000002c0)={0x0, r2+10000000}, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8b05, 0x0)

15:18:12 executing program 4:
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"/2427], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={r0, 0xc0, &(0x7f0000000240)={0x0, <r1=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10)
r2 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000140)={r1}, 0x4)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r2, 0x0, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)

15:18:12 executing program 1:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003c000505d25a80648c63940d0224fc60100000000a000400053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0)

15:18:12 executing program 2:
pipe(&(0x7f00000002c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='qdisc_dequeue\x00', r1}, 0x10)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r2, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c)
socket(0x10, 0x0, 0x0)
r3 = socket(0x11, 0x0, 0x0)
bind(r3, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f00000003c0), 0xc, &(0x7f0000000400)={&(0x7f0000000900)=@newchain={0x2c, 0x64, 0x200, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x0, 0x6}}, [@TCA_CHAIN={0x8}]}, 0x2c}}, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendto$inet6(r2, 0x0, 0x0, 0x22004001, &(0x7f0000000280)={0xa, 0x2, 0x0, @loopback}, 0x1c)
sendto$inet6(r2, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd0d0c2ac, 0x1, 0x0, 0x0)
splice(r2, 0x0, r0, 0x0, 0x406f408, 0x0)

15:18:12 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0xe}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_HASH={0x8, 0x2, 0xfffffff8}]}}]}, 0x66}}, 0x0)
r3 = socket(0x1000000010, 0x80002, 0x0)
sendmmsg$alg(r3, &(0x7f0000000200), 0x4924924924926d3, 0x0)

[  185.397863][T10350] netlink: 'syz-executor.1': attribute type 1 has an invalid length.
[  185.409839][T10349] __nla_validate_parse: 7 callbacks suppressed
[  185.409864][T10349] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'.
[  185.446869][T10350] netlink: 194488 bytes leftover after parsing attributes in process `syz-executor.1'.
15:18:12 executing program 4:
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000002940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$TUNSETLINK(r1, 0x8912, 0x400308)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sys_exit\x00', r0}, 0x10)
pipe(&(0x7f0000000080)={<r2=>0xffffffffffffffff})
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
splice(r2, 0x0, r3, 0x0, 0x200000000622f, 0xb)
bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0)

[  185.549317][T10370] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'.
15:18:12 executing program 1:
syz_emit_ethernet(0x206, &(0x7f0000000640)={@random="8b575f6729e2", @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "52e00f", 0x1d0, 0x3a, 0x0, @local, @mcast2, {[], @dest_unreach={0x3, 0x0, 0x0, 0x0, '\x00', {0x0, 0x4, "011700", 0x0, 0x11, 0x0, @mcast1, @private2, [@fragment, @hopopts={0x0, 0x11, '\x00', [@calipso={0x7, 0x48, {0x0, 0x10, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, @generic={0x0, 0xb0, "9011f2f4573b0d7da84512b44d4ab12fd2b923775720f9dbaadd9cb32b7fdd369cbcba14b910f5c929c90267299c58e8213d4c9970688f47afa7d2a89bf37a00c371b3185d4c35d5102c44d108c23e32cbab8118d53c1ea5cc23146d9980f267605a3dfc390e5504ead4f77d9a33c63bf284daf4a117d3075bdfde70c27067fd31c4a40da22a632f113a1bca05f2e74aa6a58237d7674c04c7636b683d77ba8c13361d702ee5d41c0c2a05e16be632b9"}, @generic={0x0, 0x80, "7730cc915c6e4001e9434b43bbd640cd28dd254e6c55da0f1c076433542bfd61a66ab50584af9f636042434ea48d8afa5b909ae7b7a76c08605aff2bda3de928be5be2db1813709c0f746c8a0e2b047978549232811604ac2df61170a92baafcafe2b15dd85da523def1ad586696896cef7236e4a1e19d80d61c1a036b1c1c5f"}, @hao={0xc9, 0x10, @rand_addr=' \x01\x00'}]}]}}}}}}}, 0x0)

15:18:13 executing program 5:
unshare(0x66000000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000001, 0x8031, 0xffffffffffffffff, 0x0)
accept4$ax25(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$EBT_SO_GET_INIT_INFO(r0, 0x0, 0x82, &(0x7f0000000140)={'broute\x00'}, &(0x7f0000000040)=0x78)

15:18:13 executing program 3:
socketpair$unix(0x1, 0x4000000000002, 0x0, &(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
clock_gettime(0x0, &(0x7f0000000180)={0x0, <r2=>0x0})
socket$vsock_stream(0x28, 0x1, 0x0)
r3 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r3, &(0x7f0000000140)={0x28, 0x0, 0x0, @my=0x0}, 0x10)
ppoll(&(0x7f00000000c0)=[{r1, 0x8124, 0x64}, {r3, 0x0, 0x64}], 0x2, &(0x7f00000002c0)={0x0, r2+10000000}, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8b05, 0x0)

15:18:13 executing program 1:
r0 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r0, &(0x7f0000000040)={0x2, 0x0, @dev}, 0x10)
setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x20000010)

15:18:13 executing program 4:
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000002c3f2cc2b7de954244cef7baf48e6d2885a09a87507ebf4e43bc0609b199b6ed90e0ebcdac5f7a869c781f6428457253e89ad528d985636a86ec0f60f5a6d1159a2c2e85d707859a919cc9548a34ff80d1ccdce27f94bc074c27f81070545cab5d5b0d974927676468582d8621c3ac94712ed9cf6b40b350fd733c43b4289c2ac3863fead5f688cf252a47c05af3a30d57cc3ed67d1867b54d24e2da18568c3b0f24b52616bf84d3b00127473e6ba922aff649609d40b449ccba3ce8d530ffff19a6471baae2a83b2d36bff764b13831034694a6aad86cf08a2c7b2235dc99de1f465e5c7c7a2877261e0010000000000000926c9013eec3b86836ae504479f60b0ec9204d2b85627aa5a79f670000000000006600000000008f02712c050000000000000055e846cb03d9cd483b7b1e462397db6d81239271e6301b22f178bee296d4f4e9f2013d2aef4a3b5092be4d6852b88317c5adbbdb0015f89e9939bc420200afe5725c8a4047b91da3768c1ca6a4410009f95d4ba21068285afa8d3b4a6893db626ab5becbcdb887af2c85c2d9ab09b5a308b5dd7d3c4406d273650bf7b2ff4602aec50000000000000000fab5a2"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r0, 0x20e, 0x153, 0x0, &(0x7f0000000600)="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", 0x0, 0x6, 0x6000000000000000, 0x7a, 0xac, &(0x7f0000000280)="00f66fd216cdec3a856626c2146511430000531e65c479a4820acdd2f80ff617b3de1cdde51fecd3ee6de50ab7ad21a1c0c4620c8ae98ce348fa6ef373ffc1f7834d89c0ca5b0a196fbde01483a63d85ba0c0242b80c5fbbc3ff8bf9694fd9bb248c555b1611cc27b69e25e50aa740c2fa27f117f36d4c75277e", &(0x7f0000000140)="1fd4e72a0bc93c151c716736119e442cc49add87f07a8407abf1abd18c8a6c558254aef6d4c77214e8f11301988a01e3fa130bf935968914df21c07a158c68bab054517baaf902b6a5ff60664e9043c67586641cc412df6c7d80111591c5089c9922063ae3a9f74d59dc3c2ebd834b909e9eae6de4476750cba56e2073891b759d1b4d3edc82e3b2d0ae58bc30aaa292eaa173c3472b95c702574da9d0bd7c0d6758f2515e5e25ca00000000", 0x1}, 0x48)
r1 = socket$inet6_icmp(0xa, 0x2, 0x3a)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r2, &(0x7f0000000200), 0xf000)
r3 = syz_init_net_socket$llc(0x1a, 0x2, 0x0)
setsockopt$sock_int(r3, 0x1, 0x3e, &(0x7f00000000c0)=0x7, 0x4)
bind$llc(r3, &(0x7f0000000000)={0x1a, 0x0, 0x9, 0x0, 0x0, 0x2}, 0x10)
sendmmsg(r3, &(0x7f0000001380), 0x3fffffffffffeed, 0x9000000)
sendfile(r2, 0xffffffffffffffff, 0x0, 0xf03b0000)
sendfile(r2, r3, 0x0, 0x4)
sendfile(r2, 0xffffffffffffffff, 0x0, 0x0)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={0x0, 0x30}, 0x1, 0x0, 0x0, 0x20004800}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1e, 0x9, &(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="000000008100000018000000"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0xf4, &(0x7f0000000400)=""/244, 0x41000, 0x12, '\x00', 0x0, 0x3c, 0xffffffffffffffff, 0x8, &(0x7f0000000580)={0x0, 0x1}, 0x8, 0x10, &(0x7f00000005c0)={0x0, 0x4, 0xd6, 0x1}, 0x10, 0x0, r2}, 0x78)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000300)={0xffffffffffffffff, 0x10, &(0x7f00000002c0)={&(0x7f0000000980)=""/4096, 0x1000, <r4=>0x0}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xc, 0x9, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0xde22, 0x0, 0x0, 0x0, 0x8}, [@map_val={0x18, 0x9, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8}, @ldst={0x3, 0x2, 0x0, 0x6, 0x0, 0x80, 0xffffffffffffffff}, @func, @map]}, &(0x7f0000000100)='syzkaller\x00', 0x345, 0x72, &(0x7f0000000140)=""/114, 0x41100, 0x1b, '\x00', 0x0, 0x20, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000280)={0x4, 0xa, 0x0, 0xed}, 0x10, r4}, 0x78)
bpf$OBJ_GET_PROG(0x7, &(0x7f00000004c0)={&(0x7f0000000480)='./file0\x00', 0x0, 0x18}, 0x10)
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000cc0)=@raw={'raw\x00', 0x9, 0x3, 0x300, 0x110, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x230, 0xffffffff, 0xffffffff, 0x230, 0xffffffff, 0x3, &(0x7f0000000040), {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @empty}, @private2, [0x7fffff7f, 0xffffffff, 0xffffff00, 0xffffff00], [0xff, 0xffffffff, 0xff000000, 0xffffffff], 'veth0_to_bond\x00', 'erspan0\x00', {0xff}, {0xff}, 0x29, 0x5, 0x2, 0x1}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x1, 0x3, 0x9, 0x0, '\x00', 'syz1\x00', {0x5}}}}, {{@ipv6={@local, @local, [0xffffff00, 0xffffffff, 0x0, 0xff000000], [0xff000000, 0x0, 0xffffff00, 0xffffffff], 'ip6tnl0\x00', 'veth1_to_bond\x00', {}, {0xff}, 0x2c, 0x4, 0x4, 0x60}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xb}}, @inet=@rpfilter={{0x28}}]}, @common=@unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x3}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x360)

15:18:13 executing program 1:
r0 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r0, &(0x7f0000000040)={0x2, 0x0, @dev}, 0x10)
setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x20000010)

15:18:15 executing program 0:
socketpair$unix(0x1, 0x4000000000002, 0x0, &(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
clock_gettime(0x0, &(0x7f0000000180)={0x0, <r2=>0x0})
socket$vsock_stream(0x28, 0x1, 0x0)
r3 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r3, &(0x7f0000000140)={0x28, 0x0, 0x0, @my=0x0}, 0x10)
ppoll(&(0x7f00000000c0)=[{r1, 0x8124, 0x64}, {r3, 0x0, 0x64}], 0x2, &(0x7f00000002c0)={0x0, r2+10000000}, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8b05, 0x0)

15:18:15 executing program 2:
pipe(&(0x7f00000002c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='qdisc_dequeue\x00', r1}, 0x10)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r2, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c)
socket(0x10, 0x0, 0x0)
r3 = socket(0x11, 0x0, 0x0)
bind(r3, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f00000003c0), 0xc, &(0x7f0000000400)={&(0x7f0000000900)=@newchain={0x2c, 0x64, 0x200, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x0, 0x6}}, [@TCA_CHAIN={0x8}]}, 0x2c}}, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendto$inet6(r2, 0x0, 0x0, 0x22004001, &(0x7f0000000280)={0xa, 0x2, 0x0, @loopback}, 0x1c)
sendto$inet6(r2, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd0d0c2ac, 0x1, 0x0, 0x0)
splice(r2, 0x0, r0, 0x0, 0x406f408, 0x0)

15:18:15 executing program 1:
r0 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r0, &(0x7f0000000040)={0x2, 0x0, @dev}, 0x10)
setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x20000010)

15:18:15 executing program 4:
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r0, 0x20e, 0x153, 0x0, &(0x7f0000000600)="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", 0x0, 0x6, 0x6000000000000000, 0x7a, 0xac, &(0x7f0000000280)="00f66fd216cdec3a856626c2146511430000531e65c479a4820acdd2f80ff617b3de1cdde51fecd3ee6de50ab7ad21a1c0c4620c8ae98ce348fa6ef373ffc1f7834d89c0ca5b0a196fbde01483a63d85ba0c0242b80c5fbbc3ff8bf9694fd9bb248c555b1611cc27b69e25e50aa740c2fa27f117f36d4c75277e", &(0x7f0000000140)="1fd4e72a0bc93c151c716736119e442cc49add87f07a8407abf1abd18c8a6c558254aef6d4c77214e8f11301988a01e3fa130bf935968914df21c07a158c68bab054517baaf902b6a5ff60664e9043c67586641cc412df6c7d80111591c5089c9922063ae3a9f74d59dc3c2ebd834b909e9eae6de4476750cba56e2073891b759d1b4d3edc82e3b2d0ae58bc30aaa292eaa173c3472b95c702574da9d0bd7c0d6758f2515e5e25ca00000000", 0x1}, 0x48)
r1 = socket$inet6_icmp(0xa, 0x2, 0x3a)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r2, &(0x7f0000000200), 0xf000)
r3 = syz_init_net_socket$llc(0x1a, 0x2, 0x0)
setsockopt$sock_int(r3, 0x1, 0x3e, &(0x7f00000000c0)=0x7, 0x4)
bind$llc(r3, &(0x7f0000000000)={0x1a, 0x0, 0x9, 0x0, 0x0, 0x2}, 0x10)
sendmmsg(r3, &(0x7f0000001380), 0x3fffffffffffeed, 0x9000000)
sendfile(r2, 0xffffffffffffffff, 0x0, 0xf03b0000)
sendfile(r2, r3, 0x0, 0x4)
sendfile(r2, 0xffffffffffffffff, 0x0, 0x0)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={0x0, 0x30}, 0x1, 0x0, 0x0, 0x20004800}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1e, 0x9, &(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="000000008100000018000000"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0xf4, &(0x7f0000000400)=""/244, 0x41000, 0x12, '\x00', 0x0, 0x3c, 0xffffffffffffffff, 0x8, &(0x7f0000000580)={0x0, 0x1}, 0x8, 0x10, &(0x7f00000005c0)={0x0, 0x4, 0xd6, 0x1}, 0x10, 0x0, r2}, 0x78)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000300)={0xffffffffffffffff, 0x10, &(0x7f00000002c0)={&(0x7f0000000980)=""/4096, 0x1000, <r4=>0x0}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xc, 0x9, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0xde22, 0x0, 0x0, 0x0, 0x8}, [@map_val={0x18, 0x9, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8}, @ldst={0x3, 0x2, 0x0, 0x6, 0x0, 0x80, 0xffffffffffffffff}, @func, @map]}, &(0x7f0000000100)='syzkaller\x00', 0x345, 0x72, &(0x7f0000000140)=""/114, 0x41100, 0x1b, '\x00', 0x0, 0x20, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000280)={0x4, 0xa, 0x0, 0xed}, 0x10, r4}, 0x78)
bpf$OBJ_GET_PROG(0x7, &(0x7f00000004c0)={&(0x7f0000000480)='./file0\x00', 0x0, 0x18}, 0x10)
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000cc0)=@raw={'raw\x00', 0x9, 0x3, 0x300, 0x110, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x230, 0xffffffff, 0xffffffff, 0x230, 0xffffffff, 0x3, &(0x7f0000000040), {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @empty}, @private2, [0x7fffff7f, 0xffffffff, 0xffffff00, 0xffffff00], [0xff, 0xffffffff, 0xff000000, 0xffffffff], 'veth0_to_bond\x00', 'erspan0\x00', {0xff}, {0xff}, 0x29, 0x5, 0x2, 0x1}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x1, 0x3, 0x9, 0x0, '\x00', 'syz1\x00', {0x5}}}}, {{@ipv6={@local, @local, [0xffffff00, 0xffffffff, 0x0, 0xff000000], [0xff000000, 0x0, 0xffffff00, 0xffffffff], 'ip6tnl0\x00', 'veth1_to_bond\x00', {}, {0xff}, 0x2c, 0x4, 0x4, 0x60}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xb}}, @inet=@rpfilter={{0x28}}]}, @common=@unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x3}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x360)

15:18:15 executing program 5:
unshare(0x66000000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000001, 0x8031, 0xffffffffffffffff, 0x0)
accept4$ax25(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$EBT_SO_GET_INIT_INFO(r0, 0x0, 0x82, &(0x7f0000000140)={'broute\x00'}, &(0x7f0000000040)=0x78)

15:18:15 executing program 3:
socketpair$unix(0x1, 0x4000000000002, 0x0, &(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
clock_gettime(0x0, &(0x7f0000000180)={0x0, <r2=>0x0})
socket$vsock_stream(0x28, 0x1, 0x0)
r3 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r3, &(0x7f0000000140)={0x28, 0x0, 0x0, @my=0x0}, 0x10)
ppoll(&(0x7f00000000c0)=[{r1, 0x8124, 0x64}, {r3, 0x0, 0x64}], 0x2, &(0x7f00000002c0)={0x0, r2+10000000}, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8b05, 0x0)

15:18:15 executing program 1:
r0 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r0, &(0x7f0000000040)={0x2, 0x0, @dev}, 0x10)
setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x20000010)

15:18:15 executing program 1:
unshare(0x66000000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000001, 0x8031, 0xffffffffffffffff, 0x0)
accept4$ax25(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$EBT_SO_GET_INIT_INFO(r0, 0x0, 0x82, &(0x7f0000000140)={'broute\x00'}, &(0x7f0000000040)=0x78)

15:18:16 executing program 4:
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000002c3f2cc2b7de954244cef7baf48e6d2885a09a87507ebf4e43bc0609b199b6ed90e0ebcdac5f7a869c781f6428457253e89ad528d985636a86ec0f60f5a6d1159a2c2e85d707859a919cc9548a34ff80d1ccdce27f94bc074c27f81070545cab5d5b0d974927676468582d8621c3ac94712ed9cf6b40b350fd733c43b4289c2ac3863fead5f688cf252a47c05af3a30d57cc3ed67d1867b54d24e2da18568c3b0f24b52616bf84d3b00127473e6ba922aff649609d40b449ccba3ce8d530ffff19a6471baae2a83b2d36bff764b13831034694a6aad86cf08a2c7b2235dc99de1f465e5c7c7a2877261e0010000000000000926c9013eec3b86836ae504479f60b0ec9204d2b85627aa5a79f670000000000006600000000008f02712c050000000000000055e846cb03d9cd483b7b1e462397db6d81239271e6301b22f178bee296d4f4e9f2013d2aef4a3b5092be4d6852b88317c5adbbdb0015f89e9939bc420200afe5725c8a4047b91da3768c1ca6a4410009f95d4ba21068285afa8d3b4a6893db626ab5becbcdb887af2c85c2d9ab09b5a308b5dd7d3c4406d273650bf7b2ff4602aec50000000000000000fab5a2"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r0, 0x20e, 0x153, 0x0, &(0x7f0000000600)="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", 0x0, 0x6, 0x6000000000000000, 0x7a, 0xac, &(0x7f0000000280)="00f66fd216cdec3a856626c2146511430000531e65c479a4820acdd2f80ff617b3de1cdde51fecd3ee6de50ab7ad21a1c0c4620c8ae98ce348fa6ef373ffc1f7834d89c0ca5b0a196fbde01483a63d85ba0c0242b80c5fbbc3ff8bf9694fd9bb248c555b1611cc27b69e25e50aa740c2fa27f117f36d4c75277e", &(0x7f0000000140)="1fd4e72a0bc93c151c716736119e442cc49add87f07a8407abf1abd18c8a6c558254aef6d4c77214e8f11301988a01e3fa130bf935968914df21c07a158c68bab054517baaf902b6a5ff60664e9043c67586641cc412df6c7d80111591c5089c9922063ae3a9f74d59dc3c2ebd834b909e9eae6de4476750cba56e2073891b759d1b4d3edc82e3b2d0ae58bc30aaa292eaa173c3472b95c702574da9d0bd7c0d6758f2515e5e25ca00000000", 0x1}, 0x48)
r1 = socket$inet6_icmp(0xa, 0x2, 0x3a)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r2, &(0x7f0000000200), 0xf000)
r3 = syz_init_net_socket$llc(0x1a, 0x2, 0x0)
setsockopt$sock_int(r3, 0x1, 0x3e, &(0x7f00000000c0)=0x7, 0x4)
bind$llc(r3, &(0x7f0000000000)={0x1a, 0x0, 0x9, 0x0, 0x0, 0x2}, 0x10)
sendmmsg(r3, &(0x7f0000001380), 0x3fffffffffffeed, 0x9000000)
sendfile(r2, 0xffffffffffffffff, 0x0, 0xf03b0000)
sendfile(r2, r3, 0x0, 0x4)
sendfile(r2, 0xffffffffffffffff, 0x0, 0x0)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={0x0, 0x30}, 0x1, 0x0, 0x0, 0x20004800}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1e, 0x9, &(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="000000008100000018000000"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0xf4, &(0x7f0000000400)=""/244, 0x41000, 0x12, '\x00', 0x0, 0x3c, 0xffffffffffffffff, 0x8, &(0x7f0000000580)={0x0, 0x1}, 0x8, 0x10, &(0x7f00000005c0)={0x0, 0x4, 0xd6, 0x1}, 0x10, 0x0, r2}, 0x78)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000300)={0xffffffffffffffff, 0x10, &(0x7f00000002c0)={&(0x7f0000000980)=""/4096, 0x1000, <r4=>0x0}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xc, 0x9, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0xde22, 0x0, 0x0, 0x0, 0x8}, [@map_val={0x18, 0x9, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8}, @ldst={0x3, 0x2, 0x0, 0x6, 0x0, 0x80, 0xffffffffffffffff}, @func, @map]}, &(0x7f0000000100)='syzkaller\x00', 0x345, 0x72, &(0x7f0000000140)=""/114, 0x41100, 0x1b, '\x00', 0x0, 0x20, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000280)={0x4, 0xa, 0x0, 0xed}, 0x10, r4}, 0x78)
bpf$OBJ_GET_PROG(0x7, &(0x7f00000004c0)={&(0x7f0000000480)='./file0\x00', 0x0, 0x18}, 0x10)
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000cc0)=@raw={'raw\x00', 0x9, 0x3, 0x300, 0x110, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x230, 0xffffffff, 0xffffffff, 0x230, 0xffffffff, 0x3, &(0x7f0000000040), {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @empty}, @private2, [0x7fffff7f, 0xffffffff, 0xffffff00, 0xffffff00], [0xff, 0xffffffff, 0xff000000, 0xffffffff], 'veth0_to_bond\x00', 'erspan0\x00', {0xff}, {0xff}, 0x29, 0x5, 0x2, 0x1}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x1, 0x3, 0x9, 0x0, '\x00', 'syz1\x00', {0x5}}}}, {{@ipv6={@local, @local, [0xffffff00, 0xffffffff, 0x0, 0xff000000], [0xff000000, 0x0, 0xffffff00, 0xffffffff], 'ip6tnl0\x00', 'veth1_to_bond\x00', {}, {0xff}, 0x2c, 0x4, 0x4, 0x60}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xb}}, @inet=@rpfilter={{0x28}}]}, @common=@unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x3}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x360)

15:18:16 executing program 2:
pipe(&(0x7f00000002c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='qdisc_dequeue\x00', r1}, 0x10)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r2, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c)
socket(0x10, 0x0, 0x0)
r3 = socket(0x11, 0x0, 0x0)
bind(r3, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f00000003c0), 0xc, &(0x7f0000000400)={&(0x7f0000000900)=@newchain={0x2c, 0x64, 0x200, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x0, 0x6}}, [@TCA_CHAIN={0x8}]}, 0x2c}}, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendto$inet6(r2, 0x0, 0x0, 0x22004001, &(0x7f0000000280)={0xa, 0x2, 0x0, @loopback}, 0x1c)
sendto$inet6(r2, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd0d0c2ac, 0x1, 0x0, 0x0)
splice(r2, 0x0, r0, 0x0, 0x406f408, 0x0)

15:18:17 executing program 4:
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r0, 0x20e, 0x153, 0x0, &(0x7f0000000600)="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", 0x0, 0x6, 0x6000000000000000, 0x7a, 0xac, &(0x7f0000000280)="00f66fd216cdec3a856626c2146511430000531e65c479a4820acdd2f80ff617b3de1cdde51fecd3ee6de50ab7ad21a1c0c4620c8ae98ce348fa6ef373ffc1f7834d89c0ca5b0a196fbde01483a63d85ba0c0242b80c5fbbc3ff8bf9694fd9bb248c555b1611cc27b69e25e50aa740c2fa27f117f36d4c75277e", &(0x7f0000000140)="1fd4e72a0bc93c151c716736119e442cc49add87f07a8407abf1abd18c8a6c558254aef6d4c77214e8f11301988a01e3fa130bf935968914df21c07a158c68bab054517baaf902b6a5ff60664e9043c67586641cc412df6c7d80111591c5089c9922063ae3a9f74d59dc3c2ebd834b909e9eae6de4476750cba56e2073891b759d1b4d3edc82e3b2d0ae58bc30aaa292eaa173c3472b95c702574da9d0bd7c0d6758f2515e5e25ca00000000", 0x1}, 0x48)
r1 = socket$inet6_icmp(0xa, 0x2, 0x3a)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r2, &(0x7f0000000200), 0xf000)
r3 = syz_init_net_socket$llc(0x1a, 0x2, 0x0)
setsockopt$sock_int(r3, 0x1, 0x3e, &(0x7f00000000c0)=0x7, 0x4)
bind$llc(r3, &(0x7f0000000000)={0x1a, 0x0, 0x9, 0x0, 0x0, 0x2}, 0x10)
sendmmsg(r3, &(0x7f0000001380), 0x3fffffffffffeed, 0x9000000)
sendfile(r2, 0xffffffffffffffff, 0x0, 0xf03b0000)
sendfile(r2, r3, 0x0, 0x4)
sendfile(r2, 0xffffffffffffffff, 0x0, 0x0)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={0x0, 0x30}, 0x1, 0x0, 0x0, 0x20004800}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1e, 0x9, &(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="000000008100000018000000"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0xf4, &(0x7f0000000400)=""/244, 0x41000, 0x12, '\x00', 0x0, 0x3c, 0xffffffffffffffff, 0x8, &(0x7f0000000580)={0x0, 0x1}, 0x8, 0x10, &(0x7f00000005c0)={0x0, 0x4, 0xd6, 0x1}, 0x10, 0x0, r2}, 0x78)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000300)={0xffffffffffffffff, 0x10, &(0x7f00000002c0)={&(0x7f0000000980)=""/4096, 0x1000, <r4=>0x0}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xc, 0x9, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0xde22, 0x0, 0x0, 0x0, 0x8}, [@map_val={0x18, 0x9, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8}, @ldst={0x3, 0x2, 0x0, 0x6, 0x0, 0x80, 0xffffffffffffffff}, @func, @map]}, &(0x7f0000000100)='syzkaller\x00', 0x345, 0x72, &(0x7f0000000140)=""/114, 0x41100, 0x1b, '\x00', 0x0, 0x20, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000280)={0x4, 0xa, 0x0, 0xed}, 0x10, r4}, 0x78)
bpf$OBJ_GET_PROG(0x7, &(0x7f00000004c0)={&(0x7f0000000480)='./file0\x00', 0x0, 0x18}, 0x10)
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000cc0)=@raw={'raw\x00', 0x9, 0x3, 0x300, 0x110, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x230, 0xffffffff, 0xffffffff, 0x230, 0xffffffff, 0x3, &(0x7f0000000040), {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @empty}, @private2, [0x7fffff7f, 0xffffffff, 0xffffff00, 0xffffff00], [0xff, 0xffffffff, 0xff000000, 0xffffffff], 'veth0_to_bond\x00', 'erspan0\x00', {0xff}, {0xff}, 0x29, 0x5, 0x2, 0x1}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x1, 0x3, 0x9, 0x0, '\x00', 'syz1\x00', {0x5}}}}, {{@ipv6={@local, @local, [0xffffff00, 0xffffffff, 0x0, 0xff000000], [0xff000000, 0x0, 0xffffff00, 0xffffffff], 'ip6tnl0\x00', 'veth1_to_bond\x00', {}, {0xff}, 0x2c, 0x4, 0x4, 0x60}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xb}}, @inet=@rpfilter={{0x28}}]}, @common=@unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x3}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x360)

15:18:17 executing program 5:
unshare(0x66000000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000001, 0x8031, 0xffffffffffffffff, 0x0)
accept4$ax25(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$EBT_SO_GET_INIT_INFO(r0, 0x0, 0x82, &(0x7f0000000140)={'broute\x00'}, &(0x7f0000000040)=0x78)

15:18:18 executing program 3:
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x2, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x32)
connect$inet6(r1, &(0x7f0000000180)={0xa, 0x0, 0x0, @empty}, 0x1c)
sendmmsg(r0, &(0x7f0000002fc0)=[{{0x0, 0xfffffffffffffd9f, &(0x7f0000002d80)=[{&(0x7f0000001c00)="b55381cca459b6cd48487ded6bf0b7d9731bb898342ae3489191c65a0d14dd9144a10907cd98ec3f42b0f2f8a3929b0edaece8f67e73c7ea3e65c640dd43f3f06d3c722356050ec28b442de61e2b5de7e46370222cfc185db4f92d039aeb060e83b4b735cca6549f1ba601b97dac1221a2c03eba943b2011244ad58b34d54c05ba00cb5a17e6ebefcbdad3cd7cf95144283519a1cbe200592a", 0x99}, {&(0x7f0000001cc0)="af46950c95861316e989e97f56a50bb7f9c56145e6ac9bc76d374da8651266f0c8df64d7b00142a5fc405c1d223f99350b1beb52739d33c4ea2bda07f9bb3675bac20c381fed788c5a3897889bd1bc3ce921ca576e2fda30be424d7a08378c0c525a684e327fa2f76ac403aca5061f462cd6e11413f66a40e2b3c1a3069fe5476eafcd78173d55e51153af96ea8ca7dbf4540353256002ef1a6a7eb934f66b584a828128b1d34ad9c5fcb4c22e33facf", 0xffb4}, {&(0x7f0000001d80)="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", 0x446}], 0x3}}], 0x300, 0x1)

15:18:18 executing program 1:
unshare(0x66000000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000001, 0x8031, 0xffffffffffffffff, 0x0)
accept4$ax25(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$EBT_SO_GET_INIT_INFO(r0, 0x0, 0x82, &(0x7f0000000140)={'broute\x00'}, &(0x7f0000000040)=0x78)

15:18:18 executing program 2:
r0 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r0, &(0x7f0000000040)={0x2, 0x0, @dev}, 0x10)
setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x20000010)

15:18:18 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@ipv6_newnexthop={0x30, 0x68, 0x1, 0x0, 0x0, {}, [@NHA_FDB={0x4}, @NHA_GATEWAY={0x14, 0x6, @in6_addr=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, 0x30}}, 0x0)

15:18:18 executing program 0:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(crct10dif-generic)\x00'}, 0x58)
r2 = accept4$alg(r1, 0x0, 0x0, 0x0)
r3 = accept4(r2, 0x0, 0x0, 0x0)
sendfile(r3, r0, &(0x7f00000003c0), 0x7fffffff)

15:18:18 executing program 2:
r0 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r0, &(0x7f0000000040)={0x2, 0x0, @dev}, 0x10)
setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x20000010)

15:18:18 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@ipv6_newnexthop={0x30, 0x68, 0x1, 0x0, 0x0, {}, [@NHA_FDB={0x4}, @NHA_GATEWAY={0x14, 0x6, @in6_addr=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, 0x30}}, 0x0)

15:18:19 executing program 5:
unshare(0x66000000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000001, 0x8031, 0xffffffffffffffff, 0x0)
accept4$ax25(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$EBT_SO_GET_INIT_INFO(r0, 0x0, 0x82, &(0x7f0000000140)={'broute\x00'}, &(0x7f0000000040)=0x78)

15:18:19 executing program 2:
r0 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r0, &(0x7f0000000040)={0x2, 0x0, @dev}, 0x10)
setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x20000010)

15:18:19 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@ipv6_newnexthop={0x30, 0x68, 0x1, 0x0, 0x0, {}, [@NHA_FDB={0x4}, @NHA_GATEWAY={0x14, 0x6, @in6_addr=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, 0x30}}, 0x0)

15:18:19 executing program 0:
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x2, [@int]}}, &(0x7f00000004c0)=""/225, 0x2a, 0xe1, 0x1}, 0x20)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000140)={r0, 0x10, &(0x7f0000000100)={&(0x7f0000000000)=""/239, 0xef}}, 0x10)

15:18:19 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r1, 0x301}, 0x14}}, 0x0)

15:18:19 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000640)={0x64, r1, 0x1, 0x0, 0x0, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x2d}, {0x6}, {0x5}, {0x6}, {0x8}}]}, 0x64}}, 0x0)

[  192.787806][T10634] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'.
[  192.837989][T10635] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'.
15:18:20 executing program 1:
unshare(0x66000000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000001, 0x8031, 0xffffffffffffffff, 0x0)
accept4$ax25(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$EBT_SO_GET_INIT_INFO(r0, 0x0, 0x82, &(0x7f0000000140)={'broute\x00'}, &(0x7f0000000040)=0x78)

15:18:20 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@ipv6_newnexthop={0x30, 0x68, 0x1, 0x0, 0x0, {}, [@NHA_FDB={0x4}, @NHA_GATEWAY={0x14, 0x6, @in6_addr=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, 0x30}}, 0x0)

15:18:20 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000240)={'team0\x00', <r2=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000300)=@newneigh={0x28, 0x1c, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r2, 0x0, 0xa2}, [@NDA_LLADDR={0xa, 0x2, @dev}]}, 0x28}}, 0x0)

15:18:20 executing program 2:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="4800000010000d07cdd87d345d28000000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="740000002400070500"/20, @ANYRES32=r3, @ANYBLOB="00000200ffffffff0000000008000100736671"], 0x74}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="3400000066000781db2e5d000000810000000000", @ANYRES32=r3], 0x34}}, 0x0)
r4 = socket(0x10, 0x400000100080003, 0x0)
sendmmsg$alg(r4, &(0x7f0000000140), 0x2e7, 0x0)

15:18:20 executing program 3:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @any, 0x40}, 0xe)

[  193.375703][T10649] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'.
15:18:20 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_WOL_GET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000007c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fffffff000000000000210000000c00018008000300000000000c000180080003"], 0x2c}}, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000100)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
read(r0, &(0x7f00000000c0)=""/168, 0xa8)

15:18:20 executing program 5:
listen(0xffffffffffffffff, 0x0)
unshare(0x40000000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040))
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="3900000013001104680907d60000000f0000ff3f02000000290a001700000000040037000a00030014917c82aa75b9a64411f6a4ee1ee438d2", 0x39}], 0x1)

[  193.503659][T10651] device team_slave_0 entered promiscuous mode
[  193.510203][T10651] device team_slave_1 entered promiscuous mode
[  193.566823][T10654] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.2'.
[  193.587131][T10665] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'.
[  193.649902][T10665] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.2'.
15:18:21 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000240)={'team0\x00', <r2=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000300)=@newneigh={0x28, 0x1c, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r2, 0x0, 0xa2}, [@NDA_LLADDR={0xa, 0x2, @dev}]}, 0x28}}, 0x0)

[  193.734210][T10654] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.2'.
[  193.759272][T10649] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'.
15:18:21 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_WOL_GET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000007c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fffffff000000000000210000000c00018008000300000000000c000180080003"], 0x2c}}, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000100)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
read(r0, &(0x7f00000000c0)=""/168, 0xa8)

15:18:21 executing program 2:
r0 = socket$inet(0x2, 0x2, 0x0)
setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000980)={0x0, @empty, 0x0, 0x0, 'lblcr\x00'}, 0x2c)

[  194.003055][ T1358] ieee802154 phy0 wpan0: encryption failed: -22
[  194.009397][ T1358] ieee802154 phy1 wpan1: encryption failed: -22
15:18:21 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000240)={'team0\x00', <r2=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000300)=@newneigh={0x28, 0x1c, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r2, 0x0, 0xa2}, [@NDA_LLADDR={0xa, 0x2, @dev}]}, 0x28}}, 0x0)

15:18:21 executing program 2:
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000037c0)={0x20, 0x1411, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}]}, 0x20}}, 0x0)

[  194.614562][T10677] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.5'.
[  194.637404][T10677] ‘|‚ªu: renamed from tunl0
[  194.696015][T10677] A link change request failed with some changes committed already. Interface ‘|‚ªu may have been left with an inconsistent configuration, please check.
15:18:22 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000240)={'team0\x00', <r2=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000300)=@newneigh={0x28, 0x1c, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r2, 0x0, 0xa2}, [@NDA_LLADDR={0xa, 0x2, @dev}]}, 0x28}}, 0x0)

15:18:22 executing program 3:
r0 = socket$inet(0x2, 0x3, 0x7)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8914, &(0x7f0000000000)={'wlan1\x00'})

15:18:22 executing program 2:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newtfilter={0x48, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0xc}}, [@filter_kind_options=@f_matchall={{0xd}, {0x14, 0x2, [@TCA_MATCHALL_CLASSID={0x8}, @TCA_MATCHALL_FLAGS={0x8}]}}]}, 0x48}}, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0)

15:18:22 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_WOL_GET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000007c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fffffff000000000000210000000c00018008000300000000000c000180080003"], 0x2c}}, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000100)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
read(r0, &(0x7f00000000c0)=""/168, 0xa8)

15:18:22 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000640)=ANY=[@ANYBLOB="580000000007010800000000000000000a0000010900010073"], 0x58}}, 0x0)

[  195.075934][T10782] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.1'.
15:18:22 executing program 5:
listen(0xffffffffffffffff, 0x0)
unshare(0x40000000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040))
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="3900000013001104680907d60000000f0000ff3f02000000290a001700000000040037000a00030014917c82aa75b9a64411f6a4ee1ee438d2", 0x39}], 0x1)

15:18:22 executing program 0:
listen(0xffffffffffffffff, 0x0)
unshare(0x40000000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040))
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="3900000013001104680907d60000000f0000ff3f02000000290a001700000000040037000a00030014917c82aa75b9a64411f6a4ee1ee438d2", 0x39}], 0x1)

15:18:22 executing program 3:
r0 = socket$inet(0x2, 0x3, 0x7)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8914, &(0x7f0000000000)={'wlan1\x00'})

15:18:22 executing program 1:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newtaction={0x68, 0x30, 0x1, 0x0, 0x0, {}, [{0x54, 0x1, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x8}}, @TCA_SKBEDIT_PRIORITY={0x8}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0)

15:18:22 executing program 2:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@private1, @in=@loopback, 0x0, 0xfffd, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee01}}, {{@in=@dev, 0x0, 0x32}, 0x0, @in6=@dev}}, 0xe8)
syz_emit_ethernet(0x3e, &(0x7f0000000040)={@multicast, @dev, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x8, 0x11, 0x0, @local, @mcast2, {[], {0x0, 0xe22, 0x8}}}}}}, 0x0)

[  195.361783][ T9645] Bluetooth: hci1: command 0x0405 tx timeout
15:18:22 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_WOL_GET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000007c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fffffff000000000000210000000c00018008000300000000000c000180080003"], 0x2c}}, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000100)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
read(r0, &(0x7f00000000c0)=""/168, 0xa8)

15:18:22 executing program 1:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newtaction={0x68, 0x30, 0x1, 0x0, 0x0, {}, [{0x54, 0x1, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x8}}, @TCA_SKBEDIT_PRIORITY={0x8}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0)

15:18:22 executing program 3:
r0 = socket$inet(0x2, 0x3, 0x7)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8914, &(0x7f0000000000)={'wlan1\x00'})

15:18:22 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r1, 0x1, 0x0, 0x0, {{}, {}, {0x14, 0x19, {0x0, 0x0, 0x0, 0x5}}}}, 0x30}}, 0x0)

15:18:23 executing program 1:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newtaction={0x68, 0x30, 0x1, 0x0, 0x0, {}, [{0x54, 0x1, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x8}}, @TCA_SKBEDIT_PRIORITY={0x8}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0)

15:18:23 executing program 3:
r0 = socket$inet(0x2, 0x3, 0x7)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8914, &(0x7f0000000000)={'wlan1\x00'})

15:18:23 executing program 2:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f00000001c0)=0x1, 0x4)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev}, 0x10)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$TUNSETLINK(r1, 0x8912, 0x400308)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x2, 0x4)
setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000180)=0x7fff, 0x4)
recvmmsg(r0, &(0x7f0000006340)=[{{0x0, 0x0, 0x0}}], 0x517, 0x102, 0x0)

[  196.517818][T10810] ‘|‚ªu: renamed from tunl0
[  196.527268][T10810] A link change request failed with some changes committed already. Interface ‘|‚ªu may have been left with an inconsistent configuration, please check.
[  196.585705][T10804] ‘|‚ªu: renamed from tunl0
[  196.608503][T10804] A link change request failed with some changes committed already. Interface ‘|‚ªu may have been left with an inconsistent configuration, please check.
15:18:24 executing program 5:
listen(0xffffffffffffffff, 0x0)
unshare(0x40000000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040))
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="3900000013001104680907d60000000f0000ff3f02000000290a001700000000040037000a00030014917c82aa75b9a64411f6a4ee1ee438d2", 0x39}], 0x1)

15:18:24 executing program 0:
listen(0xffffffffffffffff, 0x0)
unshare(0x40000000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040))
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="3900000013001104680907d60000000f0000ff3f02000000290a001700000000040037000a00030014917c82aa75b9a64411f6a4ee1ee438d2", 0x39}], 0x1)

15:18:24 executing program 1:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newtaction={0x68, 0x30, 0x1, 0x0, 0x0, {}, [{0x54, 0x1, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x8}}, @TCA_SKBEDIT_PRIORITY={0x8}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0)

15:18:24 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newtclass={0x24, 0x1e, 0xe15572e01754dd59}, 0x24}}, 0x0)

15:18:24 executing program 2:
r0 = socket(0x2, 0x2, 0x0)
setsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, &(0x7f0000000000)=0x5, 0x4)
getsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, 0x0, &(0x7f0000000380))

15:18:24 executing program 4:
r0 = socket(0x10, 0x3, 0xc)
write(r0, &(0x7f0000000000)="1f0000000104ff00fd4354c007110000f30501000a000100010423dcffdf00", 0x23c)
r1 = socket(0x10, 0x3, 0xc)
write(r1, &(0x7f0000000080)="1f0000000104ff00fd4354c007910000f30516000a000100010423dcffdf00", 0x76)
close(r0)

15:18:24 executing program 2:
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040))
r0 = socket$kcm(0x11, 0x3, 0x300)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x4)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)={0xb, 0x8, 0x8001, 0x3ff, 0x1}, 0x40)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000900), 0xff, r1}, 0x38)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200), &(0x7f0000000080), 0x5, r1}, 0x38)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x5}, 0x8, 0x10, 0x0}, 0x78)
bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000200), 0x0, 0x2, r1}, 0x38)

15:18:24 executing program 3:
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r0)

15:18:24 executing program 4:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x4704, 0x4)
bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10)
sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0)
recvmmsg(r0, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x14c, 0x4)
ioctl$SIOCGSTAMP(r0, 0x8907, &(0x7f0000000100))

15:18:24 executing program 1:
r0 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r0, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10)

15:18:24 executing program 2:
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040))
r0 = socket$kcm(0x11, 0x3, 0x300)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x4)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)={0xb, 0x8, 0x8001, 0x3ff, 0x1}, 0x40)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000900), 0xff, r1}, 0x38)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200), &(0x7f0000000080), 0x5, r1}, 0x38)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x5}, 0x8, 0x10, 0x0}, 0x78)
bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000200), 0x0, 0x2, r1}, 0x38)

15:18:24 executing program 1:
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c)
recvmmsg(r0, &(0x7f0000008880), 0x4000000000005e3, 0x44000102, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)
ppoll(&(0x7f0000000100)=[{r0}], 0x1, &(0x7f0000000200)={0x0, 0x3938700}, 0x0, 0x0)

[  197.695971][T10955] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  198.222089][T10891] __nla_validate_parse: 5 callbacks suppressed
[  198.222106][T10891] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.5'.
[  198.254838][T10891] ‘|‚ªu: renamed from tunl0
[  198.286837][T10891] A link change request failed with some changes committed already. Interface ‘|‚ªu may have been left with an inconsistent configuration, please check.
[  198.335679][T10907] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.0'.
[  198.366665][T10907] ‘|‚ªu: renamed from tunl0
[  198.392479][T10907] A link change request failed with some changes committed already. Interface ‘|‚ªu may have been left with an inconsistent configuration, please check.
15:18:26 executing program 5:
listen(0xffffffffffffffff, 0x0)
unshare(0x40000000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040))
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="3900000013001104680907d60000000f0000ff3f02000000290a001700000000040037000a00030014917c82aa75b9a64411f6a4ee1ee438d2", 0x39}], 0x1)

15:18:26 executing program 0:
listen(0xffffffffffffffff, 0x0)
unshare(0x40000000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040))
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="3900000013001104680907d60000000f0000ff3f02000000290a001700000000040037000a00030014917c82aa75b9a64411f6a4ee1ee438d2", 0x39}], 0x1)

15:18:26 executing program 2:
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040))
r0 = socket$kcm(0x11, 0x3, 0x300)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x4)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)={0xb, 0x8, 0x8001, 0x3ff, 0x1}, 0x40)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000900), 0xff, r1}, 0x38)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200), &(0x7f0000000080), 0x5, r1}, 0x38)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x5}, 0x8, 0x10, 0x0}, 0x78)
bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000200), 0x0, 0x2, r1}, 0x38)

15:18:26 executing program 1:
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c)
recvmmsg(r0, &(0x7f0000008880), 0x4000000000005e3, 0x44000102, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)
ppoll(&(0x7f0000000100)=[{r0}], 0x1, &(0x7f0000000200)={0x0, 0x3938700}, 0x0, 0x0)

15:18:26 executing program 3:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000080)=@mangle={'mangle\x00', 0x1f, 0x6, 0x440, 0x310, 0x248, 0x0, 0x0, 0x160, 0x3a8, 0x3a8, 0x3a8, 0x3a8, 0x3a8, 0x6, 0x0, {[{{@ip={@private, @loopback, 0x0, 0x0, 'ip6tnl0\x00', 'veth1_to_hsr\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28}}, {{@uncond, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@addrtype={{0x30}}]}, @TTL={0x28}}, {{@ip={@remote, @empty, 0x0, 0x0, 'wg1\x00', 'veth0_to_bridge\x00'}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@icmp={{0x28}, {0x0, "4ec9"}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CHECKSUM={0x28}}, {{@ip={@local, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'geneve1\x00', 'hsr0\x00'}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@addrtype={{0x30}}]}, @ECN={0x28}}, {{@ip={@rand_addr, @broadcast, 0x0, 0x0, 'bridge_slave_1\x00', 'vlan0\x00'}, 0x0, 0x70, 0x98}, @TTL={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4a0)

15:18:26 executing program 4:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x4704, 0x4)
bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10)
sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0)
recvmmsg(r0, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x14c, 0x4)
ioctl$SIOCGSTAMP(r0, 0x8907, &(0x7f0000000100))

[  198.848570][T10975] x_tables: duplicate underflow at hook 1
15:18:26 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000000)={@in6={{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x0, 0x0, 0x0, "772a4c09490771bd6c943831e590e83d66c5e32367a870f469d523a48aefccc2e2b43b48ad90080107200fd4d49e834518993bdeeeea4b447f2800efbc495eb5fa7839dbed38d1461257f62a553b8a40"}, 0xd8)

15:18:26 executing program 2:
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040))
r0 = socket$kcm(0x11, 0x3, 0x300)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x4)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)={0xb, 0x8, 0x8001, 0x3ff, 0x1}, 0x40)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000900), 0xff, r1}, 0x38)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200), &(0x7f0000000080), 0x5, r1}, 0x38)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x5}, 0x8, 0x10, 0x0}, 0x78)
bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000200), 0x0, 0x2, r1}, 0x38)

15:18:26 executing program 1:
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c)
recvmmsg(r0, &(0x7f0000008880), 0x4000000000005e3, 0x44000102, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)
ppoll(&(0x7f0000000100)=[{r0}], 0x1, &(0x7f0000000200)={0x0, 0x3938700}, 0x0, 0x0)

15:18:26 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000040)=@ipv6_delrule={0x90, 0x21, 0x1, 0x0, 0x0, {}, [@FRA_SRC={0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, @FRA_DST={0x14, 0x1, @mcast1}, @FRA_SRC={0x14, 0x2, @private1}, @FRA_SRC={0x14, 0x2, @mcast2}, @FRA_DST={0x14, 0x1, @ipv4={'\x00', '\xff\xff', @broadcast}}, @FIB_RULE_POLICY=@FRA_IP_PROTO={0x5}, @FIB_RULE_POLICY=@FRA_PROTOCOL={0x5, 0x15, 0x3}]}, 0x90}}, 0x0)

15:18:26 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10)
r1 = accept$alg(r0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
write$binfmt_script(r1, &(0x7f0000000600)=ANY=[], 0xfec8)
recvmmsg(r1, &(0x7f0000007280)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000900)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0)

15:18:26 executing program 3:
pselect6(0x40, &(0x7f0000000000), 0x0, 0x0, &(0x7f0000000100), 0x0)

[  200.088619][T10976] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.5'.
[  200.106468][T10976] ‘|‚ªu: renamed from tunl0
[  200.120492][T10976] A link change request failed with some changes committed already. Interface ‘|‚ªu may have been left with an inconsistent configuration, please check.
[  200.148929][T10980] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.0'.
[  200.186034][T10980] ‘|‚ªu: renamed from tunl0
[  200.215432][T10980] A link change request failed with some changes committed already. Interface ‘|‚ªu may have been left with an inconsistent configuration, please check.
15:18:27 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@ipv6_newroute={0x1c, 0x18, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}}, 0x1c}}, 0x0)

15:18:27 executing program 1:
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c)
recvmmsg(r0, &(0x7f0000008880), 0x4000000000005e3, 0x44000102, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)
ppoll(&(0x7f0000000100)=[{r0}], 0x1, &(0x7f0000000200)={0x0, 0x3938700}, 0x0, 0x0)

15:18:27 executing program 2:
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$TUNSETLINK(r0, 0x8912, 0x400308)
r1 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r1, &(0x7f00000003c0), 0x10)
sendmsg$can_bcm(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)={0x5, 0x808, 0x0, {0x77359400}, {0x77359400}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "44a349524fa600b79ace66818d06b83bea9313846bad8dde499f4583e4030a48de3f26b12f70dcc5d1642a2e1c8aa9a4c9cab83396a325e4ec116c5cdb3f9c13"}}, 0x80}}, 0x0)
sendmsg$can_bcm(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)={0x5, 0x103, 0x0, {0x0, 0x2710}, {0x0, 0x2710}, {}, 0x8, @can={{}, 0x0, 0x0, 0x0, 0x0, "e9ffffffffffffff"}}, 0x200001c8}}, 0x0)

15:18:27 executing program 4:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x4704, 0x4)
bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10)
sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0)
recvmmsg(r0, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x14c, 0x4)
ioctl$SIOCGSTAMP(r0, 0x8907, &(0x7f0000000100))

15:18:27 executing program 5:
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], &(0x7f0000000280)=""/237, 0x37, 0xed, 0x1}, 0x20)
bpf$MAP_CREATE(0x1000000000000, &(0x7f0000000000)={0x2, 0x800000000000004, 0x4, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r0, 0x0, 0x1}, 0x40)

15:18:27 executing program 3:
r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
sendto$x25(r0, 0x0, 0x0, 0x80, 0x0, 0x0)

15:18:28 executing program 3:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_type(r1, &(0x7f0000000000), 0x248800)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events\x00', 0x2da8020000100000, 0x500001c)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0)

15:18:28 executing program 0:
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6)
write(r0, &(0x7f0000000040)="4e0003000000", 0x6)

15:18:28 executing program 5:
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000013c0)='memory.current\x00', 0x275a, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x275a, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0)
write$cgroup_int(r1, &(0x7f0000000200), 0xfdef)
ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x20000080})
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000001380)=0x8)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xf2b)
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
bind(r3, &(0x7f0000000240), 0x80)

15:18:28 executing program 2:
r0 = socket(0x0, 0x2, 0x2)
syz_genetlink_get_family_id$SEG6(&(0x7f0000000780), r0)
r1 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r1, &(0x7f0000000000)={0xa, 0x14e24}, 0x1c)
recvmmsg(r1, &(0x7f0000000200), 0x38c, 0x0, 0x0)
connect$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c)
sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0x0)
ppoll(&(0x7f0000000080)=[{r1, 0x80}], 0x1, 0x0, &(0x7f0000000140), 0x8)
sendmsg$TEAM_CMD_PORT_LIST_GET(r1, &(0x7f000000ab80)={0x0, 0xfffffffffffffd57, 0x0, 0x1, 0x0, 0x0, 0x10000}, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000001c0)={{{@in=@multicast1, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in=@initdev}, 0x0, @in6=@local}}, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000240)={{{@in=@multicast2, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc0, 0x40, 0x0, 0x0, r2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {0x5, 0x0, 0x0, 0x200}, 0x3, 0x6e6bb3, 0x0, 0x0, 0x2}, {{}, 0x0, @in=@remote, 0x0, 0x0, 0x3, 0x0, 0x0, 0x9}}, 0xe8)
ioctl$TUNSETOWNER(0xffffffffffffffff, 0x400454cc, r2)

15:18:28 executing program 0:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r1, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207220902"], 0x10}}, 0x0)
bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10)
setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000080)={{{@in6=@ipv4={'\x00', '\xff\xff', @dev}, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@rand_addr=0x64010101, 0x10000, 0x32}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0xb7, 0x1fb, 0xffffffff}}, 0xe8)
sendmmsg(r0, &(0x7f0000000180), 0x400000000000354, 0x2873dedf99c)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000240)=@newqdisc={0x3c, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc}}]}, 0x3c}}, 0x0)

15:18:28 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x6c, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x30, 0x11, 0x0, 0x1, @immediate={{0xe}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DREG={0x9, 0x1, 0x1, 0x0, 0x2}, @NFTA_IMMEDIATE_DATA={0x10, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}]}]}]}}}]}], {0x14, 0x10}}, 0xb4}}, 0x0)

[  201.106072][   T26] audit: type=1804 audit(1634570308.418:53): pid=11071 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir655555301/syzkaller.3zs7tv/52/memory.events" dev="sda1" ino=14222 res=1 errno=0
[  201.210700][T11085] netlink: 'syz-executor.1': attribute type 1 has an invalid length.
[  201.256988][   T26] audit: type=1804 audit(1634570308.478:54): pid=11082 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir655555301/syzkaller.3zs7tv/52/memory.events" dev="sda1" ino=14222 res=1 errno=0
15:18:28 executing program 1:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03001500055bd25a80648c63940d3424fc60100010400a000a00053582c137153e370800038047020000d1bd", 0x33fe0}], 0x1}, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="1400000029000505d25a80308c63940d0424fc60", 0x14}], 0x1}, 0x0)
recvmsg(r0, &(0x7f0000001240)={0x0, 0x0, 0x0}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)

15:18:28 executing program 5:
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000013c0)='memory.current\x00', 0x275a, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x275a, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0)
write$cgroup_int(r1, &(0x7f0000000200), 0xfdef)
ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x20000080})
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000001380)=0x8)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xf2b)
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
bind(r3, &(0x7f0000000240), 0x80)

[  201.514471][   T26] audit: type=1804 audit(1634570308.838:55): pid=11071 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir655555301/syzkaller.3zs7tv/52/memory.events" dev="sda1" ino=14222 res=1 errno=0
15:18:29 executing program 3:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_type(r1, &(0x7f0000000000), 0x248800)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events\x00', 0x2da8020000100000, 0x500001c)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0)

15:18:29 executing program 4:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x4704, 0x4)
bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10)
sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0)
recvmmsg(r0, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x14c, 0x4)
ioctl$SIOCGSTAMP(r0, 0x8907, &(0x7f0000000100))

[  201.795505][   T26] audit: type=1804 audit(1634570308.858:56): pid=11082 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir655555301/syzkaller.3zs7tv/52/memory.events" dev="sda1" ino=14222 res=1 errno=0
[  202.083507][   T26] audit: type=1804 audit(1634570309.398:57): pid=11126 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir655555301/syzkaller.3zs7tv/53/memory.events" dev="sda1" ino=14231 res=1 errno=0
15:18:29 executing program 2:
r0 = socket(0x0, 0x2, 0x2)
syz_genetlink_get_family_id$SEG6(&(0x7f0000000780), r0)
r1 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r1, &(0x7f0000000000)={0xa, 0x14e24}, 0x1c)
recvmmsg(r1, &(0x7f0000000200), 0x38c, 0x0, 0x0)
connect$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c)
sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0x0)
ppoll(&(0x7f0000000080)=[{r1, 0x80}], 0x1, 0x0, &(0x7f0000000140), 0x8)
sendmsg$TEAM_CMD_PORT_LIST_GET(r1, &(0x7f000000ab80)={0x0, 0xfffffffffffffd57, 0x0, 0x1, 0x0, 0x0, 0x10000}, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000001c0)={{{@in=@multicast1, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in=@initdev}, 0x0, @in6=@local}}, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000240)={{{@in=@multicast2, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc0, 0x40, 0x0, 0x0, r2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {0x5, 0x0, 0x0, 0x200}, 0x3, 0x6e6bb3, 0x0, 0x0, 0x2}, {{}, 0x0, @in=@remote, 0x0, 0x0, 0x3, 0x0, 0x0, 0x9}}, 0xe8)
ioctl$TUNSETOWNER(0xffffffffffffffff, 0x400454cc, r2)

15:18:29 executing program 0:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r1, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207220902"], 0x10}}, 0x0)
bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10)
setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000080)={{{@in6=@ipv4={'\x00', '\xff\xff', @dev}, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@rand_addr=0x64010101, 0x10000, 0x32}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0xb7, 0x1fb, 0xffffffff}}, 0xe8)
sendmmsg(r0, &(0x7f0000000180), 0x400000000000354, 0x2873dedf99c)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000240)=@newqdisc={0x3c, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc}}]}, 0x3c}}, 0x0)

15:18:29 executing program 1:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03001500055bd25a80648c63940d3424fc60100010400a000a00053582c137153e370800038047020000d1bd", 0x33fe0}], 0x1}, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="1400000029000505d25a80308c63940d0424fc60", 0x14}], 0x1}, 0x0)
recvmsg(r0, &(0x7f0000001240)={0x0, 0x0, 0x0}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)

[  202.458919][   T26] audit: type=1804 audit(1634570309.528:58): pid=11153 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir655555301/syzkaller.3zs7tv/53/memory.events" dev="sda1" ino=14231 res=1 errno=0
15:18:29 executing program 5:
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000013c0)='memory.current\x00', 0x275a, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x275a, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0)
write$cgroup_int(r1, &(0x7f0000000200), 0xfdef)
ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x20000080})
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000001380)=0x8)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xf2b)
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
bind(r3, &(0x7f0000000240), 0x80)

15:18:30 executing program 3:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_type(r1, &(0x7f0000000000), 0x248800)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events\x00', 0x2da8020000100000, 0x500001c)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0)

15:18:30 executing program 1:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03001500055bd25a80648c63940d3424fc60100010400a000a00053582c137153e370800038047020000d1bd", 0x33fe0}], 0x1}, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="1400000029000505d25a80308c63940d0424fc60", 0x14}], 0x1}, 0x0)
recvmsg(r0, &(0x7f0000001240)={0x0, 0x0, 0x0}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)

15:18:30 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03001500055bd25a80648c63940d3424fc60100010400a000a00053582c137153e370800038047020000d1bd", 0x33fe0}], 0x1}, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="1400000029000505d25a80308c63940d0424fc60", 0x14}], 0x1}, 0x0)
recvmsg(r0, &(0x7f0000001240)={0x0, 0x0, 0x0}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)

15:18:30 executing program 5:
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000013c0)='memory.current\x00', 0x275a, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x275a, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0)
write$cgroup_int(r1, &(0x7f0000000200), 0xfdef)
ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x20000080})
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000001380)=0x8)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xf2b)
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
bind(r3, &(0x7f0000000240), 0x80)

[  203.298746][   T26] audit: type=1804 audit(1634570310.618:59): pid=11217 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir655555301/syzkaller.3zs7tv/54/memory.events" dev="sda1" ino=14231 res=1 errno=0
[  203.475717][   T26] audit: type=1804 audit(1634570310.718:60): pid=11234 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir655555301/syzkaller.3zs7tv/54/memory.events" dev="sda1" ino=14231 res=1 errno=0
15:18:30 executing program 0:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r1, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207220902"], 0x10}}, 0x0)
bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10)
setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000080)={{{@in6=@ipv4={'\x00', '\xff\xff', @dev}, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@rand_addr=0x64010101, 0x10000, 0x32}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0xb7, 0x1fb, 0xffffffff}}, 0xe8)
sendmmsg(r0, &(0x7f0000000180), 0x400000000000354, 0x2873dedf99c)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000240)=@newqdisc={0x3c, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc}}]}, 0x3c}}, 0x0)

15:18:30 executing program 1:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03001500055bd25a80648c63940d3424fc60100010400a000a00053582c137153e370800038047020000d1bd", 0x33fe0}], 0x1}, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="1400000029000505d25a80308c63940d0424fc60", 0x14}], 0x1}, 0x0)
recvmsg(r0, &(0x7f0000001240)={0x0, 0x0, 0x0}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)

15:18:31 executing program 2:
r0 = socket(0x0, 0x2, 0x2)
syz_genetlink_get_family_id$SEG6(&(0x7f0000000780), r0)
r1 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r1, &(0x7f0000000000)={0xa, 0x14e24}, 0x1c)
recvmmsg(r1, &(0x7f0000000200), 0x38c, 0x0, 0x0)
connect$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c)
sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0x0)
ppoll(&(0x7f0000000080)=[{r1, 0x80}], 0x1, 0x0, &(0x7f0000000140), 0x8)
sendmsg$TEAM_CMD_PORT_LIST_GET(r1, &(0x7f000000ab80)={0x0, 0xfffffffffffffd57, 0x0, 0x1, 0x0, 0x0, 0x10000}, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000001c0)={{{@in=@multicast1, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in=@initdev}, 0x0, @in6=@local}}, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000240)={{{@in=@multicast2, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc0, 0x40, 0x0, 0x0, r2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {0x5, 0x0, 0x0, 0x200}, 0x3, 0x6e6bb3, 0x0, 0x0, 0x2}, {{}, 0x0, @in=@remote, 0x0, 0x0, 0x3, 0x0, 0x0, 0x9}}, 0xe8)
ioctl$TUNSETOWNER(0xffffffffffffffff, 0x400454cc, r2)

15:18:31 executing program 3:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_type(r1, &(0x7f0000000000), 0x248800)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events\x00', 0x2da8020000100000, 0x500001c)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0)

15:18:31 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03001500055bd25a80648c63940d3424fc60100010400a000a00053582c137153e370800038047020000d1bd", 0x33fe0}], 0x1}, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="1400000029000505d25a80308c63940d0424fc60", 0x14}], 0x1}, 0x0)
recvmsg(r0, &(0x7f0000001240)={0x0, 0x0, 0x0}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)

15:18:31 executing program 5:
r0 = socket(0x0, 0x2, 0x2)
syz_genetlink_get_family_id$SEG6(&(0x7f0000000780), r0)
r1 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r1, &(0x7f0000000000)={0xa, 0x14e24}, 0x1c)
recvmmsg(r1, &(0x7f0000000200), 0x38c, 0x0, 0x0)
connect$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c)
sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0x0)
ppoll(&(0x7f0000000080)=[{r1, 0x80}], 0x1, 0x0, &(0x7f0000000140), 0x8)
sendmsg$TEAM_CMD_PORT_LIST_GET(r1, &(0x7f000000ab80)={0x0, 0xfffffffffffffd57, 0x0, 0x1, 0x0, 0x0, 0x10000}, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000001c0)={{{@in=@multicast1, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in=@initdev}, 0x0, @in6=@local}}, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000240)={{{@in=@multicast2, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc0, 0x40, 0x0, 0x0, r2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {0x5, 0x0, 0x0, 0x200}, 0x3, 0x6e6bb3, 0x0, 0x0, 0x2}, {{}, 0x0, @in=@remote, 0x0, 0x0, 0x3, 0x0, 0x0, 0x9}}, 0xe8)
ioctl$TUNSETOWNER(0xffffffffffffffff, 0x400454cc, r2)

15:18:31 executing program 1:
r0 = socket(0x0, 0x2, 0x2)
syz_genetlink_get_family_id$SEG6(&(0x7f0000000780), r0)
r1 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r1, &(0x7f0000000000)={0xa, 0x14e24}, 0x1c)
recvmmsg(r1, &(0x7f0000000200), 0x38c, 0x0, 0x0)
connect$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c)
sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0x0)
ppoll(&(0x7f0000000080)=[{r1, 0x80}], 0x1, 0x0, &(0x7f0000000140), 0x8)
sendmsg$TEAM_CMD_PORT_LIST_GET(r1, &(0x7f000000ab80)={0x0, 0xfffffffffffffd57, 0x0, 0x1, 0x0, 0x0, 0x10000}, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000001c0)={{{@in=@multicast1, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in=@initdev}, 0x0, @in6=@local}}, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000240)={{{@in=@multicast2, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc0, 0x40, 0x0, 0x0, r2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {0x5, 0x0, 0x0, 0x200}, 0x3, 0x6e6bb3, 0x0, 0x0, 0x2}, {{}, 0x0, @in=@remote, 0x0, 0x0, 0x3, 0x0, 0x0, 0x9}}, 0xe8)
ioctl$TUNSETOWNER(0xffffffffffffffff, 0x400454cc, r2)

[  204.278675][   T26] audit: type=1804 audit(1634570311.598:61): pid=11287 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir655555301/syzkaller.3zs7tv/55/memory.events" dev="sda1" ino=14232 res=1 errno=0
15:18:31 executing program 0:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r1, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207220902"], 0x10}}, 0x0)
bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10)
setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000080)={{{@in6=@ipv4={'\x00', '\xff\xff', @dev}, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@rand_addr=0x64010101, 0x10000, 0x32}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0xb7, 0x1fb, 0xffffffff}}, 0xe8)
sendmmsg(r0, &(0x7f0000000180), 0x400000000000354, 0x2873dedf99c)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000240)=@newqdisc={0x3c, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc}}]}, 0x3c}}, 0x0)

[  204.450807][   T26] audit: type=1804 audit(1634570311.678:62): pid=11307 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir655555301/syzkaller.3zs7tv/55/memory.events" dev="sda1" ino=14232 res=1 errno=0
15:18:31 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03001500055bd25a80648c63940d3424fc60100010400a000a00053582c137153e370800038047020000d1bd", 0x33fe0}], 0x1}, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="1400000029000505d25a80308c63940d0424fc60", 0x14}], 0x1}, 0x0)
recvmsg(r0, &(0x7f0000001240)={0x0, 0x0, 0x0}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)

15:18:32 executing program 3:
r0 = socket(0x0, 0x2, 0x2)
syz_genetlink_get_family_id$SEG6(&(0x7f0000000780), r0)
r1 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r1, &(0x7f0000000000)={0xa, 0x14e24}, 0x1c)
recvmmsg(r1, &(0x7f0000000200), 0x38c, 0x0, 0x0)
connect$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c)
sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0x0)
ppoll(&(0x7f0000000080)=[{r1, 0x80}], 0x1, 0x0, &(0x7f0000000140), 0x8)
sendmsg$TEAM_CMD_PORT_LIST_GET(r1, &(0x7f000000ab80)={0x0, 0xfffffffffffffd57, 0x0, 0x1, 0x0, 0x0, 0x10000}, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000001c0)={{{@in=@multicast1, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in=@initdev}, 0x0, @in6=@local}}, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000240)={{{@in=@multicast2, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc0, 0x40, 0x0, 0x0, r2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {0x5, 0x0, 0x0, 0x200}, 0x3, 0x6e6bb3, 0x0, 0x0, 0x2}, {{}, 0x0, @in=@remote, 0x0, 0x0, 0x3, 0x0, 0x0, 0x9}}, 0xe8)
ioctl$TUNSETOWNER(0xffffffffffffffff, 0x400454cc, r2)

15:18:32 executing program 2:
r0 = socket(0x0, 0x2, 0x2)
syz_genetlink_get_family_id$SEG6(&(0x7f0000000780), r0)
r1 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r1, &(0x7f0000000000)={0xa, 0x14e24}, 0x1c)
recvmmsg(r1, &(0x7f0000000200), 0x38c, 0x0, 0x0)
connect$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c)
sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0x0)
ppoll(&(0x7f0000000080)=[{r1, 0x80}], 0x1, 0x0, &(0x7f0000000140), 0x8)
sendmsg$TEAM_CMD_PORT_LIST_GET(r1, &(0x7f000000ab80)={0x0, 0xfffffffffffffd57, 0x0, 0x1, 0x0, 0x0, 0x10000}, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000001c0)={{{@in=@multicast1, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in=@initdev}, 0x0, @in6=@local}}, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000240)={{{@in=@multicast2, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc0, 0x40, 0x0, 0x0, r2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {0x5, 0x0, 0x0, 0x200}, 0x3, 0x6e6bb3, 0x0, 0x0, 0x2}, {{}, 0x0, @in=@remote, 0x0, 0x0, 0x3, 0x0, 0x0, 0x9}}, 0xe8)
ioctl$TUNSETOWNER(0xffffffffffffffff, 0x400454cc, r2)

15:18:32 executing program 4:
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000013c0)='memory.current\x00', 0x275a, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x275a, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0)
write$cgroup_int(r1, &(0x7f0000000200), 0xfdef)
ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x20000080})
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000001380)=0x8)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xf2b)
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
bind(r3, &(0x7f0000000240), 0x80)

15:18:32 executing program 1:
r0 = socket(0x0, 0x2, 0x2)
syz_genetlink_get_family_id$SEG6(&(0x7f0000000780), r0)
r1 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r1, &(0x7f0000000000)={0xa, 0x14e24}, 0x1c)
recvmmsg(r1, &(0x7f0000000200), 0x38c, 0x0, 0x0)
connect$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c)
sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0x0)
ppoll(&(0x7f0000000080)=[{r1, 0x80}], 0x1, 0x0, &(0x7f0000000140), 0x8)
sendmsg$TEAM_CMD_PORT_LIST_GET(r1, &(0x7f000000ab80)={0x0, 0xfffffffffffffd57, 0x0, 0x1, 0x0, 0x0, 0x10000}, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000001c0)={{{@in=@multicast1, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in=@initdev}, 0x0, @in6=@local}}, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000240)={{{@in=@multicast2, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc0, 0x40, 0x0, 0x0, r2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {0x5, 0x0, 0x0, 0x200}, 0x3, 0x6e6bb3, 0x0, 0x0, 0x2}, {{}, 0x0, @in=@remote, 0x0, 0x0, 0x3, 0x0, 0x0, 0x9}}, 0xe8)
ioctl$TUNSETOWNER(0xffffffffffffffff, 0x400454cc, r2)

15:18:32 executing program 0:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$team(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000000c0)={'team0\x00', <r3=>0x0})
sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x58, r2, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8}}}]}}]}, 0x58}}, 0x0)

15:18:32 executing program 5:
r0 = socket(0x0, 0x2, 0x2)
syz_genetlink_get_family_id$SEG6(&(0x7f0000000780), r0)
r1 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r1, &(0x7f0000000000)={0xa, 0x14e24}, 0x1c)
recvmmsg(r1, &(0x7f0000000200), 0x38c, 0x0, 0x0)
connect$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c)
sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0x0)
ppoll(&(0x7f0000000080)=[{r1, 0x80}], 0x1, 0x0, &(0x7f0000000140), 0x8)
sendmsg$TEAM_CMD_PORT_LIST_GET(r1, &(0x7f000000ab80)={0x0, 0xfffffffffffffd57, 0x0, 0x1, 0x0, 0x0, 0x10000}, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000001c0)={{{@in=@multicast1, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in=@initdev}, 0x0, @in6=@local}}, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000240)={{{@in=@multicast2, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc0, 0x40, 0x0, 0x0, r2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {0x5, 0x0, 0x0, 0x200}, 0x3, 0x6e6bb3, 0x0, 0x0, 0x2}, {{}, 0x0, @in=@remote, 0x0, 0x0, 0x3, 0x0, 0x0, 0x9}}, 0xe8)
ioctl$TUNSETOWNER(0xffffffffffffffff, 0x400454cc, r2)

15:18:33 executing program 0:
socket$key(0xf, 0x3, 0x2)
r0 = socket$inet_icmp(0x2, 0x2, 0x1)
setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000040)=@fragment={0x87, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64}, 0x8)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f0000000480)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
setsockopt$inet_mreqsrc(r0, 0x0, 0x25, &(0x7f00000001c0)={@broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, @local}, 0xc)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10)
r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001540)={&(0x7f0000000300)=@sco={0x1f, @none}, 0x80, &(0x7f0000001500)=[{&(0x7f0000000380)="0146cddfa3717fd8569197ff1dab44c359418d04f9d30adec3a6bf2cd7d44b4bc53c1207c85cda389ffd4010fa5e6c37c63091621b20df9849536d46228edf7b206c", 0x42}, {&(0x7f0000000400)="6d8d8de4073c6f378b2d448fa01ca0fd", 0x10}, {&(0x7f0000000440)="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", 0x1000}, {&(0x7f0000001440)="8d0c5772bbc55ebe568f41e312f178ddd1e0830df8f5422c4044d20f4fc6e87adf02649e752ca130f84b742641f6dda7e84d52e7aa9446b5a2232814c18fc59e9769a32cbc624d644902bc425a4a2a02fcb77e7b78c6cc1252a4948edaca4d71f77e4f0488c5427136694eee4a935114beca590a20bed6d56c75bb440a7c57673cfe167399e901918cc297031beca3dc686ef65723328e638f87d9c3e8e968", 0x9f}], 0x4}, 0x20000004)
r3 = socket(0x10, 0x3, 0x0)
write(r3, &(0x7f0000000000)="240000001e005f000cfffffffffffff8070000000000000000000000060005000d000000", 0x24)
connect$llc(r2, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10)
accept4(r2, &(0x7f0000000280)=@vsock={0x28, 0x0, 0x0, @local}, &(0x7f0000000140)=0x80, 0x80800)
socket(0x1000000010, 0x80002, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000280)={0x0, 0xfffffffffffffcfd, &(0x7f0000000180)={0x0}}, 0x0)

15:18:33 executing program 4:
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000013c0)='memory.current\x00', 0x275a, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x275a, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0)
write$cgroup_int(r1, &(0x7f0000000200), 0xfdef)
ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x20000080})
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000001380)=0x8)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xf2b)
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
bind(r3, &(0x7f0000000240), 0x80)

15:18:33 executing program 3:
r0 = socket(0x0, 0x2, 0x2)
syz_genetlink_get_family_id$SEG6(&(0x7f0000000780), r0)
r1 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r1, &(0x7f0000000000)={0xa, 0x14e24}, 0x1c)
recvmmsg(r1, &(0x7f0000000200), 0x38c, 0x0, 0x0)
connect$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c)
sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0x0)
ppoll(&(0x7f0000000080)=[{r1, 0x80}], 0x1, 0x0, &(0x7f0000000140), 0x8)
sendmsg$TEAM_CMD_PORT_LIST_GET(r1, &(0x7f000000ab80)={0x0, 0xfffffffffffffd57, 0x0, 0x1, 0x0, 0x0, 0x10000}, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000001c0)={{{@in=@multicast1, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in=@initdev}, 0x0, @in6=@local}}, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000240)={{{@in=@multicast2, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc0, 0x40, 0x0, 0x0, r2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {0x5, 0x0, 0x0, 0x200}, 0x3, 0x6e6bb3, 0x0, 0x0, 0x2}, {{}, 0x0, @in=@remote, 0x0, 0x0, 0x3, 0x0, 0x0, 0x9}}, 0xe8)
ioctl$TUNSETOWNER(0xffffffffffffffff, 0x400454cc, r2)

15:18:33 executing program 2:
unshare(0x64020000)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x8000002, 0xfffffffd, @empty}, 0x1c)
sendto$inet6(r0, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='bbr\x00', 0x4)
r1 = socket(0x10, 0x3, 0x0)
r2 = socket(0x11, 0x800000003, 0x0)
bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r2, &(0x7f0000005400)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14)
sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000ac0)=@newqdisc={0x50, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x24, 0x2, [@TCA_HTB_INIT={0x18}, @TCA_HTB_DIRECT_QLEN={0x8}]}}]}, 0x50}}, 0x0)
ioctl$sock_inet6_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0)
sendto$inet6(r0, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac95", 0xb5, 0xc, 0x0, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000004ff0)={0x3, &(0x7f00000000c0)=[{0x35, 0x0, 0x4000000000401}, {}, {0x6}]}, 0x10)
ioctl$BTRFS_IOC_SET_FEATURES(r4, 0x40309439, &(0x7f0000000140)={0x1, 0x3, 0x13})
socket$inet6(0xa, 0x2, 0x723a)
splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x406f408, 0x0)

15:18:33 executing program 4:
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000013c0)='memory.current\x00', 0x275a, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x275a, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0)
write$cgroup_int(r1, &(0x7f0000000200), 0xfdef)
ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x20000080})
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000001380)=0x8)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xf2b)
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
bind(r3, &(0x7f0000000240), 0x80)

15:18:33 executing program 1:
r0 = socket(0x0, 0x2, 0x2)
syz_genetlink_get_family_id$SEG6(&(0x7f0000000780), r0)
r1 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r1, &(0x7f0000000000)={0xa, 0x14e24}, 0x1c)
recvmmsg(r1, &(0x7f0000000200), 0x38c, 0x0, 0x0)
connect$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c)
sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0x0)
ppoll(&(0x7f0000000080)=[{r1, 0x80}], 0x1, 0x0, &(0x7f0000000140), 0x8)
sendmsg$TEAM_CMD_PORT_LIST_GET(r1, &(0x7f000000ab80)={0x0, 0xfffffffffffffd57, 0x0, 0x1, 0x0, 0x0, 0x10000}, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000001c0)={{{@in=@multicast1, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in=@initdev}, 0x0, @in6=@local}}, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000240)={{{@in=@multicast2, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc0, 0x40, 0x0, 0x0, r2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {0x5, 0x0, 0x0, 0x200}, 0x3, 0x6e6bb3, 0x0, 0x0, 0x2}, {{}, 0x0, @in=@remote, 0x0, 0x0, 0x3, 0x0, 0x0, 0x9}}, 0xe8)
ioctl$TUNSETOWNER(0xffffffffffffffff, 0x400454cc, r2)

15:18:33 executing program 5:
r0 = socket(0x0, 0x2, 0x2)
syz_genetlink_get_family_id$SEG6(&(0x7f0000000780), r0)
r1 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r1, &(0x7f0000000000)={0xa, 0x14e24}, 0x1c)
recvmmsg(r1, &(0x7f0000000200), 0x38c, 0x0, 0x0)
connect$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c)
sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0x0)
ppoll(&(0x7f0000000080)=[{r1, 0x80}], 0x1, 0x0, &(0x7f0000000140), 0x8)
sendmsg$TEAM_CMD_PORT_LIST_GET(r1, &(0x7f000000ab80)={0x0, 0xfffffffffffffd57, 0x0, 0x1, 0x0, 0x0, 0x10000}, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000001c0)={{{@in=@multicast1, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in=@initdev}, 0x0, @in6=@local}}, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000240)={{{@in=@multicast2, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc0, 0x40, 0x0, 0x0, r2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {0x5, 0x0, 0x0, 0x200}, 0x3, 0x6e6bb3, 0x0, 0x0, 0x2}, {{}, 0x0, @in=@remote, 0x0, 0x0, 0x3, 0x0, 0x0, 0x9}}, 0xe8)
ioctl$TUNSETOWNER(0xffffffffffffffff, 0x400454cc, r2)

15:18:34 executing program 2:
unshare(0x64020000)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x8000002, 0xfffffffd, @empty}, 0x1c)
sendto$inet6(r0, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='bbr\x00', 0x4)
r1 = socket(0x10, 0x3, 0x0)
r2 = socket(0x11, 0x800000003, 0x0)
bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r2, &(0x7f0000005400)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14)
sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000ac0)=@newqdisc={0x50, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x24, 0x2, [@TCA_HTB_INIT={0x18}, @TCA_HTB_DIRECT_QLEN={0x8}]}}]}, 0x50}}, 0x0)
ioctl$sock_inet6_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0)
sendto$inet6(r0, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac95", 0xb5, 0xc, 0x0, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000004ff0)={0x3, &(0x7f00000000c0)=[{0x35, 0x0, 0x4000000000401}, {}, {0x6}]}, 0x10)
ioctl$BTRFS_IOC_SET_FEATURES(r4, 0x40309439, &(0x7f0000000140)={0x1, 0x3, 0x13})
socket$inet6(0xa, 0x2, 0x723a)
splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x406f408, 0x0)

15:18:34 executing program 0:
unshare(0x64020000)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x8000002, 0xfffffffd, @empty}, 0x1c)
sendto$inet6(r0, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='bbr\x00', 0x4)
r1 = socket(0x10, 0x3, 0x0)
r2 = socket(0x11, 0x800000003, 0x0)
bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r2, &(0x7f0000005400)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14)
sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000ac0)=@newqdisc={0x50, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x24, 0x2, [@TCA_HTB_INIT={0x18}, @TCA_HTB_DIRECT_QLEN={0x8}]}}]}, 0x50}}, 0x0)
ioctl$sock_inet6_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0)
sendto$inet6(r0, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac95", 0xb5, 0xc, 0x0, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000004ff0)={0x3, &(0x7f00000000c0)=[{0x35, 0x0, 0x4000000000401}, {}, {0x6}]}, 0x10)
ioctl$BTRFS_IOC_SET_FEATURES(r4, 0x40309439, &(0x7f0000000140)={0x1, 0x3, 0x13})
socket$inet6(0xa, 0x2, 0x723a)
splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x406f408, 0x0)

15:18:34 executing program 4:
unshare(0x64020000)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x8000002, 0xfffffffd, @empty}, 0x1c)
sendto$inet6(r0, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='bbr\x00', 0x4)
r1 = socket(0x10, 0x3, 0x0)
r2 = socket(0x11, 0x800000003, 0x0)
bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r2, &(0x7f0000005400)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14)
sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000ac0)=@newqdisc={0x50, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x24, 0x2, [@TCA_HTB_INIT={0x18}, @TCA_HTB_DIRECT_QLEN={0x8}]}}]}, 0x50}}, 0x0)
ioctl$sock_inet6_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0)
sendto$inet6(r0, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac95", 0xb5, 0xc, 0x0, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000004ff0)={0x3, &(0x7f00000000c0)=[{0x35, 0x0, 0x4000000000401}, {}, {0x6}]}, 0x10)
ioctl$BTRFS_IOC_SET_FEATURES(r4, 0x40309439, &(0x7f0000000140)={0x1, 0x3, 0x13})
socket$inet6(0xa, 0x2, 0x723a)
splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x406f408, 0x0)

15:18:34 executing program 3:
r0 = socket(0x0, 0x2, 0x2)
syz_genetlink_get_family_id$SEG6(&(0x7f0000000780), r0)
r1 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r1, &(0x7f0000000000)={0xa, 0x14e24}, 0x1c)
recvmmsg(r1, &(0x7f0000000200), 0x38c, 0x0, 0x0)
connect$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c)
sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0x0)
ppoll(&(0x7f0000000080)=[{r1, 0x80}], 0x1, 0x0, &(0x7f0000000140), 0x8)
sendmsg$TEAM_CMD_PORT_LIST_GET(r1, &(0x7f000000ab80)={0x0, 0xfffffffffffffd57, 0x0, 0x1, 0x0, 0x0, 0x10000}, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000001c0)={{{@in=@multicast1, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in=@initdev}, 0x0, @in6=@local}}, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000240)={{{@in=@multicast2, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc0, 0x40, 0x0, 0x0, r2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {0x5, 0x0, 0x0, 0x200}, 0x3, 0x6e6bb3, 0x0, 0x0, 0x2}, {{}, 0x0, @in=@remote, 0x0, 0x0, 0x3, 0x0, 0x0, 0x9}}, 0xe8)
ioctl$TUNSETOWNER(0xffffffffffffffff, 0x400454cc, r2)

15:18:35 executing program 1:
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040000002b24ec10064b6fb14bccedfb718aef932f3889d1fdda5b9134015a860f5878c37ffe36e1165d14d435be5b317c6c8189767d2f97879f07a715bb7c169f46933d9338f4ab0483696f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0)
r0 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$kcm(r0, &(0x7f0000000040)={&(0x7f0000002ac0)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[], 0x10b8}, 0x0)
r1 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f0000002ac0)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e24, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[], 0x10b8}, 0x0)

15:18:35 executing program 5:
r0 = socket$inet6(0xa, 0x5, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x21, &(0x7f0000000180)=0xffffffc1, 0x4)
shutdown(r0, 0x0)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x380003, @private0}, 0x1c)

15:18:35 executing program 0:
unshare(0x64020000)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x8000002, 0xfffffffd, @empty}, 0x1c)
sendto$inet6(r0, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='bbr\x00', 0x4)
r1 = socket(0x10, 0x3, 0x0)
r2 = socket(0x11, 0x800000003, 0x0)
bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r2, &(0x7f0000005400)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14)
sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000ac0)=@newqdisc={0x50, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x24, 0x2, [@TCA_HTB_INIT={0x18}, @TCA_HTB_DIRECT_QLEN={0x8}]}}]}, 0x50}}, 0x0)
ioctl$sock_inet6_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0)
sendto$inet6(r0, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac95", 0xb5, 0xc, 0x0, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000004ff0)={0x3, &(0x7f00000000c0)=[{0x35, 0x0, 0x4000000000401}, {}, {0x6}]}, 0x10)
ioctl$BTRFS_IOC_SET_FEATURES(r4, 0x40309439, &(0x7f0000000140)={0x1, 0x3, 0x13})
socket$inet6(0xa, 0x2, 0x723a)
splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x406f408, 0x0)

15:18:35 executing program 1:
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040000002b24ec10064b6fb14bccedfb718aef932f3889d1fdda5b9134015a860f5878c37ffe36e1165d14d435be5b317c6c8189767d2f97879f07a715bb7c169f46933d9338f4ab0483696f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0)
r0 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$kcm(r0, &(0x7f0000000040)={&(0x7f0000002ac0)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[], 0x10b8}, 0x0)
r1 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f0000002ac0)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e24, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[], 0x10b8}, 0x0)

15:18:35 executing program 2:
unshare(0x64020000)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x8000002, 0xfffffffd, @empty}, 0x1c)
sendto$inet6(r0, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='bbr\x00', 0x4)
r1 = socket(0x10, 0x3, 0x0)
r2 = socket(0x11, 0x800000003, 0x0)
bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r2, &(0x7f0000005400)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14)
sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000ac0)=@newqdisc={0x50, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x24, 0x2, [@TCA_HTB_INIT={0x18}, @TCA_HTB_DIRECT_QLEN={0x8}]}}]}, 0x50}}, 0x0)
ioctl$sock_inet6_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0)
sendto$inet6(r0, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac95", 0xb5, 0xc, 0x0, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000004ff0)={0x3, &(0x7f00000000c0)=[{0x35, 0x0, 0x4000000000401}, {}, {0x6}]}, 0x10)
ioctl$BTRFS_IOC_SET_FEATURES(r4, 0x40309439, &(0x7f0000000140)={0x1, 0x3, 0x13})
socket$inet6(0xa, 0x2, 0x723a)
splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x406f408, 0x0)

15:18:35 executing program 4:
unshare(0x64020000)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x8000002, 0xfffffffd, @empty}, 0x1c)
sendto$inet6(r0, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='bbr\x00', 0x4)
r1 = socket(0x10, 0x3, 0x0)
r2 = socket(0x11, 0x800000003, 0x0)
bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r2, &(0x7f0000005400)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14)
sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000ac0)=@newqdisc={0x50, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x24, 0x2, [@TCA_HTB_INIT={0x18}, @TCA_HTB_DIRECT_QLEN={0x8}]}}]}, 0x50}}, 0x0)
ioctl$sock_inet6_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0)
sendto$inet6(r0, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac95", 0xb5, 0xc, 0x0, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000004ff0)={0x3, &(0x7f00000000c0)=[{0x35, 0x0, 0x4000000000401}, {}, {0x6}]}, 0x10)
ioctl$BTRFS_IOC_SET_FEATURES(r4, 0x40309439, &(0x7f0000000140)={0x1, 0x3, 0x13})
socket$inet6(0xa, 0x2, 0x723a)
splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x406f408, 0x0)

15:18:35 executing program 5:
r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
setsockopt$kcm_KCM_RECV_DISABLE(r0, 0x106, 0x1, 0x0, 0x7)

15:18:35 executing program 1:
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040000002b24ec10064b6fb14bccedfb718aef932f3889d1fdda5b9134015a860f5878c37ffe36e1165d14d435be5b317c6c8189767d2f97879f07a715bb7c169f46933d9338f4ab0483696f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0)
r0 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$kcm(r0, &(0x7f0000000040)={&(0x7f0000002ac0)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[], 0x10b8}, 0x0)
r1 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f0000002ac0)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e24, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[], 0x10b8}, 0x0)

15:18:35 executing program 5:
syz_init_net_socket$llc(0x1a, 0x1, 0x0)
pipe(0x0)
syz_genetlink_get_family_id$gtp(0x0, 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_WOWLAN(0xffffffffffffffff, 0x0, 0x0)

15:18:35 executing program 3:
syz_emit_ethernet(0x46, &(0x7f0000001900)={@local, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "025186", 0x10, 0x21, 0xff, @dev, @mcast2, {[], @ndisc_ra}}}}}, 0x0)

15:18:35 executing program 1:
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040000002b24ec10064b6fb14bccedfb718aef932f3889d1fdda5b9134015a860f5878c37ffe36e1165d14d435be5b317c6c8189767d2f97879f07a715bb7c169f46933d9338f4ab0483696f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0)
r0 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$kcm(r0, &(0x7f0000000040)={&(0x7f0000002ac0)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[], 0x10b8}, 0x0)
r1 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f0000002ac0)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e24, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[], 0x10b8}, 0x0)

15:18:35 executing program 5:
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
setsockopt$nfc_llcp_NFC_LLCP_RW(r0, 0x118, 0x0, &(0x7f0000001080), 0x4)
bind$nfc_llcp(r0, &(0x7f0000000000)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "55c66724d438d4952c2bead8f2b4f36a26dcae4086cbdb86cf33a99415c4874e14b5faa84fe2ec2d68f3ca3c16caf152cbf94d0f0d13e02db2c31749282bdb", 0x39}, 0x60)
getsockopt$nfc_llcp(r0, 0x118, 0x0, 0x0, 0x20000000)

[  208.521301][T11543] dccp_invalid_packet: P.Data Offset(0) too small
[  208.537999][T11543] dccp_invalid_packet: P.Data Offset(0) too small
15:18:35 executing program 3:
syz_emit_ethernet(0x7a, &(0x7f00000001c0)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "fbde20", 0x8, 0x2f, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, {[], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x88be}, {0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x802}, {}, {0x8, 0x88c0}}}}}}}, 0x0)

15:18:36 executing program 5:
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
setsockopt$nfc_llcp_NFC_LLCP_RW(r0, 0x118, 0x0, &(0x7f0000001080), 0x4)
bind$nfc_llcp(r0, &(0x7f0000000000)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "55c66724d438d4952c2bead8f2b4f36a26dcae4086cbdb86cf33a99415c4874e14b5faa84fe2ec2d68f3ca3c16caf152cbf94d0f0d13e02db2c31749282bdb", 0x39}, 0x60)
getsockopt$nfc_llcp(r0, 0x118, 0x0, 0x0, 0x20000000)

[  255.430300][ T1358] ieee802154 phy0 wpan0: encryption failed: -22
[  255.436672][ T1358] ieee802154 phy1 wpan1: encryption failed: -22
[  262.623773][T10798] Bluetooth: hci0: command 0x0406 tx timeout
[  262.629890][T10798] Bluetooth: hci3: command 0x0406 tx timeout
[  262.643647][T10798] Bluetooth: hci2: command 0x0406 tx timeout
[  262.657970][T10798] Bluetooth: hci4: command 0x0406 tx timeout
[  262.664358][T10798] Bluetooth: hci5: command 0x0406 tx timeout
[  298.460072][ T9638] Bluetooth: hci1: command 0x0406 tx timeout
[  316.860640][ T1358] ieee802154 phy0 wpan0: encryption failed: -22
[  316.867013][ T1358] ieee802154 phy1 wpan1: encryption failed: -22
[  355.255917][   T27] INFO: task kworker/u4:6:8856 blocked for more than 143 seconds.
[  355.264249][   T27]       Not tainted 5.15.0-rc5-syzkaller #0
[  355.272698][   T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  355.283879][   T27] task:kworker/u4:6    state:D stack:26136 pid: 8856 ppid:     2 flags:0x00004000
[  355.302742][   T27] Workqueue: netns cleanup_net
[  355.310877][   T27] Call Trace:
[  355.314187][   T27]  __schedule+0xb44/0x5960
[  355.319914][   T27]  ? find_held_lock+0x2d/0x110
[  355.325108][   T27]  ? __mutex_lock+0x9c2/0x12f0
[  355.333707][   T27]  ? io_schedule_timeout+0x140/0x140
[  355.341200][   T27]  schedule+0xd3/0x270
[  355.345447][   T27]  schedule_preempt_disabled+0xf/0x20
[  355.353366][   T27]  __mutex_lock+0xa34/0x12f0
[  355.360348][   T27]  ? ip6gre_exit_batch_net+0x88/0x760
[  355.368413][   T27]  ? mutex_lock_io_nested+0x1150/0x1150
[  355.374000][   T27]  ? rcu_read_lock_sched_held+0x3a/0x70
[  355.382700][   T27]  ? pde_put+0x15d/0x1e0
[  355.389603][   T27]  ? pde_put+0x15d/0x1e0
[  355.393972][   T27]  ip6gre_exit_batch_net+0x88/0x760
[  355.403111][   T27]  ? remove_proc_entry+0x460/0x460
[  355.410422][   T27]  ? ip6gre_tunnel_find+0x640/0x640
[  355.418862][   T27]  ? rxrpc_destroy_all_locals+0x40/0x170
[  355.424614][   T27]  ? rxrpc_init_net+0xdd0/0xdd0
[  355.431784][   T27]  ? ip6gre_tunnel_find+0x640/0x640
[  355.439496][   T27]  ops_exit_list+0x10d/0x160
[  355.444132][   T27]  cleanup_net+0x4ea/0xb00
[  355.450787][   T27]  ? unregister_pernet_device+0x70/0x70
[  355.460237][   T27]  process_one_work+0x9bf/0x16b0
[  355.465282][   T27]  ? pwq_dec_nr_in_flight+0x2a0/0x2a0
[  355.473184][   T27]  ? rwlock_bug.part.0+0x90/0x90
[  355.479527][   T27]  ? _raw_spin_lock_irq+0x41/0x50
[  355.484589][   T27]  worker_thread+0x658/0x11f0
[  355.489789][   T27]  ? process_one_work+0x16b0/0x16b0
[  355.495034][   T27]  kthread+0x3e5/0x4d0
[  355.499704][   T27]  ? set_kthread_struct+0x130/0x130
[  355.505197][   T27]  ret_from_fork+0x1f/0x30
[  355.510562][   T27] INFO: task syz-executor.0:11514 blocked for more than 143 seconds.
[  355.518748][   T27]       Not tainted 5.15.0-rc5-syzkaller #0
[  355.524997][   T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  355.534164][   T27] task:syz-executor.0  state:D stack:27160 pid:11514 ppid:  6559 flags:0x00004004
[  355.543778][   T27] Call Trace:
[  355.548137][   T27]  __schedule+0xb44/0x5960
[  355.553019][   T27]  ? find_held_lock+0x2d/0x110
[  355.558936][   T27]  ? __mutex_lock+0x9c2/0x12f0
[  355.563813][   T27]  ? io_schedule_timeout+0x140/0x140
[  355.569801][   T27]  schedule+0xd3/0x270
[  355.574184][   T27]  schedule_preempt_disabled+0xf/0x20
[  355.581817][   T27]  __mutex_lock+0xa34/0x12f0
[  355.587069][   T27]  ? ip_tunnel_init_net+0x2d5/0x9d0
[  355.592553][   T27]  ? mutex_lock_io_nested+0x1150/0x1150
[  355.599039][   T27]  ? ip_tunnel_init_net+0x14e/0x9d0
[  355.604306][   T27]  ip_tunnel_init_net+0x2d5/0x9d0
[  355.609811][   T27]  ? ip_tunnel_changelink+0x540/0x540
[  355.615218][   T27]  ? erspan_init_net+0x30/0x30
[  355.620543][   T27]  ops_init+0xaf/0x470
[  355.624658][   T27]  setup_net+0x40f/0xa30
[  355.629349][   T27]  ? down_read_killable+0x1a9/0x480
[  355.634778][   T27]  ? ops_init+0x470/0x470
[  355.639674][   T27]  ? rcu_read_lock_sched_held+0x3a/0x70
[  355.645341][   T27]  copy_net_ns+0x319/0x760
[  355.650191][   T27]  create_new_namespaces+0x3f6/0xb20
[  355.655631][   T27]  unshare_nsproxy_namespaces+0xc1/0x1f0
[  355.661544][   T27]  ksys_unshare+0x445/0x920
[  355.667265][   T27]  ? unshare_fd+0x1c0/0x1c0
[  355.671830][   T27]  ? syscall_enter_from_user_mode+0x21/0x70
[  355.677866][   T27]  __x64_sys_unshare+0x2d/0x40
[  355.682958][   T27]  do_syscall_64+0x35/0xb0
[  355.687591][   T27]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  355.693570][   T27] RIP: 0033:0x7f1c9a436a39
[  355.698119][   T27] RSP: 002b:00007f1c979ac188 EFLAGS: 00000246 ORIG_RAX: 0000000000000110
[  355.707230][   T27] RAX: ffffffffffffffda RBX: 00007f1c9a539f60 RCX: 00007f1c9a436a39
[  355.715214][   T27] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000064020000
[  355.723242][   T27] RBP: 00007f1c9a490c5f R08: 0000000000000000 R09: 0000000000000000
[  355.731425][   T27] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  355.742787][   T27] R13: 00007ffe0eb5342f R14: 00007f1c979ac300 R15: 0000000000022000
[  355.753766][   T27] INFO: task syz-executor.2:11515 blocked for more than 143 seconds.
[  355.765127][   T27]       Not tainted 5.15.0-rc5-syzkaller #0
[  355.772645][   T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  355.782532][   T27] task:syz-executor.2  state:D stack:27816 pid:11515 ppid:  6563 flags:0x00004004
[  355.792812][   T27] Call Trace:
[  355.798417][   T27]  __schedule+0xb44/0x5960
[  355.803324][   T27]  ? find_held_lock+0x2d/0x110
[  355.808806][   T27]  ? __mutex_lock+0x9c2/0x12f0
[  355.813664][   T27]  ? io_schedule_timeout+0x140/0x140
[  355.819849][   T27]  schedule+0xd3/0x270
[  355.823947][   T27]  schedule_preempt_disabled+0xf/0x20
[  355.830233][   T27]  __mutex_lock+0xa34/0x12f0
[  355.835109][   T27]  ? ip_tunnel_init_net+0x2d5/0x9d0
[  355.841068][   T27]  ? mutex_lock_io_nested+0x1150/0x1150
[  355.847542][   T27]  ? ip_tunnel_init_net+0x14e/0x9d0
[  355.852871][   T27]  ip_tunnel_init_net+0x2d5/0x9d0
[  355.859181][   T27]  ? ip_tunnel_changelink+0x540/0x540
[  355.864585][   T27]  ? ipip_exit_batch_net+0x20/0x20
[  355.870136][   T27]  ops_init+0xaf/0x470
[  355.874231][   T27]  setup_net+0x40f/0xa30
[  355.879338][   T27]  ? down_read_killable+0x1a9/0x480
[  355.884574][   T27]  ? ops_init+0x470/0x470
[  355.890081][   T27]  ? rcu_read_lock_sched_held+0x3a/0x70
[  355.896219][   T27]  copy_net_ns+0x319/0x760
[  355.900672][   T27]  create_new_namespaces+0x3f6/0xb20
[  355.909313][   T27]  unshare_nsproxy_namespaces+0xc1/0x1f0
[  355.914976][   T27]  ksys_unshare+0x445/0x920
[  355.919974][   T27]  ? unshare_fd+0x1c0/0x1c0
[  355.924697][   T27]  ? syscall_enter_from_user_mode+0x21/0x70
[  355.930958][   T27]  __x64_sys_unshare+0x2d/0x40
[  355.935829][   T27]  do_syscall_64+0x35/0xb0
[  355.940274][   T27]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  355.946386][   T27] RIP: 0033:0x7f2e0fc7ea39
[  355.950822][   T27] RSP: 002b:00007f2e0d1f4188 EFLAGS: 00000246 ORIG_RAX: 0000000000000110
[  355.959325][   T27] RAX: ffffffffffffffda RBX: 00007f2e0fd81f60 RCX: 00007f2e0fc7ea39
[  355.967474][   T27] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000064020000
[  355.975774][   T27] RBP: 00007f2e0fcd8c5f R08: 0000000000000000 R09: 0000000000000000
[  355.983845][   T27] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  355.992709][   T27] R13: 00007ffdbdc2267f R14: 00007f2e0d1f4300 R15: 0000000000022000
[  356.000836][   T27] INFO: task syz-executor.4:11516 blocked for more than 144 seconds.
[  356.009197][   T27]       Not tainted 5.15.0-rc5-syzkaller #0
[  356.015097][   T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  356.027451][   T27] task:syz-executor.4  state:D stack:28416 pid:11516 ppid:  6577 flags:0x00004004
[  356.036953][   T27] Call Trace:
[  356.040246][   T27]  __schedule+0xb44/0x5960
[  356.044685][   T27]  ? find_held_lock+0x2d/0x110
[  356.049614][   T27]  ? __mutex_lock+0x9c2/0x12f0
[  356.054393][   T27]  ? io_schedule_timeout+0x140/0x140
[  356.060110][   T27]  schedule+0xd3/0x270
[  356.064217][   T27]  schedule_preempt_disabled+0xf/0x20
[  356.069812][   T27]  __mutex_lock+0xa34/0x12f0
[  356.074423][   T27]  ? smc_pnet_net_init+0x1f9/0x410
[  356.079708][   T27]  ? mutex_lock_io_nested+0x1150/0x1150
[  356.085350][   T27]  ? smc_pnet_net_init+0x111/0x410
[  356.091378][   T27]  ? lockdep_init_map_type+0x2c3/0x7b0
[  356.097009][   T27]  smc_pnet_net_init+0x1f9/0x410
[  356.101969][   T27]  ? smc_net_exit+0x20/0x20
[  356.106657][   T27]  ops_init+0xaf/0x470
[  356.110746][   T27]  setup_net+0x40f/0xa30
[  356.114979][   T27]  ? down_read_killable+0x1a9/0x480
[  356.120254][   T27]  ? ops_init+0x470/0x470
[  356.124636][   T27]  ? rcu_read_lock_sched_held+0x3a/0x70
[  356.131450][   T27]  copy_net_ns+0x319/0x760
[  356.137943][   T27]  create_new_namespaces+0x3f6/0xb20
[  356.143264][   T27]  unshare_nsproxy_namespaces+0xc1/0x1f0
[  356.149386][   T27]  ksys_unshare+0x445/0x920
[  356.153906][   T27]  ? unshare_fd+0x1c0/0x1c0
[  356.159494][   T27]  ? syscall_enter_from_user_mode+0x21/0x70
[  356.165416][   T27]  __x64_sys_unshare+0x2d/0x40
[  356.171662][   T27]  do_syscall_64+0x35/0xb0
[  356.177000][   T27]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  356.182907][   T27] RIP: 0033:0x7fd424634a39
[  356.189028][   T27] RSP: 002b:00007fd421baa188 EFLAGS: 00000246 ORIG_RAX: 0000000000000110
[  356.198894][   T27] RAX: ffffffffffffffda RBX: 00007fd424737f60 RCX: 00007fd424634a39
[  356.207938][   T27] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000064020000
[  356.217063][   T27] RBP: 00007fd42468ec5f R08: 0000000000000000 R09: 0000000000000000
[  356.225137][   T27] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  356.234503][   T27] R13: 00007ffdca68dc0f R14: 00007fd421baa300 R15: 0000000000022000
[  356.243263][   T27] INFO: task syz-executor.4:11530 blocked for more than 144 seconds.
[  356.253307][   T27]       Not tainted 5.15.0-rc5-syzkaller #0
[  356.261090][   T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  356.270616][   T27] task:syz-executor.4  state:D stack:28272 pid:11530 ppid:  6577 flags:0x00000004
[  356.280440][   T27] Call Trace:
[  356.283724][   T27]  __schedule+0xb44/0x5960
[  356.289384][   T27]  ? find_held_lock+0x2d/0x110
[  356.294172][   T27]  ? __mutex_lock+0x9c0/0x12f0
[  356.299800][   T27]  ? io_schedule_timeout+0x140/0x140
[  356.305124][   T27]  schedule+0xd3/0x270
[  356.309427][   T27]  schedule_preempt_disabled+0xf/0x20
[  356.314813][   T27]  __mutex_lock+0xa34/0x12f0
[  356.319543][   T27]  ? rtnetlink_rcv_msg+0x3be/0xb80
[  356.324768][   T27]  ? mutex_lock_io_nested+0x1150/0x1150
[  356.330474][   T27]  ? rtnetlink_rcv_msg+0x388/0xb80
[  356.335776][   T27]  rtnetlink_rcv_msg+0x3be/0xb80
[  356.340829][   T27]  ? rtnl_newlink+0xa0/0xa0
[  356.345347][   T27]  ? netdev_core_pick_tx+0x2e0/0x2e0
[  356.351999][   T27]  netlink_rcv_skb+0x153/0x420
[  356.357563][   T27]  ? rtnl_newlink+0xa0/0xa0
[  356.362095][   T27]  ? netlink_ack+0xa60/0xa60
[  356.366966][   T27]  ? netlink_deliver_tap+0x1a2/0xc30
[  356.372283][   T27]  ? netlink_deliver_tap+0x1b1/0xc30
[  356.378227][   T27]  netlink_unicast+0x533/0x7d0
[  356.383034][   T27]  ? netlink_attachskb+0x880/0x880
[  356.388426][   T27]  ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70
[  356.394749][   T27]  ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70
[  356.401799][   T27]  ? __phys_addr_symbol+0x2c/0x70
[  356.407026][   T27]  ? __sanitizer_cov_trace_cmp8+0x1d/0x70
[  356.412774][   T27]  ? __check_object_size+0x16e/0x3f0
[  356.418354][   T27]  netlink_sendmsg+0x86d/0xda0
[  356.423150][   T27]  ? netlink_unicast+0x7d0/0x7d0
[  356.428270][   T27]  ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70
[  356.434617][   T27]  ? netlink_unicast+0x7d0/0x7d0
[  356.439698][   T27]  sock_sendmsg+0xcf/0x120
[  356.444210][   T27]  ____sys_sendmsg+0x6e8/0x810
[  356.449167][   T27]  ? kernel_sendmsg+0x50/0x50
[  356.453951][   T27]  ? do_recvmmsg+0x6d0/0x6d0
[  356.460166][   T27]  ? lock_chain_count+0x20/0x20
[  356.465126][   T27]  ? lockdep_hardirqs_on_prepare+0x400/0x400
[  356.473620][   T27]  ___sys_sendmsg+0xf3/0x170
[  356.478411][   T27]  ? sendmsg_copy_msghdr+0x160/0x160
[  356.483723][   T27]  ? __fget_files+0x21b/0x3e0
[  356.488587][   T27]  ? lock_downgrade+0x6e0/0x6e0
[  356.493460][   T27]  ? __fget_files+0x23d/0x3e0
[  356.498288][   T27]  ? __fget_light+0xea/0x280
[  356.503327][   T27]  ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70
[  356.509852][   T27]  __sys_sendmsg+0xe5/0x1b0
[  356.514373][   T27]  ? __sys_sendmsg_sock+0x30/0x30
[  356.519561][   T27]  ? syscall_enter_from_user_mode+0x21/0x70
[  356.525724][   T27]  do_syscall_64+0x35/0xb0
[  356.530218][   T27]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  356.537287][   T27] RIP: 0033:0x7fd424634a39
[  356.541726][   T27] RSP: 002b:00007fd421b68188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  356.550919][   T27] RAX: ffffffffffffffda RBX: 00007fd4247380e0 RCX: 00007fd424634a39
[  356.559282][   T27] RDX: 0000000000000000 RSI: 0000000020000180 RDI: 0000000000000004
[  356.568095][   T27] RBP: 00007fd42468ec5f R08: 0000000000000000 R09: 0000000000000000
[  356.577793][   T27] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  356.586122][   T27] R13: 00007ffdca68dc0f R14: 00007fd421b68300 R15: 0000000000022000
[  356.594178][   T27] 
[  356.594178][   T27] Showing all locks held in the system:
[  356.602262][   T27] 1 lock held by khungtaskd/27:
[  356.608161][   T27]  #0: ffffffff8b981ee0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x53/0x260
[  356.618576][   T27] 3 locks held by kworker/1:2/1055:
[  356.623785][   T27]  #0: ffff888010c65d38 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_one_work+0x8a3/0x16b0
[  356.635793][   T27]  #1: ffffc900045e7db0 ((reg_check_chans).work){+.+.}-{0:0}, at: process_one_work+0x8d7/0x16b0
[  356.646373][   T27]  #2: ffffffff8d0e8ea8 (rtnl_mutex){+.+.}-{3:3}, at: reg_check_chans_work+0x83/0xe10
[  356.656284][   T27] 1 lock held by in:imklog/6279:
[  356.661260][   T27]  #0: ffff8880263c6d70 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0xe9/0x100
[  356.670914][   T27] 4 locks held by kworker/u4:6/8856:
[  356.677057][   T27]  #0: ffff88814017b138 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x8a3/0x16b0
[  356.688889][   T27]  #1: ffffc90002bdfdb0 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x8d7/0x16b0
[  356.699527][   T27]  #2: ffffffff8d0d5750 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x9b/0xb00
[  356.709662][   T27]  #3: ffffffff8d0e8ea8 (rtnl_mutex){+.+.}-{3:3}, at: ip6gre_exit_batch_net+0x88/0x760
[  356.719572][   T27] 3 locks held by kworker/1:9/10798:
[  356.724859][   T27]  #0: ffff888147bb6138 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work+0x8a3/0x16b0
[  356.736017][   T27]  #1: ffffc9000486fdb0 ((addr_chk_work).work){+.+.}-{0:0}, at: process_one_work+0x8d7/0x16b0
[  356.746414][   T27]  #2: ffffffff8d0e8ea8 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_verify_work+0xa/0x20
[  356.757661][   T27] 2 locks held by syz-executor.0/11514:
[  356.763206][   T27]  #0: ffffffff8d0d5750 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x2f5/0x760
[  356.772727][   T27]  #1: ffffffff8d0e8ea8 (rtnl_mutex){+.+.}-{3:3}, at: ip_tunnel_init_net+0x2d5/0x9d0
[  356.782608][   T27] 2 locks held by syz-executor.2/11515:
[  356.789555][   T27]  #0: ffffffff8d0d5750 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x2f5/0x760
[  356.805033][   T27]  #1: ffffffff8d0e8ea8 (rtnl_mutex){+.+.}-{3:3}, at: ip_tunnel_init_net+0x2d5/0x9d0
[  356.815611][   T27] 1 lock held by syz-executor.2/11528:
[  356.821196][   T27]  #0: ffffffff8d0e8ea8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x3be/0xb80
[  356.832211][   T27] 2 locks held by syz-executor.4/11516:
[  356.838327][   T27]  #0: ffffffff8d0d5750 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x2f5/0x760
[  356.848191][   T27]  #1: ffffffff8d0e8ea8 (rtnl_mutex){+.+.}-{3:3}, at: smc_pnet_net_init+0x1f9/0x410
[  356.859069][   T27] 1 lock held by syz-executor.4/11530:
[  356.864531][   T27]  #0: ffffffff8d0e8ea8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x3be/0xb80
[  356.875047][   T27] 
[  356.879516][   T27] =============================================
[  356.879516][   T27] 
[  356.889460][   T27] NMI backtrace for cpu 0
[  356.893807][   T27] CPU: 0 PID: 27 Comm: khungtaskd Not tainted 5.15.0-rc5-syzkaller #0
[  356.901946][   T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  356.911998][   T27] Call Trace:
[  356.915281][   T27]  dump_stack_lvl+0xcd/0x134
[  356.919977][   T27]  nmi_cpu_backtrace.cold+0x47/0x144
[  356.925257][   T27]  ? lapic_can_unplug_cpu+0x80/0x80
[  356.930491][   T27]  nmi_trigger_cpumask_backtrace+0x1ae/0x220
[  356.936523][   T27]  watchdog+0xc1d/0xf50
[  356.940784][   T27]  ? reset_hung_task_detector+0x30/0x30
[  356.946454][   T27]  kthread+0x3e5/0x4d0
[  356.950528][   T27]  ? set_kthread_struct+0x130/0x130
[  356.955807][   T27]  ret_from_fork+0x1f/0x30
[  356.961069][   T27] Sending NMI from CPU 0 to CPUs 1:
[  356.966565][    C1] NMI backtrace for cpu 1
[  356.966575][    C1] CPU: 1 PID: 2966 Comm: systemd-journal Not tainted 5.15.0-rc5-syzkaller #0
[  356.966596][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  356.966606][    C1] RIP: 0010:kasan_check_range+0x12b/0x180
[  356.966693][    C1] Code: 3a 00 74 ef 49 8d 04 2c 48 85 d2 75 0b 48 89 da 48 29 c2 e9 55 ff ff ff 49 39 d2 75 17 49 0f be 02 41 83 e1 07 49 39 c1 7d 0a <5b> b8 01 00 00 00 5d 41 5c c3 44 89 c2 e8 73 f0 ff ff 5b 83 f0 01
[  356.966711][    C1] RSP: 0018:ffffc90002b5f9f0 EFLAGS: 00000046
[  356.966726][    C1] RAX: fffffbfff1fa193d RBX: fffffbfff1fa193d RCX: ffffffff815be2b2
[  356.966740][    C1] RDX: fffffbfff1fa193d RSI: 0000000000000008 RDI: ffffffff8fd0c9e0
[  356.966753][    C1] RBP: fffffbfff1fa193c R08: 0000000000000000 R09: ffffffff8fd0c9e7
[  356.966765][    C1] R10: fffffbfff1fa193c R11: 000000000000003f R12: ffff88807ad48a20
[  356.966779][    C1] R13: ffff88807ad48000 R14: 0000000000000001 R15: ffffffffffffffff
[  356.966792][    C1] FS:  00007f77da64e8c0(0000) GS:ffff8880b9d00000(0000) knlGS:0000000000000000
[  356.966811][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  356.966825][    C1] CR2: 00007f77d7a9e018 CR3: 000000007b891000 CR4: 00000000003506e0
[  356.966837][    C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  356.966848][    C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  356.966860][    C1] Call Trace:
[  356.966866][    C1]  __lock_acquire+0xbc2/0x54a0
[  356.966893][    C1]  ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70
[  356.966917][    C1]  ? lockdep_hardirqs_on_prepare+0x400/0x400
[  356.966939][    C1]  ? fput+0x3b/0x50
[  356.966959][    C1]  ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70
[  356.966984][    C1]  lock_acquire+0x1ab/0x510
[  356.967003][    C1]  ? debug_check_no_obj_freed+0xc7/0x420
[  356.967053][    C1]  ? lock_release+0x720/0x720
[  356.967075][    C1]  ? _raw_spin_lock_irqsave+0x4e/0x50
[  356.967103][    C1]  _raw_spin_lock_irqsave+0x39/0x50
[  356.967125][    C1]  ? debug_check_no_obj_freed+0xc7/0x420
[  356.967144][    C1]  debug_check_no_obj_freed+0xc7/0x420
[  356.967168][    C1]  slab_free_freelist_hook+0xde/0x190
[  356.967209][    C1]  kmem_cache_free+0x8a/0x5b0
[  356.967226][    C1]  ? putname+0xfe/0x140
[  356.967269][    C1]  putname+0xfe/0x140
[  356.967290][    C1]  do_sys_openat2+0x153/0x4d0
[  356.967308][    C1]  ? __sanitizer_cov_trace_const_cmp1+0x22/0x80
[  356.967331][    C1]  ? build_open_flags+0x6f0/0x6f0
[  356.967351][    C1]  ? seccomp_notify_ioctl+0xdc0/0xdc0
[  356.967377][    C1]  __x64_sys_open+0x119/0x1c0
[  356.967395][    C1]  ? do_sys_open+0x140/0x140
[  356.967415][    C1]  ? __secure_computing+0x104/0x360
[  356.967440][    C1]  do_syscall_64+0x35/0xb0
[  356.967460][    C1]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  356.967480][    C1] RIP: 0033:0x7f77d9bdd840
[  356.967495][    C1] Code: 73 01 c3 48 8b 0d 68 77 20 00 f7 d8 64 89 01 48 83 c8 ff c3 66 0f 1f 44 00 00 83 3d 89 bb 20 00 00 75 10 b8 02 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 31 c3 48 83 ec 08 e8 1e f6 ff ff 48 89 04 24
[  356.967517][    C1] RSP: 002b:00007ffddf520908 EFLAGS: 00000246 ORIG_RAX: 0000000000000002
[  356.967535][    C1] RAX: ffffffffffffffda RBX: 00007ffddf520c10 RCX: 00007f77d9bdd840
[  356.967548][    C1] RDX: 00000000000001a0 RSI: 0000000000080042 RDI: 000055df32cf05a0
[  356.967561][    C1] RBP: 000000000000000d R08: 00000000000001c0 R09: 00000000ffffffff
[  356.967573][    C1] R10: 0000000000000069 R11: 0000000000000246 R12: 00000000ffffffff
[  356.967585][    C1] R13: 000055df32ce2040 R14: 00007ffddf520bd0 R15: 000055df32cefcc0
[  356.970091][   T27] Kernel panic - not syncing: hung_task: blocked tasks
[  357.314539][   T27] CPU: 0 PID: 27 Comm: khungtaskd Not tainted 5.15.0-rc5-syzkaller #0
[  357.322679][   T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  357.332721][   T27] Call Trace:
[  357.335994][   T27]  dump_stack_lvl+0xcd/0x134
[  357.340581][   T27]  panic+0x2b0/0x6dd
[  357.344496][   T27]  ? __warn_printk+0xf3/0xf3
[  357.349081][   T27]  ? lapic_can_unplug_cpu+0x80/0x80
[  357.354273][   T27]  ? preempt_schedule_thunk+0x16/0x18
[  357.359728][   T27]  ? nmi_trigger_cpumask_backtrace+0x191/0x220
[  357.365875][   T27]  ? watchdog.cold+0x130/0x158
[  357.371101][   T27]  watchdog.cold+0x141/0x158
[  357.375708][   T27]  ? reset_hung_task_detector+0x30/0x30
[  357.381273][   T27]  kthread+0x3e5/0x4d0
[  357.385342][   T27]  ? set_kthread_struct+0x130/0x130
[  357.390538][   T27]  ret_from_fork+0x1f/0x30
[  357.395576][   T27] Kernel Offset: disabled
[  357.399897][   T27] Rebooting in 86400 seconds..