0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r6, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x41, 0x3, 0x230, 0x0, 0x19, 0x0, 0x0, 0x0, 0x2e8, 0x1f0, 0x1f0, 0x2e8, 0x1f0, 0x3, 0x0, {[{{@ip={@private, @dev, 0x0, 0x0, 'wlan1\x00', 'wg1\x00'}, 0x0, 0xa8, 0xc8, 0x0, {0x0, 0xffffffffa0028000}, [@common=@unspec=@quota={{0x38}}]}, @unspec=@TRACE={0x20}}, {{@ip={@empty, @empty, 0x0, 0x0, 'veth0_vlan\x00', 'netpci0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x290) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000000)={@empty, @local, 0x0}, &(0x7f0000000040)=0xc) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000380)=ANY=[@ANYBLOB="72797a746e6c32000000000010bd084f", @ANYRES32=r7, @ANYBLOB="070000400000000200000005450500d4006700003f049078ac1414bb7f0000018913e2e0000001ac1e0001ffffffffac1414bb01940401008205058716831fa964010101ffffffffac1414bbe0000002ffffffff0a01010200000000443c6da1ac1414aa00000009ac14141c00000000ac1414aafffffffdac1414aa80000000ffffffff00007fffffffffff000007ffe000000100000001440c34000000000500000002830f1ce281af4e35b1745d312aa54b892788ac1414bbe000000100000000e0000001640101017f00000164010100ac1e0001e000000107032f000000"]}) r9 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r9, 0x4000000000000, 0x40, &(0x7f0000000900)=@raw={'raw\x00', 0x41, 0x3, 0x388, 0x0, 0x19, 0x0, 0x0, 0x0, 0x2f0, 0x1f0, 0x1f0, 0x2f0, 0x1f0, 0x3, 0x0, {[{{@ip={@private, @dev, 0x0, 0x0, 'wlan1\x00', 'wg1\x00'}, 0x0, 0x200, 0x220, 0x0, {0x0, 0xffffffffa0028000}, [@common=@set={{0x40}, {{0x4, [0x4, 0x2, 0xa, 0x6, 0x8, 0x2], 0x2, 0x2}}}, @common=@inet=@hashlimit2={{0x150}, {'veth1\x00', {0x0, 0x8, 0x40, 0x0, 0x0, 0x687c, 0x93}}}]}, @unspec=@TRACE={0x20}}, {{@ip={@empty, @empty, 0x0, 0x0, 'veth0_vlan\x00', 'netpci0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x0, 0x3]}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3e8) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000000)={@empty, @local, 0x0}, &(0x7f0000000040)=0xc) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r9, 0x89f1, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000380)={'syztnl2\x00', r10, 0x700, 0x40, 0x2, 0x5, {{0x35, 0x4, 0x1, 0x1, 0xd4, 0x0, 0x0, 0x3f, 0x4, 0x0, @remote, @loopback, {[@ssrr={0x89, 0x13, 0xe2, [@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @remote]}, @noop, @ra={0x94, 0x4, 0x1}, @generic={0x82, 0x5, "058716"}, @lsrr={0x83, 0x1f, 0xa9, [@rand_addr=0x64010101, @broadcast, @remote, @multicast2, @broadcast, @private=0xa010102, @empty]}, @timestamp_addr={0x44, 0x3c, 0x6d, 0x1, 0xa, [{@local, 0x9}, {@local}, {@local, 0xfffffffd}, {@local, 0x80000000}, {@broadcast, 0x7fff}, {@broadcast, 0x7ff}, {@multicast1, 0x1}]}, @timestamp={0x44, 0xc, 0x34, 0x0, 0x0, [0x5, 0x2]}, @generic={0x83, 0xf, "1ce281af4e35b1745d312aa54b"}, @ssrr={0x89, 0x27, 0x88, [@remote, @multicast1, @empty, @multicast1, @rand_addr=0x64010101, @loopback, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1]}, @generic={0x7, 0x3, '/'}]}}}}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f0000000180)={&(0x7f0000000840)=ANY=[@ANYBLOB="780000005400010026bd7000fbdbdf2507000000", @ANYRESOCT=r8, @ANYBLOB="ed8e01", @ANYRES32=r10, @ANYBLOB="000201006401010200000000000000000000000086dd000020000100", @ANYRES32, @ANYBLOB="01050300ac1e000100000000000000000000000086dd000020000100", @ANYRES32, @ANYBLOB="010100002001000000000000000000000000000096dd0000"], 0x78}, 0x1, 0x0, 0x0, 0x8840}, 0x4008040) sendmsg$nl_route_sched(r1, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000600)=@newtclass={0x4ac, 0x28, 0x10, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0x5, 0x1d}, {0xfff1, 0xf}, {0x2, 0xb}}, [@tclass_kind_options, @tclass_kind_options=@c_taprio={0xb}, @tclass_kind_options=@c_netem={0xa}, @tclass_kind_options=@c_mq={0x7}, @tclass_kind_options=@c_netem={0xa}, @tclass_kind_options=@c_multiq={0xb}]}, 0x4ac}, 0x1, 0x0, 0x0, 0x4008180}, 0x40010) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newtfilter={0x6c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x3c, 0x2, [@TCA_BASIC_EMATCHES={0x38, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x2c, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1}, @TCF_EM_META={0x18, 0x2, 0x0, 0x0, {{}, [@TCA_EM_META_HDR={0xc}]}}]}]}]}}]}, 0x6c}}, 0x0) [ 2440.202119][T28596] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2440.249992][T28596] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 00:40:40 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000f000000850000007500000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r6, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x41, 0x3, 0x230, 0x0, 0x19, 0x0, 0x0, 0x0, 0x2e8, 0x1f0, 0x1f0, 0x2e8, 0x1f0, 0x3, 0x0, {[{{@ip={@private, @dev, 0x0, 0x0, 'wlan1\x00', 'wg1\x00'}, 0x0, 0xa8, 0xc8, 0x0, {0x0, 0xffffffffa0028000}, [@common=@unspec=@quota={{0x38}}]}, @unspec=@TRACE={0x20}}, {{@ip={@empty, @empty, 0x0, 0x0, 'veth0_vlan\x00', 'netpci0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x290) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000000)={@empty, @local, 0x0}, &(0x7f0000000040)=0xc) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000380)=ANY=[@ANYBLOB="72797a746e6c32000000000010bd084f", @ANYRES32=r7, @ANYBLOB="070000400000000200000005450500d4006700003f049078ac1414bb7f0000018913e2e0000001ac1e0001ffffffffac1414bb01940401008205058716831fa964010101ffffffffac1414bbe0000002ffffffff0a01010200000000443c6da1ac1414aa00000009ac14141c00000000ac1414aafffffffdac1414aa80000000ffffffff00007fffffffffff000007ffe000000100000001440c34000000000500000002830f1ce281af4e35b1745d312aa54b892788ac1414bbe000000100000000e0000001640101017f00000164010100ac1e0001e000000107032f000000"]}) r9 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r9, 0x4000000000000, 0x40, &(0x7f0000000900)=@raw={'raw\x00', 0x41, 0x3, 0x388, 0x0, 0x19, 0x0, 0x0, 0x0, 0x2f0, 0x1f0, 0x1f0, 0x2f0, 0x1f0, 0x3, 0x0, {[{{@ip={@private, @dev, 0x0, 0x0, 'wlan1\x00', 'wg1\x00'}, 0x0, 0x200, 0x220, 0x0, {0x0, 0xffffffffa0028000}, [@common=@set={{0x40}, {{0x4, [0x4, 0x2, 0xa, 0x6, 0x8, 0x2], 0x2, 0x2}}}, @common=@inet=@hashlimit2={{0x150}, {'veth1\x00', {0x0, 0x8, 0x40, 0x0, 0x0, 0x687c, 0x93}}}]}, @unspec=@TRACE={0x20}}, {{@ip={@empty, @empty, 0x0, 0x0, 'veth0_vlan\x00', 'netpci0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x0, 0x3]}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3e8) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000000)={@empty, @local, 0x0}, &(0x7f0000000040)=0xc) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r9, 0x89f1, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000380)={'syztnl2\x00', r10, 0x700, 0x40, 0x2, 0x5, {{0x35, 0x4, 0x1, 0x1, 0xd4, 0x0, 0x0, 0x3f, 0x4, 0x0, @remote, @loopback, {[@ssrr={0x89, 0x13, 0xe2, [@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @remote]}, @noop, @ra={0x94, 0x4, 0x1}, @generic={0x82, 0x5, "058716"}, @lsrr={0x83, 0x1f, 0xa9, [@rand_addr=0x64010101, @broadcast, @remote, @multicast2, @broadcast, @private=0xa010102, @empty]}, @timestamp_addr={0x44, 0x3c, 0x6d, 0x1, 0xa, [{@local, 0x9}, {@local}, {@local, 0xfffffffd}, {@local, 0x80000000}, {@broadcast, 0x7fff}, {@broadcast, 0x7ff}, {@multicast1, 0x1}]}, @timestamp={0x44, 0xc, 0x34, 0x0, 0x0, [0x5, 0x2]}, @generic={0x83, 0xf, "1ce281af4e35b1745d312aa54b"}, @ssrr={0x89, 0x27, 0x88, [@remote, @multicast1, @empty, @multicast1, @rand_addr=0x64010101, @loopback, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1]}, @generic={0x7, 0x3, '/'}]}}}}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f0000000180)={&(0x7f0000000840)=ANY=[@ANYBLOB="780000005400010026bd7000fbdbdf2507000000", @ANYRESOCT=r8, @ANYBLOB="ed8e01", @ANYRES32=r10, @ANYBLOB="000201006401010200000000000000000000000086dd000020000100", @ANYRES32, @ANYBLOB="01050300ac1e000100000000000000000000000086dd000020000100", @ANYRES32, @ANYBLOB="010100002001000000000000000000000000000096dd0000"], 0x78}, 0x1, 0x0, 0x0, 0x8840}, 0x4008040) sendmsg$nl_route_sched(r1, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000600)=@newtclass={0x4ac, 0x28, 0x10, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0x5, 0x1d}, {0xfff1, 0xf}, {0x2, 0xb}}, [@tclass_kind_options, @tclass_kind_options=@c_taprio={0xb}, @tclass_kind_options=@c_netem={0xa}, @tclass_kind_options=@c_mq={0x7}, @tclass_kind_options=@c_netem={0xa}, @tclass_kind_options=@c_multiq={0xb}]}, 0x4ac}, 0x1, 0x0, 0x0, 0x4008180}, 0x40010) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newtfilter={0x6c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x3c, 0x2, [@TCA_BASIC_EMATCHES={0x38, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x2c, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1}, @TCF_EM_META={0x18, 0x2, 0x0, 0x0, {{}, [@TCA_EM_META_HDR={0xc}]}}]}]}]}}]}, 0x6c}}, 0x0) [ 2441.005772][T28600] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2441.064538][T28600] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 00:40:41 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000f000000850000007500000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r6, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x41, 0x3, 0x230, 0x0, 0x19, 0x0, 0x0, 0x0, 0x2e8, 0x1f0, 0x1f0, 0x2e8, 0x1f0, 0x3, 0x0, {[{{@ip={@private, @dev, 0x0, 0x0, 'wlan1\x00', 'wg1\x00'}, 0x0, 0xa8, 0xc8, 0x0, {0x0, 0xffffffffa0028000}, [@common=@unspec=@quota={{0x38}}]}, @unspec=@TRACE={0x20}}, {{@ip={@empty, @empty, 0x0, 0x0, 'veth0_vlan\x00', 'netpci0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x290) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000000)={@empty, @local, 0x0}, &(0x7f0000000040)=0xc) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000380)=ANY=[@ANYBLOB="72797a746e6c32000000000010bd084f", @ANYRES32=r7, @ANYBLOB="070000400000000200000005450500d4006700003f049078ac1414bb7f0000018913e2e0000001ac1e0001ffffffffac1414bb01940401008205058716831fa964010101ffffffffac1414bbe0000002ffffffff0a01010200000000443c6da1ac1414aa00000009ac14141c00000000ac1414aafffffffdac1414aa80000000ffffffff00007fffffffffff000007ffe000000100000001440c34000000000500000002830f1ce281af4e35b1745d312aa54b892788ac1414bbe000000100000000e0000001640101017f00000164010100ac1e0001e000000107032f000000"]}) r8 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r8, 0x4000000000000, 0x40, &(0x7f0000000900)=@raw={'raw\x00', 0x41, 0x3, 0x388, 0x0, 0x19, 0x0, 0x0, 0x0, 0x2f0, 0x1f0, 0x1f0, 0x2f0, 0x1f0, 0x3, 0x0, {[{{@ip={@private, @dev, 0x0, 0x0, 'wlan1\x00', 'wg1\x00'}, 0x0, 0x200, 0x220, 0x0, {0x0, 0xffffffffa0028000}, [@common=@set={{0x40}, {{0x4, [0x4, 0x2, 0xa, 0x6, 0x8, 0x2], 0x2, 0x2}}}, @common=@inet=@hashlimit2={{0x150}, {'veth1\x00', {0x0, 0x8, 0x40, 0x0, 0x0, 0x687c, 0x93}}}]}, @unspec=@TRACE={0x20}}, {{@ip={@empty, @empty, 0x0, 0x0, 'veth0_vlan\x00', 'netpci0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x0, 0x3]}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3e8) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000000)={@empty, @local, 0x0}, &(0x7f0000000040)=0xc) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r8, 0x89f1, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000380)={'syztnl2\x00', r9, 0x700, 0x40, 0x2, 0x5, {{0x35, 0x4, 0x1, 0x1, 0xd4, 0x0, 0x0, 0x3f, 0x4, 0x0, @remote, @loopback, {[@ssrr={0x89, 0x13, 0xe2, [@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @remote]}, @noop, @ra={0x94, 0x4, 0x1}, @generic={0x82, 0x5, "058716"}, @lsrr={0x83, 0x1f, 0xa9, [@rand_addr=0x64010101, @broadcast, @remote, @multicast2, @broadcast, @private=0xa010102, @empty]}, @timestamp_addr={0x44, 0x3c, 0x6d, 0x1, 0xa, [{@local, 0x9}, {@local}, {@local, 0xfffffffd}, {@local, 0x80000000}, {@broadcast, 0x7fff}, {@broadcast, 0x7ff}, {@multicast1, 0x1}]}, @timestamp={0x44, 0xc, 0x34, 0x0, 0x0, [0x5, 0x2]}, @generic={0x83, 0xf, "1ce281af4e35b1745d312aa54b"}, @ssrr={0x89, 0x27, 0x88, [@remote, @multicast1, @empty, @multicast1, @rand_addr=0x64010101, @loopback, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1]}, @generic={0x7, 0x3, '/'}]}}}}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f0000000180)={&(0x7f0000000840)=ANY=[@ANYBLOB="780000005400010026bd7000fbdbdf2507000000", @ANYBLOB="ed8e0100", @ANYRES32=r9, @ANYBLOB="000201006401010200000000000000000000000086dd000020000100", @ANYRES32, @ANYBLOB="01050300ac1e000100000000000000000000000086dd000020000100", @ANYRES32, @ANYBLOB="010100002001000000000000000000000000000096dd0000"], 0x78}, 0x1, 0x0, 0x0, 0x8840}, 0x4008040) sendmsg$nl_route_sched(r1, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000600)=@newtclass={0x4ac, 0x28, 0x10, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0x5, 0x1d}, {0xfff1, 0xf}, {0x2, 0xb}}, [@tclass_kind_options, @tclass_kind_options=@c_taprio={0xb}, @tclass_kind_options=@c_netem={0xa}, @tclass_kind_options=@c_mq={0x7}, @tclass_kind_options=@c_netem={0xa}, @tclass_kind_options=@c_multiq={0xb}]}, 0x4ac}, 0x1, 0x0, 0x0, 0x4008180}, 0x40010) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newtfilter={0x6c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x3c, 0x2, [@TCA_BASIC_EMATCHES={0x38, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x2c, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1}, @TCF_EM_META={0x18, 0x2, 0x0, 0x0, {{}, [@TCA_EM_META_HDR={0xc}]}}]}]}]}}]}, 0x6c}}, 0x0) 00:40:41 executing program 1: r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000002540)={&(0x7f0000000000)=@in={0x10, 0x2}, 0x10, &(0x7f0000002480)=[{&(0x7f0000000040)="0c28593414f8960ed5aafd214e2ba70c928a2c441456307b32adbbfff44362292523d094abf9daa7a4b5979255e61b2634edc01f08d187a3b629a034c8eaaa384e6e85f9af218d63cd5a10f1ae72b0343b081d458c15831508719e5fd4c51479f148e9df454baa802d1650760189dd0471cfae7ba474adc473bd701f9d115949576b1706076537a9319a4709da61fc0bd7b205f677", 0x95}, {&(0x7f0000000100)="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", 0x1000}, {&(0x7f0000001100)="98681d4014e0545d6b7bc5e7ab9106ee87708a8e2dfd865790e52f7f1c22f26abfb878d7f5e1ee38a221c9741f7cb2c1185630ef7a6cce5185ace161ea2dcc5df3c76b4a8b138c4c75bb1d97e62603350631f3d98edf5ed595da30929c948e861a7873df20a45604712bd8c353194199c158d993c47b4f56b598696d0097729d875cb53538b31521455bd8821ddfca818934eb3182afe049e3fc7fbb4cdb65ff515b6df6292561891b8cd96463b2383a645686f2bd939f046220dd2f20e3a214ae7e0926b84eeb2b5380925f904b02ad59acb9722f2df577e96c2df3a4bae7201054631624679667e8cb80e84c97dddaa51b377c0fe0d20862", 0xf9}, {&(0x7f0000001200)="7c10d1db53cd4bc377355a29a19dc5dc918670de50858c603b0a171b69588ffa47cfcd3d8bfb012e1f27f24645ac476be0317d5358a4528560a0686ec83367363748cd2b367c098827a5d66bc6bff4fdaf745841658fbb407468d143785af56f7465feffa91e7ed9cd3ade7263f14081a905e383b581e90d0d03ce7740f3062202f3f411b73a855c9ddcb889f7", 0x8d}, {&(0x7f00000012c0)="213842a79d37e199a94340a9c48fe28b175bef72e3282db8ec0e7bb24815de5d09c14592208af2608ec5770704658a15905745a3247f925f", 0x38}, {&(0x7f0000001340)="5135d58444ba2fa78502385568cd07258f474654ee434a160a54a8042d9128ea4fd40c5a822d76e793fdb42e2ec5329d2888a106c6c0ee69c5f50dcdb8e0a85529622aa2360cb1309cd80ad52c95c9434913e0319df1e6a95f04fc58d92fc228dbebc85307721a4c4ba5e409482e815921dc49f7881bf7ab108d58ec3eb8defafac0a64f874f996f2c6af13a9f31e4e6ab9bda5f6ef1aa82cfcf21c9c53dbe3d42a0017b53867033adabd653916e5893715da39c70a33b2e58deeefb3c70980a68269eb5b40d68e729ffc96b2e3d35d8e8b366ee96366e08816cac358fb565e227c9b11b91f5a3d702bc984ae4108c78a77bf198475f0b946a1305e5cae833dc28de2ed1f006fcfd1257dbdcfc31b978da51cc4822cc16e4dcbdb54e76ae29e0a8ad2611d6777836488d03884e118ea7a69baf7159d489e4debd2316b849510c018c3ad9412a16745b8388acd21a0085844945cdb7e48abb565426f5017f165ca2d95ee2dff69d9f1c8f32f2cfc39bef1b7fa6b07317c67e62700d7a7031fa02416d7327d12d372f28206d2bf4a00e4d8777d0772bda1de433a4a04b6441cfa9c33d214b3dbe7636e30bd938e42f964d38896fceb8df817162cdd2c99ad71b9ffe518e20efc8488eb3b87e576a04a300409f6e6ce0eb89726f51a49fd7f4fc2ad59828be30fbc52948f6d57e79080f5a529c2eb01b3a1422b0cff676bc4702cdf95180d51cfde0f4a17716d35c0bdc39fe2ad123e3a7408159b0349365f3b881b0fc8a0fefbf04f77d8601f6f73b3e0c6cbf091683b9a0a5ee349c7f3b96266d04af5df404795e7c446d829a1dbcafdc2292e3807d65a9a9d4e82904cde18751ba5ace8a87e78c0fbd8faa8fc308a5a6a3e92e4d262a0da8f4c4946083f8adebc328da28deeaff5a7b169e3b40a3ce228ae3743ae7bf97fd2435ed260b9df537b0b21a0783dc0ab9bc3e79cce12d8418bda46fbe3c2468d63be063b367a657713901dc7640d32bcd1747d61bf71c303c7c4848173ce674581c0ca4bd0f48fe9ec0e6eff5bb7a5bb6dc618b44d1bbdba8c5b0f796afdb7e94f96abf9bbb374551fa531782378c6ec2cd872388e515da732b9dedf078582b38d28f735244f51544609de085314c8e6a81231b62d19bcca13516ea20465ec886642abc91ab5d1d65d51edb9b0c2791a261867f8090c80fcee8f648a4530f0ec88f49524d835199d7ba5064d3867963bc00afc42536865961a387a2f1579dcb69cd73dd203eede94d54c9fa04c49e605536f84ce271129f5387739a33fd67cedd179e2c578591b0d0aec5bdb664fe34f381ace2c0400c227a81f67fd1ec0e97610ee3337a4cf78927f21b874fb5dac484656ed23276039673f1e0b1508d07518e3d24c1474cf11e72a9ef6f194574159d788a38995d1e958615915e1ad0d95e8e5a7cacef85a0659ee6e7fc3555261261a0d3a2a4cb52857edb6a22d062b8fed18fa050be5f00b5d9c5babeddb9c0e7dff151e6dd57e7f555e3cf09c070bbbefebb26c2f357cec6a1395dd51a1b0b88117c3aa83599bbb7700204cff7d52149417257fd3cc79396091f69cb65a23304af40a61dae585f8b97028b73487bc7fbbd6c35432a19ee080a5e2d9792b05c9449f0ce69d55b7cf9550d5de07ebe65444e8ad27888799780a403e4679ead5be4134a9a394a13346dd26292453a1b0ea708dbaab1b0a1c75eddd54f8006b8791e55f0b873f783f19e2c102168ad79c283b849f9ce562b23ef5a9ccb098f3b8c62cca4dc6001ea1a14a9561e2a57d9dd713ad366b04436535545393099e2f7db931bccd4488e1c0ab9224355a63859bdfc4d4103860a4b23c3bf7fb8e063a38e86151866bb47da903c31210dd1fbc42e1804ec950ef6255686b63cd3c4c53acc719b5f466a94af33778c5231f485f699a0817b3cd5646ddf0db2c41987068344e317c895e0e251a106c1a60d5a44bdce6cd63fb3f961a46da3eb35e211a5940a327ce0889715c6e5903d20484eddf079e2f973ac5f143279e2ce74e9f8eca55007a5d5095208508865699b4c89bbaebb24745c9de7bc9bac0c2823c766ccb47fcba8b8a0d0e737fa2902657740d8a484e2ebc8ced9b1e46d3ff2f60b262d4cd917b9b095dc4068ca7776cd36fe06f70a6a796bd133e5939aebc36e13d48e550dd0f2e6b626f15159ced73bb90185f08f3ca1ff004e9586a631ab3ecaa45b131d4262bc1336fd0ee297b59f31086e6af41cc33ad9ad0739f803e6219127176fd9cb918e242f6c14bbdd9b489aed959f995acc170c36f03414d25d734e664aab08fb40541ee1a1b6f25de81ce6e9e9bf811572b7195440e3067bcb7b65ea1404a4ae5d282690504899c287ba3ea382605308eda3a37cefe38c87c99bf56369e9788a5e331ce1f8d0e9e9e4d343e0ce0dee9279fdd2451a9ce69185d267b12cefb26b651a794b401b26440eb4960fe193b03d38ddfbcbe9d53f048730fd0af13439cdd3ba31a3342eddc24c4fd689e4929028a28c291e55d8e86f7a5b35d5ac62db1db514a51b4719016d4d55b34ef09dfd16ac9d9766c8b8af37a327bcc0baff0ee42d5a73f7d28624d342cca7781e1e96d68b5c8a696121fd3c3380a8c144fbccc1c0a09adb97224ea159044be801f4e0149ef73f6965c06a0116cbe17ce57032b527a0609a53faee3715b21a87c007a8563c43db282cc47ab2dda0fd498c7745972dd872612ed01f379cd94d61ae421da89af3371db6a6ce50fe5a7f04de4ed1ee68340e372b235a19d9fa907b590389fa069b09804ed7dd9caefd5a496313f0055b0fddb596bca2a838922dab6ffa5b89aa1813daefadbf1279f1c53ca3ebc52d1ec1751092ce667d25d07edbfa6b1732417f1946d5ae10ac373648c32e359a36feabde316edd3d510bc6e4f08467874f7a52fc61b7f426299014bb7f036f68a5ce4d6d7e9dc3e2b29c1b6895643fe2faacfb3325db3fc516c94df3d5c4f73650872138cbd22c98730a6a7fafb84e66462c91d4806f320e110f6dd9d93d0fc5d3fa541e30babf8e423dcfcd676c74add4b528eef520f92c9976df57769bde490a12507ad9360f5b30520fa96cb4809308d107867a9a26d406582d0165d0880dae37bf22a33171836a98994815a378a99d05746bfe6c40f5b78d2861da2662ffc94f247caa374135c6b894e74408e42963bd74631d989c376e239e7d41af14a9b8b1d0a96323897046cdb895489cf6f4b3d0c13d65f41f552f191b34e8c473f675665d601216bf98f47f7a1617d01dc71333d1f1f8ce556fc324727810df36d3ec6af49e3c7cde3834dd27249d13b3ada183c9195654ddc76ae299255aca9d0db5b4dd9f6853b9021266a0d6d7685520d8dcb03f8da3bb9c12ce403f2b11946c1b5ad1ad1b99709f5c67c3bbc9773b25727092bbe6e96af63169fa8f88667b58db2e281fc17c44cd6e661d57769432b4d5669cbadcfa344c8fb0fbd0ed67804154a96ce31d9de9c82d0ba316025ab19caca6772888639c739a3679152e86d62ed13e660ebef95a780b6aa7b022e2ceb83c0d2a4da96fb2f31367b6dd73bb4d7b563c30d591eeb8d4d44871ff2c83cdbd43ace8ed600af2d96fa14dbd74966ee45ce8def968884e382f2aa9968eec4d6dfc116fdeafeaf45b46f2dac4792ac1232222118688b471fda756511de70b3abf7d057dcf8ee93cf0b226a363c788d9e0cb62f9daab24ba5aed3a617420c5e1d04e34ce23741764653949af64050d028b1e84bbe2ad6be10da7d9b330c39398e4e66e5633640fbf9a30712342be39e0e1f3c0de1158a9cc1c924cd18ff4c7487604d7624efb00425b96bc59f31c6dca823bf69e688c0992a756f930aa893ccec76ee57dec5250acfbd89ae47d541220859701c4a7e347f2deb06904e182a233aae3f92d5b2eb825f4eeebc21d4b002cd9ca8c870484b8cae24522112291f44f564d5ec2ab70b8c2bf2d0149d7cfb5907bf403ce8c1fd28e5d7108ea6261ec400cead053dd66a87e06c5578c84bdf0eb16bc218d1916f01fbb14dbd91ecc5e5325e096862f1f25ecdf2145d392cdfbb5f3714eafe1f3175982be6bbcebffbe7d8cb08c9f5fcfca7aea73096f4a3893bb5736ac94e13a33af59e5b35fc63423d415bfef75b4b002daa4311a51c410fa66844eda0c93b04248f4775795c05672e68164bdd93466357136ff2c722b5a91d5fd2be176caa2b40255c13793315b728ea35feb352c0b48a5a47696395cbb1da8ea2240939986c3f008629b56adf58f3792f62abcab914d3d2347aaf98d47fefa0fd90c19eed87385945b0c4338b27db40140674764feb8045a9341f2ff891236a300b941e0495980f0cad1184c3181523c226b2b57f0bc452893eb1e18e8371a114a50df11d6c12089706d07ae668ba82723e76e3788c9e43322cab84dda1adaaa62116b171dd8f9c028924500169ab8f8a05a3c0febe5f1c9240b2830826ea3d9758f8607e71d03a9151d9ffd368601b868a58b43cb2e8ff64bbf77d9f1f647f638d076fe68210081fa833839d04bb9e48acbaa9a7cec33fb1b1aba5d492f52b2e35e98855921905f7161a192f03b622332f905ebe1061a3c9e719b993e5dfdac271acee397ec554d7e29c7fcf054018f587873f7a9455d207986de15e7d5702a52d43c15555d69d070193aee559074fee63b5a15ef1ace1c51b4ff5fa67c00f0f7decfd46d90605b53c3eb7b3b58d9a5897da59431f554598bae4f6c5e5106ea3ee7130e9fe29af59298cca0ba1ce2fe0b77ac0ecafcb50e75338a53af926572b4abebf3ef53ab2a5534ec4a422971270924bcdbd0e09726c2726915b5a616adfc6ee65ce17a4362d10e6e8a1dc27a8eaac86cecb06623c801a1a15ced229cbed9f6bfa134ebeaa3d125de4437451c288cbeff9523550121", 0xd9e}], 0x6}, 0x0) [ 2441.633613][T28604] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2441.639929][T28604] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 00:40:41 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000f000000850000007500000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r6, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x41, 0x3, 0x230, 0x0, 0x19, 0x0, 0x0, 0x0, 0x2e8, 0x1f0, 0x1f0, 0x2e8, 0x1f0, 0x3, 0x0, {[{{@ip={@private, @dev, 0x0, 0x0, 'wlan1\x00', 'wg1\x00'}, 0x0, 0xa8, 0xc8, 0x0, {0x0, 0xffffffffa0028000}, [@common=@unspec=@quota={{0x38}}]}, @unspec=@TRACE={0x20}}, {{@ip={@empty, @empty, 0x0, 0x0, 'veth0_vlan\x00', 'netpci0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x290) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000000)={@empty, @local, 0x0}, &(0x7f0000000040)=0xc) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000380)=ANY=[@ANYBLOB="72797a746e6c32000000000010bd084f", @ANYRES32=r7, @ANYBLOB="070000400000000200000005450500d4006700003f049078ac1414bb7f0000018913e2e0000001ac1e0001ffffffffac1414bb01940401008205058716831fa964010101ffffffffac1414bbe0000002ffffffff0a01010200000000443c6da1ac1414aa00000009ac14141c00000000ac1414aafffffffdac1414aa80000000ffffffff00007fffffffffff000007ffe000000100000001440c34000000000500000002830f1ce281af4e35b1745d312aa54b892788ac1414bbe000000100000000e0000001640101017f00000164010100ac1e0001e000000107032f000000"]}) r8 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r8, 0x4000000000000, 0x40, &(0x7f0000000900)=@raw={'raw\x00', 0x41, 0x3, 0x388, 0x0, 0x19, 0x0, 0x0, 0x0, 0x2f0, 0x1f0, 0x1f0, 0x2f0, 0x1f0, 0x3, 0x0, {[{{@ip={@private, @dev, 0x0, 0x0, 'wlan1\x00', 'wg1\x00'}, 0x0, 0x200, 0x220, 0x0, {0x0, 0xffffffffa0028000}, [@common=@set={{0x40}, {{0x4, [0x4, 0x2, 0xa, 0x6, 0x8, 0x2], 0x2, 0x2}}}, @common=@inet=@hashlimit2={{0x150}, {'veth1\x00', {0x0, 0x8, 0x40, 0x0, 0x0, 0x687c, 0x93}}}]}, @unspec=@TRACE={0x20}}, {{@ip={@empty, @empty, 0x0, 0x0, 'veth0_vlan\x00', 'netpci0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x0, 0x3]}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3e8) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000000)={@empty, @local, 0x0}, &(0x7f0000000040)=0xc) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r8, 0x89f1, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000380)={'syztnl2\x00', r9, 0x700, 0x40, 0x2, 0x5, {{0x35, 0x4, 0x1, 0x1, 0xd4, 0x0, 0x0, 0x3f, 0x4, 0x0, @remote, @loopback, {[@ssrr={0x89, 0x13, 0xe2, [@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @remote]}, @noop, @ra={0x94, 0x4, 0x1}, @generic={0x82, 0x5, "058716"}, @lsrr={0x83, 0x1f, 0xa9, [@rand_addr=0x64010101, @broadcast, @remote, @multicast2, @broadcast, @private=0xa010102, @empty]}, @timestamp_addr={0x44, 0x3c, 0x6d, 0x1, 0xa, [{@local, 0x9}, {@local}, {@local, 0xfffffffd}, {@local, 0x80000000}, {@broadcast, 0x7fff}, {@broadcast, 0x7ff}, {@multicast1, 0x1}]}, @timestamp={0x44, 0xc, 0x34, 0x0, 0x0, [0x5, 0x2]}, @generic={0x83, 0xf, "1ce281af4e35b1745d312aa54b"}, @ssrr={0x89, 0x27, 0x88, [@remote, @multicast1, @empty, @multicast1, @rand_addr=0x64010101, @loopback, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1]}, @generic={0x7, 0x3, '/'}]}}}}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f0000000180)={&(0x7f0000000840)=ANY=[@ANYBLOB="780000005400010026bd7000fbdbdf2507000000", @ANYBLOB="ed8e0100", @ANYRES32=r9, @ANYBLOB="000201006401010200000000000000000000000086dd000020000100", @ANYRES32, @ANYBLOB="01050300ac1e000100000000000000000000000086dd000020000100", @ANYRES32, @ANYBLOB="010100002001000000000000000000000000000096dd0000"], 0x78}, 0x1, 0x0, 0x0, 0x8840}, 0x4008040) sendmsg$nl_route_sched(r1, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000600)=@newtclass={0x4ac, 0x28, 0x10, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0x5, 0x1d}, {0xfff1, 0xf}, {0x2, 0xb}}, [@tclass_kind_options, @tclass_kind_options=@c_taprio={0xb}, @tclass_kind_options=@c_netem={0xa}, @tclass_kind_options=@c_mq={0x7}, @tclass_kind_options=@c_netem={0xa}, @tclass_kind_options=@c_multiq={0xb}]}, 0x4ac}, 0x1, 0x0, 0x0, 0x4008180}, 0x40010) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newtfilter={0x6c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x3c, 0x2, [@TCA_BASIC_EMATCHES={0x38, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x2c, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1}, @TCF_EM_META={0x18, 0x2, 0x0, 0x0, {{}, [@TCA_EM_META_HDR={0xc}]}}]}]}]}}]}, 0x6c}}, 0x0) [ 2442.165223][T28608] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2442.175846][T28608] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 00:40:42 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000f000000850000007500000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r6, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x41, 0x3, 0x230, 0x0, 0x19, 0x0, 0x0, 0x0, 0x2e8, 0x1f0, 0x1f0, 0x2e8, 0x1f0, 0x3, 0x0, {[{{@ip={@private, @dev, 0x0, 0x0, 'wlan1\x00', 'wg1\x00'}, 0x0, 0xa8, 0xc8, 0x0, {0x0, 0xffffffffa0028000}, [@common=@unspec=@quota={{0x38}}]}, @unspec=@TRACE={0x20}}, {{@ip={@empty, @empty, 0x0, 0x0, 'veth0_vlan\x00', 'netpci0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x290) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000000)={@empty, @local, 0x0}, &(0x7f0000000040)=0xc) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000380)=ANY=[@ANYBLOB="72797a746e6c32000000000010bd084f", @ANYRES32=r7, @ANYBLOB="070000400000000200000005450500d4006700003f049078ac1414bb7f0000018913e2e0000001ac1e0001ffffffffac1414bb01940401008205058716831fa964010101ffffffffac1414bbe0000002ffffffff0a01010200000000443c6da1ac1414aa00000009ac14141c00000000ac1414aafffffffdac1414aa80000000ffffffff00007fffffffffff000007ffe000000100000001440c34000000000500000002830f1ce281af4e35b1745d312aa54b892788ac1414bbe000000100000000e0000001640101017f00000164010100ac1e0001e000000107032f000000"]}) r8 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r8, 0x4000000000000, 0x40, &(0x7f0000000900)=@raw={'raw\x00', 0x41, 0x3, 0x388, 0x0, 0x19, 0x0, 0x0, 0x0, 0x2f0, 0x1f0, 0x1f0, 0x2f0, 0x1f0, 0x3, 0x0, {[{{@ip={@private, @dev, 0x0, 0x0, 'wlan1\x00', 'wg1\x00'}, 0x0, 0x200, 0x220, 0x0, {0x0, 0xffffffffa0028000}, [@common=@set={{0x40}, {{0x4, [0x4, 0x2, 0xa, 0x6, 0x8, 0x2], 0x2, 0x2}}}, @common=@inet=@hashlimit2={{0x150}, {'veth1\x00', {0x0, 0x8, 0x40, 0x0, 0x0, 0x687c, 0x93}}}]}, @unspec=@TRACE={0x20}}, {{@ip={@empty, @empty, 0x0, 0x0, 'veth0_vlan\x00', 'netpci0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x0, 0x3]}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3e8) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000000)={@empty, @local, 0x0}, &(0x7f0000000040)=0xc) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r8, 0x89f1, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000380)={'syztnl2\x00', r9, 0x700, 0x40, 0x2, 0x5, {{0x35, 0x4, 0x1, 0x1, 0xd4, 0x0, 0x0, 0x3f, 0x4, 0x0, @remote, @loopback, {[@ssrr={0x89, 0x13, 0xe2, [@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @remote]}, @noop, @ra={0x94, 0x4, 0x1}, @generic={0x82, 0x5, "058716"}, @lsrr={0x83, 0x1f, 0xa9, [@rand_addr=0x64010101, @broadcast, @remote, @multicast2, @broadcast, @private=0xa010102, @empty]}, @timestamp_addr={0x44, 0x3c, 0x6d, 0x1, 0xa, [{@local, 0x9}, {@local}, {@local, 0xfffffffd}, {@local, 0x80000000}, {@broadcast, 0x7fff}, {@broadcast, 0x7ff}, {@multicast1, 0x1}]}, @timestamp={0x44, 0xc, 0x34, 0x0, 0x0, [0x5, 0x2]}, @generic={0x83, 0xf, "1ce281af4e35b1745d312aa54b"}, @ssrr={0x89, 0x27, 0x88, [@remote, @multicast1, @empty, @multicast1, @rand_addr=0x64010101, @loopback, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1]}, @generic={0x7, 0x3, '/'}]}}}}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f0000000180)={&(0x7f0000000840)=ANY=[@ANYBLOB="780000005400010026bd7000fbdbdf2507000000", @ANYBLOB="ed8e0100", @ANYRES32=r9, @ANYBLOB="000201006401010200000000000000000000000086dd000020000100", @ANYRES32, @ANYBLOB="01050300ac1e000100000000000000000000000086dd000020000100", @ANYRES32, @ANYBLOB="010100002001000000000000000000000000000096dd0000"], 0x78}, 0x1, 0x0, 0x0, 0x8840}, 0x4008040) sendmsg$nl_route_sched(r1, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000600)=@newtclass={0x4ac, 0x28, 0x10, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0x5, 0x1d}, {0xfff1, 0xf}, {0x2, 0xb}}, [@tclass_kind_options, @tclass_kind_options=@c_taprio={0xb}, @tclass_kind_options=@c_netem={0xa}, @tclass_kind_options=@c_mq={0x7}, @tclass_kind_options=@c_netem={0xa}, @tclass_kind_options=@c_multiq={0xb}]}, 0x4ac}, 0x1, 0x0, 0x0, 0x4008180}, 0x40010) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newtfilter={0x6c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x3c, 0x2, [@TCA_BASIC_EMATCHES={0x38, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x2c, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1}, @TCF_EM_META={0x18, 0x2, 0x0, 0x0, {{}, [@TCA_EM_META_HDR={0xc}]}}]}]}]}}]}, 0x6c}}, 0x0) 00:40:43 executing program 1: r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000000b00)={&(0x7f0000000180)=@in={0x10, 0x2}, 0x10, &(0x7f0000000800)=[{&(0x7f00000001c0)='<', 0x1}], 0x1, &(0x7f0000000a00)=[@init={0x14, 0x84, 0x1, {0x0, 0x0, 0x0, 0xffff}}], 0x14}, 0x0) 00:40:43 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000f000000850000007500000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r6, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x41, 0x3, 0x230, 0x0, 0x19, 0x0, 0x0, 0x0, 0x2e8, 0x1f0, 0x1f0, 0x2e8, 0x1f0, 0x3, 0x0, {[{{@ip={@private, @dev, 0x0, 0x0, 'wlan1\x00', 'wg1\x00'}, 0x0, 0xa8, 0xc8, 0x0, {0x0, 0xffffffffa0028000}, [@common=@unspec=@quota={{0x38}}]}, @unspec=@TRACE={0x20}}, {{@ip={@empty, @empty, 0x0, 0x0, 'veth0_vlan\x00', 'netpci0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x290) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000000)={@empty, @local, 0x0}, &(0x7f0000000040)=0xc) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000380)=ANY=[@ANYBLOB="72797a746e6c32000000000010bd084f", @ANYRES32=r7, @ANYBLOB="070000400000000200000005450500d4006700003f049078ac1414bb7f0000018913e2e0000001ac1e0001ffffffffac1414bb01940401008205058716831fa964010101ffffffffac1414bbe0000002ffffffff0a01010200000000443c6da1ac1414aa00000009ac14141c00000000ac1414aafffffffdac1414aa80000000ffffffff00007fffffffffff000007ffe000000100000001440c34000000000500000002830f1ce281af4e35b1745d312aa54b892788ac1414bbe000000100000000e0000001640101017f00000164010100ac1e0001e000000107032f000000"]}) r8 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r8, 0x4000000000000, 0x40, &(0x7f0000000900)=@raw={'raw\x00', 0x41, 0x3, 0x388, 0x0, 0x19, 0x0, 0x0, 0x0, 0x2f0, 0x1f0, 0x1f0, 0x2f0, 0x1f0, 0x3, 0x0, {[{{@ip={@private, @dev, 0x0, 0x0, 'wlan1\x00', 'wg1\x00'}, 0x0, 0x200, 0x220, 0x0, {0x0, 0xffffffffa0028000}, [@common=@set={{0x40}, {{0x4, [0x4, 0x2, 0xa, 0x6, 0x8, 0x2], 0x2, 0x2}}}, @common=@inet=@hashlimit2={{0x150}, {'veth1\x00', {0x0, 0x8, 0x40, 0x0, 0x0, 0x687c, 0x93}}}]}, @unspec=@TRACE={0x20}}, {{@ip={@empty, @empty, 0x0, 0x0, 'veth0_vlan\x00', 'netpci0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x0, 0x3]}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3e8) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000000)={@empty, @local, 0x0}, &(0x7f0000000040)=0xc) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r8, 0x89f1, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000380)={'syztnl2\x00', r9, 0x700, 0x40, 0x2, 0x5, {{0x35, 0x4, 0x1, 0x1, 0xd4, 0x0, 0x0, 0x3f, 0x4, 0x0, @remote, @loopback, {[@ssrr={0x89, 0x13, 0xe2, [@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @remote]}, @noop, @ra={0x94, 0x4, 0x1}, @generic={0x82, 0x5, "058716"}, @lsrr={0x83, 0x1f, 0xa9, [@rand_addr=0x64010101, @broadcast, @remote, @multicast2, @broadcast, @private=0xa010102, @empty]}, @timestamp_addr={0x44, 0x3c, 0x6d, 0x1, 0xa, [{@local, 0x9}, {@local}, {@local, 0xfffffffd}, {@local, 0x80000000}, {@broadcast, 0x7fff}, {@broadcast, 0x7ff}, {@multicast1, 0x1}]}, @timestamp={0x44, 0xc, 0x34, 0x0, 0x0, [0x5, 0x2]}, @generic={0x83, 0xf, "1ce281af4e35b1745d312aa54b"}, @ssrr={0x89, 0x27, 0x88, [@remote, @multicast1, @empty, @multicast1, @rand_addr=0x64010101, @loopback, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1]}, @generic={0x7, 0x3, '/'}]}}}}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f0000000180)={&(0x7f0000000840)=ANY=[@ANYBLOB="780000005400010026bd7000fbdbdf2507000000", @ANYRESOCT, @ANYBLOB="ed8e0100", @ANYRES32=r9, @ANYBLOB="000201006401010200000000000000000000000086dd000020000100", @ANYRES32, @ANYBLOB="01050300ac1e000100000000000000000000000086dd000020000100", @ANYRES32, @ANYBLOB="010100002001000000000000000000000000000096dd0000"], 0x78}, 0x1, 0x0, 0x0, 0x8840}, 0x4008040) sendmsg$nl_route_sched(r1, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000600)=@newtclass={0x4ac, 0x28, 0x10, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0x5, 0x1d}, {0xfff1, 0xf}, {0x2, 0xb}}, [@tclass_kind_options, @tclass_kind_options=@c_taprio={0xb}, @tclass_kind_options=@c_netem={0xa}, @tclass_kind_options=@c_mq={0x7}, @tclass_kind_options=@c_netem={0xa}, @tclass_kind_options=@c_multiq={0xb}]}, 0x4ac}, 0x1, 0x0, 0x0, 0x4008180}, 0x40010) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newtfilter={0x6c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x3c, 0x2, [@TCA_BASIC_EMATCHES={0x38, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x2c, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1}, @TCF_EM_META={0x18, 0x2, 0x0, 0x0, {{}, [@TCA_EM_META_HDR={0xc}]}}]}]}]}}]}, 0x6c}}, 0x0) 00:40:44 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0xa, &(0x7f00000000c0), &(0x7f0000000180)=0x98) 00:40:44 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000f000000850000007500000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r6, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x41, 0x3, 0x230, 0x0, 0x19, 0x0, 0x0, 0x0, 0x2e8, 0x1f0, 0x1f0, 0x2e8, 0x1f0, 0x3, 0x0, {[{{@ip={@private, @dev, 0x0, 0x0, 'wlan1\x00', 'wg1\x00'}, 0x0, 0xa8, 0xc8, 0x0, {0x0, 0xffffffffa0028000}, [@common=@unspec=@quota={{0x38}}]}, @unspec=@TRACE={0x20}}, {{@ip={@empty, @empty, 0x0, 0x0, 'veth0_vlan\x00', 'netpci0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x290) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000000)={@empty, @local, 0x0}, &(0x7f0000000040)=0xc) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000380)=ANY=[@ANYBLOB="72797a746e6c32000000000010bd084f", @ANYRES32=r7, @ANYBLOB="070000400000000200000005450500d4006700003f049078ac1414bb7f0000018913e2e0000001ac1e0001ffffffffac1414bb01940401008205058716831fa964010101ffffffffac1414bbe0000002ffffffff0a01010200000000443c6da1ac1414aa00000009ac14141c00000000ac1414aafffffffdac1414aa80000000ffffffff00007fffffffffff000007ffe000000100000001440c34000000000500000002830f1ce281af4e35b1745d312aa54b892788ac1414bbe000000100000000e0000001640101017f00000164010100ac1e0001e000000107032f000000"]}) r8 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r8, 0x4000000000000, 0x40, &(0x7f0000000900)=@raw={'raw\x00', 0x41, 0x3, 0x388, 0x0, 0x19, 0x0, 0x0, 0x0, 0x2f0, 0x1f0, 0x1f0, 0x2f0, 0x1f0, 0x3, 0x0, {[{{@ip={@private, @dev, 0x0, 0x0, 'wlan1\x00', 'wg1\x00'}, 0x0, 0x200, 0x220, 0x0, {0x0, 0xffffffffa0028000}, [@common=@set={{0x40}, {{0x4, [0x4, 0x2, 0xa, 0x6, 0x8, 0x2], 0x2, 0x2}}}, @common=@inet=@hashlimit2={{0x150}, {'veth1\x00', {0x0, 0x8, 0x40, 0x0, 0x0, 0x687c, 0x93}}}]}, @unspec=@TRACE={0x20}}, {{@ip={@empty, @empty, 0x0, 0x0, 'veth0_vlan\x00', 'netpci0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x0, 0x3]}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3e8) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000000)={@empty, @local, 0x0}, &(0x7f0000000040)=0xc) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r8, 0x89f1, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000380)={'syztnl2\x00', r9, 0x700, 0x40, 0x2, 0x5, {{0x35, 0x4, 0x1, 0x1, 0xd4, 0x0, 0x0, 0x3f, 0x4, 0x0, @remote, @loopback, {[@ssrr={0x89, 0x13, 0xe2, [@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @remote]}, @noop, @ra={0x94, 0x4, 0x1}, @generic={0x82, 0x5, "058716"}, @lsrr={0x83, 0x1f, 0xa9, [@rand_addr=0x64010101, @broadcast, @remote, @multicast2, @broadcast, @private=0xa010102, @empty]}, @timestamp_addr={0x44, 0x3c, 0x6d, 0x1, 0xa, [{@local, 0x9}, {@local}, {@local, 0xfffffffd}, {@local, 0x80000000}, {@broadcast, 0x7fff}, {@broadcast, 0x7ff}, {@multicast1, 0x1}]}, @timestamp={0x44, 0xc, 0x34, 0x0, 0x0, [0x5, 0x2]}, @generic={0x83, 0xf, "1ce281af4e35b1745d312aa54b"}, @ssrr={0x89, 0x27, 0x88, [@remote, @multicast1, @empty, @multicast1, @rand_addr=0x64010101, @loopback, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1]}, @generic={0x7, 0x3, '/'}]}}}}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f0000000180)={&(0x7f0000000840)=ANY=[@ANYBLOB="780000005400010026bd7000fbdbdf2507000000", @ANYRESOCT, @ANYBLOB="ed8e0100", @ANYRES32=r9, @ANYBLOB="000201006401010200000000000000000000000086dd000020000100", @ANYRES32, @ANYBLOB="01050300ac1e000100000000000000000000000086dd000020000100", @ANYRES32, @ANYBLOB="010100002001000000000000000000000000000096dd0000"], 0x78}, 0x1, 0x0, 0x0, 0x8840}, 0x4008040) sendmsg$nl_route_sched(r1, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000600)=@newtclass={0x4ac, 0x28, 0x10, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0x5, 0x1d}, {0xfff1, 0xf}, {0x2, 0xb}}, [@tclass_kind_options, @tclass_kind_options=@c_taprio={0xb}, @tclass_kind_options=@c_netem={0xa}, @tclass_kind_options=@c_mq={0x7}, @tclass_kind_options=@c_netem={0xa}, @tclass_kind_options=@c_multiq={0xb}]}, 0x4ac}, 0x1, 0x0, 0x0, 0x4008180}, 0x40010) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newtfilter={0x6c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x3c, 0x2, [@TCA_BASIC_EMATCHES={0x38, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x2c, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1}, @TCF_EM_META={0x18, 0x2, 0x0, 0x0, {{}, [@TCA_EM_META_HDR={0xc}]}}]}]}]}}]}, 0x6c}}, 0x0) 00:40:44 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000f000000850000007500000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r6, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x41, 0x3, 0x230, 0x0, 0x19, 0x0, 0x0, 0x0, 0x2e8, 0x1f0, 0x1f0, 0x2e8, 0x1f0, 0x3, 0x0, {[{{@ip={@private, @dev, 0x0, 0x0, 'wlan1\x00', 'wg1\x00'}, 0x0, 0xa8, 0xc8, 0x0, {0x0, 0xffffffffa0028000}, [@common=@unspec=@quota={{0x38}}]}, @unspec=@TRACE={0x20}}, {{@ip={@empty, @empty, 0x0, 0x0, 'veth0_vlan\x00', 'netpci0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x290) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000000)={@empty, @local, 0x0}, &(0x7f0000000040)=0xc) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000380)=ANY=[@ANYBLOB="72797a746e6c32000000000010bd084f", @ANYRES32=r7, @ANYBLOB="070000400000000200000005450500d4006700003f049078ac1414bb7f0000018913e2e0000001ac1e0001ffffffffac1414bb01940401008205058716831fa964010101ffffffffac1414bbe0000002ffffffff0a01010200000000443c6da1ac1414aa00000009ac14141c00000000ac1414aafffffffdac1414aa80000000ffffffff00007fffffffffff000007ffe000000100000001440c34000000000500000002830f1ce281af4e35b1745d312aa54b892788ac1414bbe000000100000000e0000001640101017f00000164010100ac1e0001e000000107032f000000"]}) r8 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r8, 0x4000000000000, 0x40, &(0x7f0000000900)=@raw={'raw\x00', 0x41, 0x3, 0x388, 0x0, 0x19, 0x0, 0x0, 0x0, 0x2f0, 0x1f0, 0x1f0, 0x2f0, 0x1f0, 0x3, 0x0, {[{{@ip={@private, @dev, 0x0, 0x0, 'wlan1\x00', 'wg1\x00'}, 0x0, 0x200, 0x220, 0x0, {0x0, 0xffffffffa0028000}, [@common=@set={{0x40}, {{0x4, [0x4, 0x2, 0xa, 0x6, 0x8, 0x2], 0x2, 0x2}}}, @common=@inet=@hashlimit2={{0x150}, {'veth1\x00', {0x0, 0x8, 0x40, 0x0, 0x0, 0x687c, 0x93}}}]}, @unspec=@TRACE={0x20}}, {{@ip={@empty, @empty, 0x0, 0x0, 'veth0_vlan\x00', 'netpci0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x0, 0x3]}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3e8) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000000)={@empty, @local, 0x0}, &(0x7f0000000040)=0xc) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r8, 0x89f1, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000380)={'syztnl2\x00', r9, 0x700, 0x40, 0x2, 0x5, {{0x35, 0x4, 0x1, 0x1, 0xd4, 0x0, 0x0, 0x3f, 0x4, 0x0, @remote, @loopback, {[@ssrr={0x89, 0x13, 0xe2, [@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @remote]}, @noop, @ra={0x94, 0x4, 0x1}, @generic={0x82, 0x5, "058716"}, @lsrr={0x83, 0x1f, 0xa9, [@rand_addr=0x64010101, @broadcast, @remote, @multicast2, @broadcast, @private=0xa010102, @empty]}, @timestamp_addr={0x44, 0x3c, 0x6d, 0x1, 0xa, [{@local, 0x9}, {@local}, {@local, 0xfffffffd}, {@local, 0x80000000}, {@broadcast, 0x7fff}, {@broadcast, 0x7ff}, {@multicast1, 0x1}]}, @timestamp={0x44, 0xc, 0x34, 0x0, 0x0, [0x5, 0x2]}, @generic={0x83, 0xf, "1ce281af4e35b1745d312aa54b"}, @ssrr={0x89, 0x27, 0x88, [@remote, @multicast1, @empty, @multicast1, @rand_addr=0x64010101, @loopback, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1]}, @generic={0x7, 0x3, '/'}]}}}}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f0000000180)={&(0x7f0000000840)=ANY=[@ANYBLOB="780000005400010026bd7000fbdbdf2507000000", @ANYRESOCT, @ANYBLOB="ed8e0100", @ANYRES32=r9, @ANYBLOB="000201006401010200000000000000000000000086dd000020000100", @ANYRES32, @ANYBLOB="01050300ac1e000100000000000000000000000086dd000020000100", @ANYRES32, @ANYBLOB="010100002001000000000000000000000000000096dd0000"], 0x78}, 0x1, 0x0, 0x0, 0x8840}, 0x4008040) sendmsg$nl_route_sched(r1, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000600)=@newtclass={0x4ac, 0x28, 0x10, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0x5, 0x1d}, {0xfff1, 0xf}, {0x2, 0xb}}, [@tclass_kind_options, @tclass_kind_options=@c_taprio={0xb}, @tclass_kind_options=@c_netem={0xa}, @tclass_kind_options=@c_mq={0x7}, @tclass_kind_options=@c_netem={0xa}, @tclass_kind_options=@c_multiq={0xb}]}, 0x4ac}, 0x1, 0x0, 0x0, 0x4008180}, 0x40010) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newtfilter={0x6c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x3c, 0x2, [@TCA_BASIC_EMATCHES={0x38, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x2c, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1}, @TCF_EM_META={0x18, 0x2, 0x0, 0x0, {{}, [@TCA_EM_META_HDR={0xc}]}}]}]}]}}]}, 0x6c}}, 0x0) [ 2445.201953][T28625] __nla_validate_parse: 6 callbacks suppressed [ 2445.202042][T28625] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2445.224774][T28625] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 00:40:45 executing program 1: shmctl$SHM_STAT(0x0, 0xd, &(0x7f0000000c40)=""/27) 00:40:45 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000f000000850000007500000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r6, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x41, 0x3, 0x230, 0x0, 0x19, 0x0, 0x0, 0x0, 0x2e8, 0x1f0, 0x1f0, 0x2e8, 0x1f0, 0x3, 0x0, {[{{@ip={@private, @dev, 0x0, 0x0, 'wlan1\x00', 'wg1\x00'}, 0x0, 0xa8, 0xc8, 0x0, {0x0, 0xffffffffa0028000}, [@common=@unspec=@quota={{0x38}}]}, @unspec=@TRACE={0x20}}, {{@ip={@empty, @empty, 0x0, 0x0, 'veth0_vlan\x00', 'netpci0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x290) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000000)={@empty, @local, 0x0}, &(0x7f0000000040)=0xc) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000380)=ANY=[@ANYBLOB="72797a746e6c32000000000010bd084f", @ANYRES32=r7, @ANYBLOB="070000400000000200000005450500d4006700003f049078ac1414bb7f0000018913e2e0000001ac1e0001ffffffffac1414bb01940401008205058716831fa964010101ffffffffac1414bbe0000002ffffffff0a01010200000000443c6da1ac1414aa00000009ac14141c00000000ac1414aafffffffdac1414aa80000000ffffffff00007fffffffffff000007ffe000000100000001440c34000000000500000002830f1ce281af4e35b1745d312aa54b892788ac1414bbe000000100000000e0000001640101017f00000164010100ac1e0001e000000107032f000000"]}) r9 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r9, 0x4000000000000, 0x40, &(0x7f0000000900)=@raw={'raw\x00', 0x41, 0x3, 0x388, 0x0, 0x19, 0x0, 0x0, 0x0, 0x2f0, 0x1f0, 0x1f0, 0x2f0, 0x1f0, 0x3, 0x0, {[{{@ip={@private, @dev, 0x0, 0x0, 'wlan1\x00', 'wg1\x00'}, 0x0, 0x200, 0x220, 0x0, {0x0, 0xffffffffa0028000}, [@common=@set={{0x40}, {{0x4, [0x4, 0x2, 0xa, 0x6, 0x8, 0x2], 0x2, 0x2}}}, @common=@inet=@hashlimit2={{0x150}, {'veth1\x00', {0x0, 0x8, 0x40, 0x0, 0x0, 0x687c, 0x93}}}]}, @unspec=@TRACE={0x20}}, {{@ip={@empty, @empty, 0x0, 0x0, 'veth0_vlan\x00', 'netpci0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x0, 0x3]}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3e8) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000000)={@empty, @local, 0x0}, &(0x7f0000000040)=0xc) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r9, 0x89f1, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000380)={'syztnl2\x00', r10, 0x700, 0x40, 0x2, 0x5, {{0x35, 0x4, 0x1, 0x1, 0xd4, 0x0, 0x0, 0x3f, 0x4, 0x0, @remote, @loopback, {[@ssrr={0x89, 0x13, 0xe2, [@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @remote]}, @noop, @ra={0x94, 0x4, 0x1}, @generic={0x82, 0x5, "058716"}, @lsrr={0x83, 0x1f, 0xa9, [@rand_addr=0x64010101, @broadcast, @remote, @multicast2, @broadcast, @private=0xa010102, @empty]}, @timestamp_addr={0x44, 0x3c, 0x6d, 0x1, 0xa, [{@local, 0x9}, {@local}, {@local, 0xfffffffd}, {@local, 0x80000000}, {@broadcast, 0x7fff}, {@broadcast, 0x7ff}, {@multicast1, 0x1}]}, @timestamp={0x44, 0xc, 0x34, 0x0, 0x0, [0x5, 0x2]}, @generic={0x83, 0xf, "1ce281af4e35b1745d312aa54b"}, @ssrr={0x89, 0x27, 0x88, [@remote, @multicast1, @empty, @multicast1, @rand_addr=0x64010101, @loopback, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1]}, @generic={0x7, 0x3, '/'}]}}}}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f0000000180)={&(0x7f0000000840)=ANY=[@ANYRESOCT=r8, @ANYBLOB="ed8e0100", @ANYRES32=r10, @ANYBLOB="000201006401010200000000000000000000000086dd000020000100", @ANYRES32, @ANYBLOB="01050300ac1e000100000000000000000000000086dd000020000100", @ANYRES32, @ANYBLOB="010100002001000000000000000000000000000096dd0000"], 0x78}, 0x1, 0x0, 0x0, 0x8840}, 0x4008040) sendmsg$nl_route_sched(r1, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000600)=@newtclass={0x4ac, 0x28, 0x10, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0x5, 0x1d}, {0xfff1, 0xf}, {0x2, 0xb}}, [@tclass_kind_options, @tclass_kind_options=@c_taprio={0xb}, @tclass_kind_options=@c_netem={0xa}, @tclass_kind_options=@c_mq={0x7}, @tclass_kind_options=@c_netem={0xa}, @tclass_kind_options=@c_multiq={0xb}]}, 0x4ac}, 0x1, 0x0, 0x0, 0x4008180}, 0x40010) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newtfilter={0x6c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x3c, 0x2, [@TCA_BASIC_EMATCHES={0x38, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x2c, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1}, @TCF_EM_META={0x18, 0x2, 0x0, 0x0, {{}, [@TCA_EM_META_HDR={0xc}]}}]}]}]}}]}, 0x6c}}, 0x0) [ 2446.107373][T28629] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2446.134241][T28629] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 00:40:46 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000f000000850000007500000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r6, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x41, 0x3, 0x230, 0x0, 0x19, 0x0, 0x0, 0x0, 0x2e8, 0x1f0, 0x1f0, 0x2e8, 0x1f0, 0x3, 0x0, {[{{@ip={@private, @dev, 0x0, 0x0, 'wlan1\x00', 'wg1\x00'}, 0x0, 0xa8, 0xc8, 0x0, {0x0, 0xffffffffa0028000}, [@common=@unspec=@quota={{0x38}}]}, @unspec=@TRACE={0x20}}, {{@ip={@empty, @empty, 0x0, 0x0, 'veth0_vlan\x00', 'netpci0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x290) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000000)={@empty, @local, 0x0}, &(0x7f0000000040)=0xc) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000380)=ANY=[@ANYBLOB="72797a746e6c32000000000010bd084f", @ANYRES32=r7, @ANYBLOB="070000400000000200000005450500d4006700003f049078ac1414bb7f0000018913e2e0000001ac1e0001ffffffffac1414bb01940401008205058716831fa964010101ffffffffac1414bbe0000002ffffffff0a01010200000000443c6da1ac1414aa00000009ac14141c00000000ac1414aafffffffdac1414aa80000000ffffffff00007fffffffffff000007ffe000000100000001440c34000000000500000002830f1ce281af4e35b1745d312aa54b892788ac1414bbe000000100000000e0000001640101017f00000164010100ac1e0001e000000107032f000000"]}) r9 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r9, 0x4000000000000, 0x40, &(0x7f0000000900)=@raw={'raw\x00', 0x41, 0x3, 0x388, 0x0, 0x19, 0x0, 0x0, 0x0, 0x2f0, 0x1f0, 0x1f0, 0x2f0, 0x1f0, 0x3, 0x0, {[{{@ip={@private, @dev, 0x0, 0x0, 'wlan1\x00', 'wg1\x00'}, 0x0, 0x200, 0x220, 0x0, {0x0, 0xffffffffa0028000}, [@common=@set={{0x40}, {{0x4, [0x4, 0x2, 0xa, 0x6, 0x8, 0x2], 0x2, 0x2}}}, @common=@inet=@hashlimit2={{0x150}, {'veth1\x00', {0x0, 0x8, 0x40, 0x0, 0x0, 0x687c, 0x93}}}]}, @unspec=@TRACE={0x20}}, {{@ip={@empty, @empty, 0x0, 0x0, 'veth0_vlan\x00', 'netpci0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x0, 0x3]}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3e8) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000000)={@empty, @local, 0x0}, &(0x7f0000000040)=0xc) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r9, 0x89f1, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000380)={'syztnl2\x00', r10, 0x700, 0x40, 0x2, 0x5, {{0x35, 0x4, 0x1, 0x1, 0xd4, 0x0, 0x0, 0x3f, 0x4, 0x0, @remote, @loopback, {[@ssrr={0x89, 0x13, 0xe2, [@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @remote]}, @noop, @ra={0x94, 0x4, 0x1}, @generic={0x82, 0x5, "058716"}, @lsrr={0x83, 0x1f, 0xa9, [@rand_addr=0x64010101, @broadcast, @remote, @multicast2, @broadcast, @private=0xa010102, @empty]}, @timestamp_addr={0x44, 0x3c, 0x6d, 0x1, 0xa, [{@local, 0x9}, {@local}, {@local, 0xfffffffd}, {@local, 0x80000000}, {@broadcast, 0x7fff}, {@broadcast, 0x7ff}, {@multicast1, 0x1}]}, @timestamp={0x44, 0xc, 0x34, 0x0, 0x0, [0x5, 0x2]}, @generic={0x83, 0xf, "1ce281af4e35b1745d312aa54b"}, @ssrr={0x89, 0x27, 0x88, [@remote, @multicast1, @empty, @multicast1, @rand_addr=0x64010101, @loopback, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1]}, @generic={0x7, 0x3, '/'}]}}}}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f0000000180)={&(0x7f0000000840)=ANY=[@ANYRESOCT=r8, @ANYBLOB="ed8e0100", @ANYRES32=r10, @ANYBLOB="000201006401010200000000000000000000000086dd000020000100", @ANYRES32, @ANYBLOB="01050300ac1e000100000000000000000000000086dd000020000100", @ANYRES32, @ANYBLOB="010100002001000000000000000000000000000096dd0000"], 0x78}, 0x1, 0x0, 0x0, 0x8840}, 0x4008040) sendmsg$nl_route_sched(r1, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000600)=@newtclass={0x4ac, 0x28, 0x10, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0x5, 0x1d}, {0xfff1, 0xf}, {0x2, 0xb}}, [@tclass_kind_options, @tclass_kind_options=@c_taprio={0xb}, @tclass_kind_options=@c_netem={0xa}, @tclass_kind_options=@c_mq={0x7}, @tclass_kind_options=@c_netem={0xa}, @tclass_kind_options=@c_multiq={0xb}]}, 0x4ac}, 0x1, 0x0, 0x0, 0x4008180}, 0x40010) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newtfilter={0x6c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x3c, 0x2, [@TCA_BASIC_EMATCHES={0x38, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x2c, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1}, @TCF_EM_META={0x18, 0x2, 0x0, 0x0, {{}, [@TCA_EM_META_HDR={0xc}]}}]}]}]}}]}, 0x6c}}, 0x0) 00:40:46 executing program 1: lchown(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0) [ 2446.914360][T28633] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2446.951502][T28633] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 00:40:47 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000f000000850000007500000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r6, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x41, 0x3, 0x230, 0x0, 0x19, 0x0, 0x0, 0x0, 0x2e8, 0x1f0, 0x1f0, 0x2e8, 0x1f0, 0x3, 0x0, {[{{@ip={@private, @dev, 0x0, 0x0, 'wlan1\x00', 'wg1\x00'}, 0x0, 0xa8, 0xc8, 0x0, {0x0, 0xffffffffa0028000}, [@common=@unspec=@quota={{0x38}}]}, @unspec=@TRACE={0x20}}, {{@ip={@empty, @empty, 0x0, 0x0, 'veth0_vlan\x00', 'netpci0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x290) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000000)={@empty, @local, 0x0}, &(0x7f0000000040)=0xc) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000380)=ANY=[@ANYBLOB="72797a746e6c32000000000010bd084f", @ANYRES32=r7, @ANYBLOB="070000400000000200000005450500d4006700003f049078ac1414bb7f0000018913e2e0000001ac1e0001ffffffffac1414bb01940401008205058716831fa964010101ffffffffac1414bbe0000002ffffffff0a01010200000000443c6da1ac1414aa00000009ac14141c00000000ac1414aafffffffdac1414aa80000000ffffffff00007fffffffffff000007ffe000000100000001440c34000000000500000002830f1ce281af4e35b1745d312aa54b892788ac1414bbe000000100000000e0000001640101017f00000164010100ac1e0001e000000107032f000000"]}) r9 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r9, 0x4000000000000, 0x40, &(0x7f0000000900)=@raw={'raw\x00', 0x41, 0x3, 0x388, 0x0, 0x19, 0x0, 0x0, 0x0, 0x2f0, 0x1f0, 0x1f0, 0x2f0, 0x1f0, 0x3, 0x0, {[{{@ip={@private, @dev, 0x0, 0x0, 'wlan1\x00', 'wg1\x00'}, 0x0, 0x200, 0x220, 0x0, {0x0, 0xffffffffa0028000}, [@common=@set={{0x40}, {{0x4, [0x4, 0x2, 0xa, 0x6, 0x8, 0x2], 0x2, 0x2}}}, @common=@inet=@hashlimit2={{0x150}, {'veth1\x00', {0x0, 0x8, 0x40, 0x0, 0x0, 0x687c, 0x93}}}]}, @unspec=@TRACE={0x20}}, {{@ip={@empty, @empty, 0x0, 0x0, 'veth0_vlan\x00', 'netpci0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x0, 0x3]}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3e8) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000000)={@empty, @local, 0x0}, &(0x7f0000000040)=0xc) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r9, 0x89f1, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000380)={'syztnl2\x00', r10, 0x700, 0x40, 0x2, 0x5, {{0x35, 0x4, 0x1, 0x1, 0xd4, 0x0, 0x0, 0x3f, 0x4, 0x0, @remote, @loopback, {[@ssrr={0x89, 0x13, 0xe2, [@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @remote]}, @noop, @ra={0x94, 0x4, 0x1}, @generic={0x82, 0x5, "058716"}, @lsrr={0x83, 0x1f, 0xa9, [@rand_addr=0x64010101, @broadcast, @remote, @multicast2, @broadcast, @private=0xa010102, @empty]}, @timestamp_addr={0x44, 0x3c, 0x6d, 0x1, 0xa, [{@local, 0x9}, {@local}, {@local, 0xfffffffd}, {@local, 0x80000000}, {@broadcast, 0x7fff}, {@broadcast, 0x7ff}, {@multicast1, 0x1}]}, @timestamp={0x44, 0xc, 0x34, 0x0, 0x0, [0x5, 0x2]}, @generic={0x83, 0xf, "1ce281af4e35b1745d312aa54b"}, @ssrr={0x89, 0x27, 0x88, [@remote, @multicast1, @empty, @multicast1, @rand_addr=0x64010101, @loopback, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1]}, @generic={0x7, 0x3, '/'}]}}}}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f0000000180)={&(0x7f0000000840)=ANY=[@ANYRESOCT=r8, @ANYBLOB="ed8e0100", @ANYRES32=r10, @ANYBLOB="000201006401010200000000000000000000000086dd000020000100", @ANYRES32, @ANYBLOB="01050300ac1e000100000000000000000000000086dd000020000100", @ANYRES32, @ANYBLOB="010100002001000000000000000000000000000096dd0000"], 0x78}, 0x1, 0x0, 0x0, 0x8840}, 0x4008040) sendmsg$nl_route_sched(r1, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000600)=@newtclass={0x4ac, 0x28, 0x10, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0x5, 0x1d}, {0xfff1, 0xf}, {0x2, 0xb}}, [@tclass_kind_options, @tclass_kind_options=@c_taprio={0xb}, @tclass_kind_options=@c_netem={0xa}, @tclass_kind_options=@c_mq={0x7}, @tclass_kind_options=@c_netem={0xa}, @tclass_kind_options=@c_multiq={0xb}]}, 0x4ac}, 0x1, 0x0, 0x0, 0x4008180}, 0x40010) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newtfilter={0x6c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x3c, 0x2, [@TCA_BASIC_EMATCHES={0x38, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x2c, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1}, @TCF_EM_META={0x18, 0x2, 0x0, 0x0, {{}, [@TCA_EM_META_HDR={0xc}]}}]}]}]}}]}, 0x6c}}, 0x0) [ 2447.635029][T28637] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2447.682209][T28637] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 00:40:47 executing program 1: clock_gettime(0xb, &(0x7f0000000400)) 00:40:48 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000f000000850000007500000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r6, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x41, 0x3, 0x230, 0x0, 0x19, 0x0, 0x0, 0x0, 0x2e8, 0x1f0, 0x1f0, 0x2e8, 0x1f0, 0x3, 0x0, {[{{@ip={@private, @dev, 0x0, 0x0, 'wlan1\x00', 'wg1\x00'}, 0x0, 0xa8, 0xc8, 0x0, {0x0, 0xffffffffa0028000}, [@common=@unspec=@quota={{0x38}}]}, @unspec=@TRACE={0x20}}, {{@ip={@empty, @empty, 0x0, 0x0, 'veth0_vlan\x00', 'netpci0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x290) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000000)={@empty, @local, 0x0}, &(0x7f0000000040)=0xc) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000380)=ANY=[@ANYBLOB="72797a746e6c32000000000010bd084f", @ANYRES32=r7, @ANYBLOB="070000400000000200000005450500d4006700003f049078ac1414bb7f0000018913e2e0000001ac1e0001ffffffffac1414bb01940401008205058716831fa964010101ffffffffac1414bbe0000002ffffffff0a01010200000000443c6da1ac1414aa00000009ac14141c00000000ac1414aafffffffdac1414aa80000000ffffffff00007fffffffffff000007ffe000000100000001440c34000000000500000002830f1ce281af4e35b1745d312aa54b892788ac1414bbe000000100000000e0000001640101017f00000164010100ac1e0001e000000107032f000000"]}) r9 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r9, 0x4000000000000, 0x40, &(0x7f0000000900)=@raw={'raw\x00', 0x41, 0x3, 0x388, 0x0, 0x19, 0x0, 0x0, 0x0, 0x2f0, 0x1f0, 0x1f0, 0x2f0, 0x1f0, 0x3, 0x0, {[{{@ip={@private, @dev, 0x0, 0x0, 'wlan1\x00', 'wg1\x00'}, 0x0, 0x200, 0x220, 0x0, {0x0, 0xffffffffa0028000}, [@common=@set={{0x40}, {{0x4, [0x4, 0x2, 0xa, 0x6, 0x8, 0x2], 0x2, 0x2}}}, @common=@inet=@hashlimit2={{0x150}, {'veth1\x00', {0x0, 0x8, 0x40, 0x0, 0x0, 0x687c, 0x93}}}]}, @unspec=@TRACE={0x20}}, {{@ip={@empty, @empty, 0x0, 0x0, 'veth0_vlan\x00', 'netpci0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x0, 0x3]}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3e8) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000000)={@empty, @local, 0x0}, &(0x7f0000000040)=0xc) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r9, 0x89f1, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000380)={'syztnl2\x00', r10, 0x700, 0x40, 0x2, 0x5, {{0x35, 0x4, 0x1, 0x1, 0xd4, 0x0, 0x0, 0x3f, 0x4, 0x0, @remote, @loopback, {[@ssrr={0x89, 0x13, 0xe2, [@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @remote]}, @noop, @ra={0x94, 0x4, 0x1}, @generic={0x82, 0x5, "058716"}, @lsrr={0x83, 0x1f, 0xa9, [@rand_addr=0x64010101, @broadcast, @remote, @multicast2, @broadcast, @private=0xa010102, @empty]}, @timestamp_addr={0x44, 0x3c, 0x6d, 0x1, 0xa, [{@local, 0x9}, {@local}, {@local, 0xfffffffd}, {@local, 0x80000000}, {@broadcast, 0x7fff}, {@broadcast, 0x7ff}, {@multicast1, 0x1}]}, @timestamp={0x44, 0xc, 0x34, 0x0, 0x0, [0x5, 0x2]}, @generic={0x83, 0xf, "1ce281af4e35b1745d312aa54b"}, @ssrr={0x89, 0x27, 0x88, [@remote, @multicast1, @empty, @multicast1, @rand_addr=0x64010101, @loopback, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1]}, @generic={0x7, 0x3, '/'}]}}}}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f0000000180)={&(0x7f0000000840)=ANY=[@ANYBLOB, @ANYRESOCT=r8, @ANYBLOB="ed8e0100", @ANYRES32=r10, @ANYBLOB="000201006401010200000000000000000000000086dd000020000100", @ANYRES32, @ANYBLOB="01050300ac1e000100000000000000000000000086dd000020000100", @ANYRES32, @ANYBLOB="010100002001000000000000000000000000000096dd0000"], 0x78}, 0x1, 0x0, 0x0, 0x8840}, 0x4008040) sendmsg$nl_route_sched(r1, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000600)=@newtclass={0x4ac, 0x28, 0x10, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0x5, 0x1d}, {0xfff1, 0xf}, {0x2, 0xb}}, [@tclass_kind_options, @tclass_kind_options=@c_taprio={0xb}, @tclass_kind_options=@c_netem={0xa}, @tclass_kind_options=@c_mq={0x7}, @tclass_kind_options=@c_netem={0xa}, @tclass_kind_options=@c_multiq={0xb}]}, 0x4ac}, 0x1, 0x0, 0x0, 0x4008180}, 0x40010) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newtfilter={0x6c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x3c, 0x2, [@TCA_BASIC_EMATCHES={0x38, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x2c, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1}, @TCF_EM_META={0x18, 0x2, 0x0, 0x0, {{}, [@TCA_EM_META_HDR={0xc}]}}]}]}]}}]}, 0x6c}}, 0x0) [ 2448.232192][T28642] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2448.238198][T28642] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 00:40:48 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000f000000850000007500000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r6, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x41, 0x3, 0x230, 0x0, 0x19, 0x0, 0x0, 0x0, 0x2e8, 0x1f0, 0x1f0, 0x2e8, 0x1f0, 0x3, 0x0, {[{{@ip={@private, @dev, 0x0, 0x0, 'wlan1\x00', 'wg1\x00'}, 0x0, 0xa8, 0xc8, 0x0, {0x0, 0xffffffffa0028000}, [@common=@unspec=@quota={{0x38}}]}, @unspec=@TRACE={0x20}}, {{@ip={@empty, @empty, 0x0, 0x0, 'veth0_vlan\x00', 'netpci0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x290) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000000)={@empty, @local, 0x0}, &(0x7f0000000040)=0xc) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000380)=ANY=[@ANYBLOB="72797a746e6c32000000000010bd084f", @ANYRES32=r7, @ANYBLOB="070000400000000200000005450500d4006700003f049078ac1414bb7f0000018913e2e0000001ac1e0001ffffffffac1414bb01940401008205058716831fa964010101ffffffffac1414bbe0000002ffffffff0a01010200000000443c6da1ac1414aa00000009ac14141c00000000ac1414aafffffffdac1414aa80000000ffffffff00007fffffffffff000007ffe000000100000001440c34000000000500000002830f1ce281af4e35b1745d312aa54b892788ac1414bbe000000100000000e0000001640101017f00000164010100ac1e0001e000000107032f000000"]}) r9 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r9, 0x4000000000000, 0x40, &(0x7f0000000900)=@raw={'raw\x00', 0x41, 0x3, 0x388, 0x0, 0x19, 0x0, 0x0, 0x0, 0x2f0, 0x1f0, 0x1f0, 0x2f0, 0x1f0, 0x3, 0x0, {[{{@ip={@private, @dev, 0x0, 0x0, 'wlan1\x00', 'wg1\x00'}, 0x0, 0x200, 0x220, 0x0, {0x0, 0xffffffffa0028000}, [@common=@set={{0x40}, {{0x4, [0x4, 0x2, 0xa, 0x6, 0x8, 0x2], 0x2, 0x2}}}, @common=@inet=@hashlimit2={{0x150}, {'veth1\x00', {0x0, 0x8, 0x40, 0x0, 0x0, 0x687c, 0x93}}}]}, @unspec=@TRACE={0x20}}, {{@ip={@empty, @empty, 0x0, 0x0, 'veth0_vlan\x00', 'netpci0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x0, 0x3]}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3e8) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000000)={@empty, @local, 0x0}, &(0x7f0000000040)=0xc) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r9, 0x89f1, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000380)={'syztnl2\x00', r10, 0x700, 0x40, 0x2, 0x5, {{0x35, 0x4, 0x1, 0x1, 0xd4, 0x0, 0x0, 0x3f, 0x4, 0x0, @remote, @loopback, {[@ssrr={0x89, 0x13, 0xe2, [@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @remote]}, @noop, @ra={0x94, 0x4, 0x1}, @generic={0x82, 0x5, "058716"}, @lsrr={0x83, 0x1f, 0xa9, [@rand_addr=0x64010101, @broadcast, @remote, @multicast2, @broadcast, @private=0xa010102, @empty]}, @timestamp_addr={0x44, 0x3c, 0x6d, 0x1, 0xa, [{@local, 0x9}, {@local}, {@local, 0xfffffffd}, {@local, 0x80000000}, {@broadcast, 0x7fff}, {@broadcast, 0x7ff}, {@multicast1, 0x1}]}, @timestamp={0x44, 0xc, 0x34, 0x0, 0x0, [0x5, 0x2]}, @generic={0x83, 0xf, "1ce281af4e35b1745d312aa54b"}, @ssrr={0x89, 0x27, 0x88, [@remote, @multicast1, @empty, @multicast1, @rand_addr=0x64010101, @loopback, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1]}, @generic={0x7, 0x3, '/'}]}}}}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f0000000180)={&(0x7f0000000840)=ANY=[@ANYBLOB, @ANYRESOCT=r8, @ANYBLOB="ed8e0100", @ANYRES32=r10, @ANYBLOB="000201006401010200000000000000000000000086dd000020000100", @ANYRES32, @ANYBLOB="01050300ac1e000100000000000000000000000086dd000020000100", @ANYRES32, @ANYBLOB="010100002001000000000000000000000000000096dd0000"], 0x78}, 0x1, 0x0, 0x0, 0x8840}, 0x4008040) sendmsg$nl_route_sched(r1, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000600)=@newtclass={0x4ac, 0x28, 0x10, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0x5, 0x1d}, {0xfff1, 0xf}, {0x2, 0xb}}, [@tclass_kind_options, @tclass_kind_options=@c_taprio={0xb}, @tclass_kind_options=@c_netem={0xa}, @tclass_kind_options=@c_mq={0x7}, @tclass_kind_options=@c_netem={0xa}, @tclass_kind_options=@c_multiq={0xb}]}, 0x4ac}, 0x1, 0x0, 0x0, 0x4008180}, 0x40010) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newtfilter={0x6c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x3c, 0x2, [@TCA_BASIC_EMATCHES={0x38, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x2c, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1}, @TCF_EM_META={0x18, 0x2, 0x0, 0x0, {{}, [@TCA_EM_META_HDR={0xc}]}}]}]}]}}]}, 0x6c}}, 0x0) 00:40:48 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000f000000850000007500000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r6, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x41, 0x3, 0x230, 0x0, 0x19, 0x0, 0x0, 0x0, 0x2e8, 0x1f0, 0x1f0, 0x2e8, 0x1f0, 0x3, 0x0, {[{{@ip={@private, @dev, 0x0, 0x0, 'wlan1\x00', 'wg1\x00'}, 0x0, 0xa8, 0xc8, 0x0, {0x0, 0xffffffffa0028000}, [@common=@unspec=@quota={{0x38}}]}, @unspec=@TRACE={0x20}}, {{@ip={@empty, @empty, 0x0, 0x0, 'veth0_vlan\x00', 'netpci0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x290) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000000)={@empty, @local, 0x0}, &(0x7f0000000040)=0xc) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000380)=ANY=[@ANYBLOB="72797a746e6c32000000000010bd084f", @ANYRES32=r7, @ANYBLOB="070000400000000200000005450500d4006700003f049078ac1414bb7f0000018913e2e0000001ac1e0001ffffffffac1414bb01940401008205058716831fa964010101ffffffffac1414bbe0000002ffffffff0a01010200000000443c6da1ac1414aa00000009ac14141c00000000ac1414aafffffffdac1414aa80000000ffffffff00007fffffffffff000007ffe000000100000001440c34000000000500000002830f1ce281af4e35b1745d312aa54b892788ac1414bbe000000100000000e0000001640101017f00000164010100ac1e0001e000000107032f000000"]}) r9 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r9, 0x4000000000000, 0x40, &(0x7f0000000900)=@raw={'raw\x00', 0x41, 0x3, 0x388, 0x0, 0x19, 0x0, 0x0, 0x0, 0x2f0, 0x1f0, 0x1f0, 0x2f0, 0x1f0, 0x3, 0x0, {[{{@ip={@private, @dev, 0x0, 0x0, 'wlan1\x00', 'wg1\x00'}, 0x0, 0x200, 0x220, 0x0, {0x0, 0xffffffffa0028000}, [@common=@set={{0x40}, {{0x4, [0x4, 0x2, 0xa, 0x6, 0x8, 0x2], 0x2, 0x2}}}, @common=@inet=@hashlimit2={{0x150}, {'veth1\x00', {0x0, 0x8, 0x40, 0x0, 0x0, 0x687c, 0x93}}}]}, @unspec=@TRACE={0x20}}, {{@ip={@empty, @empty, 0x0, 0x0, 'veth0_vlan\x00', 'netpci0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x0, 0x3]}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3e8) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000000)={@empty, @local, 0x0}, &(0x7f0000000040)=0xc) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r9, 0x89f1, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000380)={'syztnl2\x00', r10, 0x700, 0x40, 0x2, 0x5, {{0x35, 0x4, 0x1, 0x1, 0xd4, 0x0, 0x0, 0x3f, 0x4, 0x0, @remote, @loopback, {[@ssrr={0x89, 0x13, 0xe2, [@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @remote]}, @noop, @ra={0x94, 0x4, 0x1}, @generic={0x82, 0x5, "058716"}, @lsrr={0x83, 0x1f, 0xa9, [@rand_addr=0x64010101, @broadcast, @remote, @multicast2, @broadcast, @private=0xa010102, @empty]}, @timestamp_addr={0x44, 0x3c, 0x6d, 0x1, 0xa, [{@local, 0x9}, {@local}, {@local, 0xfffffffd}, {@local, 0x80000000}, {@broadcast, 0x7fff}, {@broadcast, 0x7ff}, {@multicast1, 0x1}]}, @timestamp={0x44, 0xc, 0x34, 0x0, 0x0, [0x5, 0x2]}, @generic={0x83, 0xf, "1ce281af4e35b1745d312aa54b"}, @ssrr={0x89, 0x27, 0x88, [@remote, @multicast1, @empty, @multicast1, @rand_addr=0x64010101, @loopback, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1]}, @generic={0x7, 0x3, '/'}]}}}}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f0000000180)={&(0x7f0000000840)=ANY=[@ANYBLOB, @ANYRESOCT=r8, @ANYBLOB="ed8e0100", @ANYRES32=r10, @ANYBLOB="000201006401010200000000000000000000000086dd000020000100", @ANYRES32, @ANYBLOB="01050300ac1e000100000000000000000000000086dd000020000100", @ANYRES32, @ANYBLOB="010100002001000000000000000000000000000096dd0000"], 0x78}, 0x1, 0x0, 0x0, 0x8840}, 0x4008040) sendmsg$nl_route_sched(r1, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000600)=@newtclass={0x4ac, 0x28, 0x10, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0x5, 0x1d}, {0xfff1, 0xf}, {0x2, 0xb}}, [@tclass_kind_options, @tclass_kind_options=@c_taprio={0xb}, @tclass_kind_options=@c_netem={0xa}, @tclass_kind_options=@c_mq={0x7}, @tclass_kind_options=@c_netem={0xa}, @tclass_kind_options=@c_multiq={0xb}]}, 0x4ac}, 0x1, 0x0, 0x0, 0x4008180}, 0x40010) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newtfilter={0x6c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x3c, 0x2, [@TCA_BASIC_EMATCHES={0x38, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x2c, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1}, @TCF_EM_META={0x18, 0x2, 0x0, 0x0, {{}, [@TCA_EM_META_HDR={0xc}]}}]}]}]}}]}, 0x6c}}, 0x0) 00:40:49 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000f000000850000007500000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r6, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x41, 0x3, 0x230, 0x0, 0x19, 0x0, 0x0, 0x0, 0x2e8, 0x1f0, 0x1f0, 0x2e8, 0x1f0, 0x3, 0x0, {[{{@ip={@private, @dev, 0x0, 0x0, 'wlan1\x00', 'wg1\x00'}, 0x0, 0xa8, 0xc8, 0x0, {0x0, 0xffffffffa0028000}, [@common=@unspec=@quota={{0x38}}]}, @unspec=@TRACE={0x20}}, {{@ip={@empty, @empty, 0x0, 0x0, 'veth0_vlan\x00', 'netpci0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x290) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000000)={@empty, @local, 0x0}, &(0x7f0000000040)=0xc) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000380)=ANY=[@ANYBLOB="72797a746e6c32000000000010bd084f", @ANYRES32=r7, @ANYBLOB="070000400000000200000005450500d4006700003f049078ac1414bb7f0000018913e2e0000001ac1e0001ffffffffac1414bb01940401008205058716831fa964010101ffffffffac1414bbe0000002ffffffff0a01010200000000443c6da1ac1414aa00000009ac14141c00000000ac1414aafffffffdac1414aa80000000ffffffff00007fffffffffff000007ffe000000100000001440c34000000000500000002830f1ce281af4e35b1745d312aa54b892788ac1414bbe000000100000000e0000001640101017f00000164010100ac1e0001e000000107032f000000"]}) r9 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r9, 0x4000000000000, 0x40, &(0x7f0000000900)=@raw={'raw\x00', 0x41, 0x3, 0x388, 0x0, 0x19, 0x0, 0x0, 0x0, 0x2f0, 0x1f0, 0x1f0, 0x2f0, 0x1f0, 0x3, 0x0, {[{{@ip={@private, @dev, 0x0, 0x0, 'wlan1\x00', 'wg1\x00'}, 0x0, 0x200, 0x220, 0x0, {0x0, 0xffffffffa0028000}, [@common=@set={{0x40}, {{0x4, [0x4, 0x2, 0xa, 0x6, 0x8, 0x2], 0x2, 0x2}}}, @common=@inet=@hashlimit2={{0x150}, {'veth1\x00', {0x0, 0x8, 0x40, 0x0, 0x0, 0x687c, 0x93}}}]}, @unspec=@TRACE={0x20}}, {{@ip={@empty, @empty, 0x0, 0x0, 'veth0_vlan\x00', 'netpci0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x0, 0x3]}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3e8) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000000)={@empty, @local, 0x0}, &(0x7f0000000040)=0xc) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r9, 0x89f1, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000380)={'syztnl2\x00', r10, 0x700, 0x40, 0x2, 0x5, {{0x35, 0x4, 0x1, 0x1, 0xd4, 0x0, 0x0, 0x3f, 0x4, 0x0, @remote, @loopback, {[@ssrr={0x89, 0x13, 0xe2, [@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @remote]}, @noop, @ra={0x94, 0x4, 0x1}, @generic={0x82, 0x5, "058716"}, @lsrr={0x83, 0x1f, 0xa9, [@rand_addr=0x64010101, @broadcast, @remote, @multicast2, @broadcast, @private=0xa010102, @empty]}, @timestamp_addr={0x44, 0x3c, 0x6d, 0x1, 0xa, [{@local, 0x9}, {@local}, {@local, 0xfffffffd}, {@local, 0x80000000}, {@broadcast, 0x7fff}, {@broadcast, 0x7ff}, {@multicast1, 0x1}]}, @timestamp={0x44, 0xc, 0x34, 0x0, 0x0, [0x5, 0x2]}, @generic={0x83, 0xf, "1ce281af4e35b1745d312aa54b"}, @ssrr={0x89, 0x27, 0x88, [@remote, @multicast1, @empty, @multicast1, @rand_addr=0x64010101, @loopback, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1]}, @generic={0x7, 0x3, '/'}]}}}}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f0000000180)={&(0x7f0000000840)=ANY=[@ANYBLOB="780000005400010026bd", @ANYRESOCT=r8, @ANYBLOB="ed8e0100", @ANYRES32=r10, @ANYBLOB="000201006401010200000000000000000000000086dd000020000100", @ANYRES32, @ANYBLOB="01050300ac1e000100000000000000000000000086dd000020000100", @ANYRES32, @ANYBLOB="010100002001000000000000000000000000000096dd0000"], 0x78}, 0x1, 0x0, 0x0, 0x8840}, 0x4008040) sendmsg$nl_route_sched(r1, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000600)=@newtclass={0x4ac, 0x28, 0x10, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0x5, 0x1d}, {0xfff1, 0xf}, {0x2, 0xb}}, [@tclass_kind_options, @tclass_kind_options=@c_taprio={0xb}, @tclass_kind_options=@c_netem={0xa}, @tclass_kind_options=@c_mq={0x7}, @tclass_kind_options=@c_netem={0xa}, @tclass_kind_options=@c_multiq={0xb}]}, 0x4ac}, 0x1, 0x0, 0x0, 0x4008180}, 0x40010) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newtfilter={0x6c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x3c, 0x2, [@TCA_BASIC_EMATCHES={0x38, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x2c, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1}, @TCF_EM_META={0x18, 0x2, 0x0, 0x0, {{}, [@TCA_EM_META_HDR={0xc}]}}]}]}]}}]}, 0x6c}}, 0x0) 00:40:49 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000f000000850000007500000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r6, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x41, 0x3, 0x230, 0x0, 0x19, 0x0, 0x0, 0x0, 0x2e8, 0x1f0, 0x1f0, 0x2e8, 0x1f0, 0x3, 0x0, {[{{@ip={@private, @dev, 0x0, 0x0, 'wlan1\x00', 'wg1\x00'}, 0x0, 0xa8, 0xc8, 0x0, {0x0, 0xffffffffa0028000}, [@common=@unspec=@quota={{0x38}}]}, @unspec=@TRACE={0x20}}, {{@ip={@empty, @empty, 0x0, 0x0, 'veth0_vlan\x00', 'netpci0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x290) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000000)={@empty, @local, 0x0}, &(0x7f0000000040)=0xc) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000380)=ANY=[@ANYBLOB="72797a746e6c32000000000010bd084f", @ANYRES32=r7, @ANYBLOB="070000400000000200000005450500d4006700003f049078ac1414bb7f0000018913e2e0000001ac1e0001ffffffffac1414bb01940401008205058716831fa964010101ffffffffac1414bbe0000002ffffffff0a01010200000000443c6da1ac1414aa00000009ac14141c00000000ac1414aafffffffdac1414aa80000000ffffffff00007fffffffffff000007ffe000000100000001440c34000000000500000002830f1ce281af4e35b1745d312aa54b892788ac1414bbe000000100000000e0000001640101017f00000164010100ac1e0001e000000107032f000000"]}) r9 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r9, 0x4000000000000, 0x40, &(0x7f0000000900)=@raw={'raw\x00', 0x41, 0x3, 0x388, 0x0, 0x19, 0x0, 0x0, 0x0, 0x2f0, 0x1f0, 0x1f0, 0x2f0, 0x1f0, 0x3, 0x0, {[{{@ip={@private, @dev, 0x0, 0x0, 'wlan1\x00', 'wg1\x00'}, 0x0, 0x200, 0x220, 0x0, {0x0, 0xffffffffa0028000}, [@common=@set={{0x40}, {{0x4, [0x4, 0x2, 0xa, 0x6, 0x8, 0x2], 0x2, 0x2}}}, @common=@inet=@hashlimit2={{0x150}, {'veth1\x00', {0x0, 0x8, 0x40, 0x0, 0x0, 0x687c, 0x93}}}]}, @unspec=@TRACE={0x20}}, {{@ip={@empty, @empty, 0x0, 0x0, 'veth0_vlan\x00', 'netpci0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x0, 0x3]}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3e8) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000000)={@empty, @local, 0x0}, &(0x7f0000000040)=0xc) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r9, 0x89f1, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000380)={'syztnl2\x00', r10, 0x700, 0x40, 0x2, 0x5, {{0x35, 0x4, 0x1, 0x1, 0xd4, 0x0, 0x0, 0x3f, 0x4, 0x0, @remote, @loopback, {[@ssrr={0x89, 0x13, 0xe2, [@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @remote]}, @noop, @ra={0x94, 0x4, 0x1}, @generic={0x82, 0x5, "058716"}, @lsrr={0x83, 0x1f, 0xa9, [@rand_addr=0x64010101, @broadcast, @remote, @multicast2, @broadcast, @private=0xa010102, @empty]}, @timestamp_addr={0x44, 0x3c, 0x6d, 0x1, 0xa, [{@local, 0x9}, {@local}, {@local, 0xfffffffd}, {@local, 0x80000000}, {@broadcast, 0x7fff}, {@broadcast, 0x7ff}, {@multicast1, 0x1}]}, @timestamp={0x44, 0xc, 0x34, 0x0, 0x0, [0x5, 0x2]}, @generic={0x83, 0xf, "1ce281af4e35b1745d312aa54b"}, @ssrr={0x89, 0x27, 0x88, [@remote, @multicast1, @empty, @multicast1, @rand_addr=0x64010101, @loopback, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1]}, @generic={0x7, 0x3, '/'}]}}}}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f0000000180)={&(0x7f0000000840)=ANY=[@ANYBLOB="780000005400010026bd", @ANYRESOCT=r8, @ANYBLOB="ed8e0100", @ANYRES32=r10, @ANYBLOB="000201006401010200000000000000000000000086dd000020000100", @ANYRES32, @ANYBLOB="01050300ac1e000100000000000000000000000086dd000020000100", @ANYRES32, @ANYBLOB="010100002001000000000000000000000000000096dd0000"], 0x78}, 0x1, 0x0, 0x0, 0x8840}, 0x4008040) sendmsg$nl_route_sched(r1, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000600)=@newtclass={0x4ac, 0x28, 0x10, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0x5, 0x1d}, {0xfff1, 0xf}, {0x2, 0xb}}, [@tclass_kind_options, @tclass_kind_options=@c_taprio={0xb}, @tclass_kind_options=@c_netem={0xa}, @tclass_kind_options=@c_mq={0x7}, @tclass_kind_options=@c_netem={0xa}, @tclass_kind_options=@c_multiq={0xb}]}, 0x4ac}, 0x1, 0x0, 0x0, 0x4008180}, 0x40010) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newtfilter={0x6c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x3c, 0x2, [@TCA_BASIC_EMATCHES={0x38, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x2c, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1}, @TCF_EM_META={0x18, 0x2, 0x0, 0x0, {{}, [@TCA_EM_META_HDR={0xc}]}}]}]}]}}]}, 0x6c}}, 0x0) 00:40:49 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000f000000850000007500000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r6, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x41, 0x3, 0x230, 0x0, 0x19, 0x0, 0x0, 0x0, 0x2e8, 0x1f0, 0x1f0, 0x2e8, 0x1f0, 0x3, 0x0, {[{{@ip={@private, @dev, 0x0, 0x0, 'wlan1\x00', 'wg1\x00'}, 0x0, 0xa8, 0xc8, 0x0, {0x0, 0xffffffffa0028000}, [@common=@unspec=@quota={{0x38}}]}, @unspec=@TRACE={0x20}}, {{@ip={@empty, @empty, 0x0, 0x0, 'veth0_vlan\x00', 'netpci0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x290) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000000)={@empty, @local, 0x0}, &(0x7f0000000040)=0xc) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000380)=ANY=[@ANYBLOB="72797a746e6c32000000000010bd084f", @ANYRES32=r7, @ANYBLOB="070000400000000200000005450500d4006700003f049078ac1414bb7f0000018913e2e0000001ac1e0001ffffffffac1414bb01940401008205058716831fa964010101ffffffffac1414bbe0000002ffffffff0a01010200000000443c6da1ac1414aa00000009ac14141c00000000ac1414aafffffffdac1414aa80000000ffffffff00007fffffffffff000007ffe000000100000001440c34000000000500000002830f1ce281af4e35b1745d312aa54b892788ac1414bbe000000100000000e0000001640101017f00000164010100ac1e0001e000000107032f000000"]}) r9 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r9, 0x4000000000000, 0x40, &(0x7f0000000900)=@raw={'raw\x00', 0x41, 0x3, 0x388, 0x0, 0x19, 0x0, 0x0, 0x0, 0x2f0, 0x1f0, 0x1f0, 0x2f0, 0x1f0, 0x3, 0x0, {[{{@ip={@private, @dev, 0x0, 0x0, 'wlan1\x00', 'wg1\x00'}, 0x0, 0x200, 0x220, 0x0, {0x0, 0xffffffffa0028000}, [@common=@set={{0x40}, {{0x4, [0x4, 0x2, 0xa, 0x6, 0x8, 0x2], 0x2, 0x2}}}, @common=@inet=@hashlimit2={{0x150}, {'veth1\x00', {0x0, 0x8, 0x40, 0x0, 0x0, 0x687c, 0x93}}}]}, @unspec=@TRACE={0x20}}, {{@ip={@empty, @empty, 0x0, 0x0, 'veth0_vlan\x00', 'netpci0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x0, 0x3]}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3e8) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000000)={@empty, @local, 0x0}, &(0x7f0000000040)=0xc) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r9, 0x89f1, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000380)={'syztnl2\x00', r10, 0x700, 0x40, 0x2, 0x5, {{0x35, 0x4, 0x1, 0x1, 0xd4, 0x0, 0x0, 0x3f, 0x4, 0x0, @remote, @loopback, {[@ssrr={0x89, 0x13, 0xe2, [@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @remote]}, @noop, @ra={0x94, 0x4, 0x1}, @generic={0x82, 0x5, "058716"}, @lsrr={0x83, 0x1f, 0xa9, [@rand_addr=0x64010101, @broadcast, @remote, @multicast2, @broadcast, @private=0xa010102, @empty]}, @timestamp_addr={0x44, 0x3c, 0x6d, 0x1, 0xa, [{@local, 0x9}, {@local}, {@local, 0xfffffffd}, {@local, 0x80000000}, {@broadcast, 0x7fff}, {@broadcast, 0x7ff}, {@multicast1, 0x1}]}, @timestamp={0x44, 0xc, 0x34, 0x0, 0x0, [0x5, 0x2]}, @generic={0x83, 0xf, "1ce281af4e35b1745d312aa54b"}, @ssrr={0x89, 0x27, 0x88, [@remote, @multicast1, @empty, @multicast1, @rand_addr=0x64010101, @loopback, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1]}, @generic={0x7, 0x3, '/'}]}}}}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f0000000180)={&(0x7f0000000840)=ANY=[@ANYBLOB="780000005400010026bd", @ANYRESOCT=r8, @ANYBLOB="ed8e0100", @ANYRES32=r10, @ANYBLOB="000201006401010200000000000000000000000086dd000020000100", @ANYRES32, @ANYBLOB="01050300ac1e000100000000000000000000000086dd000020000100", @ANYRES32, @ANYBLOB="010100002001000000000000000000000000000096dd0000"], 0x78}, 0x1, 0x0, 0x0, 0x8840}, 0x4008040) sendmsg$nl_route_sched(r1, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000600)=@newtclass={0x4ac, 0x28, 0x10, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0x5, 0x1d}, {0xfff1, 0xf}, {0x2, 0xb}}, [@tclass_kind_options, @tclass_kind_options=@c_taprio={0xb}, @tclass_kind_options=@c_netem={0xa}, @tclass_kind_options=@c_mq={0x7}, @tclass_kind_options=@c_netem={0xa}, @tclass_kind_options=@c_multiq={0xb}]}, 0x4ac}, 0x1, 0x0, 0x0, 0x4008180}, 0x40010) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newtfilter={0x6c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x3c, 0x2, [@TCA_BASIC_EMATCHES={0x38, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x2c, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1}, @TCF_EM_META={0x18, 0x2, 0x0, 0x0, {{}, [@TCA_EM_META_HDR={0xc}]}}]}]}]}}]}, 0x6c}}, 0x0) 00:40:49 executing program 1: r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000000900)={&(0x7f0000000500)=@in={0x10, 0x2}, 0x10, 0x0, 0x0, &(0x7f00000008c0)=[@sndinfo={0x1c, 0x84, 0x4, {0x0, 0x2600}}], 0x1c}, 0x0) 00:40:50 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000f000000850000007500000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r6, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x41, 0x3, 0x230, 0x0, 0x19, 0x0, 0x0, 0x0, 0x2e8, 0x1f0, 0x1f0, 0x2e8, 0x1f0, 0x3, 0x0, {[{{@ip={@private, @dev, 0x0, 0x0, 'wlan1\x00', 'wg1\x00'}, 0x0, 0xa8, 0xc8, 0x0, {0x0, 0xffffffffa0028000}, [@common=@unspec=@quota={{0x38}}]}, @unspec=@TRACE={0x20}}, {{@ip={@empty, @empty, 0x0, 0x0, 'veth0_vlan\x00', 'netpci0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x290) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000000)={@empty, @local, 0x0}, &(0x7f0000000040)=0xc) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000380)=ANY=[@ANYBLOB="72797a746e6c32000000000010bd084f", @ANYRES32=r7, @ANYBLOB="070000400000000200000005450500d4006700003f049078ac1414bb7f0000018913e2e0000001ac1e0001ffffffffac1414bb01940401008205058716831fa964010101ffffffffac1414bbe0000002ffffffff0a01010200000000443c6da1ac1414aa00000009ac14141c00000000ac1414aafffffffdac1414aa80000000ffffffff00007fffffffffff000007ffe000000100000001440c34000000000500000002830f1ce281af4e35b1745d312aa54b892788ac1414bbe000000100000000e0000001640101017f00000164010100ac1e0001e000000107032f000000"]}) r9 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r9, 0x4000000000000, 0x40, &(0x7f0000000900)=@raw={'raw\x00', 0x41, 0x3, 0x388, 0x0, 0x19, 0x0, 0x0, 0x0, 0x2f0, 0x1f0, 0x1f0, 0x2f0, 0x1f0, 0x3, 0x0, {[{{@ip={@private, @dev, 0x0, 0x0, 'wlan1\x00', 'wg1\x00'}, 0x0, 0x200, 0x220, 0x0, {0x0, 0xffffffffa0028000}, [@common=@set={{0x40}, {{0x4, [0x4, 0x2, 0xa, 0x6, 0x8, 0x2], 0x2, 0x2}}}, @common=@inet=@hashlimit2={{0x150}, {'veth1\x00', {0x0, 0x8, 0x40, 0x0, 0x0, 0x687c, 0x93}}}]}, @unspec=@TRACE={0x20}}, {{@ip={@empty, @empty, 0x0, 0x0, 'veth0_vlan\x00', 'netpci0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x0, 0x3]}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3e8) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000000)={@empty, @local, 0x0}, &(0x7f0000000040)=0xc) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r9, 0x89f1, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000380)={'syztnl2\x00', r10, 0x700, 0x40, 0x2, 0x5, {{0x35, 0x4, 0x1, 0x1, 0xd4, 0x0, 0x0, 0x3f, 0x4, 0x0, @remote, @loopback, {[@ssrr={0x89, 0x13, 0xe2, [@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @remote]}, @noop, @ra={0x94, 0x4, 0x1}, @generic={0x82, 0x5, "058716"}, @lsrr={0x83, 0x1f, 0xa9, [@rand_addr=0x64010101, @broadcast, @remote, @multicast2, @broadcast, @private=0xa010102, @empty]}, @timestamp_addr={0x44, 0x3c, 0x6d, 0x1, 0xa, [{@local, 0x9}, {@local}, {@local, 0xfffffffd}, {@local, 0x80000000}, {@broadcast, 0x7fff}, {@broadcast, 0x7ff}, {@multicast1, 0x1}]}, @timestamp={0x44, 0xc, 0x34, 0x0, 0x0, [0x5, 0x2]}, @generic={0x83, 0xf, "1ce281af4e35b1745d312aa54b"}, @ssrr={0x89, 0x27, 0x88, [@remote, @multicast1, @empty, @multicast1, @rand_addr=0x64010101, @loopback, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1]}, @generic={0x7, 0x3, '/'}]}}}}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f0000000180)={&(0x7f0000000840)=ANY=[@ANYBLOB="780000005400010026bd7000fbdbdf", @ANYRESOCT=r8, @ANYBLOB="ed8e0100", @ANYRES32=r10, @ANYBLOB="000201006401010200000000000000000000000086dd000020000100", @ANYRES32, @ANYBLOB="01050300ac1e000100000000000000000000000086dd000020000100", @ANYRES32, @ANYBLOB="010100002001000000000000000000000000000096dd0000"], 0x78}, 0x1, 0x0, 0x0, 0x8840}, 0x4008040) sendmsg$nl_route_sched(r1, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000600)=@newtclass={0x4ac, 0x28, 0x10, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0x5, 0x1d}, {0xfff1, 0xf}, {0x2, 0xb}}, [@tclass_kind_options, @tclass_kind_options=@c_taprio={0xb}, @tclass_kind_options=@c_netem={0xa}, @tclass_kind_options=@c_mq={0x7}, @tclass_kind_options=@c_netem={0xa}, @tclass_kind_options=@c_multiq={0xb}]}, 0x4ac}, 0x1, 0x0, 0x0, 0x4008180}, 0x40010) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newtfilter={0x6c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x3c, 0x2, [@TCA_BASIC_EMATCHES={0x38, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x2c, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1}, @TCF_EM_META={0x18, 0x2, 0x0, 0x0, {{}, [@TCA_EM_META_HDR={0xc}]}}]}]}]}}]}, 0x6c}}, 0x0) [ 2450.294609][T28662] __nla_validate_parse: 10 callbacks suppressed [ 2450.295046][T28662] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2450.313410][T28662] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 00:40:50 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000f000000850000007500000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r6, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x41, 0x3, 0x230, 0x0, 0x19, 0x0, 0x0, 0x0, 0x2e8, 0x1f0, 0x1f0, 0x2e8, 0x1f0, 0x3, 0x0, {[{{@ip={@private, @dev, 0x0, 0x0, 'wlan1\x00', 'wg1\x00'}, 0x0, 0xa8, 0xc8, 0x0, {0x0, 0xffffffffa0028000}, [@common=@unspec=@quota={{0x38}}]}, @unspec=@TRACE={0x20}}, {{@ip={@empty, @empty, 0x0, 0x0, 'veth0_vlan\x00', 'netpci0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x290) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000000)={@empty, @local, 0x0}, &(0x7f0000000040)=0xc) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000380)=ANY=[@ANYBLOB="72797a746e6c32000000000010bd084f", @ANYRES32=r7, @ANYBLOB="070000400000000200000005450500d4006700003f049078ac1414bb7f0000018913e2e0000001ac1e0001ffffffffac1414bb01940401008205058716831fa964010101ffffffffac1414bbe0000002ffffffff0a01010200000000443c6da1ac1414aa00000009ac14141c00000000ac1414aafffffffdac1414aa80000000ffffffff00007fffffffffff000007ffe000000100000001440c34000000000500000002830f1ce281af4e35b1745d312aa54b892788ac1414bbe000000100000000e0000001640101017f00000164010100ac1e0001e000000107032f000000"]}) r9 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r9, 0x4000000000000, 0x40, &(0x7f0000000900)=@raw={'raw\x00', 0x41, 0x3, 0x388, 0x0, 0x19, 0x0, 0x0, 0x0, 0x2f0, 0x1f0, 0x1f0, 0x2f0, 0x1f0, 0x3, 0x0, {[{{@ip={@private, @dev, 0x0, 0x0, 'wlan1\x00', 'wg1\x00'}, 0x0, 0x200, 0x220, 0x0, {0x0, 0xffffffffa0028000}, [@common=@set={{0x40}, {{0x4, [0x4, 0x2, 0xa, 0x6, 0x8, 0x2], 0x2, 0x2}}}, @common=@inet=@hashlimit2={{0x150}, {'veth1\x00', {0x0, 0x8, 0x40, 0x0, 0x0, 0x687c, 0x93}}}]}, @unspec=@TRACE={0x20}}, {{@ip={@empty, @empty, 0x0, 0x0, 'veth0_vlan\x00', 'netpci0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x0, 0x3]}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3e8) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000000)={@empty, @local, 0x0}, &(0x7f0000000040)=0xc) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r9, 0x89f1, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000380)={'syztnl2\x00', r10, 0x700, 0x40, 0x2, 0x5, {{0x35, 0x4, 0x1, 0x1, 0xd4, 0x0, 0x0, 0x3f, 0x4, 0x0, @remote, @loopback, {[@ssrr={0x89, 0x13, 0xe2, [@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @remote]}, @noop, @ra={0x94, 0x4, 0x1}, @generic={0x82, 0x5, "058716"}, @lsrr={0x83, 0x1f, 0xa9, [@rand_addr=0x64010101, @broadcast, @remote, @multicast2, @broadcast, @private=0xa010102, @empty]}, @timestamp_addr={0x44, 0x3c, 0x6d, 0x1, 0xa, [{@local, 0x9}, {@local}, {@local, 0xfffffffd}, {@local, 0x80000000}, {@broadcast, 0x7fff}, {@broadcast, 0x7ff}, {@multicast1, 0x1}]}, @timestamp={0x44, 0xc, 0x34, 0x0, 0x0, [0x5, 0x2]}, @generic={0x83, 0xf, "1ce281af4e35b1745d312aa54b"}, @ssrr={0x89, 0x27, 0x88, [@remote, @multicast1, @empty, @multicast1, @rand_addr=0x64010101, @loopback, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1]}, @generic={0x7, 0x3, '/'}]}}}}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f0000000180)={&(0x7f0000000840)=ANY=[@ANYBLOB="780000005400010026bd7000fbdbdf", @ANYRESOCT=r8, @ANYBLOB="ed8e0100", @ANYRES32=r10, @ANYBLOB="000201006401010200000000000000000000000086dd000020000100", @ANYRES32, @ANYBLOB="01050300ac1e000100000000000000000000000086dd000020000100", @ANYRES32, @ANYBLOB="010100002001000000000000000000000000000096dd0000"], 0x78}, 0x1, 0x0, 0x0, 0x8840}, 0x4008040) sendmsg$nl_route_sched(r1, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000600)=@newtclass={0x4ac, 0x28, 0x10, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0x5, 0x1d}, {0xfff1, 0xf}, {0x2, 0xb}}, [@tclass_kind_options, @tclass_kind_options=@c_taprio={0xb}, @tclass_kind_options=@c_netem={0xa}, @tclass_kind_options=@c_mq={0x7}, @tclass_kind_options=@c_netem={0xa}, @tclass_kind_options=@c_multiq={0xb}]}, 0x4ac}, 0x1, 0x0, 0x0, 0x4008180}, 0x40010) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newtfilter={0x6c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x3c, 0x2, [@TCA_BASIC_EMATCHES={0x38, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x2c, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1}, @TCF_EM_META={0x18, 0x2, 0x0, 0x0, {{}, [@TCA_EM_META_HDR={0xc}]}}]}]}]}}]}, 0x6c}}, 0x0) [ 2451.083968][T28666] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2451.116666][T28666] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 00:40:51 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000f000000850000007500000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r6, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x41, 0x3, 0x230, 0x0, 0x19, 0x0, 0x0, 0x0, 0x2e8, 0x1f0, 0x1f0, 0x2e8, 0x1f0, 0x3, 0x0, {[{{@ip={@private, @dev, 0x0, 0x0, 'wlan1\x00', 'wg1\x00'}, 0x0, 0xa8, 0xc8, 0x0, {0x0, 0xffffffffa0028000}, [@common=@unspec=@quota={{0x38}}]}, @unspec=@TRACE={0x20}}, {{@ip={@empty, @empty, 0x0, 0x0, 'veth0_vlan\x00', 'netpci0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x290) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000000)={@empty, @local, 0x0}, &(0x7f0000000040)=0xc) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000380)=ANY=[@ANYBLOB="72797a746e6c32000000000010bd084f", @ANYRES32=r7, @ANYBLOB="070000400000000200000005450500d4006700003f049078ac1414bb7f0000018913e2e0000001ac1e0001ffffffffac1414bb01940401008205058716831fa964010101ffffffffac1414bbe0000002ffffffff0a01010200000000443c6da1ac1414aa00000009ac14141c00000000ac1414aafffffffdac1414aa80000000ffffffff00007fffffffffff000007ffe000000100000001440c34000000000500000002830f1ce281af4e35b1745d312aa54b892788ac1414bbe000000100000000e0000001640101017f00000164010100ac1e0001e000000107032f000000"]}) r9 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r9, 0x4000000000000, 0x40, &(0x7f0000000900)=@raw={'raw\x00', 0x41, 0x3, 0x388, 0x0, 0x19, 0x0, 0x0, 0x0, 0x2f0, 0x1f0, 0x1f0, 0x2f0, 0x1f0, 0x3, 0x0, {[{{@ip={@private, @dev, 0x0, 0x0, 'wlan1\x00', 'wg1\x00'}, 0x0, 0x200, 0x220, 0x0, {0x0, 0xffffffffa0028000}, [@common=@set={{0x40}, {{0x4, [0x4, 0x2, 0xa, 0x6, 0x8, 0x2], 0x2, 0x2}}}, @common=@inet=@hashlimit2={{0x150}, {'veth1\x00', {0x0, 0x8, 0x40, 0x0, 0x0, 0x687c, 0x93}}}]}, @unspec=@TRACE={0x20}}, {{@ip={@empty, @empty, 0x0, 0x0, 'veth0_vlan\x00', 'netpci0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x0, 0x3]}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3e8) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000000)={@empty, @local, 0x0}, &(0x7f0000000040)=0xc) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r9, 0x89f1, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000380)={'syztnl2\x00', r10, 0x700, 0x40, 0x2, 0x5, {{0x35, 0x4, 0x1, 0x1, 0xd4, 0x0, 0x0, 0x3f, 0x4, 0x0, @remote, @loopback, {[@ssrr={0x89, 0x13, 0xe2, [@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @remote]}, @noop, @ra={0x94, 0x4, 0x1}, @generic={0x82, 0x5, "058716"}, @lsrr={0x83, 0x1f, 0xa9, [@rand_addr=0x64010101, @broadcast, @remote, @multicast2, @broadcast, @private=0xa010102, @empty]}, @timestamp_addr={0x44, 0x3c, 0x6d, 0x1, 0xa, [{@local, 0x9}, {@local}, {@local, 0xfffffffd}, {@local, 0x80000000}, {@broadcast, 0x7fff}, {@broadcast, 0x7ff}, {@multicast1, 0x1}]}, @timestamp={0x44, 0xc, 0x34, 0x0, 0x0, [0x5, 0x2]}, @generic={0x83, 0xf, "1ce281af4e35b1745d312aa54b"}, @ssrr={0x89, 0x27, 0x88, [@remote, @multicast1, @empty, @multicast1, @rand_addr=0x64010101, @loopback, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1]}, @generic={0x7, 0x3, '/'}]}}}}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f0000000180)={&(0x7f0000000840)=ANY=[@ANYBLOB="780000005400010026bd7000fbdbdf", @ANYRESOCT=r8, @ANYBLOB="ed8e0100", @ANYRES32=r10, @ANYBLOB="000201006401010200000000000000000000000086dd000020000100", @ANYRES32, @ANYBLOB="01050300ac1e000100000000000000000000000086dd000020000100", @ANYRES32, @ANYBLOB="010100002001000000000000000000000000000096dd0000"], 0x78}, 0x1, 0x0, 0x0, 0x8840}, 0x4008040) sendmsg$nl_route_sched(r1, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000600)=@newtclass={0x4ac, 0x28, 0x10, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0x5, 0x1d}, {0xfff1, 0xf}, {0x2, 0xb}}, [@tclass_kind_options, @tclass_kind_options=@c_taprio={0xb}, @tclass_kind_options=@c_netem={0xa}, @tclass_kind_options=@c_mq={0x7}, @tclass_kind_options=@c_netem={0xa}, @tclass_kind_options=@c_multiq={0xb}]}, 0x4ac}, 0x1, 0x0, 0x0, 0x4008180}, 0x40010) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newtfilter={0x6c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x3c, 0x2, [@TCA_BASIC_EMATCHES={0x38, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x2c, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1}, @TCF_EM_META={0x18, 0x2, 0x0, 0x0, {{}, [@TCA_EM_META_HDR={0xc}]}}]}]}]}}]}, 0x6c}}, 0x0) 00:40:51 executing program 1: msgctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000440)) [ 2451.625460][T28670] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2451.628626][T28670] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 00:40:51 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000f000000850000007500000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r6, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x41, 0x3, 0x230, 0x0, 0x19, 0x0, 0x0, 0x0, 0x2e8, 0x1f0, 0x1f0, 0x2e8, 0x1f0, 0x3, 0x0, {[{{@ip={@private, @dev, 0x0, 0x0, 'wlan1\x00', 'wg1\x00'}, 0x0, 0xa8, 0xc8, 0x0, {0x0, 0xffffffffa0028000}, [@common=@unspec=@quota={{0x38}}]}, @unspec=@TRACE={0x20}}, {{@ip={@empty, @empty, 0x0, 0x0, 'veth0_vlan\x00', 'netpci0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x290) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000000)={@empty, @local, 0x0}, &(0x7f0000000040)=0xc) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000380)=ANY=[@ANYBLOB="72797a746e6c32000000000010bd084f", @ANYRES32=r7, @ANYBLOB="070000400000000200000005450500d4006700003f049078ac1414bb7f0000018913e2e0000001ac1e0001ffffffffac1414bb01940401008205058716831fa964010101ffffffffac1414bbe0000002ffffffff0a01010200000000443c6da1ac1414aa00000009ac14141c00000000ac1414aafffffffdac1414aa80000000ffffffff00007fffffffffff000007ffe000000100000001440c34000000000500000002830f1ce281af4e35b1745d312aa54b892788ac1414bbe000000100000000e0000001640101017f00000164010100ac1e0001e000000107032f000000"]}) r9 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r9, 0x4000000000000, 0x40, &(0x7f0000000900)=@raw={'raw\x00', 0x41, 0x3, 0x388, 0x0, 0x19, 0x0, 0x0, 0x0, 0x2f0, 0x1f0, 0x1f0, 0x2f0, 0x1f0, 0x3, 0x0, {[{{@ip={@private, @dev, 0x0, 0x0, 'wlan1\x00', 'wg1\x00'}, 0x0, 0x200, 0x220, 0x0, {0x0, 0xffffffffa0028000}, [@common=@set={{0x40}, {{0x4, [0x4, 0x2, 0xa, 0x6, 0x8, 0x2], 0x2, 0x2}}}, @common=@inet=@hashlimit2={{0x150}, {'veth1\x00', {0x0, 0x8, 0x40, 0x0, 0x0, 0x687c, 0x93}}}]}, @unspec=@TRACE={0x20}}, {{@ip={@empty, @empty, 0x0, 0x0, 'veth0_vlan\x00', 'netpci0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x0, 0x3]}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3e8) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000000)={@empty, @local, 0x0}, &(0x7f0000000040)=0xc) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r9, 0x89f1, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000380)={'syztnl2\x00', r10, 0x700, 0x40, 0x2, 0x5, {{0x35, 0x4, 0x1, 0x1, 0xd4, 0x0, 0x0, 0x3f, 0x4, 0x0, @remote, @loopback, {[@ssrr={0x89, 0x13, 0xe2, [@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @remote]}, @noop, @ra={0x94, 0x4, 0x1}, @generic={0x82, 0x5, "058716"}, @lsrr={0x83, 0x1f, 0xa9, [@rand_addr=0x64010101, @broadcast, @remote, @multicast2, @broadcast, @private=0xa010102, @empty]}, @timestamp_addr={0x44, 0x3c, 0x6d, 0x1, 0xa, [{@local, 0x9}, {@local}, {@local, 0xfffffffd}, {@local, 0x80000000}, {@broadcast, 0x7fff}, {@broadcast, 0x7ff}, {@multicast1, 0x1}]}, @timestamp={0x44, 0xc, 0x34, 0x0, 0x0, [0x5, 0x2]}, @generic={0x83, 0xf, "1ce281af4e35b1745d312aa54b"}, @ssrr={0x89, 0x27, 0x88, [@remote, @multicast1, @empty, @multicast1, @rand_addr=0x64010101, @loopback, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1]}, @generic={0x7, 0x3, '/'}]}}}}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f0000000180)={&(0x7f0000000840)=ANY=[@ANYBLOB="780000005400010026bd7000fbdbdf250700", @ANYRESOCT=r8, @ANYBLOB="ed8e0100", @ANYRES32=r10, @ANYBLOB="000201006401010200000000000000000000000086dd000020000100", @ANYRES32, @ANYBLOB="01050300ac1e000100000000000000000000000086dd000020000100", @ANYRES32, @ANYBLOB="010100002001000000000000000000000000000096dd0000"], 0x78}, 0x1, 0x0, 0x0, 0x8840}, 0x4008040) sendmsg$nl_route_sched(r1, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000600)=@newtclass={0x4ac, 0x28, 0x10, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0x5, 0x1d}, {0xfff1, 0xf}, {0x2, 0xb}}, [@tclass_kind_options, @tclass_kind_options=@c_taprio={0xb}, @tclass_kind_options=@c_netem={0xa}, @tclass_kind_options=@c_mq={0x7}, @tclass_kind_options=@c_netem={0xa}, @tclass_kind_options=@c_multiq={0xb}]}, 0x4ac}, 0x1, 0x0, 0x0, 0x4008180}, 0x40010) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newtfilter={0x6c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x3c, 0x2, [@TCA_BASIC_EMATCHES={0x38, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x2c, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1}, @TCF_EM_META={0x18, 0x2, 0x0, 0x0, {{}, [@TCA_EM_META_HDR={0xc}]}}]}]}]}}]}, 0x6c}}, 0x0) [ 2452.323738][T28673] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2452.391503][T28673] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 00:40:52 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000f000000850000007500000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r6, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x41, 0x3, 0x230, 0x0, 0x19, 0x0, 0x0, 0x0, 0x2e8, 0x1f0, 0x1f0, 0x2e8, 0x1f0, 0x3, 0x0, {[{{@ip={@private, @dev, 0x0, 0x0, 'wlan1\x00', 'wg1\x00'}, 0x0, 0xa8, 0xc8, 0x0, {0x0, 0xffffffffa0028000}, [@common=@unspec=@quota={{0x38}}]}, @unspec=@TRACE={0x20}}, {{@ip={@empty, @empty, 0x0, 0x0, 'veth0_vlan\x00', 'netpci0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x290) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000000)={@empty, @local, 0x0}, &(0x7f0000000040)=0xc) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000380)=ANY=[@ANYBLOB="72797a746e6c32000000000010bd084f", @ANYRES32=r7, @ANYBLOB="070000400000000200000005450500d4006700003f049078ac1414bb7f0000018913e2e0000001ac1e0001ffffffffac1414bb01940401008205058716831fa964010101ffffffffac1414bbe0000002ffffffff0a01010200000000443c6da1ac1414aa00000009ac14141c00000000ac1414aafffffffdac1414aa80000000ffffffff00007fffffffffff000007ffe000000100000001440c34000000000500000002830f1ce281af4e35b1745d312aa54b892788ac1414bbe000000100000000e0000001640101017f00000164010100ac1e0001e000000107032f000000"]}) r9 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r9, 0x4000000000000, 0x40, &(0x7f0000000900)=@raw={'raw\x00', 0x41, 0x3, 0x388, 0x0, 0x19, 0x0, 0x0, 0x0, 0x2f0, 0x1f0, 0x1f0, 0x2f0, 0x1f0, 0x3, 0x0, {[{{@ip={@private, @dev, 0x0, 0x0, 'wlan1\x00', 'wg1\x00'}, 0x0, 0x200, 0x220, 0x0, {0x0, 0xffffffffa0028000}, [@common=@set={{0x40}, {{0x4, [0x4, 0x2, 0xa, 0x6, 0x8, 0x2], 0x2, 0x2}}}, @common=@inet=@hashlimit2={{0x150}, {'veth1\x00', {0x0, 0x8, 0x40, 0x0, 0x0, 0x687c, 0x93}}}]}, @unspec=@TRACE={0x20}}, {{@ip={@empty, @empty, 0x0, 0x0, 'veth0_vlan\x00', 'netpci0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x0, 0x3]}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3e8) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000000)={@empty, @local, 0x0}, &(0x7f0000000040)=0xc) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r9, 0x89f1, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000380)={'syztnl2\x00', r10, 0x700, 0x40, 0x2, 0x5, {{0x35, 0x4, 0x1, 0x1, 0xd4, 0x0, 0x0, 0x3f, 0x4, 0x0, @remote, @loopback, {[@ssrr={0x89, 0x13, 0xe2, [@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @remote]}, @noop, @ra={0x94, 0x4, 0x1}, @generic={0x82, 0x5, "058716"}, @lsrr={0x83, 0x1f, 0xa9, [@rand_addr=0x64010101, @broadcast, @remote, @multicast2, @broadcast, @private=0xa010102, @empty]}, @timestamp_addr={0x44, 0x3c, 0x6d, 0x1, 0xa, [{@local, 0x9}, {@local}, {@local, 0xfffffffd}, {@local, 0x80000000}, {@broadcast, 0x7fff}, {@broadcast, 0x7ff}, {@multicast1, 0x1}]}, @timestamp={0x44, 0xc, 0x34, 0x0, 0x0, [0x5, 0x2]}, @generic={0x83, 0xf, "1ce281af4e35b1745d312aa54b"}, @ssrr={0x89, 0x27, 0x88, [@remote, @multicast1, @empty, @multicast1, @rand_addr=0x64010101, @loopback, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1]}, @generic={0x7, 0x3, '/'}]}}}}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f0000000180)={&(0x7f0000000840)=ANY=[@ANYBLOB="780000005400010026bd7000fbdbdf250700", @ANYRESOCT=r8, @ANYBLOB="ed8e0100", @ANYRES32=r10, @ANYBLOB="000201006401010200000000000000000000000086dd000020000100", @ANYRES32, @ANYBLOB="01050300ac1e000100000000000000000000000086dd000020000100", @ANYRES32, @ANYBLOB="010100002001000000000000000000000000000096dd0000"], 0x78}, 0x1, 0x0, 0x0, 0x8840}, 0x4008040) sendmsg$nl_route_sched(r1, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000600)=@newtclass={0x4ac, 0x28, 0x10, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0x5, 0x1d}, {0xfff1, 0xf}, {0x2, 0xb}}, [@tclass_kind_options, @tclass_kind_options=@c_taprio={0xb}, @tclass_kind_options=@c_netem={0xa}, @tclass_kind_options=@c_mq={0x7}, @tclass_kind_options=@c_netem={0xa}, @tclass_kind_options=@c_multiq={0xb}]}, 0x4ac}, 0x1, 0x0, 0x0, 0x4008180}, 0x40010) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newtfilter={0x6c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x3c, 0x2, [@TCA_BASIC_EMATCHES={0x38, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x2c, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1}, @TCF_EM_META={0x18, 0x2, 0x0, 0x0, {{}, [@TCA_EM_META_HDR={0xc}]}}]}]}]}}]}, 0x6c}}, 0x0) [ 2452.918980][T28678] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2452.947748][T28678] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 00:40:53 executing program 1: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) bind(r0, &(0x7f0000000000)=@in6={0x1c, 0x1c, 0x2}, 0x1c) connect$inet6(r0, &(0x7f00000000c0)={0x1c, 0x1c, 0x2}, 0x1c) 00:40:53 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000f000000850000007500000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r6, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x41, 0x3, 0x230, 0x0, 0x19, 0x0, 0x0, 0x0, 0x2e8, 0x1f0, 0x1f0, 0x2e8, 0x1f0, 0x3, 0x0, {[{{@ip={@private, @dev, 0x0, 0x0, 'wlan1\x00', 'wg1\x00'}, 0x0, 0xa8, 0xc8, 0x0, {0x0, 0xffffffffa0028000}, [@common=@unspec=@quota={{0x38}}]}, @unspec=@TRACE={0x20}}, {{@ip={@empty, @empty, 0x0, 0x0, 'veth0_vlan\x00', 'netpci0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x290) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000000)={@empty, @local, 0x0}, &(0x7f0000000040)=0xc) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000380)=ANY=[@ANYBLOB="72797a746e6c32000000000010bd084f", @ANYRES32=r7, @ANYBLOB="070000400000000200000005450500d4006700003f049078ac1414bb7f0000018913e2e0000001ac1e0001ffffffffac1414bb01940401008205058716831fa964010101ffffffffac1414bbe0000002ffffffff0a01010200000000443c6da1ac1414aa00000009ac14141c00000000ac1414aafffffffdac1414aa80000000ffffffff00007fffffffffff000007ffe000000100000001440c34000000000500000002830f1ce281af4e35b1745d312aa54b892788ac1414bbe000000100000000e0000001640101017f00000164010100ac1e0001e000000107032f000000"]}) r9 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r9, 0x4000000000000, 0x40, &(0x7f0000000900)=@raw={'raw\x00', 0x41, 0x3, 0x388, 0x0, 0x19, 0x0, 0x0, 0x0, 0x2f0, 0x1f0, 0x1f0, 0x2f0, 0x1f0, 0x3, 0x0, {[{{@ip={@private, @dev, 0x0, 0x0, 'wlan1\x00', 'wg1\x00'}, 0x0, 0x200, 0x220, 0x0, {0x0, 0xffffffffa0028000}, [@common=@set={{0x40}, {{0x4, [0x4, 0x2, 0xa, 0x6, 0x8, 0x2], 0x2, 0x2}}}, @common=@inet=@hashlimit2={{0x150}, {'veth1\x00', {0x0, 0x8, 0x40, 0x0, 0x0, 0x687c, 0x93}}}]}, @unspec=@TRACE={0x20}}, {{@ip={@empty, @empty, 0x0, 0x0, 'veth0_vlan\x00', 'netpci0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x0, 0x3]}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3e8) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000000)={@empty, @local, 0x0}, &(0x7f0000000040)=0xc) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r9, 0x89f1, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000380)={'syztnl2\x00', r10, 0x700, 0x40, 0x2, 0x5, {{0x35, 0x4, 0x1, 0x1, 0xd4, 0x0, 0x0, 0x3f, 0x4, 0x0, @remote, @loopback, {[@ssrr={0x89, 0x13, 0xe2, [@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @remote]}, @noop, @ra={0x94, 0x4, 0x1}, @generic={0x82, 0x5, "058716"}, @lsrr={0x83, 0x1f, 0xa9, [@rand_addr=0x64010101, @broadcast, @remote, @multicast2, @broadcast, @private=0xa010102, @empty]}, @timestamp_addr={0x44, 0x3c, 0x6d, 0x1, 0xa, [{@local, 0x9}, {@local}, {@local, 0xfffffffd}, {@local, 0x80000000}, {@broadcast, 0x7fff}, {@broadcast, 0x7ff}, {@multicast1, 0x1}]}, @timestamp={0x44, 0xc, 0x34, 0x0, 0x0, [0x5, 0x2]}, @generic={0x83, 0xf, "1ce281af4e35b1745d312aa54b"}, @ssrr={0x89, 0x27, 0x88, [@remote, @multicast1, @empty, @multicast1, @rand_addr=0x64010101, @loopback, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1]}, @generic={0x7, 0x3, '/'}]}}}}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f0000000180)={&(0x7f0000000840)=ANY=[@ANYBLOB="780000005400010026bd7000fbdbdf250700", @ANYRESOCT=r8, @ANYBLOB="ed8e0100", @ANYRES32=r10, @ANYBLOB="000201006401010200000000000000000000000086dd000020000100", @ANYRES32, @ANYBLOB="01050300ac1e000100000000000000000000000086dd000020000100", @ANYRES32, @ANYBLOB="010100002001000000000000000000000000000096dd0000"], 0x78}, 0x1, 0x0, 0x0, 0x8840}, 0x4008040) sendmsg$nl_route_sched(r1, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000600)=@newtclass={0x4ac, 0x28, 0x10, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0x5, 0x1d}, {0xfff1, 0xf}, {0x2, 0xb}}, [@tclass_kind_options, @tclass_kind_options=@c_taprio={0xb}, @tclass_kind_options=@c_netem={0xa}, @tclass_kind_options=@c_mq={0x7}, @tclass_kind_options=@c_netem={0xa}, @tclass_kind_options=@c_multiq={0xb}]}, 0x4ac}, 0x1, 0x0, 0x0, 0x4008180}, 0x40010) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newtfilter={0x6c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x3c, 0x2, [@TCA_BASIC_EMATCHES={0x38, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x2c, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1}, @TCF_EM_META={0x18, 0x2, 0x0, 0x0, {{}, [@TCA_EM_META_HDR={0xc}]}}]}]}]}}]}, 0x6c}}, 0x0) 00:40:54 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000f000000850000007500000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r6, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x41, 0x3, 0x230, 0x0, 0x19, 0x0, 0x0, 0x0, 0x2e8, 0x1f0, 0x1f0, 0x2e8, 0x1f0, 0x3, 0x0, {[{{@ip={@private, @dev, 0x0, 0x0, 'wlan1\x00', 'wg1\x00'}, 0x0, 0xa8, 0xc8, 0x0, {0x0, 0xffffffffa0028000}, [@common=@unspec=@quota={{0x38}}]}, @unspec=@TRACE={0x20}}, {{@ip={@empty, @empty, 0x0, 0x0, 'veth0_vlan\x00', 'netpci0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x290) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000000)={@empty, @local, 0x0}, &(0x7f0000000040)=0xc) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000380)=ANY=[@ANYBLOB="72797a746e6c32000000000010bd084f", @ANYRES32=r7, @ANYBLOB="070000400000000200000005450500d4006700003f049078ac1414bb7f0000018913e2e0000001ac1e0001ffffffffac1414bb01940401008205058716831fa964010101ffffffffac1414bbe0000002ffffffff0a01010200000000443c6da1ac1414aa00000009ac14141c00000000ac1414aafffffffdac1414aa80000000ffffffff00007fffffffffff000007ffe000000100000001440c34000000000500000002830f1ce281af4e35b1745d312aa54b892788ac1414bbe000000100000000e0000001640101017f00000164010100ac1e0001e000000107032f000000"]}) r9 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r9, 0x4000000000000, 0x40, &(0x7f0000000900)=@raw={'raw\x00', 0x41, 0x3, 0x388, 0x0, 0x19, 0x0, 0x0, 0x0, 0x2f0, 0x1f0, 0x1f0, 0x2f0, 0x1f0, 0x3, 0x0, {[{{@ip={@private, @dev, 0x0, 0x0, 'wlan1\x00', 'wg1\x00'}, 0x0, 0x200, 0x220, 0x0, {0x0, 0xffffffffa0028000}, [@common=@set={{0x40}, {{0x4, [0x4, 0x2, 0xa, 0x6, 0x8, 0x2], 0x2, 0x2}}}, @common=@inet=@hashlimit2={{0x150}, {'veth1\x00', {0x0, 0x8, 0x40, 0x0, 0x0, 0x687c, 0x93}}}]}, @unspec=@TRACE={0x20}}, {{@ip={@empty, @empty, 0x0, 0x0, 'veth0_vlan\x00', 'netpci0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x0, 0x3]}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3e8) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000000)={@empty, @local, 0x0}, &(0x7f0000000040)=0xc) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r9, 0x89f1, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000380)={'syztnl2\x00', r10, 0x700, 0x40, 0x2, 0x5, {{0x35, 0x4, 0x1, 0x1, 0xd4, 0x0, 0x0, 0x3f, 0x4, 0x0, @remote, @loopback, {[@ssrr={0x89, 0x13, 0xe2, [@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @remote]}, @noop, @ra={0x94, 0x4, 0x1}, @generic={0x82, 0x5, "058716"}, @lsrr={0x83, 0x1f, 0xa9, [@rand_addr=0x64010101, @broadcast, @remote, @multicast2, @broadcast, @private=0xa010102, @empty]}, @timestamp_addr={0x44, 0x3c, 0x6d, 0x1, 0xa, [{@local, 0x9}, {@local}, {@local, 0xfffffffd}, {@local, 0x80000000}, {@broadcast, 0x7fff}, {@broadcast, 0x7ff}, {@multicast1, 0x1}]}, @timestamp={0x44, 0xc, 0x34, 0x0, 0x0, [0x5, 0x2]}, @generic={0x83, 0xf, "1ce281af4e35b1745d312aa54b"}, @ssrr={0x89, 0x27, 0x88, [@remote, @multicast1, @empty, @multicast1, @rand_addr=0x64010101, @loopback, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1]}, @generic={0x7, 0x3, '/'}]}}}}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f0000000180)={&(0x7f0000000840)=ANY=[@ANYBLOB="780000005400010026bd7000fbdbdf25070000", @ANYRESOCT=r8, @ANYBLOB="ed8e0100", @ANYRES32=r10, @ANYBLOB="000201006401010200000000000000000000000086dd000020000100", @ANYRES32, @ANYBLOB="01050300ac1e000100000000000000000000000086dd000020000100", @ANYRES32, @ANYBLOB="010100002001000000000000000000000000000096dd0000"], 0x78}, 0x1, 0x0, 0x0, 0x8840}, 0x4008040) sendmsg$nl_route_sched(r1, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000600)=@newtclass={0x4ac, 0x28, 0x10, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0x5, 0x1d}, {0xfff1, 0xf}, {0x2, 0xb}}, [@tclass_kind_options, @tclass_kind_options=@c_taprio={0xb}, @tclass_kind_options=@c_netem={0xa}, @tclass_kind_options=@c_mq={0x7}, @tclass_kind_options=@c_netem={0xa}, @tclass_kind_options=@c_multiq={0xb}]}, 0x4ac}, 0x1, 0x0, 0x0, 0x4008180}, 0x40010) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newtfilter={0x6c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x3c, 0x2, [@TCA_BASIC_EMATCHES={0x38, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x2c, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1}, @TCF_EM_META={0x18, 0x2, 0x0, 0x0, {{}, [@TCA_EM_META_HDR={0xc}]}}]}]}]}}]}, 0x6c}}, 0x0) 00:40:54 executing program 1: r0 = socket$inet6_udp(0x1c, 0x2, 0x0) sendto$inet6(r0, &(0x7f0000000100)="b1", 0x1, 0x20008, &(0x7f0000000180)={0x1c, 0x1c}, 0x1c) 00:40:54 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000f000000850000007500000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r6, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x41, 0x3, 0x230, 0x0, 0x19, 0x0, 0x0, 0x0, 0x2e8, 0x1f0, 0x1f0, 0x2e8, 0x1f0, 0x3, 0x0, {[{{@ip={@private, @dev, 0x0, 0x0, 'wlan1\x00', 'wg1\x00'}, 0x0, 0xa8, 0xc8, 0x0, {0x0, 0xffffffffa0028000}, [@common=@unspec=@quota={{0x38}}]}, @unspec=@TRACE={0x20}}, {{@ip={@empty, @empty, 0x0, 0x0, 'veth0_vlan\x00', 'netpci0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x290) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000000)={@empty, @local, 0x0}, &(0x7f0000000040)=0xc) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000380)=ANY=[@ANYBLOB="72797a746e6c32000000000010bd084f", @ANYRES32=r7, @ANYBLOB="070000400000000200000005450500d4006700003f049078ac1414bb7f0000018913e2e0000001ac1e0001ffffffffac1414bb01940401008205058716831fa964010101ffffffffac1414bbe0000002ffffffff0a01010200000000443c6da1ac1414aa00000009ac14141c00000000ac1414aafffffffdac1414aa80000000ffffffff00007fffffffffff000007ffe000000100000001440c34000000000500000002830f1ce281af4e35b1745d312aa54b892788ac1414bbe000000100000000e0000001640101017f00000164010100ac1e0001e000000107032f000000"]}) r9 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r9, 0x4000000000000, 0x40, &(0x7f0000000900)=@raw={'raw\x00', 0x41, 0x3, 0x388, 0x0, 0x19, 0x0, 0x0, 0x0, 0x2f0, 0x1f0, 0x1f0, 0x2f0, 0x1f0, 0x3, 0x0, {[{{@ip={@private, @dev, 0x0, 0x0, 'wlan1\x00', 'wg1\x00'}, 0x0, 0x200, 0x220, 0x0, {0x0, 0xffffffffa0028000}, [@common=@set={{0x40}, {{0x4, [0x4, 0x2, 0xa, 0x6, 0x8, 0x2], 0x2, 0x2}}}, @common=@inet=@hashlimit2={{0x150}, {'veth1\x00', {0x0, 0x8, 0x40, 0x0, 0x0, 0x687c, 0x93}}}]}, @unspec=@TRACE={0x20}}, {{@ip={@empty, @empty, 0x0, 0x0, 'veth0_vlan\x00', 'netpci0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x0, 0x3]}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3e8) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000000)={@empty, @local, 0x0}, &(0x7f0000000040)=0xc) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r9, 0x89f1, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000380)={'syztnl2\x00', r10, 0x700, 0x40, 0x2, 0x5, {{0x35, 0x4, 0x1, 0x1, 0xd4, 0x0, 0x0, 0x3f, 0x4, 0x0, @remote, @loopback, {[@ssrr={0x89, 0x13, 0xe2, [@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @remote]}, @noop, @ra={0x94, 0x4, 0x1}, @generic={0x82, 0x5, "058716"}, @lsrr={0x83, 0x1f, 0xa9, [@rand_addr=0x64010101, @broadcast, @remote, @multicast2, @broadcast, @private=0xa010102, @empty]}, @timestamp_addr={0x44, 0x3c, 0x6d, 0x1, 0xa, [{@local, 0x9}, {@local}, {@local, 0xfffffffd}, {@local, 0x80000000}, {@broadcast, 0x7fff}, {@broadcast, 0x7ff}, {@multicast1, 0x1}]}, @timestamp={0x44, 0xc, 0x34, 0x0, 0x0, [0x5, 0x2]}, @generic={0x83, 0xf, "1ce281af4e35b1745d312aa54b"}, @ssrr={0x89, 0x27, 0x88, [@remote, @multicast1, @empty, @multicast1, @rand_addr=0x64010101, @loopback, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1]}, @generic={0x7, 0x3, '/'}]}}}}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f0000000180)={&(0x7f0000000840)=ANY=[@ANYBLOB="780000005400010026bd7000fbdbdf25070000", @ANYRESOCT=r8, @ANYBLOB="ed8e0100", @ANYRES32=r10, @ANYBLOB="000201006401010200000000000000000000000086dd000020000100", @ANYRES32, @ANYBLOB="01050300ac1e000100000000000000000000000086dd000020000100", @ANYRES32, @ANYBLOB="010100002001000000000000000000000000000096dd0000"], 0x78}, 0x1, 0x0, 0x0, 0x8840}, 0x4008040) sendmsg$nl_route_sched(r1, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000600)=@newtclass={0x4ac, 0x28, 0x10, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0x5, 0x1d}, {0xfff1, 0xf}, {0x2, 0xb}}, [@tclass_kind_options, @tclass_kind_options=@c_taprio={0xb}, @tclass_kind_options=@c_netem={0xa}, @tclass_kind_options=@c_mq={0x7}, @tclass_kind_options=@c_netem={0xa}, @tclass_kind_options=@c_multiq={0xb}]}, 0x4ac}, 0x1, 0x0, 0x0, 0x4008180}, 0x40010) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newtfilter={0x6c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x3c, 0x2, [@TCA_BASIC_EMATCHES={0x38, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x2c, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1}, @TCF_EM_META={0x18, 0x2, 0x0, 0x0, {{}, [@TCA_EM_META_HDR={0xc}]}}]}]}]}}]}, 0x6c}}, 0x0) 00:40:54 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000f000000850000007500000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r6, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x41, 0x3, 0x230, 0x0, 0x19, 0x0, 0x0, 0x0, 0x2e8, 0x1f0, 0x1f0, 0x2e8, 0x1f0, 0x3, 0x0, {[{{@ip={@private, @dev, 0x0, 0x0, 'wlan1\x00', 'wg1\x00'}, 0x0, 0xa8, 0xc8, 0x0, {0x0, 0xffffffffa0028000}, [@common=@unspec=@quota={{0x38}}]}, @unspec=@TRACE={0x20}}, {{@ip={@empty, @empty, 0x0, 0x0, 'veth0_vlan\x00', 'netpci0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x290) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000000)={@empty, @local, 0x0}, &(0x7f0000000040)=0xc) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000380)=ANY=[@ANYBLOB="72797a746e6c32000000000010bd084f", @ANYRES32=r7, @ANYBLOB="070000400000000200000005450500d4006700003f049078ac1414bb7f0000018913e2e0000001ac1e0001ffffffffac1414bb01940401008205058716831fa964010101ffffffffac1414bbe0000002ffffffff0a01010200000000443c6da1ac1414aa00000009ac14141c00000000ac1414aafffffffdac1414aa80000000ffffffff00007fffffffffff000007ffe000000100000001440c34000000000500000002830f1ce281af4e35b1745d312aa54b892788ac1414bbe000000100000000e0000001640101017f00000164010100ac1e0001e000000107032f000000"]}) r9 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r9, 0x4000000000000, 0x40, &(0x7f0000000900)=@raw={'raw\x00', 0x41, 0x3, 0x388, 0x0, 0x19, 0x0, 0x0, 0x0, 0x2f0, 0x1f0, 0x1f0, 0x2f0, 0x1f0, 0x3, 0x0, {[{{@ip={@private, @dev, 0x0, 0x0, 'wlan1\x00', 'wg1\x00'}, 0x0, 0x200, 0x220, 0x0, {0x0, 0xffffffffa0028000}, [@common=@set={{0x40}, {{0x4, [0x4, 0x2, 0xa, 0x6, 0x8, 0x2], 0x2, 0x2}}}, @common=@inet=@hashlimit2={{0x150}, {'veth1\x00', {0x0, 0x8, 0x40, 0x0, 0x0, 0x687c, 0x93}}}]}, @unspec=@TRACE={0x20}}, {{@ip={@empty, @empty, 0x0, 0x0, 'veth0_vlan\x00', 'netpci0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x0, 0x3]}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3e8) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000000)={@empty, @local, 0x0}, &(0x7f0000000040)=0xc) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r9, 0x89f1, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000380)={'syztnl2\x00', r10, 0x700, 0x40, 0x2, 0x5, {{0x35, 0x4, 0x1, 0x1, 0xd4, 0x0, 0x0, 0x3f, 0x4, 0x0, @remote, @loopback, {[@ssrr={0x89, 0x13, 0xe2, [@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @remote]}, @noop, @ra={0x94, 0x4, 0x1}, @generic={0x82, 0x5, "058716"}, @lsrr={0x83, 0x1f, 0xa9, [@rand_addr=0x64010101, @broadcast, @remote, @multicast2, @broadcast, @private=0xa010102, @empty]}, @timestamp_addr={0x44, 0x3c, 0x6d, 0x1, 0xa, [{@local, 0x9}, {@local}, {@local, 0xfffffffd}, {@local, 0x80000000}, {@broadcast, 0x7fff}, {@broadcast, 0x7ff}, {@multicast1, 0x1}]}, @timestamp={0x44, 0xc, 0x34, 0x0, 0x0, [0x5, 0x2]}, @generic={0x83, 0xf, "1ce281af4e35b1745d312aa54b"}, @ssrr={0x89, 0x27, 0x88, [@remote, @multicast1, @empty, @multicast1, @rand_addr=0x64010101, @loopback, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1]}, @generic={0x7, 0x3, '/'}]}}}}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f0000000180)={&(0x7f0000000840)=ANY=[@ANYBLOB="780000005400010026bd7000fbdbdf25070000", @ANYRESOCT=r8, @ANYBLOB="ed8e0100", @ANYRES32=r10, @ANYBLOB="000201006401010200000000000000000000000086dd000020000100", @ANYRES32, @ANYBLOB="01050300ac1e000100000000000000000000000086dd000020000100", @ANYRES32, @ANYBLOB="010100002001000000000000000000000000000096dd0000"], 0x78}, 0x1, 0x0, 0x0, 0x8840}, 0x4008040) sendmsg$nl_route_sched(r1, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000600)=@newtclass={0x4ac, 0x28, 0x10, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0x5, 0x1d}, {0xfff1, 0xf}, {0x2, 0xb}}, [@tclass_kind_options, @tclass_kind_options=@c_taprio={0xb}, @tclass_kind_options=@c_netem={0xa}, @tclass_kind_options=@c_mq={0x7}, @tclass_kind_options=@c_netem={0xa}, @tclass_kind_options=@c_multiq={0xb}]}, 0x4ac}, 0x1, 0x0, 0x0, 0x4008180}, 0x40010) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newtfilter={0x6c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x3c, 0x2, [@TCA_BASIC_EMATCHES={0x38, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x2c, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1}, @TCF_EM_META={0x18, 0x2, 0x0, 0x0, {{}, [@TCA_EM_META_HDR={0xc}]}}]}]}]}}]}, 0x6c}}, 0x0) [ 2455.422729][T28695] __nla_validate_parse: 6 callbacks suppressed [ 2455.422849][T28695] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2455.528568][T28695] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 00:40:55 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000f000000850000007500000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r6, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x41, 0x3, 0x230, 0x0, 0x19, 0x0, 0x0, 0x0, 0x2e8, 0x1f0, 0x1f0, 0x2e8, 0x1f0, 0x3, 0x0, {[{{@ip={@private, @dev, 0x0, 0x0, 'wlan1\x00', 'wg1\x00'}, 0x0, 0xa8, 0xc8, 0x0, {0x0, 0xffffffffa0028000}, [@common=@unspec=@quota={{0x38}}]}, @unspec=@TRACE={0x20}}, {{@ip={@empty, @empty, 0x0, 0x0, 'veth0_vlan\x00', 'netpci0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x290) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000000)={@empty, @local, 0x0}, &(0x7f0000000040)=0xc) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000380)=ANY=[@ANYBLOB="72797a746e6c32000000000010bd084f", @ANYRES32=r7, @ANYBLOB="070000400000000200000005450500d4006700003f049078ac1414bb7f0000018913e2e0000001ac1e0001ffffffffac1414bb01940401008205058716831fa964010101ffffffffac1414bbe0000002ffffffff0a01010200000000443c6da1ac1414aa00000009ac14141c00000000ac1414aafffffffdac1414aa80000000ffffffff00007fffffffffff000007ffe000000100000001440c34000000000500000002830f1ce281af4e35b1745d312aa54b892788ac1414bbe000000100000000e0000001640101017f00000164010100ac1e0001e000000107032f000000"]}) r9 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r9, 0x4000000000000, 0x40, &(0x7f0000000900)=@raw={'raw\x00', 0x41, 0x3, 0x388, 0x0, 0x19, 0x0, 0x0, 0x0, 0x2f0, 0x1f0, 0x1f0, 0x2f0, 0x1f0, 0x3, 0x0, {[{{@ip={@private, @dev, 0x0, 0x0, 'wlan1\x00', 'wg1\x00'}, 0x0, 0x200, 0x220, 0x0, {0x0, 0xffffffffa0028000}, [@common=@set={{0x40}, {{0x4, [0x4, 0x2, 0xa, 0x6, 0x8, 0x2], 0x2, 0x2}}}, @common=@inet=@hashlimit2={{0x150}, {'veth1\x00', {0x0, 0x8, 0x40, 0x0, 0x0, 0x687c, 0x93}}}]}, @unspec=@TRACE={0x20}}, {{@ip={@empty, @empty, 0x0, 0x0, 'veth0_vlan\x00', 'netpci0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x0, 0x3]}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3e8) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000000)={@empty, @local, 0x0}, &(0x7f0000000040)=0xc) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r9, 0x89f1, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000380)={'syztnl2\x00', r10, 0x700, 0x40, 0x2, 0x5, {{0x35, 0x4, 0x1, 0x1, 0xd4, 0x0, 0x0, 0x3f, 0x4, 0x0, @remote, @loopback, {[@ssrr={0x89, 0x13, 0xe2, [@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @remote]}, @noop, @ra={0x94, 0x4, 0x1}, @generic={0x82, 0x5, "058716"}, @lsrr={0x83, 0x1f, 0xa9, [@rand_addr=0x64010101, @broadcast, @remote, @multicast2, @broadcast, @private=0xa010102, @empty]}, @timestamp_addr={0x44, 0x3c, 0x6d, 0x1, 0xa, [{@local, 0x9}, {@local}, {@local, 0xfffffffd}, {@local, 0x80000000}, {@broadcast, 0x7fff}, {@broadcast, 0x7ff}, {@multicast1, 0x1}]}, @timestamp={0x44, 0xc, 0x34, 0x0, 0x0, [0x5, 0x2]}, @generic={0x83, 0xf, "1ce281af4e35b1745d312aa54b"}, @ssrr={0x89, 0x27, 0x88, [@remote, @multicast1, @empty, @multicast1, @rand_addr=0x64010101, @loopback, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1]}, @generic={0x7, 0x3, '/'}]}}}}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f0000000180)={&(0x7f0000000840)=ANY=[@ANYBLOB="780000005400010026bd7000fbdbdf2507000000", @ANYRESOCT=r8, @ANYBLOB="ed8e0100", @ANYRES32=r10, @ANYBLOB="000201006401010200000000000000000000000086dd000020000100", @ANYRES32, @ANYBLOB="01050300ac1e000100000000000000000000000086dd000020000100", @ANYRES32, @ANYBLOB="010100002001000000000000000000000000000096dd0000"], 0x78}}, 0x4008040) sendmsg$nl_route_sched(r1, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000600)=@newtclass={0x4ac, 0x28, 0x10, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0x5, 0x1d}, {0xfff1, 0xf}, {0x2, 0xb}}, [@tclass_kind_options, @tclass_kind_options=@c_taprio={0xb}, @tclass_kind_options=@c_netem={0xa}, @tclass_kind_options=@c_mq={0x7}, @tclass_kind_options=@c_netem={0xa}, @tclass_kind_options=@c_multiq={0xb}]}, 0x4ac}, 0x1, 0x0, 0x0, 0x4008180}, 0x40010) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newtfilter={0x6c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x3c, 0x2, [@TCA_BASIC_EMATCHES={0x38, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x2c, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1}, @TCF_EM_META={0x18, 0x2, 0x0, 0x0, {{}, [@TCA_EM_META_HDR={0xc}]}}]}]}]}}]}, 0x6c}}, 0x0) 00:40:55 executing program 1: syz_clone(0x70000080, 0x0, 0x0, 0x0, 0x0, 0x0) [ 2456.129688][T28699] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2456.143060][T28699] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 00:40:56 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000f000000850000007500000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r6, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x41, 0x3, 0x230, 0x0, 0x19, 0x0, 0x0, 0x0, 0x2e8, 0x1f0, 0x1f0, 0x2e8, 0x1f0, 0x3, 0x0, {[{{@ip={@private, @dev, 0x0, 0x0, 'wlan1\x00', 'wg1\x00'}, 0x0, 0xa8, 0xc8, 0x0, {0x0, 0xffffffffa0028000}, [@common=@unspec=@quota={{0x38}}]}, @unspec=@TRACE={0x20}}, {{@ip={@empty, @empty, 0x0, 0x0, 'veth0_vlan\x00', 'netpci0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x290) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000000)={@empty, @local, 0x0}, &(0x7f0000000040)=0xc) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000380)=ANY=[@ANYBLOB="72797a746e6c32000000000010bd084f", @ANYRES32=r7, @ANYBLOB="070000400000000200000005450500d4006700003f049078ac1414bb7f0000018913e2e0000001ac1e0001ffffffffac1414bb01940401008205058716831fa964010101ffffffffac1414bbe0000002ffffffff0a01010200000000443c6da1ac1414aa00000009ac14141c00000000ac1414aafffffffdac1414aa80000000ffffffff00007fffffffffff000007ffe000000100000001440c34000000000500000002830f1ce281af4e35b1745d312aa54b892788ac1414bbe000000100000000e0000001640101017f00000164010100ac1e0001e000000107032f000000"]}) r9 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r9, 0x4000000000000, 0x40, &(0x7f0000000900)=@raw={'raw\x00', 0x41, 0x3, 0x388, 0x0, 0x19, 0x0, 0x0, 0x0, 0x2f0, 0x1f0, 0x1f0, 0x2f0, 0x1f0, 0x3, 0x0, {[{{@ip={@private, @dev, 0x0, 0x0, 'wlan1\x00', 'wg1\x00'}, 0x0, 0x200, 0x220, 0x0, {0x0, 0xffffffffa0028000}, [@common=@set={{0x40}, {{0x4, [0x4, 0x2, 0xa, 0x6, 0x8, 0x2], 0x2, 0x2}}}, @common=@inet=@hashlimit2={{0x150}, {'veth1\x00', {0x0, 0x8, 0x40, 0x0, 0x0, 0x687c, 0x93}}}]}, @unspec=@TRACE={0x20}}, {{@ip={@empty, @empty, 0x0, 0x0, 'veth0_vlan\x00', 'netpci0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x0, 0x3]}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3e8) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000000)={@empty, @local, 0x0}, &(0x7f0000000040)=0xc) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r9, 0x89f1, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000380)={'syztnl2\x00', r10, 0x700, 0x40, 0x2, 0x5, {{0x35, 0x4, 0x1, 0x1, 0xd4, 0x0, 0x0, 0x3f, 0x4, 0x0, @remote, @loopback, {[@ssrr={0x89, 0x13, 0xe2, [@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @remote]}, @noop, @ra={0x94, 0x4, 0x1}, @generic={0x82, 0x5, "058716"}, @lsrr={0x83, 0x1f, 0xa9, [@rand_addr=0x64010101, @broadcast, @remote, @multicast2, @broadcast, @private=0xa010102, @empty]}, @timestamp_addr={0x44, 0x3c, 0x6d, 0x1, 0xa, [{@local, 0x9}, {@local}, {@local, 0xfffffffd}, {@local, 0x80000000}, {@broadcast, 0x7fff}, {@broadcast, 0x7ff}, {@multicast1, 0x1}]}, @timestamp={0x44, 0xc, 0x34, 0x0, 0x0, [0x5, 0x2]}, @generic={0x83, 0xf, "1ce281af4e35b1745d312aa54b"}, @ssrr={0x89, 0x27, 0x88, [@remote, @multicast1, @empty, @multicast1, @rand_addr=0x64010101, @loopback, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1]}, @generic={0x7, 0x3, '/'}]}}}}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f0000000180)={&(0x7f0000000840)=ANY=[@ANYBLOB="780000005400010026bd7000fbdbdf2507000000", @ANYRESOCT=r8, @ANYBLOB="ed8e0100", @ANYRES32=r10, @ANYBLOB="000201006401010200000000000000000000000086dd000020000100", @ANYRES32, @ANYBLOB="01050300ac1e000100000000000000000000000086dd000020000100", @ANYRES32, @ANYBLOB="010100002001000000000000000000000000000096dd0000"], 0x78}}, 0x4008040) sendmsg$nl_route_sched(r1, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000600)=@newtclass={0x4ac, 0x28, 0x10, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0x5, 0x1d}, {0xfff1, 0xf}, {0x2, 0xb}}, [@tclass_kind_options, @tclass_kind_options=@c_taprio={0xb}, @tclass_kind_options=@c_netem={0xa}, @tclass_kind_options=@c_mq={0x7}, @tclass_kind_options=@c_netem={0xa}, @tclass_kind_options=@c_multiq={0xb}]}, 0x4ac}, 0x1, 0x0, 0x0, 0x4008180}, 0x40010) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newtfilter={0x6c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x3c, 0x2, [@TCA_BASIC_EMATCHES={0x38, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x2c, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1}, @TCF_EM_META={0x18, 0x2, 0x0, 0x0, {{}, [@TCA_EM_META_HDR={0xc}]}}]}]}]}}]}, 0x6c}}, 0x0) [ 2456.369718][T28702] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2456.395538][T28702] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 00:40:56 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000f000000850000007500000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r6, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x41, 0x3, 0x230, 0x0, 0x19, 0x0, 0x0, 0x0, 0x2e8, 0x1f0, 0x1f0, 0x2e8, 0x1f0, 0x3, 0x0, {[{{@ip={@private, @dev, 0x0, 0x0, 'wlan1\x00', 'wg1\x00'}, 0x0, 0xa8, 0xc8, 0x0, {0x0, 0xffffffffa0028000}, [@common=@unspec=@quota={{0x38}}]}, @unspec=@TRACE={0x20}}, {{@ip={@empty, @empty, 0x0, 0x0, 'veth0_vlan\x00', 'netpci0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x290) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000000)={@empty, @local, 0x0}, &(0x7f0000000040)=0xc) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000380)=ANY=[@ANYBLOB="72797a746e6c32000000000010bd084f", @ANYRES32=r7, @ANYBLOB="070000400000000200000005450500d4006700003f049078ac1414bb7f0000018913e2e0000001ac1e0001ffffffffac1414bb01940401008205058716831fa964010101ffffffffac1414bbe0000002ffffffff0a01010200000000443c6da1ac1414aa00000009ac14141c00000000ac1414aafffffffdac1414aa80000000ffffffff00007fffffffffff000007ffe000000100000001440c34000000000500000002830f1ce281af4e35b1745d312aa54b892788ac1414bbe000000100000000e0000001640101017f00000164010100ac1e0001e000000107032f000000"]}) r9 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r9, 0x4000000000000, 0x40, &(0x7f0000000900)=@raw={'raw\x00', 0x41, 0x3, 0x388, 0x0, 0x19, 0x0, 0x0, 0x0, 0x2f0, 0x1f0, 0x1f0, 0x2f0, 0x1f0, 0x3, 0x0, {[{{@ip={@private, @dev, 0x0, 0x0, 'wlan1\x00', 'wg1\x00'}, 0x0, 0x200, 0x220, 0x0, {0x0, 0xffffffffa0028000}, [@common=@set={{0x40}, {{0x4, [0x4, 0x2, 0xa, 0x6, 0x8, 0x2], 0x2, 0x2}}}, @common=@inet=@hashlimit2={{0x150}, {'veth1\x00', {0x0, 0x8, 0x40, 0x0, 0x0, 0x687c, 0x93}}}]}, @unspec=@TRACE={0x20}}, {{@ip={@empty, @empty, 0x0, 0x0, 'veth0_vlan\x00', 'netpci0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x0, 0x3]}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3e8) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000000)={@empty, @local, 0x0}, &(0x7f0000000040)=0xc) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r9, 0x89f1, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000380)={'syztnl2\x00', r10, 0x700, 0x40, 0x2, 0x5, {{0x35, 0x4, 0x1, 0x1, 0xd4, 0x0, 0x0, 0x3f, 0x4, 0x0, @remote, @loopback, {[@ssrr={0x89, 0x13, 0xe2, [@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @remote]}, @noop, @ra={0x94, 0x4, 0x1}, @generic={0x82, 0x5, "058716"}, @lsrr={0x83, 0x1f, 0xa9, [@rand_addr=0x64010101, @broadcast, @remote, @multicast2, @broadcast, @private=0xa010102, @empty]}, @timestamp_addr={0x44, 0x3c, 0x6d, 0x1, 0xa, [{@local, 0x9}, {@local}, {@local, 0xfffffffd}, {@local, 0x80000000}, {@broadcast, 0x7fff}, {@broadcast, 0x7ff}, {@multicast1, 0x1}]}, @timestamp={0x44, 0xc, 0x34, 0x0, 0x0, [0x5, 0x2]}, @generic={0x83, 0xf, "1ce281af4e35b1745d312aa54b"}, @ssrr={0x89, 0x27, 0x88, [@remote, @multicast1, @empty, @multicast1, @rand_addr=0x64010101, @loopback, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1]}, @generic={0x7, 0x3, '/'}]}}}}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f0000000180)={&(0x7f0000000840)=ANY=[@ANYBLOB="780000005400010026bd7000fbdbdf2507000000", @ANYRESOCT=r8, @ANYBLOB="ed8e0100", @ANYRES32=r10, @ANYBLOB="000201006401010200000000000000000000000086dd000020000100", @ANYRES32, @ANYBLOB="01050300ac1e000100000000000000000000000086dd000020000100", @ANYRES32, @ANYBLOB="010100002001000000000000000000000000000096dd0000"], 0x78}}, 0x4008040) sendmsg$nl_route_sched(r1, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000600)=@newtclass={0x4ac, 0x28, 0x10, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0x5, 0x1d}, {0xfff1, 0xf}, {0x2, 0xb}}, [@tclass_kind_options, @tclass_kind_options=@c_taprio={0xb}, @tclass_kind_options=@c_netem={0xa}, @tclass_kind_options=@c_mq={0x7}, @tclass_kind_options=@c_netem={0xa}, @tclass_kind_options=@c_multiq={0xb}]}, 0x4ac}, 0x1, 0x0, 0x0, 0x4008180}, 0x40010) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newtfilter={0x6c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x3c, 0x2, [@TCA_BASIC_EMATCHES={0x38, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x2c, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1}, @TCF_EM_META={0x18, 0x2, 0x0, 0x0, {{}, [@TCA_EM_META_HDR={0xc}]}}]}]}]}}]}, 0x6c}}, 0x0) [ 2457.246069][T28706] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2457.283699][T28706] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 00:40:57 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000f000000850000007500000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r6, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x41, 0x3, 0x230, 0x0, 0x19, 0x0, 0x0, 0x0, 0x2e8, 0x1f0, 0x1f0, 0x2e8, 0x1f0, 0x3, 0x0, {[{{@ip={@private, @dev, 0x0, 0x0, 'wlan1\x00', 'wg1\x00'}, 0x0, 0xa8, 0xc8, 0x0, {0x0, 0xffffffffa0028000}, [@common=@unspec=@quota={{0x38}}]}, @unspec=@TRACE={0x20}}, {{@ip={@empty, @empty, 0x0, 0x0, 'veth0_vlan\x00', 'netpci0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x290) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000000)={@empty, @local, 0x0}, &(0x7f0000000040)=0xc) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000380)=ANY=[@ANYBLOB="72797a746e6c32000000000010bd084f", @ANYRES32=r7, @ANYBLOB="070000400000000200000005450500d4006700003f049078ac1414bb7f0000018913e2e0000001ac1e0001ffffffffac1414bb01940401008205058716831fa964010101ffffffffac1414bbe0000002ffffffff0a01010200000000443c6da1ac1414aa00000009ac14141c00000000ac1414aafffffffdac1414aa80000000ffffffff00007fffffffffff000007ffe000000100000001440c34000000000500000002830f1ce281af4e35b1745d312aa54b892788ac1414bbe000000100000000e0000001640101017f00000164010100ac1e0001e000000107032f000000"]}) r9 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r9, 0x4000000000000, 0x40, &(0x7f0000000900)=@raw={'raw\x00', 0x41, 0x3, 0x388, 0x0, 0x19, 0x0, 0x0, 0x0, 0x2f0, 0x1f0, 0x1f0, 0x2f0, 0x1f0, 0x3, 0x0, {[{{@ip={@private, @dev, 0x0, 0x0, 'wlan1\x00', 'wg1\x00'}, 0x0, 0x200, 0x220, 0x0, {0x0, 0xffffffffa0028000}, [@common=@set={{0x40}, {{0x4, [0x4, 0x2, 0xa, 0x6, 0x8, 0x2], 0x2, 0x2}}}, @common=@inet=@hashlimit2={{0x150}, {'veth1\x00', {0x0, 0x8, 0x40, 0x0, 0x0, 0x687c, 0x93}}}]}, @unspec=@TRACE={0x20}}, {{@ip={@empty, @empty, 0x0, 0x0, 'veth0_vlan\x00', 'netpci0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x0, 0x3]}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3e8) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000000)={@empty, @local, 0x0}, &(0x7f0000000040)=0xc) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r9, 0x89f1, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000380)={'syztnl2\x00', r10, 0x700, 0x40, 0x2, 0x5, {{0x35, 0x4, 0x1, 0x1, 0xd4, 0x0, 0x0, 0x3f, 0x4, 0x0, @remote, @loopback, {[@ssrr={0x89, 0x13, 0xe2, [@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @remote]}, @noop, @ra={0x94, 0x4, 0x1}, @generic={0x82, 0x5, "058716"}, @lsrr={0x83, 0x1f, 0xa9, [@rand_addr=0x64010101, @broadcast, @remote, @multicast2, @broadcast, @private=0xa010102, @empty]}, @timestamp_addr={0x44, 0x3c, 0x6d, 0x1, 0xa, [{@local, 0x9}, {@local}, {@local, 0xfffffffd}, {@local, 0x80000000}, {@broadcast, 0x7fff}, {@broadcast, 0x7ff}, {@multicast1, 0x1}]}, @timestamp={0x44, 0xc, 0x34, 0x0, 0x0, [0x5, 0x2]}, @generic={0x83, 0xf, "1ce281af4e35b1745d312aa54b"}, @ssrr={0x89, 0x27, 0x88, [@remote, @multicast1, @empty, @multicast1, @rand_addr=0x64010101, @loopback, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1]}, @generic={0x7, 0x3, '/'}]}}}}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f0000000180)={&(0x7f0000000840)=ANY=[@ANYBLOB="780000005400010026bd7000fbdbdf2507000000", @ANYRESOCT=r8, @ANYBLOB="ed8e0100", @ANYRES32=r10, @ANYBLOB="000201006401010200000000000000000000000086dd000020000100", @ANYRES32, @ANYBLOB="01050300ac1e000100000000000000000000000086dd000020000100", @ANYRES32, @ANYBLOB="010100002001000000000000000000000000000096dd0000"], 0x78}, 0x1, 0x0, 0x0, 0x8840}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000600)=@newtclass={0x4ac, 0x28, 0x10, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0x5, 0x1d}, {0xfff1, 0xf}, {0x2, 0xb}}, [@tclass_kind_options, @tclass_kind_options=@c_taprio={0xb}, @tclass_kind_options=@c_netem={0xa}, @tclass_kind_options=@c_mq={0x7}, @tclass_kind_options=@c_netem={0xa}, @tclass_kind_options=@c_multiq={0xb}]}, 0x4ac}, 0x1, 0x0, 0x0, 0x4008180}, 0x40010) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newtfilter={0x6c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x3c, 0x2, [@TCA_BASIC_EMATCHES={0x38, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x2c, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1}, @TCF_EM_META={0x18, 0x2, 0x0, 0x0, {{}, [@TCA_EM_META_HDR={0xc}]}}]}]}]}}]}, 0x6c}}, 0x0) [ 2458.104827][T28716] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2458.153259][T28716] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 00:40:59 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000f000000850000007500000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r6, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x41, 0x3, 0x230, 0x0, 0x19, 0x0, 0x0, 0x0, 0x2e8, 0x1f0, 0x1f0, 0x2e8, 0x1f0, 0x3, 0x0, {[{{@ip={@private, @dev, 0x0, 0x0, 'wlan1\x00', 'wg1\x00'}, 0x0, 0xa8, 0xc8, 0x0, {0x0, 0xffffffffa0028000}, [@common=@unspec=@quota={{0x38}}]}, @unspec=@TRACE={0x20}}, {{@ip={@empty, @empty, 0x0, 0x0, 'veth0_vlan\x00', 'netpci0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x290) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000000)={@empty, @local, 0x0}, &(0x7f0000000040)=0xc) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000380)=ANY=[@ANYBLOB="72797a746e6c32000000000010bd084f", @ANYRES32=r7, @ANYBLOB="070000400000000200000005450500d4006700003f049078ac1414bb7f0000018913e2e0000001ac1e0001ffffffffac1414bb01940401008205058716831fa964010101ffffffffac1414bbe0000002ffffffff0a01010200000000443c6da1ac1414aa00000009ac14141c00000000ac1414aafffffffdac1414aa80000000ffffffff00007fffffffffff000007ffe000000100000001440c34000000000500000002830f1ce281af4e35b1745d312aa54b892788ac1414bbe000000100000000e0000001640101017f00000164010100ac1e0001e000000107032f000000"]}) r9 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r9, 0x4000000000000, 0x40, &(0x7f0000000900)=@raw={'raw\x00', 0x41, 0x3, 0x388, 0x0, 0x19, 0x0, 0x0, 0x0, 0x2f0, 0x1f0, 0x1f0, 0x2f0, 0x1f0, 0x3, 0x0, {[{{@ip={@private, @dev, 0x0, 0x0, 'wlan1\x00', 'wg1\x00'}, 0x0, 0x200, 0x220, 0x0, {0x0, 0xffffffffa0028000}, [@common=@set={{0x40}, {{0x4, [0x4, 0x2, 0xa, 0x6, 0x8, 0x2], 0x2, 0x2}}}, @common=@inet=@hashlimit2={{0x150}, {'veth1\x00', {0x0, 0x8, 0x40, 0x0, 0x0, 0x687c, 0x93}}}]}, @unspec=@TRACE={0x20}}, {{@ip={@empty, @empty, 0x0, 0x0, 'veth0_vlan\x00', 'netpci0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x0, 0x3]}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3e8) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000000)={@empty, @local, 0x0}, &(0x7f0000000040)=0xc) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r9, 0x89f1, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000380)={'syztnl2\x00', r10, 0x700, 0x40, 0x2, 0x5, {{0x35, 0x4, 0x1, 0x1, 0xd4, 0x0, 0x0, 0x3f, 0x4, 0x0, @remote, @loopback, {[@ssrr={0x89, 0x13, 0xe2, [@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @remote]}, @noop, @ra={0x94, 0x4, 0x1}, @generic={0x82, 0x5, "058716"}, @lsrr={0x83, 0x1f, 0xa9, [@rand_addr=0x64010101, @broadcast, @remote, @multicast2, @broadcast, @private=0xa010102, @empty]}, @timestamp_addr={0x44, 0x3c, 0x6d, 0x1, 0xa, [{@local, 0x9}, {@local}, {@local, 0xfffffffd}, {@local, 0x80000000}, {@broadcast, 0x7fff}, {@broadcast, 0x7ff}, {@multicast1, 0x1}]}, @timestamp={0x44, 0xc, 0x34, 0x0, 0x0, [0x5, 0x2]}, @generic={0x83, 0xf, "1ce281af4e35b1745d312aa54b"}, @ssrr={0x89, 0x27, 0x88, [@remote, @multicast1, @empty, @multicast1, @rand_addr=0x64010101, @loopback, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1]}, @generic={0x7, 0x3, '/'}]}}}}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f0000000180)={&(0x7f0000000840)=ANY=[@ANYBLOB="780000005400010026bd7000fbdbdf2507000000", @ANYRESOCT=r8, @ANYBLOB="ed8e0100", @ANYRES32=r10, @ANYBLOB="000201006401010200000000000000000000000086dd000020000100", @ANYRES32, @ANYBLOB="01050300ac1e000100000000000000000000000086dd000020000100", @ANYRES32, @ANYBLOB="010100002001000000000000000000000000000096dd0000"], 0x78}, 0x1, 0x0, 0x0, 0x8840}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000600)=@newtclass={0x4ac, 0x28, 0x10, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0x5, 0x1d}, {0xfff1, 0xf}, {0x2, 0xb}}, [@tclass_kind_options, @tclass_kind_options=@c_taprio={0xb}, @tclass_kind_options=@c_netem={0xa}, @tclass_kind_options=@c_mq={0x7}, @tclass_kind_options=@c_netem={0xa}, @tclass_kind_options=@c_multiq={0xb}]}, 0x4ac}, 0x1, 0x0, 0x0, 0x4008180}, 0x40010) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newtfilter={0x6c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x3c, 0x2, [@TCA_BASIC_EMATCHES={0x38, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x2c, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1}, @TCF_EM_META={0x18, 0x2, 0x0, 0x0, {{}, [@TCA_EM_META_HDR={0xc}]}}]}]}]}}]}, 0x6c}}, 0x0) 00:40:59 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000b80), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'pimreg1\x00', 0x2}) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, 0x0) 00:40:59 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000f000000850000007500000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r6, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x41, 0x3, 0x230, 0x0, 0x19, 0x0, 0x0, 0x0, 0x2e8, 0x1f0, 0x1f0, 0x2e8, 0x1f0, 0x3, 0x0, {[{{@ip={@private, @dev, 0x0, 0x0, 'wlan1\x00', 'wg1\x00'}, 0x0, 0xa8, 0xc8, 0x0, {0x0, 0xffffffffa0028000}, [@common=@unspec=@quota={{0x38}}]}, @unspec=@TRACE={0x20}}, {{@ip={@empty, @empty, 0x0, 0x0, 'veth0_vlan\x00', 'netpci0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x290) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000000)={@empty, @local, 0x0}, &(0x7f0000000040)=0xc) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000380)=ANY=[@ANYBLOB="72797a746e6c32000000000010bd084f", @ANYRES32=r7, @ANYBLOB="070000400000000200000005450500d4006700003f049078ac1414bb7f0000018913e2e0000001ac1e0001ffffffffac1414bb01940401008205058716831fa964010101ffffffffac1414bbe0000002ffffffff0a01010200000000443c6da1ac1414aa00000009ac14141c00000000ac1414aafffffffdac1414aa80000000ffffffff00007fffffffffff000007ffe000000100000001440c34000000000500000002830f1ce281af4e35b1745d312aa54b892788ac1414bbe000000100000000e0000001640101017f00000164010100ac1e0001e000000107032f000000"]}) r9 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r9, 0x4000000000000, 0x40, &(0x7f0000000900)=@raw={'raw\x00', 0x41, 0x3, 0x388, 0x0, 0x19, 0x0, 0x0, 0x0, 0x2f0, 0x1f0, 0x1f0, 0x2f0, 0x1f0, 0x3, 0x0, {[{{@ip={@private, @dev, 0x0, 0x0, 'wlan1\x00', 'wg1\x00'}, 0x0, 0x200, 0x220, 0x0, {0x0, 0xffffffffa0028000}, [@common=@set={{0x40}, {{0x4, [0x4, 0x2, 0xa, 0x6, 0x8, 0x2], 0x2, 0x2}}}, @common=@inet=@hashlimit2={{0x150}, {'veth1\x00', {0x0, 0x8, 0x40, 0x0, 0x0, 0x687c, 0x93}}}]}, @unspec=@TRACE={0x20}}, {{@ip={@empty, @empty, 0x0, 0x0, 'veth0_vlan\x00', 'netpci0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x0, 0x3]}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3e8) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000000)={@empty, @local, 0x0}, &(0x7f0000000040)=0xc) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r9, 0x89f1, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000380)={'syztnl2\x00', r10, 0x700, 0x40, 0x2, 0x5, {{0x35, 0x4, 0x1, 0x1, 0xd4, 0x0, 0x0, 0x3f, 0x4, 0x0, @remote, @loopback, {[@ssrr={0x89, 0x13, 0xe2, [@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @remote]}, @noop, @ra={0x94, 0x4, 0x1}, @generic={0x82, 0x5, "058716"}, @lsrr={0x83, 0x1f, 0xa9, [@rand_addr=0x64010101, @broadcast, @remote, @multicast2, @broadcast, @private=0xa010102, @empty]}, @timestamp_addr={0x44, 0x3c, 0x6d, 0x1, 0xa, [{@local, 0x9}, {@local}, {@local, 0xfffffffd}, {@local, 0x80000000}, {@broadcast, 0x7fff}, {@broadcast, 0x7ff}, {@multicast1, 0x1}]}, @timestamp={0x44, 0xc, 0x34, 0x0, 0x0, [0x5, 0x2]}, @generic={0x83, 0xf, "1ce281af4e35b1745d312aa54b"}, @ssrr={0x89, 0x27, 0x88, [@remote, @multicast1, @empty, @multicast1, @rand_addr=0x64010101, @loopback, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1]}, @generic={0x7, 0x3, '/'}]}}}}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f0000000180)={&(0x7f0000000840)=ANY=[@ANYBLOB="780000005400010026bd7000fbdbdf2507000000", @ANYRESOCT=r8, @ANYBLOB="ed8e0100", @ANYRES32=r10, @ANYBLOB="000201006401010200000000000000000000000086dd000020000100", @ANYRES32, @ANYBLOB="01050300ac1e000100000000000000000000000086dd000020000100", @ANYRES32, @ANYBLOB="010100002001000000000000000000000000000096dd0000"], 0x78}, 0x1, 0x0, 0x0, 0x8840}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000600)=@newtclass={0x4ac, 0x28, 0x10, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0x5, 0x1d}, {0xfff1, 0xf}, {0x2, 0xb}}, [@tclass_kind_options, @tclass_kind_options=@c_taprio={0xb}, @tclass_kind_options=@c_netem={0xa}, @tclass_kind_options=@c_mq={0x7}, @tclass_kind_options=@c_netem={0xa}, @tclass_kind_options=@c_multiq={0xb}]}, 0x4ac}, 0x1, 0x0, 0x0, 0x4008180}, 0x40010) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newtfilter={0x6c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x3c, 0x2, [@TCA_BASIC_EMATCHES={0x38, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x2c, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1}, @TCF_EM_META={0x18, 0x2, 0x0, 0x0, {{}, [@TCA_EM_META_HDR={0xc}]}}]}]}]}}]}, 0x6c}}, 0x0) 00:41:00 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000f000000850000007500000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r6, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x41, 0x3, 0x230, 0x0, 0x19, 0x0, 0x0, 0x0, 0x2e8, 0x1f0, 0x1f0, 0x2e8, 0x1f0, 0x3, 0x0, {[{{@ip={@private, @dev, 0x0, 0x0, 'wlan1\x00', 'wg1\x00'}, 0x0, 0xa8, 0xc8, 0x0, {0x0, 0xffffffffa0028000}, [@common=@unspec=@quota={{0x38}}]}, @unspec=@TRACE={0x20}}, {{@ip={@empty, @empty, 0x0, 0x0, 'veth0_vlan\x00', 'netpci0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x290) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000000)={@empty, @local, 0x0}, &(0x7f0000000040)=0xc) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000380)=ANY=[@ANYBLOB="72797a746e6c32000000000010bd084f", @ANYRES32=r7, @ANYBLOB="070000400000000200000005450500d4006700003f049078ac1414bb7f0000018913e2e0000001ac1e0001ffffffffac1414bb01940401008205058716831fa964010101ffffffffac1414bbe0000002ffffffff0a01010200000000443c6da1ac1414aa00000009ac14141c00000000ac1414aafffffffdac1414aa80000000ffffffff00007fffffffffff000007ffe000000100000001440c34000000000500000002830f1ce281af4e35b1745d312aa54b892788ac1414bbe000000100000000e0000001640101017f00000164010100ac1e0001e000000107032f000000"]}) r9 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r9, 0x4000000000000, 0x40, &(0x7f0000000900)=@raw={'raw\x00', 0x41, 0x3, 0x388, 0x0, 0x19, 0x0, 0x0, 0x0, 0x2f0, 0x1f0, 0x1f0, 0x2f0, 0x1f0, 0x3, 0x0, {[{{@ip={@private, @dev, 0x0, 0x0, 'wlan1\x00', 'wg1\x00'}, 0x0, 0x200, 0x220, 0x0, {0x0, 0xffffffffa0028000}, [@common=@set={{0x40}, {{0x4, [0x4, 0x2, 0xa, 0x6, 0x8, 0x2], 0x2, 0x2}}}, @common=@inet=@hashlimit2={{0x150}, {'veth1\x00', {0x0, 0x8, 0x40, 0x0, 0x0, 0x687c, 0x93}}}]}, @unspec=@TRACE={0x20}}, {{@ip={@empty, @empty, 0x0, 0x0, 'veth0_vlan\x00', 'netpci0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x0, 0x3]}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3e8) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000000)={@empty, @local, 0x0}, &(0x7f0000000040)=0xc) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r9, 0x89f1, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000380)={'syztnl2\x00', r10, 0x700, 0x40, 0x2, 0x5, {{0x35, 0x4, 0x1, 0x1, 0xd4, 0x0, 0x0, 0x3f, 0x4, 0x0, @remote, @loopback, {[@ssrr={0x89, 0x13, 0xe2, [@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @remote]}, @noop, @ra={0x94, 0x4, 0x1}, @generic={0x82, 0x5, "058716"}, @lsrr={0x83, 0x1f, 0xa9, [@rand_addr=0x64010101, @broadcast, @remote, @multicast2, @broadcast, @private=0xa010102, @empty]}, @timestamp_addr={0x44, 0x3c, 0x6d, 0x1, 0xa, [{@local, 0x9}, {@local}, {@local, 0xfffffffd}, {@local, 0x80000000}, {@broadcast, 0x7fff}, {@broadcast, 0x7ff}, {@multicast1, 0x1}]}, @timestamp={0x44, 0xc, 0x34, 0x0, 0x0, [0x5, 0x2]}, @generic={0x83, 0xf, "1ce281af4e35b1745d312aa54b"}, @ssrr={0x89, 0x27, 0x88, [@remote, @multicast1, @empty, @multicast1, @rand_addr=0x64010101, @loopback, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1]}, @generic={0x7, 0x3, '/'}]}}}}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f0000000180)={&(0x7f0000000840)=ANY=[@ANYBLOB="780000005400010026bd7000fbdbdf2507000000", @ANYRESOCT=r8, @ANYBLOB="ed8e0100", @ANYRES32=r10, @ANYBLOB="000201006401010200000000000000000000000086dd000020000100", @ANYRES32, @ANYBLOB="01050300ac1e000100000000000000000000000086dd000020000100", @ANYRES32, @ANYBLOB="010100002001000000000000000000000000000096dd0000"], 0x78}, 0x1, 0x0, 0x0, 0x8840}, 0x4008040) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000600)=@newtclass={0x4ac, 0x28, 0x10, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0x5, 0x1d}, {0xfff1, 0xf}, {0x2, 0xb}}, [@tclass_kind_options, @tclass_kind_options=@c_taprio={0xb}, @tclass_kind_options=@c_netem={0xa}, @tclass_kind_options=@c_mq={0x7}, @tclass_kind_options=@c_netem={0xa}, @tclass_kind_options=@c_multiq={0xb}]}, 0x4ac}, 0x1, 0x0, 0x0, 0x4008180}, 0x40010) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newtfilter={0x6c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x3c, 0x2, [@TCA_BASIC_EMATCHES={0x38, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x2c, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1}, @TCF_EM_META={0x18, 0x2, 0x0, 0x0, {{}, [@TCA_EM_META_HDR={0xc}]}}]}]}]}}]}, 0x6c}}, 0x0) [ 2460.583350][T28741] __nla_validate_parse: 4 callbacks suppressed [ 2460.583439][T28741] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2460.602166][T28741] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 00:41:00 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000f000000850000007500000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r6, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x41, 0x3, 0x230, 0x0, 0x19, 0x0, 0x0, 0x0, 0x2e8, 0x1f0, 0x1f0, 0x2e8, 0x1f0, 0x3, 0x0, {[{{@ip={@private, @dev, 0x0, 0x0, 'wlan1\x00', 'wg1\x00'}, 0x0, 0xa8, 0xc8, 0x0, {0x0, 0xffffffffa0028000}, [@common=@unspec=@quota={{0x38}}]}, @unspec=@TRACE={0x20}}, {{@ip={@empty, @empty, 0x0, 0x0, 'veth0_vlan\x00', 'netpci0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x290) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000000)={@empty, @local, 0x0}, &(0x7f0000000040)=0xc) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000380)=ANY=[@ANYBLOB="72797a746e6c32000000000010bd084f", @ANYRES32=r7, @ANYBLOB="070000400000000200000005450500d4006700003f049078ac1414bb7f0000018913e2e0000001ac1e0001ffffffffac1414bb01940401008205058716831fa964010101ffffffffac1414bbe0000002ffffffff0a01010200000000443c6da1ac1414aa00000009ac14141c00000000ac1414aafffffffdac1414aa80000000ffffffff00007fffffffffff000007ffe000000100000001440c34000000000500000002830f1ce281af4e35b1745d312aa54b892788ac1414bbe000000100000000e0000001640101017f00000164010100ac1e0001e000000107032f000000"]}) r9 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r9, 0x4000000000000, 0x40, &(0x7f0000000900)=@raw={'raw\x00', 0x41, 0x3, 0x388, 0x0, 0x19, 0x0, 0x0, 0x0, 0x2f0, 0x1f0, 0x1f0, 0x2f0, 0x1f0, 0x3, 0x0, {[{{@ip={@private, @dev, 0x0, 0x0, 'wlan1\x00', 'wg1\x00'}, 0x0, 0x200, 0x220, 0x0, {0x0, 0xffffffffa0028000}, [@common=@set={{0x40}, {{0x4, [0x4, 0x2, 0xa, 0x6, 0x8, 0x2], 0x2, 0x2}}}, @common=@inet=@hashlimit2={{0x150}, {'veth1\x00', {0x0, 0x8, 0x40, 0x0, 0x0, 0x687c, 0x93}}}]}, @unspec=@TRACE={0x20}}, {{@ip={@empty, @empty, 0x0, 0x0, 'veth0_vlan\x00', 'netpci0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x0, 0x3]}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3e8) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000000)={@empty, @local, 0x0}, &(0x7f0000000040)=0xc) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r9, 0x89f1, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000380)={'syztnl2\x00', r10, 0x700, 0x40, 0x2, 0x5, {{0x35, 0x4, 0x1, 0x1, 0xd4, 0x0, 0x0, 0x3f, 0x4, 0x0, @remote, @loopback, {[@ssrr={0x89, 0x13, 0xe2, [@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @remote]}, @noop, @ra={0x94, 0x4, 0x1}, @generic={0x82, 0x5, "058716"}, @lsrr={0x83, 0x1f, 0xa9, [@rand_addr=0x64010101, @broadcast, @remote, @multicast2, @broadcast, @private=0xa010102, @empty]}, @timestamp_addr={0x44, 0x3c, 0x6d, 0x1, 0xa, [{@local, 0x9}, {@local}, {@local, 0xfffffffd}, {@local, 0x80000000}, {@broadcast, 0x7fff}, {@broadcast, 0x7ff}, {@multicast1, 0x1}]}, @timestamp={0x44, 0xc, 0x34, 0x0, 0x0, [0x5, 0x2]}, @generic={0x83, 0xf, "1ce281af4e35b1745d312aa54b"}, @ssrr={0x89, 0x27, 0x88, [@remote, @multicast1, @empty, @multicast1, @rand_addr=0x64010101, @loopback, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1]}, @generic={0x7, 0x3, '/'}]}}}}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f0000000180)={&(0x7f0000000840)=ANY=[@ANYBLOB="780000005400010026bd7000fbdbdf2507000000", @ANYRESOCT=r8, @ANYBLOB="ed8e0100", @ANYRES32=r10, @ANYBLOB="000201006401010200000000000000000000000086dd000020000100", @ANYRES32, @ANYBLOB="01050300ac1e000100000000000000000000000086dd000020000100", @ANYRES32, @ANYBLOB="010100002001000000000000000000000000000096dd0000"], 0x78}, 0x1, 0x0, 0x0, 0x8840}, 0x4008040) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000600)=@newtclass={0x4ac, 0x28, 0x10, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0x5, 0x1d}, {0xfff1, 0xf}, {0x2, 0xb}}, [@tclass_kind_options, @tclass_kind_options=@c_taprio={0xb}, @tclass_kind_options=@c_netem={0xa}, @tclass_kind_options=@c_mq={0x7}, @tclass_kind_options=@c_netem={0xa}, @tclass_kind_options=@c_multiq={0xb}]}, 0x4ac}, 0x1, 0x0, 0x0, 0x4008180}, 0x40010) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newtfilter={0x6c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x3c, 0x2, [@TCA_BASIC_EMATCHES={0x38, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x2c, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1}, @TCF_EM_META={0x18, 0x2, 0x0, 0x0, {{}, [@TCA_EM_META_HDR={0xc}]}}]}]}]}}]}, 0x6c}}, 0x0) [ 2461.201667][T28748] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2461.222644][T28748] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 00:41:01 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000f000000850000007500000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r6, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x41, 0x3, 0x230, 0x0, 0x19, 0x0, 0x0, 0x0, 0x2e8, 0x1f0, 0x1f0, 0x2e8, 0x1f0, 0x3, 0x0, {[{{@ip={@private, @dev, 0x0, 0x0, 'wlan1\x00', 'wg1\x00'}, 0x0, 0xa8, 0xc8, 0x0, {0x0, 0xffffffffa0028000}, [@common=@unspec=@quota={{0x38}}]}, @unspec=@TRACE={0x20}}, {{@ip={@empty, @empty, 0x0, 0x0, 'veth0_vlan\x00', 'netpci0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x290) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000000)={@empty, @local, 0x0}, &(0x7f0000000040)=0xc) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000380)=ANY=[@ANYBLOB="72797a746e6c32000000000010bd084f", @ANYRES32=r7, @ANYBLOB="070000400000000200000005450500d4006700003f049078ac1414bb7f0000018913e2e0000001ac1e0001ffffffffac1414bb01940401008205058716831fa964010101ffffffffac1414bbe0000002ffffffff0a01010200000000443c6da1ac1414aa00000009ac14141c00000000ac1414aafffffffdac1414aa80000000ffffffff00007fffffffffff000007ffe000000100000001440c34000000000500000002830f1ce281af4e35b1745d312aa54b892788ac1414bbe000000100000000e0000001640101017f00000164010100ac1e0001e000000107032f000000"]}) r9 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r9, 0x4000000000000, 0x40, &(0x7f0000000900)=@raw={'raw\x00', 0x41, 0x3, 0x388, 0x0, 0x19, 0x0, 0x0, 0x0, 0x2f0, 0x1f0, 0x1f0, 0x2f0, 0x1f0, 0x3, 0x0, {[{{@ip={@private, @dev, 0x0, 0x0, 'wlan1\x00', 'wg1\x00'}, 0x0, 0x200, 0x220, 0x0, {0x0, 0xffffffffa0028000}, [@common=@set={{0x40}, {{0x4, [0x4, 0x2, 0xa, 0x6, 0x8, 0x2], 0x2, 0x2}}}, @common=@inet=@hashlimit2={{0x150}, {'veth1\x00', {0x0, 0x8, 0x40, 0x0, 0x0, 0x687c, 0x93}}}]}, @unspec=@TRACE={0x20}}, {{@ip={@empty, @empty, 0x0, 0x0, 'veth0_vlan\x00', 'netpci0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x0, 0x3]}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3e8) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000000)={@empty, @local, 0x0}, &(0x7f0000000040)=0xc) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r9, 0x89f1, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000380)={'syztnl2\x00', r10, 0x700, 0x40, 0x2, 0x5, {{0x35, 0x4, 0x1, 0x1, 0xd4, 0x0, 0x0, 0x3f, 0x4, 0x0, @remote, @loopback, {[@ssrr={0x89, 0x13, 0xe2, [@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @remote]}, @noop, @ra={0x94, 0x4, 0x1}, @generic={0x82, 0x5, "058716"}, @lsrr={0x83, 0x1f, 0xa9, [@rand_addr=0x64010101, @broadcast, @remote, @multicast2, @broadcast, @private=0xa010102, @empty]}, @timestamp_addr={0x44, 0x3c, 0x6d, 0x1, 0xa, [{@local, 0x9}, {@local}, {@local, 0xfffffffd}, {@local, 0x80000000}, {@broadcast, 0x7fff}, {@broadcast, 0x7ff}, {@multicast1, 0x1}]}, @timestamp={0x44, 0xc, 0x34, 0x0, 0x0, [0x5, 0x2]}, @generic={0x83, 0xf, "1ce281af4e35b1745d312aa54b"}, @ssrr={0x89, 0x27, 0x88, [@remote, @multicast1, @empty, @multicast1, @rand_addr=0x64010101, @loopback, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1]}, @generic={0x7, 0x3, '/'}]}}}}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f0000000180)={&(0x7f0000000840)=ANY=[@ANYBLOB="780000005400010026bd7000fbdbdf2507000000", @ANYRESOCT=r8, @ANYBLOB="ed8e0100", @ANYRES32=r10, @ANYBLOB="000201006401010200000000000000000000000086dd000020000100", @ANYRES32, @ANYBLOB="01050300ac1e000100000000000000000000000086dd000020000100", @ANYRES32, @ANYBLOB="010100002001000000000000000000000000000096dd0000"], 0x78}, 0x1, 0x0, 0x0, 0x8840}, 0x4008040) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000600)=@newtclass={0x4ac, 0x28, 0x10, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0x5, 0x1d}, {0xfff1, 0xf}, {0x2, 0xb}}, [@tclass_kind_options, @tclass_kind_options=@c_taprio={0xb}, @tclass_kind_options=@c_netem={0xa}, @tclass_kind_options=@c_mq={0x7}, @tclass_kind_options=@c_netem={0xa}, @tclass_kind_options=@c_multiq={0xb}]}, 0x4ac}, 0x1, 0x0, 0x0, 0x4008180}, 0x40010) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newtfilter={0x6c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x3c, 0x2, [@TCA_BASIC_EMATCHES={0x38, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x2c, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1}, @TCF_EM_META={0x18, 0x2, 0x0, 0x0, {{}, [@TCA_EM_META_HDR={0xc}]}}]}]}]}}]}, 0x6c}}, 0x0) [ 2461.880147][T28753] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2461.890953][T28753] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 00:41:01 executing program 1: bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000240)={0x0, 0x0, 0x18}, 0xc) 00:41:02 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000f000000850000007500000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r6, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x41, 0x3, 0x230, 0x0, 0x19, 0x0, 0x0, 0x0, 0x2e8, 0x1f0, 0x1f0, 0x2e8, 0x1f0, 0x3, 0x0, {[{{@ip={@private, @dev, 0x0, 0x0, 'wlan1\x00', 'wg1\x00'}, 0x0, 0xa8, 0xc8, 0x0, {0x0, 0xffffffffa0028000}, [@common=@unspec=@quota={{0x38}}]}, @unspec=@TRACE={0x20}}, {{@ip={@empty, @empty, 0x0, 0x0, 'veth0_vlan\x00', 'netpci0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x290) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000000)={@empty, @local, 0x0}, &(0x7f0000000040)=0xc) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000380)=ANY=[@ANYBLOB="72797a746e6c32000000000010bd084f", @ANYRES32=r7, @ANYBLOB="070000400000000200000005450500d4006700003f049078ac1414bb7f0000018913e2e0000001ac1e0001ffffffffac1414bb01940401008205058716831fa964010101ffffffffac1414bbe0000002ffffffff0a01010200000000443c6da1ac1414aa00000009ac14141c00000000ac1414aafffffffdac1414aa80000000ffffffff00007fffffffffff000007ffe000000100000001440c34000000000500000002830f1ce281af4e35b1745d312aa54b892788ac1414bbe000000100000000e0000001640101017f00000164010100ac1e0001e000000107032f000000"]}) r9 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r9, 0x4000000000000, 0x40, &(0x7f0000000900)=@raw={'raw\x00', 0x41, 0x3, 0x388, 0x0, 0x19, 0x0, 0x0, 0x0, 0x2f0, 0x1f0, 0x1f0, 0x2f0, 0x1f0, 0x3, 0x0, {[{{@ip={@private, @dev, 0x0, 0x0, 'wlan1\x00', 'wg1\x00'}, 0x0, 0x200, 0x220, 0x0, {0x0, 0xffffffffa0028000}, [@common=@set={{0x40}, {{0x4, [0x4, 0x2, 0xa, 0x6, 0x8, 0x2], 0x2, 0x2}}}, @common=@inet=@hashlimit2={{0x150}, {'veth1\x00', {0x0, 0x8, 0x40, 0x0, 0x0, 0x687c, 0x93}}}]}, @unspec=@TRACE={0x20}}, {{@ip={@empty, @empty, 0x0, 0x0, 'veth0_vlan\x00', 'netpci0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x0, 0x3]}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3e8) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000000)={@empty, @local, 0x0}, &(0x7f0000000040)=0xc) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r9, 0x89f1, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000380)={'syztnl2\x00', r10, 0x700, 0x40, 0x2, 0x5, {{0x35, 0x4, 0x1, 0x1, 0xd4, 0x0, 0x0, 0x3f, 0x4, 0x0, @remote, @loopback, {[@ssrr={0x89, 0x13, 0xe2, [@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @remote]}, @noop, @ra={0x94, 0x4, 0x1}, @generic={0x82, 0x5, "058716"}, @lsrr={0x83, 0x1f, 0xa9, [@rand_addr=0x64010101, @broadcast, @remote, @multicast2, @broadcast, @private=0xa010102, @empty]}, @timestamp_addr={0x44, 0x3c, 0x6d, 0x1, 0xa, [{@local, 0x9}, {@local}, {@local, 0xfffffffd}, {@local, 0x80000000}, {@broadcast, 0x7fff}, {@broadcast, 0x7ff}, {@multicast1, 0x1}]}, @timestamp={0x44, 0xc, 0x34, 0x0, 0x0, [0x5, 0x2]}, @generic={0x83, 0xf, "1ce281af4e35b1745d312aa54b"}, @ssrr={0x89, 0x27, 0x88, [@remote, @multicast1, @empty, @multicast1, @rand_addr=0x64010101, @loopback, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1]}, @generic={0x7, 0x3, '/'}]}}}}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f0000000180)={&(0x7f0000000840)=ANY=[@ANYBLOB="780000005400010026bd7000fbdbdf2507000000", @ANYRESOCT=r8, @ANYBLOB="ed8e0100", @ANYRES32=r10, @ANYBLOB="000201006401010200000000000000000000000086dd000020000100", @ANYRES32, @ANYBLOB="01050300ac1e000100000000000000000000000086dd000020000100", @ANYRES32, @ANYBLOB="010100002001000000000000000000000000000096dd0000"], 0x78}, 0x1, 0x0, 0x0, 0x8840}, 0x4008040) sendmsg$nl_route_sched(r1, 0x0, 0x40010) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newtfilter={0x6c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x3c, 0x2, [@TCA_BASIC_EMATCHES={0x38, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x2c, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1}, @TCF_EM_META={0x18, 0x2, 0x0, 0x0, {{}, [@TCA_EM_META_HDR={0xc}]}}]}]}]}}]}, 0x6c}}, 0x0) [ 2462.411725][T28757] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2462.419806][T28757] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 00:41:02 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000f000000850000007500000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r6, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x41, 0x3, 0x230, 0x0, 0x19, 0x0, 0x0, 0x0, 0x2e8, 0x1f0, 0x1f0, 0x2e8, 0x1f0, 0x3, 0x0, {[{{@ip={@private, @dev, 0x0, 0x0, 'wlan1\x00', 'wg1\x00'}, 0x0, 0xa8, 0xc8, 0x0, {0x0, 0xffffffffa0028000}, [@common=@unspec=@quota={{0x38}}]}, @unspec=@TRACE={0x20}}, {{@ip={@empty, @empty, 0x0, 0x0, 'veth0_vlan\x00', 'netpci0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x290) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000000)={@empty, @local, 0x0}, &(0x7f0000000040)=0xc) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000380)=ANY=[@ANYBLOB="72797a746e6c32000000000010bd084f", @ANYRES32=r7, @ANYBLOB="070000400000000200000005450500d4006700003f049078ac1414bb7f0000018913e2e0000001ac1e0001ffffffffac1414bb01940401008205058716831fa964010101ffffffffac1414bbe0000002ffffffff0a01010200000000443c6da1ac1414aa00000009ac14141c00000000ac1414aafffffffdac1414aa80000000ffffffff00007fffffffffff000007ffe000000100000001440c34000000000500000002830f1ce281af4e35b1745d312aa54b892788ac1414bbe000000100000000e0000001640101017f00000164010100ac1e0001e000000107032f000000"]}) r9 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r9, 0x4000000000000, 0x40, &(0x7f0000000900)=@raw={'raw\x00', 0x41, 0x3, 0x388, 0x0, 0x19, 0x0, 0x0, 0x0, 0x2f0, 0x1f0, 0x1f0, 0x2f0, 0x1f0, 0x3, 0x0, {[{{@ip={@private, @dev, 0x0, 0x0, 'wlan1\x00', 'wg1\x00'}, 0x0, 0x200, 0x220, 0x0, {0x0, 0xffffffffa0028000}, [@common=@set={{0x40}, {{0x4, [0x4, 0x2, 0xa, 0x6, 0x8, 0x2], 0x2, 0x2}}}, @common=@inet=@hashlimit2={{0x150}, {'veth1\x00', {0x0, 0x8, 0x40, 0x0, 0x0, 0x687c, 0x93}}}]}, @unspec=@TRACE={0x20}}, {{@ip={@empty, @empty, 0x0, 0x0, 'veth0_vlan\x00', 'netpci0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x0, 0x3]}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3e8) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000000)={@empty, @local, 0x0}, &(0x7f0000000040)=0xc) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r9, 0x89f1, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000380)={'syztnl2\x00', r10, 0x700, 0x40, 0x2, 0x5, {{0x35, 0x4, 0x1, 0x1, 0xd4, 0x0, 0x0, 0x3f, 0x4, 0x0, @remote, @loopback, {[@ssrr={0x89, 0x13, 0xe2, [@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @remote]}, @noop, @ra={0x94, 0x4, 0x1}, @generic={0x82, 0x5, "058716"}, @lsrr={0x83, 0x1f, 0xa9, [@rand_addr=0x64010101, @broadcast, @remote, @multicast2, @broadcast, @private=0xa010102, @empty]}, @timestamp_addr={0x44, 0x3c, 0x6d, 0x1, 0xa, [{@local, 0x9}, {@local}, {@local, 0xfffffffd}, {@local, 0x80000000}, {@broadcast, 0x7fff}, {@broadcast, 0x7ff}, {@multicast1, 0x1}]}, @timestamp={0x44, 0xc, 0x34, 0x0, 0x0, [0x5, 0x2]}, @generic={0x83, 0xf, "1ce281af4e35b1745d312aa54b"}, @ssrr={0x89, 0x27, 0x88, [@remote, @multicast1, @empty, @multicast1, @rand_addr=0x64010101, @loopback, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1]}, @generic={0x7, 0x3, '/'}]}}}}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f0000000180)={&(0x7f0000000840)=ANY=[@ANYBLOB="780000005400010026bd7000fbdbdf2507000000", @ANYRESOCT=r8, @ANYBLOB="ed8e0100", @ANYRES32=r10, @ANYBLOB="000201006401010200000000000000000000000086dd000020000100", @ANYRES32, @ANYBLOB="01050300ac1e000100000000000000000000000086dd000020000100", @ANYRES32, @ANYBLOB="010100002001000000000000000000000000000096dd0000"], 0x78}, 0x1, 0x0, 0x0, 0x8840}, 0x4008040) sendmsg$nl_route_sched(r1, 0x0, 0x40010) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newtfilter={0x6c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x3c, 0x2, [@TCA_BASIC_EMATCHES={0x38, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x2c, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1}, @TCF_EM_META={0x18, 0x2, 0x0, 0x0, {{}, [@TCA_EM_META_HDR={0xc}]}}]}]}]}}]}, 0x6c}}, 0x0) [ 2463.394395][T28761] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2463.451797][T28761] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 00:41:03 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@rights={{0x18, 0x1, 0x1, [r0, 0xffffffffffffffff]}}], 0x18}, 0x0) 00:41:03 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000f000000850000007500000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r6, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x41, 0x3, 0x230, 0x0, 0x19, 0x0, 0x0, 0x0, 0x2e8, 0x1f0, 0x1f0, 0x2e8, 0x1f0, 0x3, 0x0, {[{{@ip={@private, @dev, 0x0, 0x0, 'wlan1\x00', 'wg1\x00'}, 0x0, 0xa8, 0xc8, 0x0, {0x0, 0xffffffffa0028000}, [@common=@unspec=@quota={{0x38}}]}, @unspec=@TRACE={0x20}}, {{@ip={@empty, @empty, 0x0, 0x0, 'veth0_vlan\x00', 'netpci0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x290) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000000)={@empty, @local, 0x0}, &(0x7f0000000040)=0xc) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000380)=ANY=[@ANYBLOB="72797a746e6c32000000000010bd084f", @ANYRES32=r7, @ANYBLOB="070000400000000200000005450500d4006700003f049078ac1414bb7f0000018913e2e0000001ac1e0001ffffffffac1414bb01940401008205058716831fa964010101ffffffffac1414bbe0000002ffffffff0a01010200000000443c6da1ac1414aa00000009ac14141c00000000ac1414aafffffffdac1414aa80000000ffffffff00007fffffffffff000007ffe000000100000001440c34000000000500000002830f1ce281af4e35b1745d312aa54b892788ac1414bbe000000100000000e0000001640101017f00000164010100ac1e0001e000000107032f000000"]}) r9 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r9, 0x4000000000000, 0x40, &(0x7f0000000900)=@raw={'raw\x00', 0x41, 0x3, 0x388, 0x0, 0x19, 0x0, 0x0, 0x0, 0x2f0, 0x1f0, 0x1f0, 0x2f0, 0x1f0, 0x3, 0x0, {[{{@ip={@private, @dev, 0x0, 0x0, 'wlan1\x00', 'wg1\x00'}, 0x0, 0x200, 0x220, 0x0, {0x0, 0xffffffffa0028000}, [@common=@set={{0x40}, {{0x4, [0x4, 0x2, 0xa, 0x6, 0x8, 0x2], 0x2, 0x2}}}, @common=@inet=@hashlimit2={{0x150}, {'veth1\x00', {0x0, 0x8, 0x40, 0x0, 0x0, 0x687c, 0x93}}}]}, @unspec=@TRACE={0x20}}, {{@ip={@empty, @empty, 0x0, 0x0, 'veth0_vlan\x00', 'netpci0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x0, 0x3]}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3e8) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000000)={@empty, @local, 0x0}, &(0x7f0000000040)=0xc) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r9, 0x89f1, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000380)={'syztnl2\x00', r10, 0x700, 0x40, 0x2, 0x5, {{0x35, 0x4, 0x1, 0x1, 0xd4, 0x0, 0x0, 0x3f, 0x4, 0x0, @remote, @loopback, {[@ssrr={0x89, 0x13, 0xe2, [@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @remote]}, @noop, @ra={0x94, 0x4, 0x1}, @generic={0x82, 0x5, "058716"}, @lsrr={0x83, 0x1f, 0xa9, [@rand_addr=0x64010101, @broadcast, @remote, @multicast2, @broadcast, @private=0xa010102, @empty]}, @timestamp_addr={0x44, 0x3c, 0x6d, 0x1, 0xa, [{@local, 0x9}, {@local}, {@local, 0xfffffffd}, {@local, 0x80000000}, {@broadcast, 0x7fff}, {@broadcast, 0x7ff}, {@multicast1, 0x1}]}, @timestamp={0x44, 0xc, 0x34, 0x0, 0x0, [0x5, 0x2]}, @generic={0x83, 0xf, "1ce281af4e35b1745d312aa54b"}, @ssrr={0x89, 0x27, 0x88, [@remote, @multicast1, @empty, @multicast1, @rand_addr=0x64010101, @loopback, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1]}, @generic={0x7, 0x3, '/'}]}}}}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f0000000180)={&(0x7f0000000840)=ANY=[@ANYBLOB="780000005400010026bd7000fbdbdf2507000000", @ANYRESOCT=r8, @ANYBLOB="ed8e0100", @ANYRES32=r10, @ANYBLOB="000201006401010200000000000000000000000086dd000020000100", @ANYRES32, @ANYBLOB="01050300ac1e000100000000000000000000000086dd000020000100", @ANYRES32, @ANYBLOB="010100002001000000000000000000000000000096dd0000"], 0x78}, 0x1, 0x0, 0x0, 0x8840}, 0x4008040) sendmsg$nl_route_sched(r1, 0x0, 0x40010) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newtfilter={0x6c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x3c, 0x2, [@TCA_BASIC_EMATCHES={0x38, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x2c, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1}, @TCF_EM_META={0x18, 0x2, 0x0, 0x0, {{}, [@TCA_EM_META_HDR={0xc}]}}]}]}]}}]}, 0x6c}}, 0x0) 00:41:04 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000f000000850000007500000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r6, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x41, 0x3, 0x230, 0x0, 0x19, 0x0, 0x0, 0x0, 0x2e8, 0x1f0, 0x1f0, 0x2e8, 0x1f0, 0x3, 0x0, {[{{@ip={@private, @dev, 0x0, 0x0, 'wlan1\x00', 'wg1\x00'}, 0x0, 0xa8, 0xc8, 0x0, {0x0, 0xffffffffa0028000}, [@common=@unspec=@quota={{0x38}}]}, @unspec=@TRACE={0x20}}, {{@ip={@empty, @empty, 0x0, 0x0, 'veth0_vlan\x00', 'netpci0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x290) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000000)={@empty, @local, 0x0}, &(0x7f0000000040)=0xc) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000380)=ANY=[@ANYBLOB="72797a746e6c32000000000010bd084f", @ANYRES32=r7, @ANYBLOB="070000400000000200000005450500d4006700003f049078ac1414bb7f0000018913e2e0000001ac1e0001ffffffffac1414bb01940401008205058716831fa964010101ffffffffac1414bbe0000002ffffffff0a01010200000000443c6da1ac1414aa00000009ac14141c00000000ac1414aafffffffdac1414aa80000000ffffffff00007fffffffffff000007ffe000000100000001440c34000000000500000002830f1ce281af4e35b1745d312aa54b892788ac1414bbe000000100000000e0000001640101017f00000164010100ac1e0001e000000107032f000000"]}) r9 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r9, 0x4000000000000, 0x40, &(0x7f0000000900)=@raw={'raw\x00', 0x41, 0x3, 0x388, 0x0, 0x19, 0x0, 0x0, 0x0, 0x2f0, 0x1f0, 0x1f0, 0x2f0, 0x1f0, 0x3, 0x0, {[{{@ip={@private, @dev, 0x0, 0x0, 'wlan1\x00', 'wg1\x00'}, 0x0, 0x200, 0x220, 0x0, {0x0, 0xffffffffa0028000}, [@common=@set={{0x40}, {{0x4, [0x4, 0x2, 0xa, 0x6, 0x8, 0x2], 0x2, 0x2}}}, @common=@inet=@hashlimit2={{0x150}, {'veth1\x00', {0x0, 0x8, 0x40, 0x0, 0x0, 0x687c, 0x93}}}]}, @unspec=@TRACE={0x20}}, {{@ip={@empty, @empty, 0x0, 0x0, 'veth0_vlan\x00', 'netpci0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x0, 0x3]}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3e8) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000000)={@empty, @local, 0x0}, &(0x7f0000000040)=0xc) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r9, 0x89f1, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000380)={'syztnl2\x00', r10, 0x700, 0x40, 0x2, 0x5, {{0x35, 0x4, 0x1, 0x1, 0xd4, 0x0, 0x0, 0x3f, 0x4, 0x0, @remote, @loopback, {[@ssrr={0x89, 0x13, 0xe2, [@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @remote]}, @noop, @ra={0x94, 0x4, 0x1}, @generic={0x82, 0x5, "058716"}, @lsrr={0x83, 0x1f, 0xa9, [@rand_addr=0x64010101, @broadcast, @remote, @multicast2, @broadcast, @private=0xa010102, @empty]}, @timestamp_addr={0x44, 0x3c, 0x6d, 0x1, 0xa, [{@local, 0x9}, {@local}, {@local, 0xfffffffd}, {@local, 0x80000000}, {@broadcast, 0x7fff}, {@broadcast, 0x7ff}, {@multicast1, 0x1}]}, @timestamp={0x44, 0xc, 0x34, 0x0, 0x0, [0x5, 0x2]}, @generic={0x83, 0xf, "1ce281af4e35b1745d312aa54b"}, @ssrr={0x89, 0x27, 0x88, [@remote, @multicast1, @empty, @multicast1, @rand_addr=0x64010101, @loopback, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1]}, @generic={0x7, 0x3, '/'}]}}}}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f0000000180)={&(0x7f0000000840)=ANY=[@ANYBLOB="780000005400010026bd7000fbdbdf2507000000", @ANYRESOCT=r8, @ANYBLOB="ed8e0100", @ANYRES32=r10, @ANYBLOB="000201006401010200000000000000000000000086dd000020000100", @ANYRES32, @ANYBLOB="01050300ac1e000100000000000000000000000086dd000020000100", @ANYRES32, @ANYBLOB="010100002001000000000000000000000000000096dd0000"], 0x78}, 0x1, 0x0, 0x0, 0x8840}, 0x4008040) sendmsg$nl_route_sched(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000600)=@newtclass={0x70, 0x28, 0x10, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0x5, 0x1d}, {0xfff1, 0xf}, {0x2, 0xb}}, [@tclass_kind_options=@c_drr={{0x8}, {0xc, 0x2, @TCA_DRR_QUANTUM={0x8}}}, @tclass_kind_options=@c_taprio={0xb}, @tclass_kind_options=@c_netem={0xa}, @tclass_kind_options=@c_mq={0x7}, @tclass_kind_options=@c_netem={0xa}, @tclass_kind_options=@c_multiq={0xb}]}, 0x70}, 0x1, 0x0, 0x0, 0x4008180}, 0x40010) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newtfilter={0x6c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x3c, 0x2, [@TCA_BASIC_EMATCHES={0x38, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x2c, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1}, @TCF_EM_META={0x18, 0x2, 0x0, 0x0, {{}, [@TCA_EM_META_HDR={0xc}]}}]}]}]}}]}, 0x6c}}, 0x0) 00:41:04 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000f000000850000007500000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r6, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x41, 0x3, 0x230, 0x0, 0x19, 0x0, 0x0, 0x0, 0x2e8, 0x1f0, 0x1f0, 0x2e8, 0x1f0, 0x3, 0x0, {[{{@ip={@private, @dev, 0x0, 0x0, 'wlan1\x00', 'wg1\x00'}, 0x0, 0xa8, 0xc8, 0x0, {0x0, 0xffffffffa0028000}, [@common=@unspec=@quota={{0x38}}]}, @unspec=@TRACE={0x20}}, {{@ip={@empty, @empty, 0x0, 0x0, 'veth0_vlan\x00', 'netpci0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x290) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000000)={@empty, @local, 0x0}, &(0x7f0000000040)=0xc) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000380)=ANY=[@ANYBLOB="72797a746e6c32000000000010bd084f", @ANYRES32=r7, @ANYBLOB="070000400000000200000005450500d4006700003f049078ac1414bb7f0000018913e2e0000001ac1e0001ffffffffac1414bb01940401008205058716831fa964010101ffffffffac1414bbe0000002ffffffff0a01010200000000443c6da1ac1414aa00000009ac14141c00000000ac1414aafffffffdac1414aa80000000ffffffff00007fffffffffff000007ffe000000100000001440c34000000000500000002830f1ce281af4e35b1745d312aa54b892788ac1414bbe000000100000000e0000001640101017f00000164010100ac1e0001e000000107032f000000"]}) r9 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r9, 0x4000000000000, 0x40, &(0x7f0000000900)=@raw={'raw\x00', 0x41, 0x3, 0x388, 0x0, 0x19, 0x0, 0x0, 0x0, 0x2f0, 0x1f0, 0x1f0, 0x2f0, 0x1f0, 0x3, 0x0, {[{{@ip={@private, @dev, 0x0, 0x0, 'wlan1\x00', 'wg1\x00'}, 0x0, 0x200, 0x220, 0x0, {0x0, 0xffffffffa0028000}, [@common=@set={{0x40}, {{0x4, [0x4, 0x2, 0xa, 0x6, 0x8, 0x2], 0x2, 0x2}}}, @common=@inet=@hashlimit2={{0x150}, {'veth1\x00', {0x0, 0x8, 0x40, 0x0, 0x0, 0x687c, 0x93}}}]}, @unspec=@TRACE={0x20}}, {{@ip={@empty, @empty, 0x0, 0x0, 'veth0_vlan\x00', 'netpci0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x0, 0x3]}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3e8) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000000)={@empty, @local, 0x0}, &(0x7f0000000040)=0xc) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r9, 0x89f1, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000380)={'syztnl2\x00', r10, 0x700, 0x40, 0x2, 0x5, {{0x35, 0x4, 0x1, 0x1, 0xd4, 0x0, 0x0, 0x3f, 0x4, 0x0, @remote, @loopback, {[@ssrr={0x89, 0x13, 0xe2, [@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @remote]}, @noop, @ra={0x94, 0x4, 0x1}, @generic={0x82, 0x5, "058716"}, @lsrr={0x83, 0x1f, 0xa9, [@rand_addr=0x64010101, @broadcast, @remote, @multicast2, @broadcast, @private=0xa010102, @empty]}, @timestamp_addr={0x44, 0x3c, 0x6d, 0x1, 0xa, [{@local, 0x9}, {@local}, {@local, 0xfffffffd}, {@local, 0x80000000}, {@broadcast, 0x7fff}, {@broadcast, 0x7ff}, {@multicast1, 0x1}]}, @timestamp={0x44, 0xc, 0x34, 0x0, 0x0, [0x5, 0x2]}, @generic={0x83, 0xf, "1ce281af4e35b1745d312aa54b"}, @ssrr={0x89, 0x27, 0x88, [@remote, @multicast1, @empty, @multicast1, @rand_addr=0x64010101, @loopback, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1]}, @generic={0x7, 0x3, '/'}]}}}}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f0000000180)={&(0x7f0000000840)=ANY=[@ANYBLOB="780000005400010026bd7000fbdbdf2507000000", @ANYRESOCT=r8, @ANYBLOB="ed8e0100", @ANYRES32=r10, @ANYBLOB="000201006401010200000000000000000000000086dd000020000100", @ANYRES32, @ANYBLOB="01050300ac1e000100000000000000000000000086dd000020000100", @ANYRES32, @ANYBLOB="010100002001000000000000000000000000000096dd0000"], 0x78}, 0x1, 0x0, 0x0, 0x8840}, 0x4008040) sendmsg$nl_route_sched(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000600)=@newtclass={0x70, 0x28, 0x10, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0x5, 0x1d}, {0xfff1, 0xf}, {0x2, 0xb}}, [@tclass_kind_options=@c_drr={{0x8}, {0xc, 0x2, @TCA_DRR_QUANTUM={0x8}}}, @tclass_kind_options=@c_taprio={0xb}, @tclass_kind_options=@c_netem={0xa}, @tclass_kind_options=@c_mq={0x7}, @tclass_kind_options=@c_netem={0xa}, @tclass_kind_options=@c_multiq={0xb}]}, 0x70}, 0x1, 0x0, 0x0, 0x4008180}, 0x40010) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newtfilter={0x6c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x3c, 0x2, [@TCA_BASIC_EMATCHES={0x38, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x2c, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1}, @TCF_EM_META={0x18, 0x2, 0x0, 0x0, {{}, [@TCA_EM_META_HDR={0xc}]}}]}]}]}}]}, 0x6c}}, 0x0) 00:41:05 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000f000000850000007500000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r6, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x41, 0x3, 0x230, 0x0, 0x19, 0x0, 0x0, 0x0, 0x2e8, 0x1f0, 0x1f0, 0x2e8, 0x1f0, 0x3, 0x0, {[{{@ip={@private, @dev, 0x0, 0x0, 'wlan1\x00', 'wg1\x00'}, 0x0, 0xa8, 0xc8, 0x0, {0x0, 0xffffffffa0028000}, [@common=@unspec=@quota={{0x38}}]}, @unspec=@TRACE={0x20}}, {{@ip={@empty, @empty, 0x0, 0x0, 'veth0_vlan\x00', 'netpci0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x290) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000000)={@empty, @local, 0x0}, &(0x7f0000000040)=0xc) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000380)=ANY=[@ANYBLOB="72797a746e6c32000000000010bd084f", @ANYRES32=r7, @ANYBLOB="070000400000000200000005450500d4006700003f049078ac1414bb7f0000018913e2e0000001ac1e0001ffffffffac1414bb01940401008205058716831fa964010101ffffffffac1414bbe0000002ffffffff0a01010200000000443c6da1ac1414aa00000009ac14141c00000000ac1414aafffffffdac1414aa80000000ffffffff00007fffffffffff000007ffe000000100000001440c34000000000500000002830f1ce281af4e35b1745d312aa54b892788ac1414bbe000000100000000e0000001640101017f00000164010100ac1e0001e000000107032f000000"]}) r9 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r9, 0x4000000000000, 0x40, &(0x7f0000000900)=@raw={'raw\x00', 0x41, 0x3, 0x388, 0x0, 0x19, 0x0, 0x0, 0x0, 0x2f0, 0x1f0, 0x1f0, 0x2f0, 0x1f0, 0x3, 0x0, {[{{@ip={@private, @dev, 0x0, 0x0, 'wlan1\x00', 'wg1\x00'}, 0x0, 0x200, 0x220, 0x0, {0x0, 0xffffffffa0028000}, [@common=@set={{0x40}, {{0x4, [0x4, 0x2, 0xa, 0x6, 0x8, 0x2], 0x2, 0x2}}}, @common=@inet=@hashlimit2={{0x150}, {'veth1\x00', {0x0, 0x8, 0x40, 0x0, 0x0, 0x687c, 0x93}}}]}, @unspec=@TRACE={0x20}}, {{@ip={@empty, @empty, 0x0, 0x0, 'veth0_vlan\x00', 'netpci0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x0, 0x3]}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3e8) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000000)={@empty, @local, 0x0}, &(0x7f0000000040)=0xc) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r9, 0x89f1, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000380)={'syztnl2\x00', r10, 0x700, 0x40, 0x2, 0x5, {{0x35, 0x4, 0x1, 0x1, 0xd4, 0x0, 0x0, 0x3f, 0x4, 0x0, @remote, @loopback, {[@ssrr={0x89, 0x13, 0xe2, [@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @remote]}, @noop, @ra={0x94, 0x4, 0x1}, @generic={0x82, 0x5, "058716"}, @lsrr={0x83, 0x1f, 0xa9, [@rand_addr=0x64010101, @broadcast, @remote, @multicast2, @broadcast, @private=0xa010102, @empty]}, @timestamp_addr={0x44, 0x3c, 0x6d, 0x1, 0xa, [{@local, 0x9}, {@local}, {@local, 0xfffffffd}, {@local, 0x80000000}, {@broadcast, 0x7fff}, {@broadcast, 0x7ff}, {@multicast1, 0x1}]}, @timestamp={0x44, 0xc, 0x34, 0x0, 0x0, [0x5, 0x2]}, @generic={0x83, 0xf, "1ce281af4e35b1745d312aa54b"}, @ssrr={0x89, 0x27, 0x88, [@remote, @multicast1, @empty, @multicast1, @rand_addr=0x64010101, @loopback, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1]}, @generic={0x7, 0x3, '/'}]}}}}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f0000000180)={&(0x7f0000000840)=ANY=[@ANYBLOB="780000005400010026bd7000fbdbdf2507000000", @ANYRESOCT=r8, @ANYBLOB="ed8e0100", @ANYRES32=r10, @ANYBLOB="000201006401010200000000000000000000000086dd000020000100", @ANYRES32, @ANYBLOB="01050300ac1e000100000000000000000000000086dd000020000100", @ANYRES32, @ANYBLOB="010100002001000000000000000000000000000096dd0000"], 0x78}, 0x1, 0x0, 0x0, 0x8840}, 0x4008040) sendmsg$nl_route_sched(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000600)=@newtclass={0x70, 0x28, 0x10, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0x5, 0x1d}, {0xfff1, 0xf}, {0x2, 0xb}}, [@tclass_kind_options=@c_drr={{0x8}, {0xc, 0x2, @TCA_DRR_QUANTUM={0x8}}}, @tclass_kind_options=@c_taprio={0xb}, @tclass_kind_options=@c_netem={0xa}, @tclass_kind_options=@c_mq={0x7}, @tclass_kind_options=@c_netem={0xa}, @tclass_kind_options=@c_multiq={0xb}]}, 0x70}, 0x1, 0x0, 0x0, 0x4008180}, 0x40010) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newtfilter={0x6c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x3c, 0x2, [@TCA_BASIC_EMATCHES={0x38, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x2c, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1}, @TCF_EM_META={0x18, 0x2, 0x0, 0x0, {{}, [@TCA_EM_META_HDR={0xc}]}}]}]}]}}]}, 0x6c}}, 0x0) 00:41:05 executing program 1: bpf$OBJ_GET_PROG(0x7, &(0x7f0000000e00)=@o_path={0x0}, 0x18) [ 2465.761664][T28780] __nla_validate_parse: 6 callbacks suppressed [ 2465.761752][T28780] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2465.772395][T28780] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 00:41:06 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000f000000850000007500000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r6, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x41, 0x3, 0x230, 0x0, 0x19, 0x0, 0x0, 0x0, 0x2e8, 0x1f0, 0x1f0, 0x2e8, 0x1f0, 0x3, 0x0, {[{{@ip={@private, @dev, 0x0, 0x0, 'wlan1\x00', 'wg1\x00'}, 0x0, 0xa8, 0xc8, 0x0, {0x0, 0xffffffffa0028000}, [@common=@unspec=@quota={{0x38}}]}, @unspec=@TRACE={0x20}}, {{@ip={@empty, @empty, 0x0, 0x0, 'veth0_vlan\x00', 'netpci0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x290) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000000)={@empty, @local, 0x0}, &(0x7f0000000040)=0xc) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000380)=ANY=[@ANYBLOB="72797a746e6c32000000000010bd084f", @ANYRES32=r7, @ANYBLOB="070000400000000200000005450500d4006700003f049078ac1414bb7f0000018913e2e0000001ac1e0001ffffffffac1414bb01940401008205058716831fa964010101ffffffffac1414bbe0000002ffffffff0a01010200000000443c6da1ac1414aa00000009ac14141c00000000ac1414aafffffffdac1414aa80000000ffffffff00007fffffffffff000007ffe000000100000001440c34000000000500000002830f1ce281af4e35b1745d312aa54b892788ac1414bbe000000100000000e0000001640101017f00000164010100ac1e0001e000000107032f000000"]}) r9 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r9, 0x4000000000000, 0x40, &(0x7f0000000900)=@raw={'raw\x00', 0x41, 0x3, 0x388, 0x0, 0x19, 0x0, 0x0, 0x0, 0x2f0, 0x1f0, 0x1f0, 0x2f0, 0x1f0, 0x3, 0x0, {[{{@ip={@private, @dev, 0x0, 0x0, 'wlan1\x00', 'wg1\x00'}, 0x0, 0x200, 0x220, 0x0, {0x0, 0xffffffffa0028000}, [@common=@set={{0x40}, {{0x4, [0x4, 0x2, 0xa, 0x6, 0x8, 0x2], 0x2, 0x2}}}, @common=@inet=@hashlimit2={{0x150}, {'veth1\x00', {0x0, 0x8, 0x40, 0x0, 0x0, 0x687c, 0x93}}}]}, @unspec=@TRACE={0x20}}, {{@ip={@empty, @empty, 0x0, 0x0, 'veth0_vlan\x00', 'netpci0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x0, 0x3]}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3e8) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000000)={@empty, @local, 0x0}, &(0x7f0000000040)=0xc) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r9, 0x89f1, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000380)={'syztnl2\x00', r10, 0x700, 0x40, 0x2, 0x5, {{0x35, 0x4, 0x1, 0x1, 0xd4, 0x0, 0x0, 0x3f, 0x4, 0x0, @remote, @loopback, {[@ssrr={0x89, 0x13, 0xe2, [@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @remote]}, @noop, @ra={0x94, 0x4, 0x1}, @generic={0x82, 0x5, "058716"}, @lsrr={0x83, 0x1f, 0xa9, [@rand_addr=0x64010101, @broadcast, @remote, @multicast2, @broadcast, @private=0xa010102, @empty]}, @timestamp_addr={0x44, 0x3c, 0x6d, 0x1, 0xa, [{@local, 0x9}, {@local}, {@local, 0xfffffffd}, {@local, 0x80000000}, {@broadcast, 0x7fff}, {@broadcast, 0x7ff}, {@multicast1, 0x1}]}, @timestamp={0x44, 0xc, 0x34, 0x0, 0x0, [0x5, 0x2]}, @generic={0x83, 0xf, "1ce281af4e35b1745d312aa54b"}, @ssrr={0x89, 0x27, 0x88, [@remote, @multicast1, @empty, @multicast1, @rand_addr=0x64010101, @loopback, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1]}, @generic={0x7, 0x3, '/'}]}}}}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f0000000180)={&(0x7f0000000840)=ANY=[@ANYBLOB="780000005400010026bd7000fbdbdf2507000000", @ANYRESOCT=r8, @ANYBLOB="ed8e0100", @ANYRES32=r10, @ANYBLOB="000201006401010200000000000000000000000086dd000020000100", @ANYRES32, @ANYBLOB="01050300ac1e000100000000000000000000000086dd000020000100", @ANYRES32, @ANYBLOB="010100002001000000000000000000000000000096dd0000"], 0x78}, 0x1, 0x0, 0x0, 0x8840}, 0x4008040) sendmsg$nl_route_sched(r1, &(0x7f00000004c0)={&(0x7f0000000440), 0xc, &(0x7f0000000480)={&(0x7f0000000600)=@newtclass={0x4ac, 0x28, 0x10, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0x5, 0x1d}, {0xfff1, 0xf}, {0x2, 0xb}}, [@tclass_kind_options, @tclass_kind_options=@c_taprio={0xb}, @tclass_kind_options=@c_netem={0xa}, @tclass_kind_options=@c_mq={0x7}, @tclass_kind_options=@c_netem={0xa}, @tclass_kind_options=@c_multiq={0xb}]}, 0x4ac}, 0x1, 0x0, 0x0, 0x4008180}, 0x40010) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newtfilter={0x6c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x3c, 0x2, [@TCA_BASIC_EMATCHES={0x38, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x2c, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1}, @TCF_EM_META={0x18, 0x2, 0x0, 0x0, {{}, [@TCA_EM_META_HDR={0xc}]}}]}]}]}}]}, 0x6c}}, 0x0) [ 2466.414524][T28785] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2466.424810][T28785] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 00:41:06 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000f000000850000007500000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r6, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x41, 0x3, 0x230, 0x0, 0x19, 0x0, 0x0, 0x0, 0x2e8, 0x1f0, 0x1f0, 0x2e8, 0x1f0, 0x3, 0x0, {[{{@ip={@private, @dev, 0x0, 0x0, 'wlan1\x00', 'wg1\x00'}, 0x0, 0xa8, 0xc8, 0x0, {0x0, 0xffffffffa0028000}, [@common=@unspec=@quota={{0x38}}]}, @unspec=@TRACE={0x20}}, {{@ip={@empty, @empty, 0x0, 0x0, 'veth0_vlan\x00', 'netpci0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x290) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000000)={@empty, @local, 0x0}, &(0x7f0000000040)=0xc) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000380)=ANY=[@ANYBLOB="72797a746e6c32000000000010bd084f", @ANYRES32=r7, @ANYBLOB="070000400000000200000005450500d4006700003f049078ac1414bb7f0000018913e2e0000001ac1e0001ffffffffac1414bb01940401008205058716831fa964010101ffffffffac1414bbe0000002ffffffff0a01010200000000443c6da1ac1414aa00000009ac14141c00000000ac1414aafffffffdac1414aa80000000ffffffff00007fffffffffff000007ffe000000100000001440c34000000000500000002830f1ce281af4e35b1745d312aa54b892788ac1414bbe000000100000000e0000001640101017f00000164010100ac1e0001e000000107032f000000"]}) r9 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r9, 0x4000000000000, 0x40, &(0x7f0000000900)=@raw={'raw\x00', 0x41, 0x3, 0x388, 0x0, 0x19, 0x0, 0x0, 0x0, 0x2f0, 0x1f0, 0x1f0, 0x2f0, 0x1f0, 0x3, 0x0, {[{{@ip={@private, @dev, 0x0, 0x0, 'wlan1\x00', 'wg1\x00'}, 0x0, 0x200, 0x220, 0x0, {0x0, 0xffffffffa0028000}, [@common=@set={{0x40}, {{0x4, [0x4, 0x2, 0xa, 0x6, 0x8, 0x2], 0x2, 0x2}}}, @common=@inet=@hashlimit2={{0x150}, {'veth1\x00', {0x0, 0x8, 0x40, 0x0, 0x0, 0x687c, 0x93}}}]}, @unspec=@TRACE={0x20}}, {{@ip={@empty, @empty, 0x0, 0x0, 'veth0_vlan\x00', 'netpci0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x0, 0x3]}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3e8) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000000)={@empty, @local, 0x0}, &(0x7f0000000040)=0xc) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r9, 0x89f1, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000380)={'syztnl2\x00', r10, 0x700, 0x40, 0x2, 0x5, {{0x35, 0x4, 0x1, 0x1, 0xd4, 0x0, 0x0, 0x3f, 0x4, 0x0, @remote, @loopback, {[@ssrr={0x89, 0x13, 0xe2, [@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @remote]}, @noop, @ra={0x94, 0x4, 0x1}, @generic={0x82, 0x5, "058716"}, @lsrr={0x83, 0x1f, 0xa9, [@rand_addr=0x64010101, @broadcast, @remote, @multicast2, @broadcast, @private=0xa010102, @empty]}, @timestamp_addr={0x44, 0x3c, 0x6d, 0x1, 0xa, [{@local, 0x9}, {@local}, {@local, 0xfffffffd}, {@local, 0x80000000}, {@broadcast, 0x7fff}, {@broadcast, 0x7ff}, {@multicast1, 0x1}]}, @timestamp={0x44, 0xc, 0x34, 0x0, 0x0, [0x5, 0x2]}, @generic={0x83, 0xf, "1ce281af4e35b1745d312aa54b"}, @ssrr={0x89, 0x27, 0x88, [@remote, @multicast1, @empty, @multicast1, @rand_addr=0x64010101, @loopback, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1]}, @generic={0x7, 0x3, '/'}]}}}}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f0000000180)={&(0x7f0000000840)=ANY=[@ANYBLOB="780000005400010026bd7000fbdbdf2507000000", @ANYRESOCT=r8, @ANYBLOB="ed8e0100", @ANYRES32=r10, @ANYBLOB="000201006401010200000000000000000000000086dd000020000100", @ANYRES32, @ANYBLOB="01050300ac1e000100000000000000000000000086dd000020000100", @ANYRES32, @ANYBLOB="010100002001000000000000000000000000000096dd0000"], 0x78}, 0x1, 0x0, 0x0, 0x8840}, 0x4008040) sendmsg$nl_route_sched(r1, &(0x7f00000004c0)={&(0x7f0000000440), 0xc, &(0x7f0000000480)={&(0x7f0000000600)=@newtclass={0x4ac, 0x28, 0x10, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0x5, 0x1d}, {0xfff1, 0xf}, {0x2, 0xb}}, [@tclass_kind_options, @tclass_kind_options=@c_taprio={0xb}, @tclass_kind_options=@c_netem={0xa}, @tclass_kind_options=@c_mq={0x7}, @tclass_kind_options=@c_netem={0xa}, @tclass_kind_options=@c_multiq={0xb}]}, 0x4ac}, 0x1, 0x0, 0x0, 0x4008180}, 0x40010) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newtfilter={0x6c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x3c, 0x2, [@TCA_BASIC_EMATCHES={0x38, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x2c, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1}, @TCF_EM_META={0x18, 0x2, 0x0, 0x0, {{}, [@TCA_EM_META_HDR={0xc}]}}]}]}]}}]}, 0x6c}}, 0x0) [ 2466.920522][T28789] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2467.011632][T28789] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 00:41:07 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000f000000850000007500000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r6, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x41, 0x3, 0x230, 0x0, 0x19, 0x0, 0x0, 0x0, 0x2e8, 0x1f0, 0x1f0, 0x2e8, 0x1f0, 0x3, 0x0, {[{{@ip={@private, @dev, 0x0, 0x0, 'wlan1\x00', 'wg1\x00'}, 0x0, 0xa8, 0xc8, 0x0, {0x0, 0xffffffffa0028000}, [@common=@unspec=@quota={{0x38}}]}, @unspec=@TRACE={0x20}}, {{@ip={@empty, @empty, 0x0, 0x0, 'veth0_vlan\x00', 'netpci0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x290) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000000)={@empty, @local, 0x0}, &(0x7f0000000040)=0xc) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000380)=ANY=[@ANYBLOB="72797a746e6c32000000000010bd084f", @ANYRES32=r7, @ANYBLOB="070000400000000200000005450500d4006700003f049078ac1414bb7f0000018913e2e0000001ac1e0001ffffffffac1414bb01940401008205058716831fa964010101ffffffffac1414bbe0000002ffffffff0a01010200000000443c6da1ac1414aa00000009ac14141c00000000ac1414aafffffffdac1414aa80000000ffffffff00007fffffffffff000007ffe000000100000001440c34000000000500000002830f1ce281af4e35b1745d312aa54b892788ac1414bbe000000100000000e0000001640101017f00000164010100ac1e0001e000000107032f000000"]}) r9 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r9, 0x4000000000000, 0x40, &(0x7f0000000900)=@raw={'raw\x00', 0x41, 0x3, 0x388, 0x0, 0x19, 0x0, 0x0, 0x0, 0x2f0, 0x1f0, 0x1f0, 0x2f0, 0x1f0, 0x3, 0x0, {[{{@ip={@private, @dev, 0x0, 0x0, 'wlan1\x00', 'wg1\x00'}, 0x0, 0x200, 0x220, 0x0, {0x0, 0xffffffffa0028000}, [@common=@set={{0x40}, {{0x4, [0x4, 0x2, 0xa, 0x6, 0x8, 0x2], 0x2, 0x2}}}, @common=@inet=@hashlimit2={{0x150}, {'veth1\x00', {0x0, 0x8, 0x40, 0x0, 0x0, 0x687c, 0x93}}}]}, @unspec=@TRACE={0x20}}, {{@ip={@empty, @empty, 0x0, 0x0, 'veth0_vlan\x00', 'netpci0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x0, 0x3]}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3e8) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000000)={@empty, @local, 0x0}, &(0x7f0000000040)=0xc) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r9, 0x89f1, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000380)={'syztnl2\x00', r10, 0x700, 0x40, 0x2, 0x5, {{0x35, 0x4, 0x1, 0x1, 0xd4, 0x0, 0x0, 0x3f, 0x4, 0x0, @remote, @loopback, {[@ssrr={0x89, 0x13, 0xe2, [@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @remote]}, @noop, @ra={0x94, 0x4, 0x1}, @generic={0x82, 0x5, "058716"}, @lsrr={0x83, 0x1f, 0xa9, [@rand_addr=0x64010101, @broadcast, @remote, @multicast2, @broadcast, @private=0xa010102, @empty]}, @timestamp_addr={0x44, 0x3c, 0x6d, 0x1, 0xa, [{@local, 0x9}, {@local}, {@local, 0xfffffffd}, {@local, 0x80000000}, {@broadcast, 0x7fff}, {@broadcast, 0x7ff}, {@multicast1, 0x1}]}, @timestamp={0x44, 0xc, 0x34, 0x0, 0x0, [0x5, 0x2]}, @generic={0x83, 0xf, "1ce281af4e35b1745d312aa54b"}, @ssrr={0x89, 0x27, 0x88, [@remote, @multicast1, @empty, @multicast1, @rand_addr=0x64010101, @loopback, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1]}, @generic={0x7, 0x3, '/'}]}}}}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f0000000180)={&(0x7f0000000840)=ANY=[@ANYBLOB="780000005400010026bd7000fbdbdf2507000000", @ANYRESOCT=r8, @ANYBLOB="ed8e0100", @ANYRES32=r10, @ANYBLOB="000201006401010200000000000000000000000086dd000020000100", @ANYRES32, @ANYBLOB="01050300ac1e000100000000000000000000000086dd000020000100", @ANYRES32, @ANYBLOB="010100002001000000000000000000000000000096dd0000"], 0x78}, 0x1, 0x0, 0x0, 0x8840}, 0x4008040) sendmsg$nl_route_sched(r1, &(0x7f00000004c0)={&(0x7f0000000440), 0xc, &(0x7f0000000480)={&(0x7f0000000600)=@newtclass={0x4ac, 0x28, 0x10, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0x5, 0x1d}, {0xfff1, 0xf}, {0x2, 0xb}}, [@tclass_kind_options, @tclass_kind_options=@c_taprio={0xb}, @tclass_kind_options=@c_netem={0xa}, @tclass_kind_options=@c_mq={0x7}, @tclass_kind_options=@c_netem={0xa}, @tclass_kind_options=@c_multiq={0xb}]}, 0x4ac}, 0x1, 0x0, 0x0, 0x4008180}, 0x40010) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newtfilter={0x6c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x3c, 0x2, [@TCA_BASIC_EMATCHES={0x38, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x2c, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1}, @TCF_EM_META={0x18, 0x2, 0x0, 0x0, {{}, [@TCA_EM_META_HDR={0xc}]}}]}]}]}}]}, 0x6c}}, 0x0) 00:41:07 executing program 1: r0 = socket$inet(0x2, 0xa, 0x0) accept4(r0, 0x0, 0x0, 0x0) [ 2467.536619][T28792] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2467.582266][T28792] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 00:41:08 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000f000000850000007500000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r6, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x41, 0x3, 0x230, 0x0, 0x19, 0x0, 0x0, 0x0, 0x2e8, 0x1f0, 0x1f0, 0x2e8, 0x1f0, 0x3, 0x0, {[{{@ip={@private, @dev, 0x0, 0x0, 'wlan1\x00', 'wg1\x00'}, 0x0, 0xa8, 0xc8, 0x0, {0x0, 0xffffffffa0028000}, [@common=@unspec=@quota={{0x38}}]}, @unspec=@TRACE={0x20}}, {{@ip={@empty, @empty, 0x0, 0x0, 'veth0_vlan\x00', 'netpci0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x290) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000000)={@empty, @local, 0x0}, &(0x7f0000000040)=0xc) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000380)=ANY=[@ANYBLOB="72797a746e6c32000000000010bd084f", @ANYRES32=r7, @ANYBLOB="070000400000000200000005450500d4006700003f049078ac1414bb7f0000018913e2e0000001ac1e0001ffffffffac1414bb01940401008205058716831fa964010101ffffffffac1414bbe0000002ffffffff0a01010200000000443c6da1ac1414aa00000009ac14141c00000000ac1414aafffffffdac1414aa80000000ffffffff00007fffffffffff000007ffe000000100000001440c34000000000500000002830f1ce281af4e35b1745d312aa54b892788ac1414bbe000000100000000e0000001640101017f00000164010100ac1e0001e000000107032f000000"]}) r9 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r9, 0x4000000000000, 0x40, &(0x7f0000000900)=@raw={'raw\x00', 0x41, 0x3, 0x388, 0x0, 0x19, 0x0, 0x0, 0x0, 0x2f0, 0x1f0, 0x1f0, 0x2f0, 0x1f0, 0x3, 0x0, {[{{@ip={@private, @dev, 0x0, 0x0, 'wlan1\x00', 'wg1\x00'}, 0x0, 0x200, 0x220, 0x0, {0x0, 0xffffffffa0028000}, [@common=@set={{0x40}, {{0x4, [0x4, 0x2, 0xa, 0x6, 0x8, 0x2], 0x2, 0x2}}}, @common=@inet=@hashlimit2={{0x150}, {'veth1\x00', {0x0, 0x8, 0x40, 0x0, 0x0, 0x687c, 0x93}}}]}, @unspec=@TRACE={0x20}}, {{@ip={@empty, @empty, 0x0, 0x0, 'veth0_vlan\x00', 'netpci0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x0, 0x3]}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3e8) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000000)={@empty, @local, 0x0}, &(0x7f0000000040)=0xc) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r9, 0x89f1, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000380)={'syztnl2\x00', r10, 0x700, 0x40, 0x2, 0x5, {{0x35, 0x4, 0x1, 0x1, 0xd4, 0x0, 0x0, 0x3f, 0x4, 0x0, @remote, @loopback, {[@ssrr={0x89, 0x13, 0xe2, [@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @remote]}, @noop, @ra={0x94, 0x4, 0x1}, @generic={0x82, 0x5, "058716"}, @lsrr={0x83, 0x1f, 0xa9, [@rand_addr=0x64010101, @broadcast, @remote, @multicast2, @broadcast, @private=0xa010102, @empty]}, @timestamp_addr={0x44, 0x3c, 0x6d, 0x1, 0xa, [{@local, 0x9}, {@local}, {@local, 0xfffffffd}, {@local, 0x80000000}, {@broadcast, 0x7fff}, {@broadcast, 0x7ff}, {@multicast1, 0x1}]}, @timestamp={0x44, 0xc, 0x34, 0x0, 0x0, [0x5, 0x2]}, @generic={0x83, 0xf, "1ce281af4e35b1745d312aa54b"}, @ssrr={0x89, 0x27, 0x88, [@remote, @multicast1, @empty, @multicast1, @rand_addr=0x64010101, @loopback, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1]}, @generic={0x7, 0x3, '/'}]}}}}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f0000000180)={&(0x7f0000000840)=ANY=[@ANYBLOB="780000005400010026bd7000fbdbdf2507000000", @ANYRESOCT=r8, @ANYBLOB="ed8e0100", @ANYRES32=r10, @ANYBLOB="000201006401010200000000000000000000000086dd000020000100", @ANYRES32, @ANYBLOB="01050300ac1e000100000000000000000000000086dd000020000100", @ANYRES32, @ANYBLOB="010100002001000000000000000000000000000096dd0000"], 0x78}, 0x1, 0x0, 0x0, 0x8840}, 0x4008040) sendmsg$nl_route_sched(r1, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4008180}, 0x40010) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newtfilter={0x6c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x3c, 0x2, [@TCA_BASIC_EMATCHES={0x38, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x2c, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1}, @TCF_EM_META={0x18, 0x2, 0x0, 0x0, {{}, [@TCA_EM_META_HDR={0xc}]}}]}]}]}}]}, 0x6c}}, 0x0) [ 2468.187234][T28795] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2468.191632][T28795] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 00:41:08 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000f000000850000007500000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r6, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x41, 0x3, 0x230, 0x0, 0x19, 0x0, 0x0, 0x0, 0x2e8, 0x1f0, 0x1f0, 0x2e8, 0x1f0, 0x3, 0x0, {[{{@ip={@private, @dev, 0x0, 0x0, 'wlan1\x00', 'wg1\x00'}, 0x0, 0xa8, 0xc8, 0x0, {0x0, 0xffffffffa0028000}, [@common=@unspec=@quota={{0x38}}]}, @unspec=@TRACE={0x20}}, {{@ip={@empty, @empty, 0x0, 0x0, 'veth0_vlan\x00', 'netpci0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x290) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000000)={@empty, @local, 0x0}, &(0x7f0000000040)=0xc) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000380)=ANY=[@ANYBLOB="72797a746e6c32000000000010bd084f", @ANYRES32=r7, @ANYBLOB="070000400000000200000005450500d4006700003f049078ac1414bb7f0000018913e2e0000001ac1e0001ffffffffac1414bb01940401008205058716831fa964010101ffffffffac1414bbe0000002ffffffff0a01010200000000443c6da1ac1414aa00000009ac14141c00000000ac1414aafffffffdac1414aa80000000ffffffff00007fffffffffff000007ffe000000100000001440c34000000000500000002830f1ce281af4e35b1745d312aa54b892788ac1414bbe000000100000000e0000001640101017f00000164010100ac1e0001e000000107032f000000"]}) r9 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r9, 0x4000000000000, 0x40, &(0x7f0000000900)=@raw={'raw\x00', 0x41, 0x3, 0x388, 0x0, 0x19, 0x0, 0x0, 0x0, 0x2f0, 0x1f0, 0x1f0, 0x2f0, 0x1f0, 0x3, 0x0, {[{{@ip={@private, @dev, 0x0, 0x0, 'wlan1\x00', 'wg1\x00'}, 0x0, 0x200, 0x220, 0x0, {0x0, 0xffffffffa0028000}, [@common=@set={{0x40}, {{0x4, [0x4, 0x2, 0xa, 0x6, 0x8, 0x2], 0x2, 0x2}}}, @common=@inet=@hashlimit2={{0x150}, {'veth1\x00', {0x0, 0x8, 0x40, 0x0, 0x0, 0x687c, 0x93}}}]}, @unspec=@TRACE={0x20}}, {{@ip={@empty, @empty, 0x0, 0x0, 'veth0_vlan\x00', 'netpci0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x0, 0x3]}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3e8) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000000)={@empty, @local, 0x0}, &(0x7f0000000040)=0xc) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r9, 0x89f1, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000380)={'syztnl2\x00', r10, 0x700, 0x40, 0x2, 0x5, {{0x35, 0x4, 0x1, 0x1, 0xd4, 0x0, 0x0, 0x3f, 0x4, 0x0, @remote, @loopback, {[@ssrr={0x89, 0x13, 0xe2, [@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @remote]}, @noop, @ra={0x94, 0x4, 0x1}, @generic={0x82, 0x5, "058716"}, @lsrr={0x83, 0x1f, 0xa9, [@rand_addr=0x64010101, @broadcast, @remote, @multicast2, @broadcast, @private=0xa010102, @empty]}, @timestamp_addr={0x44, 0x3c, 0x6d, 0x1, 0xa, [{@local, 0x9}, {@local}, {@local, 0xfffffffd}, {@local, 0x80000000}, {@broadcast, 0x7fff}, {@broadcast, 0x7ff}, {@multicast1, 0x1}]}, @timestamp={0x44, 0xc, 0x34, 0x0, 0x0, [0x5, 0x2]}, @generic={0x83, 0xf, "1ce281af4e35b1745d312aa54b"}, @ssrr={0x89, 0x27, 0x88, [@remote, @multicast1, @empty, @multicast1, @rand_addr=0x64010101, @loopback, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1]}, @generic={0x7, 0x3, '/'}]}}}}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f0000000180)={&(0x7f0000000840)=ANY=[@ANYBLOB="780000005400010026bd7000fbdbdf2507000000", @ANYRESOCT=r8, @ANYBLOB="ed8e0100", @ANYRES32=r10, @ANYBLOB="000201006401010200000000000000000000000086dd000020000100", @ANYRES32, @ANYBLOB="01050300ac1e000100000000000000000000000086dd000020000100", @ANYRES32, @ANYBLOB="010100002001000000000000000000000000000096dd0000"], 0x78}, 0x1, 0x0, 0x0, 0x8840}, 0x4008040) sendmsg$nl_route_sched(r1, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4008180}, 0x40010) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newtfilter={0x6c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x3c, 0x2, [@TCA_BASIC_EMATCHES={0x38, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x2c, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1}, @TCF_EM_META={0x18, 0x2, 0x0, 0x0, {{}, [@TCA_EM_META_HDR={0xc}]}}]}]}]}}]}, 0x6c}}, 0x0) 00:41:09 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000f000000850000007500000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r6, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x41, 0x3, 0x230, 0x0, 0x19, 0x0, 0x0, 0x0, 0x2e8, 0x1f0, 0x1f0, 0x2e8, 0x1f0, 0x3, 0x0, {[{{@ip={@private, @dev, 0x0, 0x0, 'wlan1\x00', 'wg1\x00'}, 0x0, 0xa8, 0xc8, 0x0, {0x0, 0xffffffffa0028000}, [@common=@unspec=@quota={{0x38}}]}, @unspec=@TRACE={0x20}}, {{@ip={@empty, @empty, 0x0, 0x0, 'veth0_vlan\x00', 'netpci0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x290) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000000)={@empty, @local, 0x0}, &(0x7f0000000040)=0xc) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000380)=ANY=[@ANYBLOB="72797a746e6c32000000000010bd084f", @ANYRES32=r7, @ANYBLOB="070000400000000200000005450500d4006700003f049078ac1414bb7f0000018913e2e0000001ac1e0001ffffffffac1414bb01940401008205058716831fa964010101ffffffffac1414bbe0000002ffffffff0a01010200000000443c6da1ac1414aa00000009ac14141c00000000ac1414aafffffffdac1414aa80000000ffffffff00007fffffffffff000007ffe000000100000001440c34000000000500000002830f1ce281af4e35b1745d312aa54b892788ac1414bbe000000100000000e0000001640101017f00000164010100ac1e0001e000000107032f000000"]}) r9 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r9, 0x4000000000000, 0x40, &(0x7f0000000900)=@raw={'raw\x00', 0x41, 0x3, 0x388, 0x0, 0x19, 0x0, 0x0, 0x0, 0x2f0, 0x1f0, 0x1f0, 0x2f0, 0x1f0, 0x3, 0x0, {[{{@ip={@private, @dev, 0x0, 0x0, 'wlan1\x00', 'wg1\x00'}, 0x0, 0x200, 0x220, 0x0, {0x0, 0xffffffffa0028000}, [@common=@set={{0x40}, {{0x4, [0x4, 0x2, 0xa, 0x6, 0x8, 0x2], 0x2, 0x2}}}, @common=@inet=@hashlimit2={{0x150}, {'veth1\x00', {0x0, 0x8, 0x40, 0x0, 0x0, 0x687c, 0x93}}}]}, @unspec=@TRACE={0x20}}, {{@ip={@empty, @empty, 0x0, 0x0, 'veth0_vlan\x00', 'netpci0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x0, 0x3]}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3e8) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000000)={@empty, @local, 0x0}, &(0x7f0000000040)=0xc) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r9, 0x89f1, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000380)={'syztnl2\x00', r10, 0x700, 0x40, 0x2, 0x5, {{0x35, 0x4, 0x1, 0x1, 0xd4, 0x0, 0x0, 0x3f, 0x4, 0x0, @remote, @loopback, {[@ssrr={0x89, 0x13, 0xe2, [@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @remote]}, @noop, @ra={0x94, 0x4, 0x1}, @generic={0x82, 0x5, "058716"}, @lsrr={0x83, 0x1f, 0xa9, [@rand_addr=0x64010101, @broadcast, @remote, @multicast2, @broadcast, @private=0xa010102, @empty]}, @timestamp_addr={0x44, 0x3c, 0x6d, 0x1, 0xa, [{@local, 0x9}, {@local}, {@local, 0xfffffffd}, {@local, 0x80000000}, {@broadcast, 0x7fff}, {@broadcast, 0x7ff}, {@multicast1, 0x1}]}, @timestamp={0x44, 0xc, 0x34, 0x0, 0x0, [0x5, 0x2]}, @generic={0x83, 0xf, "1ce281af4e35b1745d312aa54b"}, @ssrr={0x89, 0x27, 0x88, [@remote, @multicast1, @empty, @multicast1, @rand_addr=0x64010101, @loopback, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1]}, @generic={0x7, 0x3, '/'}]}}}}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f0000000180)={&(0x7f0000000840)=ANY=[@ANYBLOB="780000005400010026bd7000fbdbdf2507000000", @ANYRESOCT=r8, @ANYBLOB="ed8e0100", @ANYRES32=r10, @ANYBLOB="000201006401010200000000000000000000000086dd000020000100", @ANYRES32, @ANYBLOB="01050300ac1e000100000000000000000000000086dd000020000100", @ANYRES32, @ANYBLOB="010100002001000000000000000000000000000096dd0000"], 0x78}, 0x1, 0x0, 0x0, 0x8840}, 0x4008040) sendmsg$nl_route_sched(r1, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4008180}, 0x40010) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newtfilter={0x6c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x3c, 0x2, [@TCA_BASIC_EMATCHES={0x38, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x2c, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1}, @TCF_EM_META={0x18, 0x2, 0x0, 0x0, {{}, [@TCA_EM_META_HDR={0xc}]}}]}]}]}}]}, 0x6c}}, 0x0) 00:41:09 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000f000000850000007500000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r6, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x41, 0x3, 0x230, 0x0, 0x19, 0x0, 0x0, 0x0, 0x2e8, 0x1f0, 0x1f0, 0x2e8, 0x1f0, 0x3, 0x0, {[{{@ip={@private, @dev, 0x0, 0x0, 'wlan1\x00', 'wg1\x00'}, 0x0, 0xa8, 0xc8, 0x0, {0x0, 0xffffffffa0028000}, [@common=@unspec=@quota={{0x38}}]}, @unspec=@TRACE={0x20}}, {{@ip={@empty, @empty, 0x0, 0x0, 'veth0_vlan\x00', 'netpci0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x290) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000000)={@empty, @local, 0x0}, &(0x7f0000000040)=0xc) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000380)=ANY=[@ANYBLOB="72797a746e6c32000000000010bd084f", @ANYRES32=r7, @ANYBLOB="070000400000000200000005450500d4006700003f049078ac1414bb7f0000018913e2e0000001ac1e0001ffffffffac1414bb01940401008205058716831fa964010101ffffffffac1414bbe0000002ffffffff0a01010200000000443c6da1ac1414aa00000009ac14141c00000000ac1414aafffffffdac1414aa80000000ffffffff00007fffffffffff000007ffe000000100000001440c34000000000500000002830f1ce281af4e35b1745d312aa54b892788ac1414bbe000000100000000e0000001640101017f00000164010100ac1e0001e000000107032f000000"]}) r9 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r9, 0x4000000000000, 0x40, &(0x7f0000000900)=@raw={'raw\x00', 0x41, 0x3, 0x388, 0x0, 0x19, 0x0, 0x0, 0x0, 0x2f0, 0x1f0, 0x1f0, 0x2f0, 0x1f0, 0x3, 0x0, {[{{@ip={@private, @dev, 0x0, 0x0, 'wlan1\x00', 'wg1\x00'}, 0x0, 0x200, 0x220, 0x0, {0x0, 0xffffffffa0028000}, [@common=@set={{0x40}, {{0x4, [0x4, 0x2, 0xa, 0x6, 0x8, 0x2], 0x2, 0x2}}}, @common=@inet=@hashlimit2={{0x150}, {'veth1\x00', {0x0, 0x8, 0x40, 0x0, 0x0, 0x687c, 0x93}}}]}, @unspec=@TRACE={0x20}}, {{@ip={@empty, @empty, 0x0, 0x0, 'veth0_vlan\x00', 'netpci0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x0, 0x3]}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3e8) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000000)={@empty, @local, 0x0}, &(0x7f0000000040)=0xc) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r9, 0x89f1, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000380)={'syztnl2\x00', r10, 0x700, 0x40, 0x2, 0x5, {{0x35, 0x4, 0x1, 0x1, 0xd4, 0x0, 0x0, 0x3f, 0x4, 0x0, @remote, @loopback, {[@ssrr={0x89, 0x13, 0xe2, [@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @remote]}, @noop, @ra={0x94, 0x4, 0x1}, @generic={0x82, 0x5, "058716"}, @lsrr={0x83, 0x1f, 0xa9, [@rand_addr=0x64010101, @broadcast, @remote, @multicast2, @broadcast, @private=0xa010102, @empty]}, @timestamp_addr={0x44, 0x3c, 0x6d, 0x1, 0xa, [{@local, 0x9}, {@local}, {@local, 0xfffffffd}, {@local, 0x80000000}, {@broadcast, 0x7fff}, {@broadcast, 0x7ff}, {@multicast1, 0x1}]}, @timestamp={0x44, 0xc, 0x34, 0x0, 0x0, [0x5, 0x2]}, @generic={0x83, 0xf, "1ce281af4e35b1745d312aa54b"}, @ssrr={0x89, 0x27, 0x88, [@remote, @multicast1, @empty, @multicast1, @rand_addr=0x64010101, @loopback, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1]}, @generic={0x7, 0x3, '/'}]}}}}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f0000000180)={&(0x7f0000000840)=ANY=[@ANYBLOB="780000005400010026bd7000fbdbdf2507000000", @ANYRESOCT=r8, @ANYBLOB="ed8e0100", @ANYRES32=r10, @ANYBLOB="000201006401010200000000000000000000000086dd000020000100", @ANYRES32, @ANYBLOB="01050300ac1e000100000000000000000000000086dd000020000100", @ANYRES32, @ANYBLOB="010100002001000000000000000000000000000096dd0000"], 0x78}, 0x1, 0x0, 0x0, 0x8840}, 0x4008040) sendmsg$nl_route_sched(r1, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={0x0}, 0x1, 0x0, 0x0, 0x4008180}, 0x40010) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newtfilter={0x6c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x3c, 0x2, [@TCA_BASIC_EMATCHES={0x38, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x2c, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1}, @TCF_EM_META={0x18, 0x2, 0x0, 0x0, {{}, [@TCA_EM_META_HDR={0xc}]}}]}]}]}}]}, 0x6c}}, 0x0) [ 2469.976159][ T29] audit: type=1400 audit(2469.910:413): avc: denied { accept } for pid=28800 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 00:41:10 executing program 1: ioctl$EVIOCGABS20(0xffffffffffffffff, 0x80184560, &(0x7f0000000000)=""/190) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x0) ioctl$EVIOCGKEYCODE(r0, 0x80084504, 0x0) syz_open_dev$hiddev(&(0x7f0000000180), 0x4, 0x500) read$hiddev(0xffffffffffffffff, &(0x7f0000000200)=""/33, 0x21) 00:41:10 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000f000000850000007500000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r6, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x41, 0x3, 0x230, 0x0, 0x19, 0x0, 0x0, 0x0, 0x2e8, 0x1f0, 0x1f0, 0x2e8, 0x1f0, 0x3, 0x0, {[{{@ip={@private, @dev, 0x0, 0x0, 'wlan1\x00', 'wg1\x00'}, 0x0, 0xa8, 0xc8, 0x0, {0x0, 0xffffffffa0028000}, [@common=@unspec=@quota={{0x38}}]}, @unspec=@TRACE={0x20}}, {{@ip={@empty, @empty, 0x0, 0x0, 'veth0_vlan\x00', 'netpci0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x290) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000000)={@empty, @local, 0x0}, &(0x7f0000000040)=0xc) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000380)=ANY=[@ANYBLOB="72797a746e6c32000000000010bd084f", @ANYRES32=r7, @ANYBLOB="070000400000000200000005450500d4006700003f049078ac1414bb7f0000018913e2e0000001ac1e0001ffffffffac1414bb01940401008205058716831fa964010101ffffffffac1414bbe0000002ffffffff0a01010200000000443c6da1ac1414aa00000009ac14141c00000000ac1414aafffffffdac1414aa80000000ffffffff00007fffffffffff000007ffe000000100000001440c34000000000500000002830f1ce281af4e35b1745d312aa54b892788ac1414bbe000000100000000e0000001640101017f00000164010100ac1e0001e000000107032f000000"]}) r9 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r9, 0x4000000000000, 0x40, &(0x7f0000000900)=@raw={'raw\x00', 0x41, 0x3, 0x388, 0x0, 0x19, 0x0, 0x0, 0x0, 0x2f0, 0x1f0, 0x1f0, 0x2f0, 0x1f0, 0x3, 0x0, {[{{@ip={@private, @dev, 0x0, 0x0, 'wlan1\x00', 'wg1\x00'}, 0x0, 0x200, 0x220, 0x0, {0x0, 0xffffffffa0028000}, [@common=@set={{0x40}, {{0x4, [0x4, 0x2, 0xa, 0x6, 0x8, 0x2], 0x2, 0x2}}}, @common=@inet=@hashlimit2={{0x150}, {'veth1\x00', {0x0, 0x8, 0x40, 0x0, 0x0, 0x687c, 0x93}}}]}, @unspec=@TRACE={0x20}}, {{@ip={@empty, @empty, 0x0, 0x0, 'veth0_vlan\x00', 'netpci0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x0, 0x3]}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3e8) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000000)={@empty, @local, 0x0}, &(0x7f0000000040)=0xc) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r9, 0x89f1, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000380)={'syztnl2\x00', r10, 0x700, 0x40, 0x2, 0x5, {{0x35, 0x4, 0x1, 0x1, 0xd4, 0x0, 0x0, 0x3f, 0x4, 0x0, @remote, @loopback, {[@ssrr={0x89, 0x13, 0xe2, [@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @remote]}, @noop, @ra={0x94, 0x4, 0x1}, @generic={0x82, 0x5, "058716"}, @lsrr={0x83, 0x1f, 0xa9, [@rand_addr=0x64010101, @broadcast, @remote, @multicast2, @broadcast, @private=0xa010102, @empty]}, @timestamp_addr={0x44, 0x3c, 0x6d, 0x1, 0xa, [{@local, 0x9}, {@local}, {@local, 0xfffffffd}, {@local, 0x80000000}, {@broadcast, 0x7fff}, {@broadcast, 0x7ff}, {@multicast1, 0x1}]}, @timestamp={0x44, 0xc, 0x34, 0x0, 0x0, [0x5, 0x2]}, @generic={0x83, 0xf, "1ce281af4e35b1745d312aa54b"}, @ssrr={0x89, 0x27, 0x88, [@remote, @multicast1, @empty, @multicast1, @rand_addr=0x64010101, @loopback, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1]}, @generic={0x7, 0x3, '/'}]}}}}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f0000000180)={&(0x7f0000000840)=ANY=[@ANYBLOB="780000005400010026bd7000fbdbdf2507000000", @ANYRESOCT=r8, @ANYBLOB="ed8e0100", @ANYRES32=r10, @ANYBLOB="000201006401010200000000000000000000000086dd000020000100", @ANYRES32, @ANYBLOB="01050300ac1e000100000000000000000000000086dd000020000100", @ANYRES32, @ANYBLOB="010100002001000000000000000000000000000096dd0000"], 0x78}, 0x1, 0x0, 0x0, 0x8840}, 0x4008040) sendmsg$nl_route_sched(r1, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={0x0}, 0x1, 0x0, 0x0, 0x4008180}, 0x40010) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newtfilter={0x6c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x3c, 0x2, [@TCA_BASIC_EMATCHES={0x38, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x2c, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1}, @TCF_EM_META={0x18, 0x2, 0x0, 0x0, {{}, [@TCA_EM_META_HDR={0xc}]}}]}]}]}}]}, 0x6c}}, 0x0) [ 2470.799989][T28809] __nla_validate_parse: 6 callbacks suppressed [ 2470.841507][T28809] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2470.921847][T28809] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 00:41:11 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000f000000850000007500000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r6, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x41, 0x3, 0x230, 0x0, 0x19, 0x0, 0x0, 0x0, 0x2e8, 0x1f0, 0x1f0, 0x2e8, 0x1f0, 0x3, 0x0, {[{{@ip={@private, @dev, 0x0, 0x0, 'wlan1\x00', 'wg1\x00'}, 0x0, 0xa8, 0xc8, 0x0, {0x0, 0xffffffffa0028000}, [@common=@unspec=@quota={{0x38}}]}, @unspec=@TRACE={0x20}}, {{@ip={@empty, @empty, 0x0, 0x0, 'veth0_vlan\x00', 'netpci0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x290) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000000)={@empty, @local, 0x0}, &(0x7f0000000040)=0xc) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000380)=ANY=[@ANYBLOB="72797a746e6c32000000000010bd084f", @ANYRES32=r7, @ANYBLOB="070000400000000200000005450500d4006700003f049078ac1414bb7f0000018913e2e0000001ac1e0001ffffffffac1414bb01940401008205058716831fa964010101ffffffffac1414bbe0000002ffffffff0a01010200000000443c6da1ac1414aa00000009ac14141c00000000ac1414aafffffffdac1414aa80000000ffffffff00007fffffffffff000007ffe000000100000001440c34000000000500000002830f1ce281af4e35b1745d312aa54b892788ac1414bbe000000100000000e0000001640101017f00000164010100ac1e0001e000000107032f000000"]}) r9 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r9, 0x4000000000000, 0x40, &(0x7f0000000900)=@raw={'raw\x00', 0x41, 0x3, 0x388, 0x0, 0x19, 0x0, 0x0, 0x0, 0x2f0, 0x1f0, 0x1f0, 0x2f0, 0x1f0, 0x3, 0x0, {[{{@ip={@private, @dev, 0x0, 0x0, 'wlan1\x00', 'wg1\x00'}, 0x0, 0x200, 0x220, 0x0, {0x0, 0xffffffffa0028000}, [@common=@set={{0x40}, {{0x4, [0x4, 0x2, 0xa, 0x6, 0x8, 0x2], 0x2, 0x2}}}, @common=@inet=@hashlimit2={{0x150}, {'veth1\x00', {0x0, 0x8, 0x40, 0x0, 0x0, 0x687c, 0x93}}}]}, @unspec=@TRACE={0x20}}, {{@ip={@empty, @empty, 0x0, 0x0, 'veth0_vlan\x00', 'netpci0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x0, 0x3]}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3e8) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000000)={@empty, @local, 0x0}, &(0x7f0000000040)=0xc) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r9, 0x89f1, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000380)={'syztnl2\x00', r10, 0x700, 0x40, 0x2, 0x5, {{0x35, 0x4, 0x1, 0x1, 0xd4, 0x0, 0x0, 0x3f, 0x4, 0x0, @remote, @loopback, {[@ssrr={0x89, 0x13, 0xe2, [@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @remote]}, @noop, @ra={0x94, 0x4, 0x1}, @generic={0x82, 0x5, "058716"}, @lsrr={0x83, 0x1f, 0xa9, [@rand_addr=0x64010101, @broadcast, @remote, @multicast2, @broadcast, @private=0xa010102, @empty]}, @timestamp_addr={0x44, 0x3c, 0x6d, 0x1, 0xa, [{@local, 0x9}, {@local}, {@local, 0xfffffffd}, {@local, 0x80000000}, {@broadcast, 0x7fff}, {@broadcast, 0x7ff}, {@multicast1, 0x1}]}, @timestamp={0x44, 0xc, 0x34, 0x0, 0x0, [0x5, 0x2]}, @generic={0x83, 0xf, "1ce281af4e35b1745d312aa54b"}, @ssrr={0x89, 0x27, 0x88, [@remote, @multicast1, @empty, @multicast1, @rand_addr=0x64010101, @loopback, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1]}, @generic={0x7, 0x3, '/'}]}}}}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f0000000180)={&(0x7f0000000840)=ANY=[@ANYBLOB="780000005400010026bd7000fbdbdf2507000000", @ANYRESOCT=r8, @ANYBLOB="ed8e0100", @ANYRES32=r10, @ANYBLOB="000201006401010200000000000000000000000086dd000020000100", @ANYRES32, @ANYBLOB="01050300ac1e000100000000000000000000000086dd000020000100", @ANYRES32, @ANYBLOB="010100002001000000000000000000000000000096dd0000"], 0x78}, 0x1, 0x0, 0x0, 0x8840}, 0x4008040) sendmsg$nl_route_sched(r1, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={0x0}, 0x1, 0x0, 0x0, 0x4008180}, 0x40010) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newtfilter={0x6c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x3c, 0x2, [@TCA_BASIC_EMATCHES={0x38, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x2c, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1}, @TCF_EM_META={0x18, 0x2, 0x0, 0x0, {{}, [@TCA_EM_META_HDR={0xc}]}}]}]}]}}]}, 0x6c}}, 0x0) 00:41:11 executing program 1: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x10}, 0x10}}, 0x0) [ 2471.571784][T28814] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2471.663831][T28814] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 00:41:12 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000f000000850000007500000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r6, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x41, 0x3, 0x230, 0x0, 0x19, 0x0, 0x0, 0x0, 0x2e8, 0x1f0, 0x1f0, 0x2e8, 0x1f0, 0x3, 0x0, {[{{@ip={@private, @dev, 0x0, 0x0, 'wlan1\x00', 'wg1\x00'}, 0x0, 0xa8, 0xc8, 0x0, {0x0, 0xffffffffa0028000}, [@common=@unspec=@quota={{0x38}}]}, @unspec=@TRACE={0x20}}, {{@ip={@empty, @empty, 0x0, 0x0, 'veth0_vlan\x00', 'netpci0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x290) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000000)={@empty, @local, 0x0}, &(0x7f0000000040)=0xc) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000380)=ANY=[@ANYBLOB="72797a746e6c32000000000010bd084f", @ANYRES32=r7, @ANYBLOB="070000400000000200000005450500d4006700003f049078ac1414bb7f0000018913e2e0000001ac1e0001ffffffffac1414bb01940401008205058716831fa964010101ffffffffac1414bbe0000002ffffffff0a01010200000000443c6da1ac1414aa00000009ac14141c00000000ac1414aafffffffdac1414aa80000000ffffffff00007fffffffffff000007ffe000000100000001440c34000000000500000002830f1ce281af4e35b1745d312aa54b892788ac1414bbe000000100000000e0000001640101017f00000164010100ac1e0001e000000107032f000000"]}) r9 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r9, 0x4000000000000, 0x40, &(0x7f0000000900)=@raw={'raw\x00', 0x41, 0x3, 0x388, 0x0, 0x19, 0x0, 0x0, 0x0, 0x2f0, 0x1f0, 0x1f0, 0x2f0, 0x1f0, 0x3, 0x0, {[{{@ip={@private, @dev, 0x0, 0x0, 'wlan1\x00', 'wg1\x00'}, 0x0, 0x200, 0x220, 0x0, {0x0, 0xffffffffa0028000}, [@common=@set={{0x40}, {{0x4, [0x4, 0x2, 0xa, 0x6, 0x8, 0x2], 0x2, 0x2}}}, @common=@inet=@hashlimit2={{0x150}, {'veth1\x00', {0x0, 0x8, 0x40, 0x0, 0x0, 0x687c, 0x93}}}]}, @unspec=@TRACE={0x20}}, {{@ip={@empty, @empty, 0x0, 0x0, 'veth0_vlan\x00', 'netpci0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x0, 0x3]}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3e8) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000000)={@empty, @local, 0x0}, &(0x7f0000000040)=0xc) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r9, 0x89f1, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000380)={'syztnl2\x00', r10, 0x700, 0x40, 0x2, 0x5, {{0x35, 0x4, 0x1, 0x1, 0xd4, 0x0, 0x0, 0x3f, 0x4, 0x0, @remote, @loopback, {[@ssrr={0x89, 0x13, 0xe2, [@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @remote]}, @noop, @ra={0x94, 0x4, 0x1}, @generic={0x82, 0x5, "058716"}, @lsrr={0x83, 0x1f, 0xa9, [@rand_addr=0x64010101, @broadcast, @remote, @multicast2, @broadcast, @private=0xa010102, @empty]}, @timestamp_addr={0x44, 0x3c, 0x6d, 0x1, 0xa, [{@local, 0x9}, {@local}, {@local, 0xfffffffd}, {@local, 0x80000000}, {@broadcast, 0x7fff}, {@broadcast, 0x7ff}, {@multicast1, 0x1}]}, @timestamp={0x44, 0xc, 0x34, 0x0, 0x0, [0x5, 0x2]}, @generic={0x83, 0xf, "1ce281af4e35b1745d312aa54b"}, @ssrr={0x89, 0x27, 0x88, [@remote, @multicast1, @empty, @multicast1, @rand_addr=0x64010101, @loopback, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1]}, @generic={0x7, 0x3, '/'}]}}}}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f0000000180)={&(0x7f0000000840)=ANY=[@ANYBLOB="780000005400010026bd7000fbdbdf2507000000", @ANYRESOCT=r8, @ANYBLOB="ed8e0100", @ANYRES32=r10, @ANYBLOB="000201006401010200000000000000000000000086dd000020000100", @ANYRES32, @ANYBLOB="01050300ac1e000100000000000000000000000086dd000020000100", @ANYRES32, @ANYBLOB="010100002001000000000000000000000000000096dd0000"], 0x78}, 0x1, 0x0, 0x0, 0x8840}, 0x4008040) sendmsg$nl_route_sched(r1, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000600)=@newtclass={0x4ac, 0x28, 0x0, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0x5, 0x1d}, {0xfff1, 0xf}, {0x2, 0xb}}, [@tclass_kind_options, @tclass_kind_options=@c_taprio={0xb}, @tclass_kind_options=@c_netem={0xa}, @tclass_kind_options=@c_mq={0x7}, @tclass_kind_options=@c_netem={0xa}, @tclass_kind_options=@c_multiq={0xb}]}, 0x4ac}, 0x1, 0x0, 0x0, 0x4008180}, 0x40010) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newtfilter={0x6c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x3c, 0x2, [@TCA_BASIC_EMATCHES={0x38, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x2c, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1}, @TCF_EM_META={0x18, 0x2, 0x0, 0x0, {{}, [@TCA_EM_META_HDR={0xc}]}}]}]}]}}]}, 0x6c}}, 0x0) [ 2472.339407][ T29] audit: type=1400 audit(2472.270:414): avc: denied { audit_write } for pid=28815 comm="syz-executor.1" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 00:41:12 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0) ioctl$BLKROGET(r0, 0x1279, &(0x7f0000000100)) [ 2472.407391][T28819] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2472.439838][T28819] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 00:41:12 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000f000000850000007500000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r6, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x41, 0x3, 0x230, 0x0, 0x19, 0x0, 0x0, 0x0, 0x2e8, 0x1f0, 0x1f0, 0x2e8, 0x1f0, 0x3, 0x0, {[{{@ip={@private, @dev, 0x0, 0x0, 'wlan1\x00', 'wg1\x00'}, 0x0, 0xa8, 0xc8, 0x0, {0x0, 0xffffffffa0028000}, [@common=@unspec=@quota={{0x38}}]}, @unspec=@TRACE={0x20}}, {{@ip={@empty, @empty, 0x0, 0x0, 'veth0_vlan\x00', 'netpci0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x290) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000000)={@empty, @local, 0x0}, &(0x7f0000000040)=0xc) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000380)=ANY=[@ANYBLOB="72797a746e6c32000000000010bd084f", @ANYRES32=r7, @ANYBLOB="070000400000000200000005450500d4006700003f049078ac1414bb7f0000018913e2e0000001ac1e0001ffffffffac1414bb01940401008205058716831fa964010101ffffffffac1414bbe0000002ffffffff0a01010200000000443c6da1ac1414aa00000009ac14141c00000000ac1414aafffffffdac1414aa80000000ffffffff00007fffffffffff000007ffe000000100000001440c34000000000500000002830f1ce281af4e35b1745d312aa54b892788ac1414bbe000000100000000e0000001640101017f00000164010100ac1e0001e000000107032f000000"]}) r9 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r9, 0x4000000000000, 0x40, &(0x7f0000000900)=@raw={'raw\x00', 0x41, 0x3, 0x388, 0x0, 0x19, 0x0, 0x0, 0x0, 0x2f0, 0x1f0, 0x1f0, 0x2f0, 0x1f0, 0x3, 0x0, {[{{@ip={@private, @dev, 0x0, 0x0, 'wlan1\x00', 'wg1\x00'}, 0x0, 0x200, 0x220, 0x0, {0x0, 0xffffffffa0028000}, [@common=@set={{0x40}, {{0x4, [0x4, 0x2, 0xa, 0x6, 0x8, 0x2], 0x2, 0x2}}}, @common=@inet=@hashlimit2={{0x150}, {'veth1\x00', {0x0, 0x8, 0x40, 0x0, 0x0, 0x687c, 0x93}}}]}, @unspec=@TRACE={0x20}}, {{@ip={@empty, @empty, 0x0, 0x0, 'veth0_vlan\x00', 'netpci0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x0, 0x3]}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3e8) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000000)={@empty, @local, 0x0}, &(0x7f0000000040)=0xc) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r9, 0x89f1, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000380)={'syztnl2\x00', r10, 0x700, 0x40, 0x2, 0x5, {{0x35, 0x4, 0x1, 0x1, 0xd4, 0x0, 0x0, 0x3f, 0x4, 0x0, @remote, @loopback, {[@ssrr={0x89, 0x13, 0xe2, [@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @remote]}, @noop, @ra={0x94, 0x4, 0x1}, @generic={0x82, 0x5, "058716"}, @lsrr={0x83, 0x1f, 0xa9, [@rand_addr=0x64010101, @broadcast, @remote, @multicast2, @broadcast, @private=0xa010102, @empty]}, @timestamp_addr={0x44, 0x3c, 0x6d, 0x1, 0xa, [{@local, 0x9}, {@local}, {@local, 0xfffffffd}, {@local, 0x80000000}, {@broadcast, 0x7fff}, {@broadcast, 0x7ff}, {@multicast1, 0x1}]}, @timestamp={0x44, 0xc, 0x34, 0x0, 0x0, [0x5, 0x2]}, @generic={0x83, 0xf, "1ce281af4e35b1745d312aa54b"}, @ssrr={0x89, 0x27, 0x88, [@remote, @multicast1, @empty, @multicast1, @rand_addr=0x64010101, @loopback, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1]}, @generic={0x7, 0x3, '/'}]}}}}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f0000000180)={&(0x7f0000000840)=ANY=[@ANYBLOB="780000005400010026bd7000fbdbdf2507000000", @ANYRESOCT=r8, @ANYBLOB="ed8e0100", @ANYRES32=r10, @ANYBLOB="000201006401010200000000000000000000000086dd000020000100", @ANYRES32, @ANYBLOB="01050300ac1e000100000000000000000000000086dd000020000100", @ANYRES32, @ANYBLOB="010100002001000000000000000000000000000096dd0000"], 0x78}, 0x1, 0x0, 0x0, 0x8840}, 0x4008040) sendmsg$nl_route_sched(r1, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000600)=@newtclass={0x4ac, 0x28, 0x0, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0x5, 0x1d}, {0xfff1, 0xf}, {0x2, 0xb}}, [@tclass_kind_options, @tclass_kind_options=@c_taprio={0xb}, @tclass_kind_options=@c_netem={0xa}, @tclass_kind_options=@c_mq={0x7}, @tclass_kind_options=@c_netem={0xa}, @tclass_kind_options=@c_multiq={0xb}]}, 0x4ac}, 0x1, 0x0, 0x0, 0x4008180}, 0x40010) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newtfilter={0x6c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x3c, 0x2, [@TCA_BASIC_EMATCHES={0x38, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x2c, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1}, @TCF_EM_META={0x18, 0x2, 0x0, 0x0, {{}, [@TCA_EM_META_HDR={0xc}]}}]}]}]}}]}, 0x6c}}, 0x0) [ 2473.144487][T28822] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2473.201379][T28822] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 00:41:13 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000f000000850000007500000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r6, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x41, 0x3, 0x230, 0x0, 0x19, 0x0, 0x0, 0x0, 0x2e8, 0x1f0, 0x1f0, 0x2e8, 0x1f0, 0x3, 0x0, {[{{@ip={@private, @dev, 0x0, 0x0, 'wlan1\x00', 'wg1\x00'}, 0x0, 0xa8, 0xc8, 0x0, {0x0, 0xffffffffa0028000}, [@common=@unspec=@quota={{0x38}}]}, @unspec=@TRACE={0x20}}, {{@ip={@empty, @empty, 0x0, 0x0, 'veth0_vlan\x00', 'netpci0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x290) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000000)={@empty, @local, 0x0}, &(0x7f0000000040)=0xc) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000380)=ANY=[@ANYBLOB="72797a746e6c32000000000010bd084f", @ANYRES32=r7, @ANYBLOB="070000400000000200000005450500d4006700003f049078ac1414bb7f0000018913e2e0000001ac1e0001ffffffffac1414bb01940401008205058716831fa964010101ffffffffac1414bbe0000002ffffffff0a01010200000000443c6da1ac1414aa00000009ac14141c00000000ac1414aafffffffdac1414aa80000000ffffffff00007fffffffffff000007ffe000000100000001440c34000000000500000002830f1ce281af4e35b1745d312aa54b892788ac1414bbe000000100000000e0000001640101017f00000164010100ac1e0001e000000107032f000000"]}) r9 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r9, 0x4000000000000, 0x40, &(0x7f0000000900)=@raw={'raw\x00', 0x41, 0x3, 0x388, 0x0, 0x19, 0x0, 0x0, 0x0, 0x2f0, 0x1f0, 0x1f0, 0x2f0, 0x1f0, 0x3, 0x0, {[{{@ip={@private, @dev, 0x0, 0x0, 'wlan1\x00', 'wg1\x00'}, 0x0, 0x200, 0x220, 0x0, {0x0, 0xffffffffa0028000}, [@common=@set={{0x40}, {{0x4, [0x4, 0x2, 0xa, 0x6, 0x8, 0x2], 0x2, 0x2}}}, @common=@inet=@hashlimit2={{0x150}, {'veth1\x00', {0x0, 0x8, 0x40, 0x0, 0x0, 0x687c, 0x93}}}]}, @unspec=@TRACE={0x20}}, {{@ip={@empty, @empty, 0x0, 0x0, 'veth0_vlan\x00', 'netpci0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x0, 0x3]}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3e8) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000000)={@empty, @local, 0x0}, &(0x7f0000000040)=0xc) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r9, 0x89f1, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000380)={'syztnl2\x00', r10, 0x700, 0x40, 0x2, 0x5, {{0x35, 0x4, 0x1, 0x1, 0xd4, 0x0, 0x0, 0x3f, 0x4, 0x0, @remote, @loopback, {[@ssrr={0x89, 0x13, 0xe2, [@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @remote]}, @noop, @ra={0x94, 0x4, 0x1}, @generic={0x82, 0x5, "058716"}, @lsrr={0x83, 0x1f, 0xa9, [@rand_addr=0x64010101, @broadcast, @remote, @multicast2, @broadcast, @private=0xa010102, @empty]}, @timestamp_addr={0x44, 0x3c, 0x6d, 0x1, 0xa, [{@local, 0x9}, {@local}, {@local, 0xfffffffd}, {@local, 0x80000000}, {@broadcast, 0x7fff}, {@broadcast, 0x7ff}, {@multicast1, 0x1}]}, @timestamp={0x44, 0xc, 0x34, 0x0, 0x0, [0x5, 0x2]}, @generic={0x83, 0xf, "1ce281af4e35b1745d312aa54b"}, @ssrr={0x89, 0x27, 0x88, [@remote, @multicast1, @empty, @multicast1, @rand_addr=0x64010101, @loopback, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1]}, @generic={0x7, 0x3, '/'}]}}}}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f0000000180)={&(0x7f0000000840)=ANY=[@ANYBLOB="780000005400010026bd7000fbdbdf2507000000", @ANYRESOCT=r8, @ANYBLOB="ed8e0100", @ANYRES32=r10, @ANYBLOB="000201006401010200000000000000000000000086dd000020000100", @ANYRES32, @ANYBLOB="01050300ac1e000100000000000000000000000086dd000020000100", @ANYRES32, @ANYBLOB="010100002001000000000000000000000000000096dd0000"], 0x78}, 0x1, 0x0, 0x0, 0x8840}, 0x4008040) sendmsg$nl_route_sched(r1, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000600)=@newtclass={0x4ac, 0x28, 0x0, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0x5, 0x1d}, {0xfff1, 0xf}, {0x2, 0xb}}, [@tclass_kind_options, @tclass_kind_options=@c_taprio={0xb}, @tclass_kind_options=@c_netem={0xa}, @tclass_kind_options=@c_mq={0x7}, @tclass_kind_options=@c_netem={0xa}, @tclass_kind_options=@c_multiq={0xb}]}, 0x4ac}, 0x1, 0x0, 0x0, 0x4008180}, 0x40010) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newtfilter={0x6c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x3c, 0x2, [@TCA_BASIC_EMATCHES={0x38, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x2c, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1}, @TCF_EM_META={0x18, 0x2, 0x0, 0x0, {{}, [@TCA_EM_META_HDR={0xc}]}}]}]}]}}]}, 0x6c}}, 0x0) [ 2474.262622][T28827] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2474.301676][T28827] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 00:41:14 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r0, 0xc008551b, &(0x7f0000000140)={0x8}) 00:41:14 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000f000000850000007500000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r6, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x41, 0x3, 0x230, 0x0, 0x19, 0x0, 0x0, 0x0, 0x2e8, 0x1f0, 0x1f0, 0x2e8, 0x1f0, 0x3, 0x0, {[{{@ip={@private, @dev, 0x0, 0x0, 'wlan1\x00', 'wg1\x00'}, 0x0, 0xa8, 0xc8, 0x0, {0x0, 0xffffffffa0028000}, [@common=@unspec=@quota={{0x38}}]}, @unspec=@TRACE={0x20}}, {{@ip={@empty, @empty, 0x0, 0x0, 'veth0_vlan\x00', 'netpci0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x290) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000000)={@empty, @local, 0x0}, &(0x7f0000000040)=0xc) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000380)=ANY=[@ANYBLOB="72797a746e6c32000000000010bd084f", @ANYRES32=r7, @ANYBLOB="070000400000000200000005450500d4006700003f049078ac1414bb7f0000018913e2e0000001ac1e0001ffffffffac1414bb01940401008205058716831fa964010101ffffffffac1414bbe0000002ffffffff0a01010200000000443c6da1ac1414aa00000009ac14141c00000000ac1414aafffffffdac1414aa80000000ffffffff00007fffffffffff000007ffe000000100000001440c34000000000500000002830f1ce281af4e35b1745d312aa54b892788ac1414bbe000000100000000e0000001640101017f00000164010100ac1e0001e000000107032f000000"]}) r9 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r9, 0x4000000000000, 0x40, &(0x7f0000000900)=@raw={'raw\x00', 0x41, 0x3, 0x388, 0x0, 0x19, 0x0, 0x0, 0x0, 0x2f0, 0x1f0, 0x1f0, 0x2f0, 0x1f0, 0x3, 0x0, {[{{@ip={@private, @dev, 0x0, 0x0, 'wlan1\x00', 'wg1\x00'}, 0x0, 0x200, 0x220, 0x0, {0x0, 0xffffffffa0028000}, [@common=@set={{0x40}, {{0x4, [0x4, 0x2, 0xa, 0x6, 0x8, 0x2], 0x2, 0x2}}}, @common=@inet=@hashlimit2={{0x150}, {'veth1\x00', {0x0, 0x8, 0x40, 0x0, 0x0, 0x687c, 0x93}}}]}, @unspec=@TRACE={0x20}}, {{@ip={@empty, @empty, 0x0, 0x0, 'veth0_vlan\x00', 'netpci0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x0, 0x3]}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3e8) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000000)={@empty, @local, 0x0}, &(0x7f0000000040)=0xc) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r9, 0x89f1, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000380)={'syztnl2\x00', r10, 0x700, 0x40, 0x2, 0x5, {{0x35, 0x4, 0x1, 0x1, 0xd4, 0x0, 0x0, 0x3f, 0x4, 0x0, @remote, @loopback, {[@ssrr={0x89, 0x13, 0xe2, [@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @remote]}, @noop, @ra={0x94, 0x4, 0x1}, @generic={0x82, 0x5, "058716"}, @lsrr={0x83, 0x1f, 0xa9, [@rand_addr=0x64010101, @broadcast, @remote, @multicast2, @broadcast, @private=0xa010102, @empty]}, @timestamp_addr={0x44, 0x3c, 0x6d, 0x1, 0xa, [{@local, 0x9}, {@local}, {@local, 0xfffffffd}, {@local, 0x80000000}, {@broadcast, 0x7fff}, {@broadcast, 0x7ff}, {@multicast1, 0x1}]}, @timestamp={0x44, 0xc, 0x34, 0x0, 0x0, [0x5, 0x2]}, @generic={0x83, 0xf, "1ce281af4e35b1745d312aa54b"}, @ssrr={0x89, 0x27, 0x88, [@remote, @multicast1, @empty, @multicast1, @rand_addr=0x64010101, @loopback, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1]}, @generic={0x7, 0x3, '/'}]}}}}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f0000000180)={&(0x7f0000000840)=ANY=[@ANYBLOB="780000005400010026bd7000fbdbdf2507000000", @ANYRESOCT=r8, @ANYBLOB="ed8e0100", @ANYRES32=r10, @ANYBLOB="000201006401010200000000000000000000000086dd000020000100", @ANYRES32, @ANYBLOB="01050300ac1e000100000000000000000000000086dd000020000100", @ANYRES32, @ANYBLOB="010100002001000000000000000000000000000096dd0000"], 0x78}, 0x1, 0x0, 0x0, 0x8840}, 0x4008040) sendmsg$nl_route_sched(r1, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000600)=@newtclass={0x4ac, 0x28, 0x10, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0x5, 0x1d}, {0xfff1, 0xf}, {0x2, 0xb}}, [@tclass_kind_options, @tclass_kind_options=@c_taprio={0xb}, @tclass_kind_options=@c_netem={0xa}, @tclass_kind_options=@c_mq={0x7}, @tclass_kind_options=@c_netem={0xa}, @tclass_kind_options=@c_multiq={0xb}]}, 0x4ac}, 0x1, 0x0, 0x0, 0x4008180}, 0x40010) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newtfilter={0x6c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x3c, 0x2, [@TCA_BASIC_EMATCHES={0x38, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x2c, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1}, @TCF_EM_META={0x18, 0x2, 0x0, 0x0, {{}, [@TCA_EM_META_HDR={0xc}]}}]}]}]}}]}, 0x6c}}, 0x0) 00:41:15 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000f000000850000007500000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r6, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x41, 0x3, 0x230, 0x0, 0x19, 0x0, 0x0, 0x0, 0x2e8, 0x1f0, 0x1f0, 0x2e8, 0x1f0, 0x3, 0x0, {[{{@ip={@private, @dev, 0x0, 0x0, 'wlan1\x00', 'wg1\x00'}, 0x0, 0xa8, 0xc8, 0x0, {0x0, 0xffffffffa0028000}, [@common=@unspec=@quota={{0x38}}]}, @unspec=@TRACE={0x20}}, {{@ip={@empty, @empty, 0x0, 0x0, 'veth0_vlan\x00', 'netpci0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x290) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000000)={@empty, @local, 0x0}, &(0x7f0000000040)=0xc) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000380)=ANY=[@ANYBLOB="72797a746e6c32000000000010bd084f", @ANYRES32=r7, @ANYBLOB="070000400000000200000005450500d4006700003f049078ac1414bb7f0000018913e2e0000001ac1e0001ffffffffac1414bb01940401008205058716831fa964010101ffffffffac1414bbe0000002ffffffff0a01010200000000443c6da1ac1414aa00000009ac14141c00000000ac1414aafffffffdac1414aa80000000ffffffff00007fffffffffff000007ffe000000100000001440c34000000000500000002830f1ce281af4e35b1745d312aa54b892788ac1414bbe000000100000000e0000001640101017f00000164010100ac1e0001e000000107032f000000"]}) r9 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r9, 0x4000000000000, 0x40, &(0x7f0000000900)=@raw={'raw\x00', 0x41, 0x3, 0x388, 0x0, 0x19, 0x0, 0x0, 0x0, 0x2f0, 0x1f0, 0x1f0, 0x2f0, 0x1f0, 0x3, 0x0, {[{{@ip={@private, @dev, 0x0, 0x0, 'wlan1\x00', 'wg1\x00'}, 0x0, 0x200, 0x220, 0x0, {0x0, 0xffffffffa0028000}, [@common=@set={{0x40}, {{0x4, [0x4, 0x2, 0xa, 0x6, 0x8, 0x2], 0x2, 0x2}}}, @common=@inet=@hashlimit2={{0x150}, {'veth1\x00', {0x0, 0x8, 0x40, 0x0, 0x0, 0x687c, 0x93}}}]}, @unspec=@TRACE={0x20}}, {{@ip={@empty, @empty, 0x0, 0x0, 'veth0_vlan\x00', 'netpci0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x0, 0x3]}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3e8) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000000)={@empty, @local, 0x0}, &(0x7f0000000040)=0xc) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r9, 0x89f1, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000380)={'syztnl2\x00', r10, 0x700, 0x40, 0x2, 0x5, {{0x35, 0x4, 0x1, 0x1, 0xd4, 0x0, 0x0, 0x3f, 0x4, 0x0, @remote, @loopback, {[@ssrr={0x89, 0x13, 0xe2, [@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @remote]}, @noop, @ra={0x94, 0x4, 0x1}, @generic={0x82, 0x5, "058716"}, @lsrr={0x83, 0x1f, 0xa9, [@rand_addr=0x64010101, @broadcast, @remote, @multicast2, @broadcast, @private=0xa010102, @empty]}, @timestamp_addr={0x44, 0x3c, 0x6d, 0x1, 0xa, [{@local, 0x9}, {@local}, {@local, 0xfffffffd}, {@local, 0x80000000}, {@broadcast, 0x7fff}, {@broadcast, 0x7ff}, {@multicast1, 0x1}]}, @timestamp={0x44, 0xc, 0x34, 0x0, 0x0, [0x5, 0x2]}, @generic={0x83, 0xf, "1ce281af4e35b1745d312aa54b"}, @ssrr={0x89, 0x27, 0x88, [@remote, @multicast1, @empty, @multicast1, @rand_addr=0x64010101, @loopback, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1]}, @generic={0x7, 0x3, '/'}]}}}}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f0000000180)={&(0x7f0000000840)=ANY=[@ANYBLOB="780000005400010026bd7000fbdbdf2507000000", @ANYRESOCT=r8, @ANYBLOB="ed8e0100", @ANYRES32=r10, @ANYBLOB="000201006401010200000000000000000000000086dd000020000100", @ANYRES32, @ANYBLOB="01050300ac1e000100000000000000000000000086dd000020000100", @ANYRES32, @ANYBLOB="010100002001000000000000000000000000000096dd0000"], 0x78}, 0x1, 0x0, 0x0, 0x8840}, 0x4008040) sendmsg$nl_route_sched(r1, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000600)=@newtclass={0x4ac, 0x28, 0x10, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0x5, 0x1d}, {0xfff1, 0xf}, {0x2, 0xb}}, [@tclass_kind_options, @tclass_kind_options=@c_taprio={0xb}, @tclass_kind_options=@c_netem={0xa}, @tclass_kind_options=@c_mq={0x7}, @tclass_kind_options=@c_netem={0xa}, @tclass_kind_options=@c_multiq={0xb}]}, 0x4ac}, 0x1, 0x0, 0x0, 0x4008180}, 0x40010) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newtfilter={0x6c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x3c, 0x2, [@TCA_BASIC_EMATCHES={0x38, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x2c, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1}, @TCF_EM_META={0x18, 0x2, 0x0, 0x0, {{}, [@TCA_EM_META_HDR={0xc}]}}]}]}]}}]}, 0x6c}}, 0x0) 00:41:15 executing program 1: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000900)='ns/time_for_children\x00') 00:41:15 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000f000000850000007500000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r6, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x41, 0x3, 0x230, 0x0, 0x19, 0x0, 0x0, 0x0, 0x2e8, 0x1f0, 0x1f0, 0x2e8, 0x1f0, 0x3, 0x0, {[{{@ip={@private, @dev, 0x0, 0x0, 'wlan1\x00', 'wg1\x00'}, 0x0, 0xa8, 0xc8, 0x0, {0x0, 0xffffffffa0028000}, [@common=@unspec=@quota={{0x38}}]}, @unspec=@TRACE={0x20}}, {{@ip={@empty, @empty, 0x0, 0x0, 'veth0_vlan\x00', 'netpci0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x290) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000000)={@empty, @local, 0x0}, &(0x7f0000000040)=0xc) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000380)=ANY=[@ANYBLOB="72797a746e6c32000000000010bd084f", @ANYRES32=r7, @ANYBLOB="070000400000000200000005450500d4006700003f049078ac1414bb7f0000018913e2e0000001ac1e0001ffffffffac1414bb01940401008205058716831fa964010101ffffffffac1414bbe0000002ffffffff0a01010200000000443c6da1ac1414aa00000009ac14141c00000000ac1414aafffffffdac1414aa80000000ffffffff00007fffffffffff000007ffe000000100000001440c34000000000500000002830f1ce281af4e35b1745d312aa54b892788ac1414bbe000000100000000e0000001640101017f00000164010100ac1e0001e000000107032f000000"]}) r9 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r9, 0x4000000000000, 0x40, &(0x7f0000000900)=@raw={'raw\x00', 0x41, 0x3, 0x388, 0x0, 0x19, 0x0, 0x0, 0x0, 0x2f0, 0x1f0, 0x1f0, 0x2f0, 0x1f0, 0x3, 0x0, {[{{@ip={@private, @dev, 0x0, 0x0, 'wlan1\x00', 'wg1\x00'}, 0x0, 0x200, 0x220, 0x0, {0x0, 0xffffffffa0028000}, [@common=@set={{0x40}, {{0x4, [0x4, 0x2, 0xa, 0x6, 0x8, 0x2], 0x2, 0x2}}}, @common=@inet=@hashlimit2={{0x150}, {'veth1\x00', {0x0, 0x8, 0x40, 0x0, 0x0, 0x687c, 0x93}}}]}, @unspec=@TRACE={0x20}}, {{@ip={@empty, @empty, 0x0, 0x0, 'veth0_vlan\x00', 'netpci0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x0, 0x3]}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3e8) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000000)={@empty, @local, 0x0}, &(0x7f0000000040)=0xc) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r9, 0x89f1, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000380)={'syztnl2\x00', r10, 0x700, 0x40, 0x2, 0x5, {{0x35, 0x4, 0x1, 0x1, 0xd4, 0x0, 0x0, 0x3f, 0x4, 0x0, @remote, @loopback, {[@ssrr={0x89, 0x13, 0xe2, [@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @remote]}, @noop, @ra={0x94, 0x4, 0x1}, @generic={0x82, 0x5, "058716"}, @lsrr={0x83, 0x1f, 0xa9, [@rand_addr=0x64010101, @broadcast, @remote, @multicast2, @broadcast, @private=0xa010102, @empty]}, @timestamp_addr={0x44, 0x3c, 0x6d, 0x1, 0xa, [{@local, 0x9}, {@local}, {@local, 0xfffffffd}, {@local, 0x80000000}, {@broadcast, 0x7fff}, {@broadcast, 0x7ff}, {@multicast1, 0x1}]}, @timestamp={0x44, 0xc, 0x34, 0x0, 0x0, [0x5, 0x2]}, @generic={0x83, 0xf, "1ce281af4e35b1745d312aa54b"}, @ssrr={0x89, 0x27, 0x88, [@remote, @multicast1, @empty, @multicast1, @rand_addr=0x64010101, @loopback, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1]}, @generic={0x7, 0x3, '/'}]}}}}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f0000000180)={&(0x7f0000000840)=ANY=[@ANYBLOB="780000005400010026bd7000fbdbdf2507000000", @ANYRESOCT=r8, @ANYBLOB="ed8e0100", @ANYRES32=r10, @ANYBLOB="000201006401010200000000000000000000000086dd000020000100", @ANYRES32, @ANYBLOB="01050300ac1e000100000000000000000000000086dd000020000100", @ANYRES32, @ANYBLOB="010100002001000000000000000000000000000096dd0000"], 0x78}, 0x1, 0x0, 0x0, 0x8840}, 0x4008040) sendmsg$nl_route_sched(r1, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000600)=@newtclass={0x4ac, 0x28, 0x10, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0x5, 0x1d}, {0xfff1, 0xf}, {0x2, 0xb}}, [@tclass_kind_options, @tclass_kind_options=@c_taprio={0xb}, @tclass_kind_options=@c_netem={0xa}, @tclass_kind_options=@c_mq={0x7}, @tclass_kind_options=@c_netem={0xa}, @tclass_kind_options=@c_multiq={0xb}]}, 0x4ac}, 0x1, 0x0, 0x0, 0x4008180}, 0x40010) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newtfilter={0x6c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x3c, 0x2, [@TCA_BASIC_EMATCHES={0x38, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x2c, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1}, @TCF_EM_META={0x18, 0x2, 0x0, 0x0, {{}, [@TCA_EM_META_HDR={0xc}]}}]}]}]}}]}, 0x6c}}, 0x0) [ 2476.340137][T28839] __nla_validate_parse: 4 callbacks suppressed [ 2476.340236][T28839] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2476.358528][T28839] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 00:41:16 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000f000000850000007500000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r6, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x41, 0x3, 0x230, 0x0, 0x19, 0x0, 0x0, 0x0, 0x2e8, 0x1f0, 0x1f0, 0x2e8, 0x1f0, 0x3, 0x0, {[{{@ip={@private, @dev, 0x0, 0x0, 'wlan1\x00', 'wg1\x00'}, 0x0, 0xa8, 0xc8, 0x0, {0x0, 0xffffffffa0028000}, [@common=@unspec=@quota={{0x38}}]}, @unspec=@TRACE={0x20}}, {{@ip={@empty, @empty, 0x0, 0x0, 'veth0_vlan\x00', 'netpci0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x290) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000000)={@empty, @local, 0x0}, &(0x7f0000000040)=0xc) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000380)=ANY=[@ANYBLOB="72797a746e6c32000000000010bd084f", @ANYRES32=r7, @ANYBLOB="070000400000000200000005450500d4006700003f049078ac1414bb7f0000018913e2e0000001ac1e0001ffffffffac1414bb01940401008205058716831fa964010101ffffffffac1414bbe0000002ffffffff0a01010200000000443c6da1ac1414aa00000009ac14141c00000000ac1414aafffffffdac1414aa80000000ffffffff00007fffffffffff000007ffe000000100000001440c34000000000500000002830f1ce281af4e35b1745d312aa54b892788ac1414bbe000000100000000e0000001640101017f00000164010100ac1e0001e000000107032f000000"]}) r9 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r9, 0x4000000000000, 0x40, &(0x7f0000000900)=@raw={'raw\x00', 0x41, 0x3, 0x388, 0x0, 0x19, 0x0, 0x0, 0x0, 0x2f0, 0x1f0, 0x1f0, 0x2f0, 0x1f0, 0x3, 0x0, {[{{@ip={@private, @dev, 0x0, 0x0, 'wlan1\x00', 'wg1\x00'}, 0x0, 0x200, 0x220, 0x0, {0x0, 0xffffffffa0028000}, [@common=@set={{0x40}, {{0x4, [0x4, 0x2, 0xa, 0x6, 0x8, 0x2], 0x2, 0x2}}}, @common=@inet=@hashlimit2={{0x150}, {'veth1\x00', {0x0, 0x8, 0x40, 0x0, 0x0, 0x687c, 0x93}}}]}, @unspec=@TRACE={0x20}}, {{@ip={@empty, @empty, 0x0, 0x0, 'veth0_vlan\x00', 'netpci0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x0, 0x3]}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3e8) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000000)={@empty, @local, 0x0}, &(0x7f0000000040)=0xc) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r9, 0x89f1, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000380)={'syztnl2\x00', r10, 0x700, 0x40, 0x2, 0x5, {{0x35, 0x4, 0x1, 0x1, 0xd4, 0x0, 0x0, 0x3f, 0x4, 0x0, @remote, @loopback, {[@ssrr={0x89, 0x13, 0xe2, [@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @remote]}, @noop, @ra={0x94, 0x4, 0x1}, @generic={0x82, 0x5, "058716"}, @lsrr={0x83, 0x1f, 0xa9, [@rand_addr=0x64010101, @broadcast, @remote, @multicast2, @broadcast, @private=0xa010102, @empty]}, @timestamp_addr={0x44, 0x3c, 0x6d, 0x1, 0xa, [{@local, 0x9}, {@local}, {@local, 0xfffffffd}, {@local, 0x80000000}, {@broadcast, 0x7fff}, {@broadcast, 0x7ff}, {@multicast1, 0x1}]}, @timestamp={0x44, 0xc, 0x34, 0x0, 0x0, [0x5, 0x2]}, @generic={0x83, 0xf, "1ce281af4e35b1745d312aa54b"}, @ssrr={0x89, 0x27, 0x88, [@remote, @multicast1, @empty, @multicast1, @rand_addr=0x64010101, @loopback, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1]}, @generic={0x7, 0x3, '/'}]}}}}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f0000000180)={&(0x7f0000000840)=ANY=[@ANYBLOB="780000005400010026bd7000fbdbdf2507000000", @ANYRESOCT=r8, @ANYBLOB="ed8e0100", @ANYRES32=r10, @ANYBLOB="000201006401010200000000000000000000000086dd000020000100", @ANYRES32, @ANYBLOB="01050300ac1e000100000000000000000000000086dd000020000100", @ANYRES32, @ANYBLOB="010100002001000000000000000000000000000096dd0000"], 0x78}, 0x1, 0x0, 0x0, 0x8840}, 0x4008040) sendmsg$nl_route_sched(r1, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000600)=@newtclass={0x4ac, 0x28, 0x10, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r10, {0x5, 0x1d}, {0xfff1, 0xf}, {0x2, 0xb}}, [@tclass_kind_options, @tclass_kind_options=@c_taprio={0xb}, @tclass_kind_options=@c_netem={0xa}, @tclass_kind_options=@c_mq={0x7}, @tclass_kind_options=@c_netem={0xa}, @tclass_kind_options=@c_multiq={0xb}]}, 0x4ac}, 0x1, 0x0, 0x0, 0x4008180}, 0x40010) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newtfilter={0x6c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x3c, 0x2, [@TCA_BASIC_EMATCHES={0x38, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x2c, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1}, @TCF_EM_META={0x18, 0x2, 0x0, 0x0, {{}, [@TCA_EM_META_HDR={0xc}]}}]}]}]}}]}, 0x6c}}, 0x0) 00:41:16 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0) ioctl$BLKROGET(r0, 0x125d, 0x0) [ 2476.980148][T28843] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2476.995974][T28843] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 00:41:17 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000f000000850000007500000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r6, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x41, 0x3, 0x230, 0x0, 0x19, 0x0, 0x0, 0x0, 0x2e8, 0x1f0, 0x1f0, 0x2e8, 0x1f0, 0x3, 0x0, {[{{@ip={@private, @dev, 0x0, 0x0, 'wlan1\x00', 'wg1\x00'}, 0x0, 0xa8, 0xc8, 0x0, {0x0, 0xffffffffa0028000}, [@common=@unspec=@quota={{0x38}}]}, @unspec=@TRACE={0x20}}, {{@ip={@empty, @empty, 0x0, 0x0, 'veth0_vlan\x00', 'netpci0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x290) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000000)={@empty, @local, 0x0}, &(0x7f0000000040)=0xc) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000380)=ANY=[@ANYBLOB="72797a746e6c32000000000010bd084f", @ANYRES32=r7, @ANYBLOB="070000400000000200000005450500d4006700003f049078ac1414bb7f0000018913e2e0000001ac1e0001ffffffffac1414bb01940401008205058716831fa964010101ffffffffac1414bbe0000002ffffffff0a01010200000000443c6da1ac1414aa00000009ac14141c00000000ac1414aafffffffdac1414aa80000000ffffffff00007fffffffffff000007ffe000000100000001440c34000000000500000002830f1ce281af4e35b1745d312aa54b892788ac1414bbe000000100000000e0000001640101017f00000164010100ac1e0001e000000107032f000000"]}) r9 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r9, 0x4000000000000, 0x40, &(0x7f0000000900)=@raw={'raw\x00', 0x41, 0x3, 0x388, 0x0, 0x19, 0x0, 0x0, 0x0, 0x2f0, 0x1f0, 0x1f0, 0x2f0, 0x1f0, 0x3, 0x0, {[{{@ip={@private, @dev, 0x0, 0x0, 'wlan1\x00', 'wg1\x00'}, 0x0, 0x200, 0x220, 0x0, {0x0, 0xffffffffa0028000}, [@common=@set={{0x40}, {{0x4, [0x4, 0x2, 0xa, 0x6, 0x8, 0x2], 0x2, 0x2}}}, @common=@inet=@hashlimit2={{0x150}, {'veth1\x00', {0x0, 0x8, 0x40, 0x0, 0x0, 0x687c, 0x93}}}]}, @unspec=@TRACE={0x20}}, {{@ip={@empty, @empty, 0x0, 0x0, 'veth0_vlan\x00', 'netpci0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x0, 0x3]}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3e8) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000000)={@empty, @local, 0x0}, &(0x7f0000000040)=0xc) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r9, 0x89f1, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000380)={'syztnl2\x00', r10, 0x700, 0x40, 0x2, 0x5, {{0x35, 0x4, 0x1, 0x1, 0xd4, 0x0, 0x0, 0x3f, 0x4, 0x0, @remote, @loopback, {[@ssrr={0x89, 0x13, 0xe2, [@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @remote]}, @noop, @ra={0x94, 0x4, 0x1}, @generic={0x82, 0x5, "058716"}, @lsrr={0x83, 0x1f, 0xa9, [@rand_addr=0x64010101, @broadcast, @remote, @multicast2, @broadcast, @private=0xa010102, @empty]}, @timestamp_addr={0x44, 0x3c, 0x6d, 0x1, 0xa, [{@local, 0x9}, {@local}, {@local, 0xfffffffd}, {@local, 0x80000000}, {@broadcast, 0x7fff}, {@broadcast, 0x7ff}, {@multicast1, 0x1}]}, @timestamp={0x44, 0xc, 0x34, 0x0, 0x0, [0x5, 0x2]}, @generic={0x83, 0xf, "1ce281af4e35b1745d312aa54b"}, @ssrr={0x89, 0x27, 0x88, [@remote, @multicast1, @empty, @multicast1, @rand_addr=0x64010101, @loopback, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1]}, @generic={0x7, 0x3, '/'}]}}}}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f0000000180)={&(0x7f0000000840)=ANY=[@ANYBLOB="780000005400010026bd7000fbdbdf2507000000", @ANYRESOCT=r8, @ANYBLOB="ed8e0100", @ANYRES32=r10, @ANYBLOB="000201006401010200000000000000000000000086dd000020000100", @ANYRES32, @ANYBLOB="01050300ac1e000100000000000000000000000086dd000020000100", @ANYRES32, @ANYBLOB="010100002001000000000000000000000000000096dd0000"], 0x78}, 0x1, 0x0, 0x0, 0x8840}, 0x4008040) sendmsg$nl_route_sched(r1, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000600)=@newtclass={0x4ac, 0x28, 0x10, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r10, {0x5, 0x1d}, {0xfff1, 0xf}, {0x2, 0xb}}, [@tclass_kind_options, @tclass_kind_options=@c_taprio={0xb}, @tclass_kind_options=@c_netem={0xa}, @tclass_kind_options=@c_mq={0x7}, @tclass_kind_options=@c_netem={0xa}, @tclass_kind_options=@c_multiq={0xb}]}, 0x4ac}, 0x1, 0x0, 0x0, 0x4008180}, 0x40010) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newtfilter={0x6c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x3c, 0x2, [@TCA_BASIC_EMATCHES={0x38, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x2c, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1}, @TCF_EM_META={0x18, 0x2, 0x0, 0x0, {{}, [@TCA_EM_META_HDR={0xc}]}}]}]}]}}]}, 0x6c}}, 0x0) [ 2477.772193][T28847] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2477.821877][T28847] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 00:41:18 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000f000000850000007500000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r6, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x41, 0x3, 0x230, 0x0, 0x19, 0x0, 0x0, 0x0, 0x2e8, 0x1f0, 0x1f0, 0x2e8, 0x1f0, 0x3, 0x0, {[{{@ip={@private, @dev, 0x0, 0x0, 'wlan1\x00', 'wg1\x00'}, 0x0, 0xa8, 0xc8, 0x0, {0x0, 0xffffffffa0028000}, [@common=@unspec=@quota={{0x38}}]}, @unspec=@TRACE={0x20}}, {{@ip={@empty, @empty, 0x0, 0x0, 'veth0_vlan\x00', 'netpci0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x290) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000000)={@empty, @local, 0x0}, &(0x7f0000000040)=0xc) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000380)=ANY=[@ANYBLOB="72797a746e6c32000000000010bd084f", @ANYRES32=r7, @ANYBLOB="070000400000000200000005450500d4006700003f049078ac1414bb7f0000018913e2e0000001ac1e0001ffffffffac1414bb01940401008205058716831fa964010101ffffffffac1414bbe0000002ffffffff0a01010200000000443c6da1ac1414aa00000009ac14141c00000000ac1414aafffffffdac1414aa80000000ffffffff00007fffffffffff000007ffe000000100000001440c34000000000500000002830f1ce281af4e35b1745d312aa54b892788ac1414bbe000000100000000e0000001640101017f00000164010100ac1e0001e000000107032f000000"]}) r9 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r9, 0x4000000000000, 0x40, &(0x7f0000000900)=@raw={'raw\x00', 0x41, 0x3, 0x388, 0x0, 0x19, 0x0, 0x0, 0x0, 0x2f0, 0x1f0, 0x1f0, 0x2f0, 0x1f0, 0x3, 0x0, {[{{@ip={@private, @dev, 0x0, 0x0, 'wlan1\x00', 'wg1\x00'}, 0x0, 0x200, 0x220, 0x0, {0x0, 0xffffffffa0028000}, [@common=@set={{0x40}, {{0x4, [0x4, 0x2, 0xa, 0x6, 0x8, 0x2], 0x2, 0x2}}}, @common=@inet=@hashlimit2={{0x150}, {'veth1\x00', {0x0, 0x8, 0x40, 0x0, 0x0, 0x687c, 0x93}}}]}, @unspec=@TRACE={0x20}}, {{@ip={@empty, @empty, 0x0, 0x0, 'veth0_vlan\x00', 'netpci0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x0, 0x3]}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3e8) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000000)={@empty, @local, 0x0}, &(0x7f0000000040)=0xc) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r9, 0x89f1, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000380)={'syztnl2\x00', r10, 0x700, 0x40, 0x2, 0x5, {{0x35, 0x4, 0x1, 0x1, 0xd4, 0x0, 0x0, 0x3f, 0x4, 0x0, @remote, @loopback, {[@ssrr={0x89, 0x13, 0xe2, [@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @remote]}, @noop, @ra={0x94, 0x4, 0x1}, @generic={0x82, 0x5, "058716"}, @lsrr={0x83, 0x1f, 0xa9, [@rand_addr=0x64010101, @broadcast, @remote, @multicast2, @broadcast, @private=0xa010102, @empty]}, @timestamp_addr={0x44, 0x3c, 0x6d, 0x1, 0xa, [{@local, 0x9}, {@local}, {@local, 0xfffffffd}, {@local, 0x80000000}, {@broadcast, 0x7fff}, {@broadcast, 0x7ff}, {@multicast1, 0x1}]}, @timestamp={0x44, 0xc, 0x34, 0x0, 0x0, [0x5, 0x2]}, @generic={0x83, 0xf, "1ce281af4e35b1745d312aa54b"}, @ssrr={0x89, 0x27, 0x88, [@remote, @multicast1, @empty, @multicast1, @rand_addr=0x64010101, @loopback, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1]}, @generic={0x7, 0x3, '/'}]}}}}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f0000000180)={&(0x7f0000000840)=ANY=[@ANYBLOB="780000005400010026bd7000fbdbdf2507000000", @ANYRESOCT=r8, @ANYBLOB="ed8e0100", @ANYRES32=r10, @ANYBLOB="000201006401010200000000000000000000000086dd000020000100", @ANYRES32, @ANYBLOB="01050300ac1e000100000000000000000000000086dd000020000100", @ANYRES32, @ANYBLOB="010100002001000000000000000000000000000096dd0000"], 0x78}, 0x1, 0x0, 0x0, 0x8840}, 0x4008040) sendmsg$nl_route_sched(r1, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000600)=@newtclass={0x4ac, 0x28, 0x10, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r10, {0x5, 0x1d}, {0xfff1, 0xf}, {0x2, 0xb}}, [@tclass_kind_options, @tclass_kind_options=@c_taprio={0xb}, @tclass_kind_options=@c_netem={0xa}, @tclass_kind_options=@c_mq={0x7}, @tclass_kind_options=@c_netem={0xa}, @tclass_kind_options=@c_multiq={0xb}]}, 0x4ac}, 0x1, 0x0, 0x0, 0x4008180}, 0x40010) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newtfilter={0x6c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x3c, 0x2, [@TCA_BASIC_EMATCHES={0x38, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x2c, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1}, @TCF_EM_META={0x18, 0x2, 0x0, 0x0, {{}, [@TCA_EM_META_HDR={0xc}]}}]}]}]}}]}, 0x6c}}, 0x0) [ 2478.524352][T28851] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2478.581148][T28851] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 00:41:18 executing program 1: syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x80043) 00:41:19 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000f000000850000007500000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r6, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x41, 0x3, 0x230, 0x0, 0x19, 0x0, 0x0, 0x0, 0x2e8, 0x1f0, 0x1f0, 0x2e8, 0x1f0, 0x3, 0x0, {[{{@ip={@private, @dev, 0x0, 0x0, 'wlan1\x00', 'wg1\x00'}, 0x0, 0xa8, 0xc8, 0x0, {0x0, 0xffffffffa0028000}, [@common=@unspec=@quota={{0x38}}]}, @unspec=@TRACE={0x20}}, {{@ip={@empty, @empty, 0x0, 0x0, 'veth0_vlan\x00', 'netpci0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x290) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000000)={@empty, @local, 0x0}, &(0x7f0000000040)=0xc) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000380)=ANY=[@ANYBLOB="72797a746e6c32000000000010bd084f", @ANYRES32=r7, @ANYBLOB="070000400000000200000005450500d4006700003f049078ac1414bb7f0000018913e2e0000001ac1e0001ffffffffac1414bb01940401008205058716831fa964010101ffffffffac1414bbe0000002ffffffff0a01010200000000443c6da1ac1414aa00000009ac14141c00000000ac1414aafffffffdac1414aa80000000ffffffff00007fffffffffff000007ffe000000100000001440c34000000000500000002830f1ce281af4e35b1745d312aa54b892788ac1414bbe000000100000000e0000001640101017f00000164010100ac1e0001e000000107032f000000"]}) r9 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r9, 0x4000000000000, 0x40, &(0x7f0000000900)=@raw={'raw\x00', 0x41, 0x3, 0x388, 0x0, 0x19, 0x0, 0x0, 0x0, 0x2f0, 0x1f0, 0x1f0, 0x2f0, 0x1f0, 0x3, 0x0, {[{{@ip={@private, @dev, 0x0, 0x0, 'wlan1\x00', 'wg1\x00'}, 0x0, 0x200, 0x220, 0x0, {0x0, 0xffffffffa0028000}, [@common=@set={{0x40}, {{0x4, [0x4, 0x2, 0xa, 0x6, 0x8, 0x2], 0x2, 0x2}}}, @common=@inet=@hashlimit2={{0x150}, {'veth1\x00', {0x0, 0x8, 0x40, 0x0, 0x0, 0x687c, 0x93}}}]}, @unspec=@TRACE={0x20}}, {{@ip={@empty, @empty, 0x0, 0x0, 'veth0_vlan\x00', 'netpci0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x0, 0x3]}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3e8) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000000)={@empty, @local, 0x0}, &(0x7f0000000040)=0xc) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r9, 0x89f1, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000380)={'syztnl2\x00', r10, 0x700, 0x40, 0x2, 0x5, {{0x35, 0x4, 0x1, 0x1, 0xd4, 0x0, 0x0, 0x3f, 0x4, 0x0, @remote, @loopback, {[@ssrr={0x89, 0x13, 0xe2, [@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @remote]}, @noop, @ra={0x94, 0x4, 0x1}, @generic={0x82, 0x5, "058716"}, @lsrr={0x83, 0x1f, 0xa9, [@rand_addr=0x64010101, @broadcast, @remote, @multicast2, @broadcast, @private=0xa010102, @empty]}, @timestamp_addr={0x44, 0x3c, 0x6d, 0x1, 0xa, [{@local, 0x9}, {@local}, {@local, 0xfffffffd}, {@local, 0x80000000}, {@broadcast, 0x7fff}, {@broadcast, 0x7ff}, {@multicast1, 0x1}]}, @timestamp={0x44, 0xc, 0x34, 0x0, 0x0, [0x5, 0x2]}, @generic={0x83, 0xf, "1ce281af4e35b1745d312aa54b"}, @ssrr={0x89, 0x27, 0x88, [@remote, @multicast1, @empty, @multicast1, @rand_addr=0x64010101, @loopback, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1]}, @generic={0x7, 0x3, '/'}]}}}}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f0000000180)={&(0x7f0000000840)=ANY=[@ANYBLOB="780000005400010026bd7000fbdbdf2507000000", @ANYRESOCT=r8, @ANYBLOB="ed8e0100", @ANYRES32=r10, @ANYBLOB="000201006401010200000000000000000000000086dd000020000100", @ANYRES32, @ANYBLOB="01050300ac1e000100000000000000000000000086dd000020000100", @ANYRES32, @ANYBLOB="010100002001000000000000000000000000000096dd0000"], 0x78}, 0x1, 0x0, 0x0, 0x8840}, 0x4008040) sendmsg$nl_route_sched(r1, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000600)=@newtclass={0x4ac, 0x28, 0x10, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x5, 0x1d}, {0xfff1, 0xf}, {0x2, 0xb}}, [@tclass_kind_options, @tclass_kind_options=@c_taprio={0xb}, @tclass_kind_options=@c_netem={0xa}, @tclass_kind_options=@c_mq={0x7}, @tclass_kind_options=@c_netem={0xa}, @tclass_kind_options=@c_multiq={0xb}]}, 0x4ac}, 0x1, 0x0, 0x0, 0x4008180}, 0x40010) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newtfilter={0x6c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x3c, 0x2, [@TCA_BASIC_EMATCHES={0x38, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x2c, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1}, @TCF_EM_META={0x18, 0x2, 0x0, 0x0, {{}, [@TCA_EM_META_HDR={0xc}]}}]}]}]}}]}, 0x6c}}, 0x0) 00:41:19 executing program 1: socketpair(0x26, 0x5, 0x10001, &(0x7f0000000100)) [ 2479.451275][T28856] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2479.475321][T28856] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 00:41:20 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000f000000850000007500000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r6, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x41, 0x3, 0x230, 0x0, 0x19, 0x0, 0x0, 0x0, 0x2e8, 0x1f0, 0x1f0, 0x2e8, 0x1f0, 0x3, 0x0, {[{{@ip={@private, @dev, 0x0, 0x0, 'wlan1\x00', 'wg1\x00'}, 0x0, 0xa8, 0xc8, 0x0, {0x0, 0xffffffffa0028000}, [@common=@unspec=@quota={{0x38}}]}, @unspec=@TRACE={0x20}}, {{@ip={@empty, @empty, 0x0, 0x0, 'veth0_vlan\x00', 'netpci0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x290) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000000)={@empty, @local, 0x0}, &(0x7f0000000040)=0xc) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000380)=ANY=[@ANYBLOB="72797a746e6c32000000000010bd084f", @ANYRES32=r7, @ANYBLOB="070000400000000200000005450500d4006700003f049078ac1414bb7f0000018913e2e0000001ac1e0001ffffffffac1414bb01940401008205058716831fa964010101ffffffffac1414bbe0000002ffffffff0a01010200000000443c6da1ac1414aa00000009ac14141c00000000ac1414aafffffffdac1414aa80000000ffffffff00007fffffffffff000007ffe000000100000001440c34000000000500000002830f1ce281af4e35b1745d312aa54b892788ac1414bbe000000100000000e0000001640101017f00000164010100ac1e0001e000000107032f000000"]}) r9 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r9, 0x4000000000000, 0x40, &(0x7f0000000900)=@raw={'raw\x00', 0x41, 0x3, 0x388, 0x0, 0x19, 0x0, 0x0, 0x0, 0x2f0, 0x1f0, 0x1f0, 0x2f0, 0x1f0, 0x3, 0x0, {[{{@ip={@private, @dev, 0x0, 0x0, 'wlan1\x00', 'wg1\x00'}, 0x0, 0x200, 0x220, 0x0, {0x0, 0xffffffffa0028000}, [@common=@set={{0x40}, {{0x4, [0x4, 0x2, 0xa, 0x6, 0x8, 0x2], 0x2, 0x2}}}, @common=@inet=@hashlimit2={{0x150}, {'veth1\x00', {0x0, 0x8, 0x40, 0x0, 0x0, 0x687c, 0x93}}}]}, @unspec=@TRACE={0x20}}, {{@ip={@empty, @empty, 0x0, 0x0, 'veth0_vlan\x00', 'netpci0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x0, 0x3]}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3e8) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000000)={@empty, @local, 0x0}, &(0x7f0000000040)=0xc) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r9, 0x89f1, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000380)={'syztnl2\x00', r10, 0x700, 0x40, 0x2, 0x5, {{0x35, 0x4, 0x1, 0x1, 0xd4, 0x0, 0x0, 0x3f, 0x4, 0x0, @remote, @loopback, {[@ssrr={0x89, 0x13, 0xe2, [@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @remote]}, @noop, @ra={0x94, 0x4, 0x1}, @generic={0x82, 0x5, "058716"}, @lsrr={0x83, 0x1f, 0xa9, [@rand_addr=0x64010101, @broadcast, @remote, @multicast2, @broadcast, @private=0xa010102, @empty]}, @timestamp_addr={0x44, 0x3c, 0x6d, 0x1, 0xa, [{@local, 0x9}, {@local}, {@local, 0xfffffffd}, {@local, 0x80000000}, {@broadcast, 0x7fff}, {@broadcast, 0x7ff}, {@multicast1, 0x1}]}, @timestamp={0x44, 0xc, 0x34, 0x0, 0x0, [0x5, 0x2]}, @generic={0x83, 0xf, "1ce281af4e35b1745d312aa54b"}, @ssrr={0x89, 0x27, 0x88, [@remote, @multicast1, @empty, @multicast1, @rand_addr=0x64010101, @loopback, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1]}, @generic={0x7, 0x3, '/'}]}}}}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f0000000180)={&(0x7f0000000840)=ANY=[@ANYBLOB="780000005400010026bd7000fbdbdf2507000000", @ANYRESOCT=r8, @ANYBLOB="ed8e0100", @ANYRES32=r10, @ANYBLOB="000201006401010200000000000000000000000086dd000020000100", @ANYRES32, @ANYBLOB="01050300ac1e000100000000000000000000000086dd000020000100", @ANYRES32, @ANYBLOB="010100002001000000000000000000000000000096dd0000"], 0x78}, 0x1, 0x0, 0x0, 0x8840}, 0x4008040) sendmsg$nl_route_sched(r1, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000600)=@newtclass={0x4ac, 0x28, 0x10, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x5, 0x1d}, {0xfff1, 0xf}, {0x2, 0xb}}, [@tclass_kind_options, @tclass_kind_options=@c_taprio={0xb}, @tclass_kind_options=@c_netem={0xa}, @tclass_kind_options=@c_mq={0x7}, @tclass_kind_options=@c_netem={0xa}, @tclass_kind_options=@c_multiq={0xb}]}, 0x4ac}, 0x1, 0x0, 0x0, 0x4008180}, 0x40010) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newtfilter={0x6c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x3c, 0x2, [@TCA_BASIC_EMATCHES={0x38, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x2c, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1}, @TCF_EM_META={0x18, 0x2, 0x0, 0x0, {{}, [@TCA_EM_META_HDR={0xc}]}}]}]}]}}]}, 0x6c}}, 0x0) 00:41:20 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000f000000850000007500000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r6, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x41, 0x3, 0x230, 0x0, 0x19, 0x0, 0x0, 0x0, 0x2e8, 0x1f0, 0x1f0, 0x2e8, 0x1f0, 0x3, 0x0, {[{{@ip={@private, @dev, 0x0, 0x0, 'wlan1\x00', 'wg1\x00'}, 0x0, 0xa8, 0xc8, 0x0, {0x0, 0xffffffffa0028000}, [@common=@unspec=@quota={{0x38}}]}, @unspec=@TRACE={0x20}}, {{@ip={@empty, @empty, 0x0, 0x0, 'veth0_vlan\x00', 'netpci0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x290) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000000)={@empty, @local, 0x0}, &(0x7f0000000040)=0xc) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000380)=ANY=[@ANYBLOB="72797a746e6c32000000000010bd084f", @ANYRES32=r7, @ANYBLOB="070000400000000200000005450500d4006700003f049078ac1414bb7f0000018913e2e0000001ac1e0001ffffffffac1414bb01940401008205058716831fa964010101ffffffffac1414bbe0000002ffffffff0a01010200000000443c6da1ac1414aa00000009ac14141c00000000ac1414aafffffffdac1414aa80000000ffffffff00007fffffffffff000007ffe000000100000001440c34000000000500000002830f1ce281af4e35b1745d312aa54b892788ac1414bbe000000100000000e0000001640101017f00000164010100ac1e0001e000000107032f000000"]}) r9 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r9, 0x4000000000000, 0x40, &(0x7f0000000900)=@raw={'raw\x00', 0x41, 0x3, 0x388, 0x0, 0x19, 0x0, 0x0, 0x0, 0x2f0, 0x1f0, 0x1f0, 0x2f0, 0x1f0, 0x3, 0x0, {[{{@ip={@private, @dev, 0x0, 0x0, 'wlan1\x00', 'wg1\x00'}, 0x0, 0x200, 0x220, 0x0, {0x0, 0xffffffffa0028000}, [@common=@set={{0x40}, {{0x4, [0x4, 0x2, 0xa, 0x6, 0x8, 0x2], 0x2, 0x2}}}, @common=@inet=@hashlimit2={{0x150}, {'veth1\x00', {0x0, 0x8, 0x40, 0x0, 0x0, 0x687c, 0x93}}}]}, @unspec=@TRACE={0x20}}, {{@ip={@empty, @empty, 0x0, 0x0, 'veth0_vlan\x00', 'netpci0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x0, 0x3]}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3e8) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000000)={@empty, @local, 0x0}, &(0x7f0000000040)=0xc) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r9, 0x89f1, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000380)={'syztnl2\x00', r10, 0x700, 0x40, 0x2, 0x5, {{0x35, 0x4, 0x1, 0x1, 0xd4, 0x0, 0x0, 0x3f, 0x4, 0x0, @remote, @loopback, {[@ssrr={0x89, 0x13, 0xe2, [@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @remote]}, @noop, @ra={0x94, 0x4, 0x1}, @generic={0x82, 0x5, "058716"}, @lsrr={0x83, 0x1f, 0xa9, [@rand_addr=0x64010101, @broadcast, @remote, @multicast2, @broadcast, @private=0xa010102, @empty]}, @timestamp_addr={0x44, 0x3c, 0x6d, 0x1, 0xa, [{@local, 0x9}, {@local}, {@local, 0xfffffffd}, {@local, 0x80000000}, {@broadcast, 0x7fff}, {@broadcast, 0x7ff}, {@multicast1, 0x1}]}, @timestamp={0x44, 0xc, 0x34, 0x0, 0x0, [0x5, 0x2]}, @generic={0x83, 0xf, "1ce281af4e35b1745d312aa54b"}, @ssrr={0x89, 0x27, 0x88, [@remote, @multicast1, @empty, @multicast1, @rand_addr=0x64010101, @loopback, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1]}, @generic={0x7, 0x3, '/'}]}}}}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f0000000180)={&(0x7f0000000840)=ANY=[@ANYBLOB="780000005400010026bd7000fbdbdf2507000000", @ANYRESOCT=r8, @ANYBLOB="ed8e0100", @ANYRES32=r10, @ANYBLOB="000201006401010200000000000000000000000086dd000020000100", @ANYRES32, @ANYBLOB="01050300ac1e000100000000000000000000000086dd000020000100", @ANYRES32, @ANYBLOB="010100002001000000000000000000000000000096dd0000"], 0x78}, 0x1, 0x0, 0x0, 0x8840}, 0x4008040) sendmsg$nl_route_sched(r1, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000600)=@newtclass={0x4ac, 0x28, 0x10, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x5, 0x1d}, {0xfff1, 0xf}, {0x2, 0xb}}, [@tclass_kind_options, @tclass_kind_options=@c_taprio={0xb}, @tclass_kind_options=@c_netem={0xa}, @tclass_kind_options=@c_mq={0x7}, @tclass_kind_options=@c_netem={0xa}, @tclass_kind_options=@c_multiq={0xb}]}, 0x4ac}, 0x1, 0x0, 0x0, 0x4008180}, 0x40010) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newtfilter={0x6c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x3c, 0x2, [@TCA_BASIC_EMATCHES={0x38, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x2c, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1}, @TCF_EM_META={0x18, 0x2, 0x0, 0x0, {{}, [@TCA_EM_META_HDR={0xc}]}}]}]}]}}]}, 0x6c}}, 0x0) 00:41:20 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$bt_hci(r0, 0x0, 0xf, 0x0, &(0x7f0000001040)) 00:41:21 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000f000000850000007500000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r6, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x41, 0x3, 0x230, 0x0, 0x19, 0x0, 0x0, 0x0, 0x2e8, 0x1f0, 0x1f0, 0x2e8, 0x1f0, 0x3, 0x0, {[{{@ip={@private, @dev, 0x0, 0x0, 'wlan1\x00', 'wg1\x00'}, 0x0, 0xa8, 0xc8, 0x0, {0x0, 0xffffffffa0028000}, [@common=@unspec=@quota={{0x38}}]}, @unspec=@TRACE={0x20}}, {{@ip={@empty, @empty, 0x0, 0x0, 'veth0_vlan\x00', 'netpci0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x290) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000000)={@empty, @local, 0x0}, &(0x7f0000000040)=0xc) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000380)=ANY=[@ANYBLOB="72797a746e6c32000000000010bd084f", @ANYRES32=r7, @ANYBLOB="070000400000000200000005450500d4006700003f049078ac1414bb7f0000018913e2e0000001ac1e0001ffffffffac1414bb01940401008205058716831fa964010101ffffffffac1414bbe0000002ffffffff0a01010200000000443c6da1ac1414aa00000009ac14141c00000000ac1414aafffffffdac1414aa80000000ffffffff00007fffffffffff000007ffe000000100000001440c34000000000500000002830f1ce281af4e35b1745d312aa54b892788ac1414bbe000000100000000e0000001640101017f00000164010100ac1e0001e000000107032f000000"]}) r9 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r9, 0x4000000000000, 0x40, &(0x7f0000000900)=@raw={'raw\x00', 0x41, 0x3, 0x388, 0x0, 0x19, 0x0, 0x0, 0x0, 0x2f0, 0x1f0, 0x1f0, 0x2f0, 0x1f0, 0x3, 0x0, {[{{@ip={@private, @dev, 0x0, 0x0, 'wlan1\x00', 'wg1\x00'}, 0x0, 0x200, 0x220, 0x0, {0x0, 0xffffffffa0028000}, [@common=@set={{0x40}, {{0x4, [0x4, 0x2, 0xa, 0x6, 0x8, 0x2], 0x2, 0x2}}}, @common=@inet=@hashlimit2={{0x150}, {'veth1\x00', {0x0, 0x8, 0x40, 0x0, 0x0, 0x687c, 0x93}}}]}, @unspec=@TRACE={0x20}}, {{@ip={@empty, @empty, 0x0, 0x0, 'veth0_vlan\x00', 'netpci0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x0, 0x3]}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3e8) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000000)={@empty, @local, 0x0}, &(0x7f0000000040)=0xc) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r9, 0x89f1, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000380)={'syztnl2\x00', r10, 0x700, 0x40, 0x2, 0x5, {{0x35, 0x4, 0x1, 0x1, 0xd4, 0x0, 0x0, 0x3f, 0x4, 0x0, @remote, @loopback, {[@ssrr={0x89, 0x13, 0xe2, [@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @remote]}, @noop, @ra={0x94, 0x4, 0x1}, @generic={0x82, 0x5, "058716"}, @lsrr={0x83, 0x1f, 0xa9, [@rand_addr=0x64010101, @broadcast, @remote, @multicast2, @broadcast, @private=0xa010102, @empty]}, @timestamp_addr={0x44, 0x3c, 0x6d, 0x1, 0xa, [{@local, 0x9}, {@local}, {@local, 0xfffffffd}, {@local, 0x80000000}, {@broadcast, 0x7fff}, {@broadcast, 0x7ff}, {@multicast1, 0x1}]}, @timestamp={0x44, 0xc, 0x34, 0x0, 0x0, [0x5, 0x2]}, @generic={0x83, 0xf, "1ce281af4e35b1745d312aa54b"}, @ssrr={0x89, 0x27, 0x88, [@remote, @multicast1, @empty, @multicast1, @rand_addr=0x64010101, @loopback, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1]}, @generic={0x7, 0x3, '/'}]}}}}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f0000000180)={&(0x7f0000000840)=ANY=[@ANYBLOB="780000005400010026bd7000fbdbdf2507000000", @ANYRESOCT=r8, @ANYBLOB="ed8e0100", @ANYRES32=r10, @ANYBLOB="000201006401010200000000000000000000000086dd000020000100", @ANYRES32, @ANYBLOB="01050300ac1e000100000000000000000000000086dd000020000100", @ANYRES32, @ANYBLOB="010100002001000000000000000000000000000096dd0000"], 0x78}, 0x1, 0x0, 0x0, 0x8840}, 0x4008040) sendmsg$nl_route_sched(r1, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000600)=@newtclass={0x4ac, 0x28, 0x10, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0x0, 0x1d}, {0xfff1, 0xf}, {0x2, 0xb}}, [@tclass_kind_options, @tclass_kind_options=@c_taprio={0xb}, @tclass_kind_options=@c_netem={0xa}, @tclass_kind_options=@c_mq={0x7}, @tclass_kind_options=@c_netem={0xa}, @tclass_kind_options=@c_multiq={0xb}]}, 0x4ac}, 0x1, 0x0, 0x0, 0x4008180}, 0x40010) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newtfilter={0x6c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x3c, 0x2, [@TCA_BASIC_EMATCHES={0x38, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x2c, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1}, @TCF_EM_META={0x18, 0x2, 0x0, 0x0, {{}, [@TCA_EM_META_HDR={0xc}]}}]}]}]}}]}, 0x6c}}, 0x0) [ 2481.387440][T28867] __nla_validate_parse: 4 callbacks suppressed [ 2481.387529][T28867] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2481.424143][T28867] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 00:41:21 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000f000000850000007500000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r6, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x41, 0x3, 0x230, 0x0, 0x19, 0x0, 0x0, 0x0, 0x2e8, 0x1f0, 0x1f0, 0x2e8, 0x1f0, 0x3, 0x0, {[{{@ip={@private, @dev, 0x0, 0x0, 'wlan1\x00', 'wg1\x00'}, 0x0, 0xa8, 0xc8, 0x0, {0x0, 0xffffffffa0028000}, [@common=@unspec=@quota={{0x38}}]}, @unspec=@TRACE={0x20}}, {{@ip={@empty, @empty, 0x0, 0x0, 'veth0_vlan\x00', 'netpci0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x290) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000000)={@empty, @local, 0x0}, &(0x7f0000000040)=0xc) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000380)=ANY=[@ANYBLOB="72797a746e6c32000000000010bd084f", @ANYRES32=r7, @ANYBLOB="070000400000000200000005450500d4006700003f049078ac1414bb7f0000018913e2e0000001ac1e0001ffffffffac1414bb01940401008205058716831fa964010101ffffffffac1414bbe0000002ffffffff0a01010200000000443c6da1ac1414aa00000009ac14141c00000000ac1414aafffffffdac1414aa80000000ffffffff00007fffffffffff000007ffe000000100000001440c34000000000500000002830f1ce281af4e35b1745d312aa54b892788ac1414bbe000000100000000e0000001640101017f00000164010100ac1e0001e000000107032f000000"]}) r9 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r9, 0x4000000000000, 0x40, &(0x7f0000000900)=@raw={'raw\x00', 0x41, 0x3, 0x388, 0x0, 0x19, 0x0, 0x0, 0x0, 0x2f0, 0x1f0, 0x1f0, 0x2f0, 0x1f0, 0x3, 0x0, {[{{@ip={@private, @dev, 0x0, 0x0, 'wlan1\x00', 'wg1\x00'}, 0x0, 0x200, 0x220, 0x0, {0x0, 0xffffffffa0028000}, [@common=@set={{0x40}, {{0x4, [0x4, 0x2, 0xa, 0x6, 0x8, 0x2], 0x2, 0x2}}}, @common=@inet=@hashlimit2={{0x150}, {'veth1\x00', {0x0, 0x8, 0x40, 0x0, 0x0, 0x687c, 0x93}}}]}, @unspec=@TRACE={0x20}}, {{@ip={@empty, @empty, 0x0, 0x0, 'veth0_vlan\x00', 'netpci0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x0, 0x3]}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3e8) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000000)={@empty, @local, 0x0}, &(0x7f0000000040)=0xc) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r9, 0x89f1, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000380)={'syztnl2\x00', r10, 0x700, 0x40, 0x2, 0x5, {{0x35, 0x4, 0x1, 0x1, 0xd4, 0x0, 0x0, 0x3f, 0x4, 0x0, @remote, @loopback, {[@ssrr={0x89, 0x13, 0xe2, [@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @remote]}, @noop, @ra={0x94, 0x4, 0x1}, @generic={0x82, 0x5, "058716"}, @lsrr={0x83, 0x1f, 0xa9, [@rand_addr=0x64010101, @broadcast, @remote, @multicast2, @broadcast, @private=0xa010102, @empty]}, @timestamp_addr={0x44, 0x3c, 0x6d, 0x1, 0xa, [{@local, 0x9}, {@local}, {@local, 0xfffffffd}, {@local, 0x80000000}, {@broadcast, 0x7fff}, {@broadcast, 0x7ff}, {@multicast1, 0x1}]}, @timestamp={0x44, 0xc, 0x34, 0x0, 0x0, [0x5, 0x2]}, @generic={0x83, 0xf, "1ce281af4e35b1745d312aa54b"}, @ssrr={0x89, 0x27, 0x88, [@remote, @multicast1, @empty, @multicast1, @rand_addr=0x64010101, @loopback, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1]}, @generic={0x7, 0x3, '/'}]}}}}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f0000000180)={&(0x7f0000000840)=ANY=[@ANYBLOB="780000005400010026bd7000fbdbdf2507000000", @ANYRESOCT=r8, @ANYBLOB="ed8e0100", @ANYRES32=r10, @ANYBLOB="000201006401010200000000000000000000000086dd000020000100", @ANYRES32, @ANYBLOB="01050300ac1e000100000000000000000000000086dd000020000100", @ANYRES32, @ANYBLOB="010100002001000000000000000000000000000096dd0000"], 0x78}, 0x1, 0x0, 0x0, 0x8840}, 0x4008040) sendmsg$nl_route_sched(r1, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000600)=@newtclass={0x4ac, 0x28, 0x10, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0x0, 0x1d}, {0xfff1, 0xf}, {0x2, 0xb}}, [@tclass_kind_options, @tclass_kind_options=@c_taprio={0xb}, @tclass_kind_options=@c_netem={0xa}, @tclass_kind_options=@c_mq={0x7}, @tclass_kind_options=@c_netem={0xa}, @tclass_kind_options=@c_multiq={0xb}]}, 0x4ac}, 0x1, 0x0, 0x0, 0x4008180}, 0x40010) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newtfilter={0x6c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x3c, 0x2, [@TCA_BASIC_EMATCHES={0x38, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x2c, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1}, @TCF_EM_META={0x18, 0x2, 0x0, 0x0, {{}, [@TCA_EM_META_HDR={0xc}]}}]}]}]}}]}, 0x6c}}, 0x0) [ 2482.071260][T28872] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2482.104258][T28872] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 00:41:22 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$bt_hci(r0, 0x0, 0xf, 0x0, &(0x7f0000001040)) 00:41:22 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000f000000850000007500000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r6, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x41, 0x3, 0x230, 0x0, 0x19, 0x0, 0x0, 0x0, 0x2e8, 0x1f0, 0x1f0, 0x2e8, 0x1f0, 0x3, 0x0, {[{{@ip={@private, @dev, 0x0, 0x0, 'wlan1\x00', 'wg1\x00'}, 0x0, 0xa8, 0xc8, 0x0, {0x0, 0xffffffffa0028000}, [@common=@unspec=@quota={{0x38}}]}, @unspec=@TRACE={0x20}}, {{@ip={@empty, @empty, 0x0, 0x0, 'veth0_vlan\x00', 'netpci0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x290) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000000)={@empty, @local, 0x0}, &(0x7f0000000040)=0xc) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000380)=ANY=[@ANYBLOB="72797a746e6c32000000000010bd084f", @ANYRES32=r7, @ANYBLOB="070000400000000200000005450500d4006700003f049078ac1414bb7f0000018913e2e0000001ac1e0001ffffffffac1414bb01940401008205058716831fa964010101ffffffffac1414bbe0000002ffffffff0a01010200000000443c6da1ac1414aa00000009ac14141c00000000ac1414aafffffffdac1414aa80000000ffffffff00007fffffffffff000007ffe000000100000001440c34000000000500000002830f1ce281af4e35b1745d312aa54b892788ac1414bbe000000100000000e0000001640101017f00000164010100ac1e0001e000000107032f000000"]}) r9 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r9, 0x4000000000000, 0x40, &(0x7f0000000900)=@raw={'raw\x00', 0x41, 0x3, 0x388, 0x0, 0x19, 0x0, 0x0, 0x0, 0x2f0, 0x1f0, 0x1f0, 0x2f0, 0x1f0, 0x3, 0x0, {[{{@ip={@private, @dev, 0x0, 0x0, 'wlan1\x00', 'wg1\x00'}, 0x0, 0x200, 0x220, 0x0, {0x0, 0xffffffffa0028000}, [@common=@set={{0x40}, {{0x4, [0x4, 0x2, 0xa, 0x6, 0x8, 0x2], 0x2, 0x2}}}, @common=@inet=@hashlimit2={{0x150}, {'veth1\x00', {0x0, 0x8, 0x40, 0x0, 0x0, 0x687c, 0x93}}}]}, @unspec=@TRACE={0x20}}, {{@ip={@empty, @empty, 0x0, 0x0, 'veth0_vlan\x00', 'netpci0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x0, 0x3]}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3e8) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000000)={@empty, @local, 0x0}, &(0x7f0000000040)=0xc) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r9, 0x89f1, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000380)={'syztnl2\x00', r10, 0x700, 0x40, 0x2, 0x5, {{0x35, 0x4, 0x1, 0x1, 0xd4, 0x0, 0x0, 0x3f, 0x4, 0x0, @remote, @loopback, {[@ssrr={0x89, 0x13, 0xe2, [@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @remote]}, @noop, @ra={0x94, 0x4, 0x1}, @generic={0x82, 0x5, "058716"}, @lsrr={0x83, 0x1f, 0xa9, [@rand_addr=0x64010101, @broadcast, @remote, @multicast2, @broadcast, @private=0xa010102, @empty]}, @timestamp_addr={0x44, 0x3c, 0x6d, 0x1, 0xa, [{@local, 0x9}, {@local}, {@local, 0xfffffffd}, {@local, 0x80000000}, {@broadcast, 0x7fff}, {@broadcast, 0x7ff}, {@multicast1, 0x1}]}, @timestamp={0x44, 0xc, 0x34, 0x0, 0x0, [0x5, 0x2]}, @generic={0x83, 0xf, "1ce281af4e35b1745d312aa54b"}, @ssrr={0x89, 0x27, 0x88, [@remote, @multicast1, @empty, @multicast1, @rand_addr=0x64010101, @loopback, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1]}, @generic={0x7, 0x3, '/'}]}}}}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f0000000180)={&(0x7f0000000840)=ANY=[@ANYBLOB="780000005400010026bd7000fbdbdf2507000000", @ANYRESOCT=r8, @ANYBLOB="ed8e0100", @ANYRES32=r10, @ANYBLOB="000201006401010200000000000000000000000086dd000020000100", @ANYRES32, @ANYBLOB="01050300ac1e000100000000000000000000000086dd000020000100", @ANYRES32, @ANYBLOB="010100002001000000000000000000000000000096dd0000"], 0x78}, 0x1, 0x0, 0x0, 0x8840}, 0x4008040) sendmsg$nl_route_sched(r1, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000600)=@newtclass={0x4ac, 0x28, 0x10, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0x0, 0x1d}, {0xfff1, 0xf}, {0x2, 0xb}}, [@tclass_kind_options, @tclass_kind_options=@c_taprio={0xb}, @tclass_kind_options=@c_netem={0xa}, @tclass_kind_options=@c_mq={0x7}, @tclass_kind_options=@c_netem={0xa}, @tclass_kind_options=@c_multiq={0xb}]}, 0x4ac}, 0x1, 0x0, 0x0, 0x4008180}, 0x40010) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newtfilter={0x6c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x3c, 0x2, [@TCA_BASIC_EMATCHES={0x38, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x2c, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1}, @TCF_EM_META={0x18, 0x2, 0x0, 0x0, {{}, [@TCA_EM_META_HDR={0xc}]}}]}]}]}}]}, 0x6c}}, 0x0) [ 2482.811175][T28876] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2482.844399][T28876] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 00:41:23 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000f000000850000007500000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r6, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x41, 0x3, 0x230, 0x0, 0x19, 0x0, 0x0, 0x0, 0x2e8, 0x1f0, 0x1f0, 0x2e8, 0x1f0, 0x3, 0x0, {[{{@ip={@private, @dev, 0x0, 0x0, 'wlan1\x00', 'wg1\x00'}, 0x0, 0xa8, 0xc8, 0x0, {0x0, 0xffffffffa0028000}, [@common=@unspec=@quota={{0x38}}]}, @unspec=@TRACE={0x20}}, {{@ip={@empty, @empty, 0x0, 0x0, 'veth0_vlan\x00', 'netpci0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x290) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000000)={@empty, @local, 0x0}, &(0x7f0000000040)=0xc) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000380)=ANY=[@ANYBLOB="72797a746e6c32000000000010bd084f", @ANYRES32=r7, @ANYBLOB="070000400000000200000005450500d4006700003f049078ac1414bb7f0000018913e2e0000001ac1e0001ffffffffac1414bb01940401008205058716831fa964010101ffffffffac1414bbe0000002ffffffff0a01010200000000443c6da1ac1414aa00000009ac14141c00000000ac1414aafffffffdac1414aa80000000ffffffff00007fffffffffff000007ffe000000100000001440c34000000000500000002830f1ce281af4e35b1745d312aa54b892788ac1414bbe000000100000000e0000001640101017f00000164010100ac1e0001e000000107032f000000"]}) r9 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r9, 0x4000000000000, 0x40, &(0x7f0000000900)=@raw={'raw\x00', 0x41, 0x3, 0x388, 0x0, 0x19, 0x0, 0x0, 0x0, 0x2f0, 0x1f0, 0x1f0, 0x2f0, 0x1f0, 0x3, 0x0, {[{{@ip={@private, @dev, 0x0, 0x0, 'wlan1\x00', 'wg1\x00'}, 0x0, 0x200, 0x220, 0x0, {0x0, 0xffffffffa0028000}, [@common=@set={{0x40}, {{0x4, [0x4, 0x2, 0xa, 0x6, 0x8, 0x2], 0x2, 0x2}}}, @common=@inet=@hashlimit2={{0x150}, {'veth1\x00', {0x0, 0x8, 0x40, 0x0, 0x0, 0x687c, 0x93}}}]}, @unspec=@TRACE={0x20}}, {{@ip={@empty, @empty, 0x0, 0x0, 'veth0_vlan\x00', 'netpci0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x0, 0x3]}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3e8) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000000)={@empty, @local, 0x0}, &(0x7f0000000040)=0xc) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r9, 0x89f1, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000380)={'syztnl2\x00', r10, 0x700, 0x40, 0x2, 0x5, {{0x35, 0x4, 0x1, 0x1, 0xd4, 0x0, 0x0, 0x3f, 0x4, 0x0, @remote, @loopback, {[@ssrr={0x89, 0x13, 0xe2, [@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @remote]}, @noop, @ra={0x94, 0x4, 0x1}, @generic={0x82, 0x5, "058716"}, @lsrr={0x83, 0x1f, 0xa9, [@rand_addr=0x64010101, @broadcast, @remote, @multicast2, @broadcast, @private=0xa010102, @empty]}, @timestamp_addr={0x44, 0x3c, 0x6d, 0x1, 0xa, [{@local, 0x9}, {@local}, {@local, 0xfffffffd}, {@local, 0x80000000}, {@broadcast, 0x7fff}, {@broadcast, 0x7ff}, {@multicast1, 0x1}]}, @timestamp={0x44, 0xc, 0x34, 0x0, 0x0, [0x5, 0x2]}, @generic={0x83, 0xf, "1ce281af4e35b1745d312aa54b"}, @ssrr={0x89, 0x27, 0x88, [@remote, @multicast1, @empty, @multicast1, @rand_addr=0x64010101, @loopback, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1]}, @generic={0x7, 0x3, '/'}]}}}}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f0000000180)={&(0x7f0000000840)=ANY=[@ANYBLOB="780000005400010026bd7000fbdbdf2507000000", @ANYRESOCT=r8, @ANYBLOB="ed8e0100", @ANYRES32=r10, @ANYBLOB="000201006401010200000000000000000000000086dd000020000100", @ANYRES32, @ANYBLOB="01050300ac1e000100000000000000000000000086dd000020000100", @ANYRES32, @ANYBLOB="010100002001000000000000000000000000000096dd0000"], 0x78}, 0x1, 0x0, 0x0, 0x8840}, 0x4008040) sendmsg$nl_route_sched(r1, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000600)=@newtclass={0x4ac, 0x28, 0x10, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0x5}, {0xfff1, 0xf}, {0x2, 0xb}}, [@tclass_kind_options, @tclass_kind_options=@c_taprio={0xb}, @tclass_kind_options=@c_netem={0xa}, @tclass_kind_options=@c_mq={0x7}, @tclass_kind_options=@c_netem={0xa}, @tclass_kind_options=@c_multiq={0xb}]}, 0x4ac}, 0x1, 0x0, 0x0, 0x4008180}, 0x40010) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newtfilter={0x6c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x3c, 0x2, [@TCA_BASIC_EMATCHES={0x38, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x2c, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1}, @TCF_EM_META={0x18, 0x2, 0x0, 0x0, {{}, [@TCA_EM_META_HDR={0xc}]}}]}]}]}}]}, 0x6c}}, 0x0) [ 2483.426516][T28879] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2483.454616][T28879] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 00:41:23 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000f000000850000007500000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r6, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x41, 0x3, 0x230, 0x0, 0x19, 0x0, 0x0, 0x0, 0x2e8, 0x1f0, 0x1f0, 0x2e8, 0x1f0, 0x3, 0x0, {[{{@ip={@private, @dev, 0x0, 0x0, 'wlan1\x00', 'wg1\x00'}, 0x0, 0xa8, 0xc8, 0x0, {0x0, 0xffffffffa0028000}, [@common=@unspec=@quota={{0x38}}]}, @unspec=@TRACE={0x20}}, {{@ip={@empty, @empty, 0x0, 0x0, 'veth0_vlan\x00', 'netpci0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x290) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000000)={@empty, @local, 0x0}, &(0x7f0000000040)=0xc) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000380)=ANY=[@ANYBLOB="72797a746e6c32000000000010bd084f", @ANYRES32=r7, @ANYBLOB="070000400000000200000005450500d4006700003f049078ac1414bb7f0000018913e2e0000001ac1e0001ffffffffac1414bb01940401008205058716831fa964010101ffffffffac1414bbe0000002ffffffff0a01010200000000443c6da1ac1414aa00000009ac14141c00000000ac1414aafffffffdac1414aa80000000ffffffff00007fffffffffff000007ffe000000100000001440c34000000000500000002830f1ce281af4e35b1745d312aa54b892788ac1414bbe000000100000000e0000001640101017f00000164010100ac1e0001e000000107032f000000"]}) r9 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r9, 0x4000000000000, 0x40, &(0x7f0000000900)=@raw={'raw\x00', 0x41, 0x3, 0x388, 0x0, 0x19, 0x0, 0x0, 0x0, 0x2f0, 0x1f0, 0x1f0, 0x2f0, 0x1f0, 0x3, 0x0, {[{{@ip={@private, @dev, 0x0, 0x0, 'wlan1\x00', 'wg1\x00'}, 0x0, 0x200, 0x220, 0x0, {0x0, 0xffffffffa0028000}, [@common=@set={{0x40}, {{0x4, [0x4, 0x2, 0xa, 0x6, 0x8, 0x2], 0x2, 0x2}}}, @common=@inet=@hashlimit2={{0x150}, {'veth1\x00', {0x0, 0x8, 0x40, 0x0, 0x0, 0x687c, 0x93}}}]}, @unspec=@TRACE={0x20}}, {{@ip={@empty, @empty, 0x0, 0x0, 'veth0_vlan\x00', 'netpci0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x0, 0x3]}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3e8) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000000)={@empty, @local, 0x0}, &(0x7f0000000040)=0xc) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r9, 0x89f1, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000380)={'syztnl2\x00', r10, 0x700, 0x40, 0x2, 0x5, {{0x35, 0x4, 0x1, 0x1, 0xd4, 0x0, 0x0, 0x3f, 0x4, 0x0, @remote, @loopback, {[@ssrr={0x89, 0x13, 0xe2, [@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @remote]}, @noop, @ra={0x94, 0x4, 0x1}, @generic={0x82, 0x5, "058716"}, @lsrr={0x83, 0x1f, 0xa9, [@rand_addr=0x64010101, @broadcast, @remote, @multicast2, @broadcast, @private=0xa010102, @empty]}, @timestamp_addr={0x44, 0x3c, 0x6d, 0x1, 0xa, [{@local, 0x9}, {@local}, {@local, 0xfffffffd}, {@local, 0x80000000}, {@broadcast, 0x7fff}, {@broadcast, 0x7ff}, {@multicast1, 0x1}]}, @timestamp={0x44, 0xc, 0x34, 0x0, 0x0, [0x5, 0x2]}, @generic={0x83, 0xf, "1ce281af4e35b1745d312aa54b"}, @ssrr={0x89, 0x27, 0x88, [@remote, @multicast1, @empty, @multicast1, @rand_addr=0x64010101, @loopback, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1]}, @generic={0x7, 0x3, '/'}]}}}}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f0000000180)={&(0x7f0000000840)=ANY=[@ANYBLOB="780000005400010026bd7000fbdbdf2507000000", @ANYRESOCT=r8, @ANYBLOB="ed8e0100", @ANYRES32=r10, @ANYBLOB="000201006401010200000000000000000000000086dd000020000100", @ANYRES32, @ANYBLOB="01050300ac1e000100000000000000000000000086dd000020000100", @ANYRES32, @ANYBLOB="010100002001000000000000000000000000000096dd0000"], 0x78}, 0x1, 0x0, 0x0, 0x8840}, 0x4008040) sendmsg$nl_route_sched(r1, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000600)=@newtclass={0x4ac, 0x28, 0x10, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0x5}, {0xfff1, 0xf}, {0x2, 0xb}}, [@tclass_kind_options, @tclass_kind_options=@c_taprio={0xb}, @tclass_kind_options=@c_netem={0xa}, @tclass_kind_options=@c_mq={0x7}, @tclass_kind_options=@c_netem={0xa}, @tclass_kind_options=@c_multiq={0xb}]}, 0x4ac}, 0x1, 0x0, 0x0, 0x4008180}, 0x40010) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newtfilter={0x6c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x3c, 0x2, [@TCA_BASIC_EMATCHES={0x38, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x2c, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1}, @TCF_EM_META={0x18, 0x2, 0x0, 0x0, {{}, [@TCA_EM_META_HDR={0xc}]}}]}]}]}}]}, 0x6c}}, 0x0) [ 2484.118439][T28883] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2484.138714][T28883] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 00:41:24 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$bt_hci(r0, 0x0, 0xf, 0x0, &(0x7f0000001040)) 00:41:24 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000f000000850000007500000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r6, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x41, 0x3, 0x230, 0x0, 0x19, 0x0, 0x0, 0x0, 0x2e8, 0x1f0, 0x1f0, 0x2e8, 0x1f0, 0x3, 0x0, {[{{@ip={@private, @dev, 0x0, 0x0, 'wlan1\x00', 'wg1\x00'}, 0x0, 0xa8, 0xc8, 0x0, {0x0, 0xffffffffa0028000}, [@common=@unspec=@quota={{0x38}}]}, @unspec=@TRACE={0x20}}, {{@ip={@empty, @empty, 0x0, 0x0, 'veth0_vlan\x00', 'netpci0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x290) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000000)={@empty, @local, 0x0}, &(0x7f0000000040)=0xc) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000380)=ANY=[@ANYBLOB="72797a746e6c32000000000010bd084f", @ANYRES32=r7, @ANYBLOB="070000400000000200000005450500d4006700003f049078ac1414bb7f0000018913e2e0000001ac1e0001ffffffffac1414bb01940401008205058716831fa964010101ffffffffac1414bbe0000002ffffffff0a01010200000000443c6da1ac1414aa00000009ac14141c00000000ac1414aafffffffdac1414aa80000000ffffffff00007fffffffffff000007ffe000000100000001440c34000000000500000002830f1ce281af4e35b1745d312aa54b892788ac1414bbe000000100000000e0000001640101017f00000164010100ac1e0001e000000107032f000000"]}) r9 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r9, 0x4000000000000, 0x40, &(0x7f0000000900)=@raw={'raw\x00', 0x41, 0x3, 0x388, 0x0, 0x19, 0x0, 0x0, 0x0, 0x2f0, 0x1f0, 0x1f0, 0x2f0, 0x1f0, 0x3, 0x0, {[{{@ip={@private, @dev, 0x0, 0x0, 'wlan1\x00', 'wg1\x00'}, 0x0, 0x200, 0x220, 0x0, {0x0, 0xffffffffa0028000}, [@common=@set={{0x40}, {{0x4, [0x4, 0x2, 0xa, 0x6, 0x8, 0x2], 0x2, 0x2}}}, @common=@inet=@hashlimit2={{0x150}, {'veth1\x00', {0x0, 0x8, 0x40, 0x0, 0x0, 0x687c, 0x93}}}]}, @unspec=@TRACE={0x20}}, {{@ip={@empty, @empty, 0x0, 0x0, 'veth0_vlan\x00', 'netpci0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x0, 0x3]}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3e8) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000000)={@empty, @local, 0x0}, &(0x7f0000000040)=0xc) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r9, 0x89f1, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000380)={'syztnl2\x00', r10, 0x700, 0x40, 0x2, 0x5, {{0x35, 0x4, 0x1, 0x1, 0xd4, 0x0, 0x0, 0x3f, 0x4, 0x0, @remote, @loopback, {[@ssrr={0x89, 0x13, 0xe2, [@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @remote]}, @noop, @ra={0x94, 0x4, 0x1}, @generic={0x82, 0x5, "058716"}, @lsrr={0x83, 0x1f, 0xa9, [@rand_addr=0x64010101, @broadcast, @remote, @multicast2, @broadcast, @private=0xa010102, @empty]}, @timestamp_addr={0x44, 0x3c, 0x6d, 0x1, 0xa, [{@local, 0x9}, {@local}, {@local, 0xfffffffd}, {@local, 0x80000000}, {@broadcast, 0x7fff}, {@broadcast, 0x7ff}, {@multicast1, 0x1}]}, @timestamp={0x44, 0xc, 0x34, 0x0, 0x0, [0x5, 0x2]}, @generic={0x83, 0xf, "1ce281af4e35b1745d312aa54b"}, @ssrr={0x89, 0x27, 0x88, [@remote, @multicast1, @empty, @multicast1, @rand_addr=0x64010101, @loopback, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1]}, @generic={0x7, 0x3, '/'}]}}}}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f0000000180)={&(0x7f0000000840)=ANY=[@ANYBLOB="780000005400010026bd7000fbdbdf2507000000", @ANYRESOCT=r8, @ANYBLOB="ed8e0100", @ANYRES32=r10, @ANYBLOB="000201006401010200000000000000000000000086dd000020000100", @ANYRES32, @ANYBLOB="01050300ac1e000100000000000000000000000086dd000020000100", @ANYRES32, @ANYBLOB="010100002001000000000000000000000000000096dd0000"], 0x78}, 0x1, 0x0, 0x0, 0x8840}, 0x4008040) sendmsg$nl_route_sched(r1, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000600)=@newtclass={0x4ac, 0x28, 0x10, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0x5}, {0xfff1, 0xf}, {0x2, 0xb}}, [@tclass_kind_options, @tclass_kind_options=@c_taprio={0xb}, @tclass_kind_options=@c_netem={0xa}, @tclass_kind_options=@c_mq={0x7}, @tclass_kind_options=@c_netem={0xa}, @tclass_kind_options=@c_multiq={0xb}]}, 0x4ac}, 0x1, 0x0, 0x0, 0x4008180}, 0x40010) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newtfilter={0x6c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x3c, 0x2, [@TCA_BASIC_EMATCHES={0x38, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x2c, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1}, @TCF_EM_META={0x18, 0x2, 0x0, 0x0, {{}, [@TCA_EM_META_HDR={0xc}]}}]}]}]}}]}, 0x6c}}, 0x0) 00:41:25 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000f000000850000007500000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r6, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x41, 0x3, 0x230, 0x0, 0x19, 0x0, 0x0, 0x0, 0x2e8, 0x1f0, 0x1f0, 0x2e8, 0x1f0, 0x3, 0x0, {[{{@ip={@private, @dev, 0x0, 0x0, 'wlan1\x00', 'wg1\x00'}, 0x0, 0xa8, 0xc8, 0x0, {0x0, 0xffffffffa0028000}, [@common=@unspec=@quota={{0x38}}]}, @unspec=@TRACE={0x20}}, {{@ip={@empty, @empty, 0x0, 0x0, 'veth0_vlan\x00', 'netpci0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x290) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000000)={@empty, @local, 0x0}, &(0x7f0000000040)=0xc) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000380)=ANY=[@ANYBLOB="72797a746e6c32000000000010bd084f", @ANYRES32=r7, @ANYBLOB="070000400000000200000005450500d4006700003f049078ac1414bb7f0000018913e2e0000001ac1e0001ffffffffac1414bb01940401008205058716831fa964010101ffffffffac1414bbe0000002ffffffff0a01010200000000443c6da1ac1414aa00000009ac14141c00000000ac1414aafffffffdac1414aa80000000ffffffff00007fffffffffff000007ffe000000100000001440c34000000000500000002830f1ce281af4e35b1745d312aa54b892788ac1414bbe000000100000000e0000001640101017f00000164010100ac1e0001e000000107032f000000"]}) r9 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r9, 0x4000000000000, 0x40, &(0x7f0000000900)=@raw={'raw\x00', 0x41, 0x3, 0x388, 0x0, 0x19, 0x0, 0x0, 0x0, 0x2f0, 0x1f0, 0x1f0, 0x2f0, 0x1f0, 0x3, 0x0, {[{{@ip={@private, @dev, 0x0, 0x0, 'wlan1\x00', 'wg1\x00'}, 0x0, 0x200, 0x220, 0x0, {0x0, 0xffffffffa0028000}, [@common=@set={{0x40}, {{0x4, [0x4, 0x2, 0xa, 0x6, 0x8, 0x2], 0x2, 0x2}}}, @common=@inet=@hashlimit2={{0x150}, {'veth1\x00', {0x0, 0x8, 0x40, 0x0, 0x0, 0x687c, 0x93}}}]}, @unspec=@TRACE={0x20}}, {{@ip={@empty, @empty, 0x0, 0x0, 'veth0_vlan\x00', 'netpci0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x0, 0x3]}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3e8) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000000)={@empty, @local, 0x0}, &(0x7f0000000040)=0xc) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r9, 0x89f1, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000380)={'syztnl2\x00', r10, 0x700, 0x40, 0x2, 0x5, {{0x35, 0x4, 0x1, 0x1, 0xd4, 0x0, 0x0, 0x3f, 0x4, 0x0, @remote, @loopback, {[@ssrr={0x89, 0x13, 0xe2, [@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @remote]}, @noop, @ra={0x94, 0x4, 0x1}, @generic={0x82, 0x5, "058716"}, @lsrr={0x83, 0x1f, 0xa9, [@rand_addr=0x64010101, @broadcast, @remote, @multicast2, @broadcast, @private=0xa010102, @empty]}, @timestamp_addr={0x44, 0x3c, 0x6d, 0x1, 0xa, [{@local, 0x9}, {@local}, {@local, 0xfffffffd}, {@local, 0x80000000}, {@broadcast, 0x7fff}, {@broadcast, 0x7ff}, {@multicast1, 0x1}]}, @timestamp={0x44, 0xc, 0x34, 0x0, 0x0, [0x5, 0x2]}, @generic={0x83, 0xf, "1ce281af4e35b1745d312aa54b"}, @ssrr={0x89, 0x27, 0x88, [@remote, @multicast1, @empty, @multicast1, @rand_addr=0x64010101, @loopback, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1]}, @generic={0x7, 0x3, '/'}]}}}}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f0000000180)={&(0x7f0000000840)=ANY=[@ANYBLOB="780000005400010026bd7000fbdbdf2507000000", @ANYRESOCT=r8, @ANYBLOB="ed8e0100", @ANYRES32=r10, @ANYBLOB="000201006401010200000000000000000000000086dd000020000100", @ANYRES32, @ANYBLOB="01050300ac1e000100000000000000000000000086dd000020000100", @ANYRES32, @ANYBLOB="010100002001000000000000000000000000000096dd0000"], 0x78}, 0x1, 0x0, 0x0, 0x8840}, 0x4008040) sendmsg$nl_route_sched(r1, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000600)=@newtclass={0x4ac, 0x28, 0x10, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0x5, 0x1d}, {0x0, 0xf}, {0x2, 0xb}}, [@tclass_kind_options, @tclass_kind_options=@c_taprio={0xb}, @tclass_kind_options=@c_netem={0xa}, @tclass_kind_options=@c_mq={0x7}, @tclass_kind_options=@c_netem={0xa}, @tclass_kind_options=@c_multiq={0xb}]}, 0x4ac}, 0x1, 0x0, 0x0, 0x4008180}, 0x40010) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newtfilter={0x6c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x3c, 0x2, [@TCA_BASIC_EMATCHES={0x38, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x2c, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1}, @TCF_EM_META={0x18, 0x2, 0x0, 0x0, {{}, [@TCA_EM_META_HDR={0xc}]}}]}]}]}}]}, 0x6c}}, 0x0) 00:41:25 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$bt_hci(r0, 0x0, 0xf, 0x0, &(0x7f0000001040)) 00:41:25 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000f000000850000007500000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r6, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x41, 0x3, 0x230, 0x0, 0x19, 0x0, 0x0, 0x0, 0x2e8, 0x1f0, 0x1f0, 0x2e8, 0x1f0, 0x3, 0x0, {[{{@ip={@private, @dev, 0x0, 0x0, 'wlan1\x00', 'wg1\x00'}, 0x0, 0xa8, 0xc8, 0x0, {0x0, 0xffffffffa0028000}, [@common=@unspec=@quota={{0x38}}]}, @unspec=@TRACE={0x20}}, {{@ip={@empty, @empty, 0x0, 0x0, 'veth0_vlan\x00', 'netpci0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x290) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000000)={@empty, @local, 0x0}, &(0x7f0000000040)=0xc) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000380)=ANY=[@ANYBLOB="72797a746e6c32000000000010bd084f", @ANYRES32=r7, @ANYBLOB="070000400000000200000005450500d4006700003f049078ac1414bb7f0000018913e2e0000001ac1e0001ffffffffac1414bb01940401008205058716831fa964010101ffffffffac1414bbe0000002ffffffff0a01010200000000443c6da1ac1414aa00000009ac14141c00000000ac1414aafffffffdac1414aa80000000ffffffff00007fffffffffff000007ffe000000100000001440c34000000000500000002830f1ce281af4e35b1745d312aa54b892788ac1414bbe000000100000000e0000001640101017f00000164010100ac1e0001e000000107032f000000"]}) r9 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r9, 0x4000000000000, 0x40, &(0x7f0000000900)=@raw={'raw\x00', 0x41, 0x3, 0x388, 0x0, 0x19, 0x0, 0x0, 0x0, 0x2f0, 0x1f0, 0x1f0, 0x2f0, 0x1f0, 0x3, 0x0, {[{{@ip={@private, @dev, 0x0, 0x0, 'wlan1\x00', 'wg1\x00'}, 0x0, 0x200, 0x220, 0x0, {0x0, 0xffffffffa0028000}, [@common=@set={{0x40}, {{0x4, [0x4, 0x2, 0xa, 0x6, 0x8, 0x2], 0x2, 0x2}}}, @common=@inet=@hashlimit2={{0x150}, {'veth1\x00', {0x0, 0x8, 0x40, 0x0, 0x0, 0x687c, 0x93}}}]}, @unspec=@TRACE={0x20}}, {{@ip={@empty, @empty, 0x0, 0x0, 'veth0_vlan\x00', 'netpci0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x0, 0x3]}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3e8) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000000)={@empty, @local, 0x0}, &(0x7f0000000040)=0xc) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r9, 0x89f1, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000380)={'syztnl2\x00', r10, 0x700, 0x40, 0x2, 0x5, {{0x35, 0x4, 0x1, 0x1, 0xd4, 0x0, 0x0, 0x3f, 0x4, 0x0, @remote, @loopback, {[@ssrr={0x89, 0x13, 0xe2, [@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @remote]}, @noop, @ra={0x94, 0x4, 0x1}, @generic={0x82, 0x5, "058716"}, @lsrr={0x83, 0x1f, 0xa9, [@rand_addr=0x64010101, @broadcast, @remote, @multicast2, @broadcast, @private=0xa010102, @empty]}, @timestamp_addr={0x44, 0x3c, 0x6d, 0x1, 0xa, [{@local, 0x9}, {@local}, {@local, 0xfffffffd}, {@local, 0x80000000}, {@broadcast, 0x7fff}, {@broadcast, 0x7ff}, {@multicast1, 0x1}]}, @timestamp={0x44, 0xc, 0x34, 0x0, 0x0, [0x5, 0x2]}, @generic={0x83, 0xf, "1ce281af4e35b1745d312aa54b"}, @ssrr={0x89, 0x27, 0x88, [@remote, @multicast1, @empty, @multicast1, @rand_addr=0x64010101, @loopback, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1]}, @generic={0x7, 0x3, '/'}]}}}}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f0000000180)={&(0x7f0000000840)=ANY=[@ANYBLOB="780000005400010026bd7000fbdbdf2507000000", @ANYRESOCT=r8, @ANYBLOB="ed8e0100", @ANYRES32=r10, @ANYBLOB="000201006401010200000000000000000000000086dd000020000100", @ANYRES32, @ANYBLOB="01050300ac1e000100000000000000000000000086dd000020000100", @ANYRES32, @ANYBLOB="010100002001000000000000000000000000000096dd0000"], 0x78}, 0x1, 0x0, 0x0, 0x8840}, 0x4008040) sendmsg$nl_route_sched(r1, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000600)=@newtclass={0x4ac, 0x28, 0x10, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0x5, 0x1d}, {0x0, 0xf}, {0x2, 0xb}}, [@tclass_kind_options, @tclass_kind_options=@c_taprio={0xb}, @tclass_kind_options=@c_netem={0xa}, @tclass_kind_options=@c_mq={0x7}, @tclass_kind_options=@c_netem={0xa}, @tclass_kind_options=@c_multiq={0xb}]}, 0x4ac}, 0x1, 0x0, 0x0, 0x4008180}, 0x40010) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newtfilter={0x6c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x3c, 0x2, [@TCA_BASIC_EMATCHES={0x38, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x2c, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1}, @TCF_EM_META={0x18, 0x2, 0x0, 0x0, {{}, [@TCA_EM_META_HDR={0xc}]}}]}]}]}}]}, 0x6c}}, 0x0) 00:41:26 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000f000000850000007500000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r6, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x41, 0x3, 0x230, 0x0, 0x19, 0x0, 0x0, 0x0, 0x2e8, 0x1f0, 0x1f0, 0x2e8, 0x1f0, 0x3, 0x0, {[{{@ip={@private, @dev, 0x0, 0x0, 'wlan1\x00', 'wg1\x00'}, 0x0, 0xa8, 0xc8, 0x0, {0x0, 0xffffffffa0028000}, [@common=@unspec=@quota={{0x38}}]}, @unspec=@TRACE={0x20}}, {{@ip={@empty, @empty, 0x0, 0x0, 'veth0_vlan\x00', 'netpci0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x290) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000000)={@empty, @local, 0x0}, &(0x7f0000000040)=0xc) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000380)=ANY=[@ANYBLOB="72797a746e6c32000000000010bd084f", @ANYRES32=r7, @ANYBLOB="070000400000000200000005450500d4006700003f049078ac1414bb7f0000018913e2e0000001ac1e0001ffffffffac1414bb01940401008205058716831fa964010101ffffffffac1414bbe0000002ffffffff0a01010200000000443c6da1ac1414aa00000009ac14141c00000000ac1414aafffffffdac1414aa80000000ffffffff00007fffffffffff000007ffe000000100000001440c34000000000500000002830f1ce281af4e35b1745d312aa54b892788ac1414bbe000000100000000e0000001640101017f00000164010100ac1e0001e000000107032f000000"]}) r9 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r9, 0x4000000000000, 0x40, &(0x7f0000000900)=@raw={'raw\x00', 0x41, 0x3, 0x388, 0x0, 0x19, 0x0, 0x0, 0x0, 0x2f0, 0x1f0, 0x1f0, 0x2f0, 0x1f0, 0x3, 0x0, {[{{@ip={@private, @dev, 0x0, 0x0, 'wlan1\x00', 'wg1\x00'}, 0x0, 0x200, 0x220, 0x0, {0x0, 0xffffffffa0028000}, [@common=@set={{0x40}, {{0x4, [0x4, 0x2, 0xa, 0x6, 0x8, 0x2], 0x2, 0x2}}}, @common=@inet=@hashlimit2={{0x150}, {'veth1\x00', {0x0, 0x8, 0x40, 0x0, 0x0, 0x687c, 0x93}}}]}, @unspec=@TRACE={0x20}}, {{@ip={@empty, @empty, 0x0, 0x0, 'veth0_vlan\x00', 'netpci0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x0, 0x3]}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3e8) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000000)={@empty, @local, 0x0}, &(0x7f0000000040)=0xc) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r9, 0x89f1, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000380)={'syztnl2\x00', r10, 0x700, 0x40, 0x2, 0x5, {{0x35, 0x4, 0x1, 0x1, 0xd4, 0x0, 0x0, 0x3f, 0x4, 0x0, @remote, @loopback, {[@ssrr={0x89, 0x13, 0xe2, [@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @remote]}, @noop, @ra={0x94, 0x4, 0x1}, @generic={0x82, 0x5, "058716"}, @lsrr={0x83, 0x1f, 0xa9, [@rand_addr=0x64010101, @broadcast, @remote, @multicast2, @broadcast, @private=0xa010102, @empty]}, @timestamp_addr={0x44, 0x3c, 0x6d, 0x1, 0xa, [{@local, 0x9}, {@local}, {@local, 0xfffffffd}, {@local, 0x80000000}, {@broadcast, 0x7fff}, {@broadcast, 0x7ff}, {@multicast1, 0x1}]}, @timestamp={0x44, 0xc, 0x34, 0x0, 0x0, [0x5, 0x2]}, @generic={0x83, 0xf, "1ce281af4e35b1745d312aa54b"}, @ssrr={0x89, 0x27, 0x88, [@remote, @multicast1, @empty, @multicast1, @rand_addr=0x64010101, @loopback, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1]}, @generic={0x7, 0x3, '/'}]}}}}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f0000000180)={&(0x7f0000000840)=ANY=[@ANYBLOB="780000005400010026bd7000fbdbdf2507000000", @ANYRESOCT=r8, @ANYBLOB="ed8e0100", @ANYRES32=r10, @ANYBLOB="000201006401010200000000000000000000000086dd000020000100", @ANYRES32, @ANYBLOB="01050300ac1e000100000000000000000000000086dd000020000100", @ANYRES32, @ANYBLOB="010100002001000000000000000000000000000096dd0000"], 0x78}, 0x1, 0x0, 0x0, 0x8840}, 0x4008040) sendmsg$nl_route_sched(r1, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000600)=@newtclass={0x4ac, 0x28, 0x10, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0x5, 0x1d}, {0x0, 0xf}, {0x2, 0xb}}, [@tclass_kind_options, @tclass_kind_options=@c_taprio={0xb}, @tclass_kind_options=@c_netem={0xa}, @tclass_kind_options=@c_mq={0x7}, @tclass_kind_options=@c_netem={0xa}, @tclass_kind_options=@c_multiq={0xb}]}, 0x4ac}, 0x1, 0x0, 0x0, 0x4008180}, 0x40010) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newtfilter={0x6c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x3c, 0x2, [@TCA_BASIC_EMATCHES={0x38, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x2c, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1}, @TCF_EM_META={0x18, 0x2, 0x0, 0x0, {{}, [@TCA_EM_META_HDR={0xc}]}}]}]}]}}]}, 0x6c}}, 0x0) [ 2486.682387][T28899] __nla_validate_parse: 6 callbacks suppressed [ 2486.682498][T28899] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2486.712476][T28899] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 00:41:26 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = getpgid(0x0) sendmsg$unix(r0, &(0x7f0000001640)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@cred={{0x1c, 0x1, 0x2, {r1}}}, @cred={{0x1c, 0x1, 0x2, {r1}}}], 0x40}, 0x0) 00:41:27 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000f000000850000007500000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r6, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x41, 0x3, 0x230, 0x0, 0x19, 0x0, 0x0, 0x0, 0x2e8, 0x1f0, 0x1f0, 0x2e8, 0x1f0, 0x3, 0x0, {[{{@ip={@private, @dev, 0x0, 0x0, 'wlan1\x00', 'wg1\x00'}, 0x0, 0xa8, 0xc8, 0x0, {0x0, 0xffffffffa0028000}, [@common=@unspec=@quota={{0x38}}]}, @unspec=@TRACE={0x20}}, {{@ip={@empty, @empty, 0x0, 0x0, 'veth0_vlan\x00', 'netpci0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x290) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000000)={@empty, @local, 0x0}, &(0x7f0000000040)=0xc) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000380)=ANY=[@ANYBLOB="72797a746e6c32000000000010bd084f", @ANYRES32=r7, @ANYBLOB="070000400000000200000005450500d4006700003f049078ac1414bb7f0000018913e2e0000001ac1e0001ffffffffac1414bb01940401008205058716831fa964010101ffffffffac1414bbe0000002ffffffff0a01010200000000443c6da1ac1414aa00000009ac14141c00000000ac1414aafffffffdac1414aa80000000ffffffff00007fffffffffff000007ffe000000100000001440c34000000000500000002830f1ce281af4e35b1745d312aa54b892788ac1414bbe000000100000000e0000001640101017f00000164010100ac1e0001e000000107032f000000"]}) r9 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r9, 0x4000000000000, 0x40, &(0x7f0000000900)=@raw={'raw\x00', 0x41, 0x3, 0x388, 0x0, 0x19, 0x0, 0x0, 0x0, 0x2f0, 0x1f0, 0x1f0, 0x2f0, 0x1f0, 0x3, 0x0, {[{{@ip={@private, @dev, 0x0, 0x0, 'wlan1\x00', 'wg1\x00'}, 0x0, 0x200, 0x220, 0x0, {0x0, 0xffffffffa0028000}, [@common=@set={{0x40}, {{0x4, [0x4, 0x2, 0xa, 0x6, 0x8, 0x2], 0x2, 0x2}}}, @common=@inet=@hashlimit2={{0x150}, {'veth1\x00', {0x0, 0x8, 0x40, 0x0, 0x0, 0x687c, 0x93}}}]}, @unspec=@TRACE={0x20}}, {{@ip={@empty, @empty, 0x0, 0x0, 'veth0_vlan\x00', 'netpci0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x0, 0x3]}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3e8) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000000)={@empty, @local, 0x0}, &(0x7f0000000040)=0xc) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r9, 0x89f1, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000380)={'syztnl2\x00', r10, 0x700, 0x40, 0x2, 0x5, {{0x35, 0x4, 0x1, 0x1, 0xd4, 0x0, 0x0, 0x3f, 0x4, 0x0, @remote, @loopback, {[@ssrr={0x89, 0x13, 0xe2, [@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @remote]}, @noop, @ra={0x94, 0x4, 0x1}, @generic={0x82, 0x5, "058716"}, @lsrr={0x83, 0x1f, 0xa9, [@rand_addr=0x64010101, @broadcast, @remote, @multicast2, @broadcast, @private=0xa010102, @empty]}, @timestamp_addr={0x44, 0x3c, 0x6d, 0x1, 0xa, [{@local, 0x9}, {@local}, {@local, 0xfffffffd}, {@local, 0x80000000}, {@broadcast, 0x7fff}, {@broadcast, 0x7ff}, {@multicast1, 0x1}]}, @timestamp={0x44, 0xc, 0x34, 0x0, 0x0, [0x5, 0x2]}, @generic={0x83, 0xf, "1ce281af4e35b1745d312aa54b"}, @ssrr={0x89, 0x27, 0x88, [@remote, @multicast1, @empty, @multicast1, @rand_addr=0x64010101, @loopback, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1]}, @generic={0x7, 0x3, '/'}]}}}}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f0000000180)={&(0x7f0000000840)=ANY=[@ANYBLOB="780000005400010026bd7000fbdbdf2507000000", @ANYRESOCT=r8, @ANYBLOB="ed8e0100", @ANYRES32=r10, @ANYBLOB="000201006401010200000000000000000000000086dd000020000100", @ANYRES32, @ANYBLOB="01050300ac1e000100000000000000000000000086dd000020000100", @ANYRES32, @ANYBLOB="010100002001000000000000000000000000000096dd0000"], 0x78}, 0x1, 0x0, 0x0, 0x8840}, 0x4008040) sendmsg$nl_route_sched(r1, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000600)=@newtclass={0x4ac, 0x28, 0x10, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0x5, 0x1d}, {0xfff1}, {0x2, 0xb}}, [@tclass_kind_options, @tclass_kind_options=@c_taprio={0xb}, @tclass_kind_options=@c_netem={0xa}, @tclass_kind_options=@c_mq={0x7}, @tclass_kind_options=@c_netem={0xa}, @tclass_kind_options=@c_multiq={0xb}]}, 0x4ac}, 0x1, 0x0, 0x0, 0x4008180}, 0x40010) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newtfilter={0x6c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x3c, 0x2, [@TCA_BASIC_EMATCHES={0x38, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x2c, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1}, @TCF_EM_META={0x18, 0x2, 0x0, 0x0, {{}, [@TCA_EM_META_HDR={0xc}]}}]}]}]}}]}, 0x6c}}, 0x0) [ 2487.283757][T28902] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2487.305865][T28902] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 00:41:27 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000f000000850000007500000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r6, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x41, 0x3, 0x230, 0x0, 0x19, 0x0, 0x0, 0x0, 0x2e8, 0x1f0, 0x1f0, 0x2e8, 0x1f0, 0x3, 0x0, {[{{@ip={@private, @dev, 0x0, 0x0, 'wlan1\x00', 'wg1\x00'}, 0x0, 0xa8, 0xc8, 0x0, {0x0, 0xffffffffa0028000}, [@common=@unspec=@quota={{0x38}}]}, @unspec=@TRACE={0x20}}, {{@ip={@empty, @empty, 0x0, 0x0, 'veth0_vlan\x00', 'netpci0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x290) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000000)={@empty, @local, 0x0}, &(0x7f0000000040)=0xc) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000380)=ANY=[@ANYBLOB="72797a746e6c32000000000010bd084f", @ANYRES32=r7, @ANYBLOB="070000400000000200000005450500d4006700003f049078ac1414bb7f0000018913e2e0000001ac1e0001ffffffffac1414bb01940401008205058716831fa964010101ffffffffac1414bbe0000002ffffffff0a01010200000000443c6da1ac1414aa00000009ac14141c00000000ac1414aafffffffdac1414aa80000000ffffffff00007fffffffffff000007ffe000000100000001440c34000000000500000002830f1ce281af4e35b1745d312aa54b892788ac1414bbe000000100000000e0000001640101017f00000164010100ac1e0001e000000107032f000000"]}) r9 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r9, 0x4000000000000, 0x40, &(0x7f0000000900)=@raw={'raw\x00', 0x41, 0x3, 0x388, 0x0, 0x19, 0x0, 0x0, 0x0, 0x2f0, 0x1f0, 0x1f0, 0x2f0, 0x1f0, 0x3, 0x0, {[{{@ip={@private, @dev, 0x0, 0x0, 'wlan1\x00', 'wg1\x00'}, 0x0, 0x200, 0x220, 0x0, {0x0, 0xffffffffa0028000}, [@common=@set={{0x40}, {{0x4, [0x4, 0x2, 0xa, 0x6, 0x8, 0x2], 0x2, 0x2}}}, @common=@inet=@hashlimit2={{0x150}, {'veth1\x00', {0x0, 0x8, 0x40, 0x0, 0x0, 0x687c, 0x93}}}]}, @unspec=@TRACE={0x20}}, {{@ip={@empty, @empty, 0x0, 0x0, 'veth0_vlan\x00', 'netpci0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x0, 0x3]}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3e8) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000000)={@empty, @local, 0x0}, &(0x7f0000000040)=0xc) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r9, 0x89f1, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000380)={'syztnl2\x00', r10, 0x700, 0x40, 0x2, 0x5, {{0x35, 0x4, 0x1, 0x1, 0xd4, 0x0, 0x0, 0x3f, 0x4, 0x0, @remote, @loopback, {[@ssrr={0x89, 0x13, 0xe2, [@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @remote]}, @noop, @ra={0x94, 0x4, 0x1}, @generic={0x82, 0x5, "058716"}, @lsrr={0x83, 0x1f, 0xa9, [@rand_addr=0x64010101, @broadcast, @remote, @multicast2, @broadcast, @private=0xa010102, @empty]}, @timestamp_addr={0x44, 0x3c, 0x6d, 0x1, 0xa, [{@local, 0x9}, {@local}, {@local, 0xfffffffd}, {@local, 0x80000000}, {@broadcast, 0x7fff}, {@broadcast, 0x7ff}, {@multicast1, 0x1}]}, @timestamp={0x44, 0xc, 0x34, 0x0, 0x0, [0x5, 0x2]}, @generic={0x83, 0xf, "1ce281af4e35b1745d312aa54b"}, @ssrr={0x89, 0x27, 0x88, [@remote, @multicast1, @empty, @multicast1, @rand_addr=0x64010101, @loopback, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1]}, @generic={0x7, 0x3, '/'}]}}}}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f0000000180)={&(0x7f0000000840)=ANY=[@ANYBLOB="780000005400010026bd7000fbdbdf2507000000", @ANYRESOCT=r8, @ANYBLOB="ed8e0100", @ANYRES32=r10, @ANYBLOB="000201006401010200000000000000000000000086dd000020000100", @ANYRES32, @ANYBLOB="01050300ac1e000100000000000000000000000086dd000020000100", @ANYRES32, @ANYBLOB="010100002001000000000000000000000000000096dd0000"], 0x78}, 0x1, 0x0, 0x0, 0x8840}, 0x4008040) sendmsg$nl_route_sched(r1, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000600)=@newtclass={0x4ac, 0x28, 0x10, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0x5, 0x1d}, {0xfff1}, {0x2, 0xb}}, [@tclass_kind_options, @tclass_kind_options=@c_taprio={0xb}, @tclass_kind_options=@c_netem={0xa}, @tclass_kind_options=@c_mq={0x7}, @tclass_kind_options=@c_netem={0xa}, @tclass_kind_options=@c_multiq={0xb}]}, 0x4ac}, 0x1, 0x0, 0x0, 0x4008180}, 0x40010) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newtfilter={0x6c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x3c, 0x2, [@TCA_BASIC_EMATCHES={0x38, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x2c, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1}, @TCF_EM_META={0x18, 0x2, 0x0, 0x0, {{}, [@TCA_EM_META_HDR={0xc}]}}]}]}]}}]}, 0x6c}}, 0x0) [ 2487.906682][T28906] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2487.933158][T28906] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 00:41:28 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000f000000850000007500000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r6, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x41, 0x3, 0x230, 0x0, 0x19, 0x0, 0x0, 0x0, 0x2e8, 0x1f0, 0x1f0, 0x2e8, 0x1f0, 0x3, 0x0, {[{{@ip={@private, @dev, 0x0, 0x0, 'wlan1\x00', 'wg1\x00'}, 0x0, 0xa8, 0xc8, 0x0, {0x0, 0xffffffffa0028000}, [@common=@unspec=@quota={{0x38}}]}, @unspec=@TRACE={0x20}}, {{@ip={@empty, @empty, 0x0, 0x0, 'veth0_vlan\x00', 'netpci0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x290) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000000)={@empty, @local, 0x0}, &(0x7f0000000040)=0xc) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000380)=ANY=[@ANYBLOB="72797a746e6c32000000000010bd084f", @ANYRES32=r7, @ANYBLOB="070000400000000200000005450500d4006700003f049078ac1414bb7f0000018913e2e0000001ac1e0001ffffffffac1414bb01940401008205058716831fa964010101ffffffffac1414bbe0000002ffffffff0a01010200000000443c6da1ac1414aa00000009ac14141c00000000ac1414aafffffffdac1414aa80000000ffffffff00007fffffffffff000007ffe000000100000001440c34000000000500000002830f1ce281af4e35b1745d312aa54b892788ac1414bbe000000100000000e0000001640101017f00000164010100ac1e0001e000000107032f000000"]}) r9 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r9, 0x4000000000000, 0x40, &(0x7f0000000900)=@raw={'raw\x00', 0x41, 0x3, 0x388, 0x0, 0x19, 0x0, 0x0, 0x0, 0x2f0, 0x1f0, 0x1f0, 0x2f0, 0x1f0, 0x3, 0x0, {[{{@ip={@private, @dev, 0x0, 0x0, 'wlan1\x00', 'wg1\x00'}, 0x0, 0x200, 0x220, 0x0, {0x0, 0xffffffffa0028000}, [@common=@set={{0x40}, {{0x4, [0x4, 0x2, 0xa, 0x6, 0x8, 0x2], 0x2, 0x2}}}, @common=@inet=@hashlimit2={{0x150}, {'veth1\x00', {0x0, 0x8, 0x40, 0x0, 0x0, 0x687c, 0x93}}}]}, @unspec=@TRACE={0x20}}, {{@ip={@empty, @empty, 0x0, 0x0, 'veth0_vlan\x00', 'netpci0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x0, 0x3]}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3e8) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000000)={@empty, @local, 0x0}, &(0x7f0000000040)=0xc) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r9, 0x89f1, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000380)={'syztnl2\x00', r10, 0x700, 0x40, 0x2, 0x5, {{0x35, 0x4, 0x1, 0x1, 0xd4, 0x0, 0x0, 0x3f, 0x4, 0x0, @remote, @loopback, {[@ssrr={0x89, 0x13, 0xe2, [@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @remote]}, @noop, @ra={0x94, 0x4, 0x1}, @generic={0x82, 0x5, "058716"}, @lsrr={0x83, 0x1f, 0xa9, [@rand_addr=0x64010101, @broadcast, @remote, @multicast2, @broadcast, @private=0xa010102, @empty]}, @timestamp_addr={0x44, 0x3c, 0x6d, 0x1, 0xa, [{@local, 0x9}, {@local}, {@local, 0xfffffffd}, {@local, 0x80000000}, {@broadcast, 0x7fff}, {@broadcast, 0x7ff}, {@multicast1, 0x1}]}, @timestamp={0x44, 0xc, 0x34, 0x0, 0x0, [0x5, 0x2]}, @generic={0x83, 0xf, "1ce281af4e35b1745d312aa54b"}, @ssrr={0x89, 0x27, 0x88, [@remote, @multicast1, @empty, @multicast1, @rand_addr=0x64010101, @loopback, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1]}, @generic={0x7, 0x3, '/'}]}}}}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f0000000180)={&(0x7f0000000840)=ANY=[@ANYBLOB="780000005400010026bd7000fbdbdf2507000000", @ANYRESOCT=r8, @ANYBLOB="ed8e0100", @ANYRES32=r10, @ANYBLOB="000201006401010200000000000000000000000086dd000020000100", @ANYRES32, @ANYBLOB="01050300ac1e000100000000000000000000000086dd000020000100", @ANYRES32, @ANYBLOB="010100002001000000000000000000000000000096dd0000"], 0x78}, 0x1, 0x0, 0x0, 0x8840}, 0x4008040) sendmsg$nl_route_sched(r1, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000600)=@newtclass={0x4ac, 0x28, 0x10, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0x5, 0x1d}, {0xfff1}, {0x2, 0xb}}, [@tclass_kind_options, @tclass_kind_options=@c_taprio={0xb}, @tclass_kind_options=@c_netem={0xa}, @tclass_kind_options=@c_mq={0x7}, @tclass_kind_options=@c_netem={0xa}, @tclass_kind_options=@c_multiq={0xb}]}, 0x4ac}, 0x1, 0x0, 0x0, 0x4008180}, 0x40010) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newtfilter={0x6c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x3c, 0x2, [@TCA_BASIC_EMATCHES={0x38, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x2c, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1}, @TCF_EM_META={0x18, 0x2, 0x0, 0x0, {{}, [@TCA_EM_META_HDR={0xc}]}}]}]}]}}]}, 0x6c}}, 0x0) 00:41:28 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x28, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void, @val={0xc, 0x99, {0x1, 0x3}}}}}, 0x28}}, 0x0) [ 2488.548107][T28910] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2488.553666][T28910] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 00:41:28 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000f000000850000007500000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r6, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x41, 0x3, 0x230, 0x0, 0x19, 0x0, 0x0, 0x0, 0x2e8, 0x1f0, 0x1f0, 0x2e8, 0x1f0, 0x3, 0x0, {[{{@ip={@private, @dev, 0x0, 0x0, 'wlan1\x00', 'wg1\x00'}, 0x0, 0xa8, 0xc8, 0x0, {0x0, 0xffffffffa0028000}, [@common=@unspec=@quota={{0x38}}]}, @unspec=@TRACE={0x20}}, {{@ip={@empty, @empty, 0x0, 0x0, 'veth0_vlan\x00', 'netpci0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x290) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000000)={@empty, @local, 0x0}, &(0x7f0000000040)=0xc) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000380)=ANY=[@ANYBLOB="72797a746e6c32000000000010bd084f", @ANYRES32=r7, @ANYBLOB="070000400000000200000005450500d4006700003f049078ac1414bb7f0000018913e2e0000001ac1e0001ffffffffac1414bb01940401008205058716831fa964010101ffffffffac1414bbe0000002ffffffff0a01010200000000443c6da1ac1414aa00000009ac14141c00000000ac1414aafffffffdac1414aa80000000ffffffff00007fffffffffff000007ffe000000100000001440c34000000000500000002830f1ce281af4e35b1745d312aa54b892788ac1414bbe000000100000000e0000001640101017f00000164010100ac1e0001e000000107032f000000"]}) r9 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r9, 0x4000000000000, 0x40, &(0x7f0000000900)=@raw={'raw\x00', 0x41, 0x3, 0x388, 0x0, 0x19, 0x0, 0x0, 0x0, 0x2f0, 0x1f0, 0x1f0, 0x2f0, 0x1f0, 0x3, 0x0, {[{{@ip={@private, @dev, 0x0, 0x0, 'wlan1\x00', 'wg1\x00'}, 0x0, 0x200, 0x220, 0x0, {0x0, 0xffffffffa0028000}, [@common=@set={{0x40}, {{0x4, [0x4, 0x2, 0xa, 0x6, 0x8, 0x2], 0x2, 0x2}}}, @common=@inet=@hashlimit2={{0x150}, {'veth1\x00', {0x0, 0x8, 0x40, 0x0, 0x0, 0x687c, 0x93}}}]}, @unspec=@TRACE={0x20}}, {{@ip={@empty, @empty, 0x0, 0x0, 'veth0_vlan\x00', 'netpci0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x0, 0x3]}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3e8) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000000)={@empty, @local, 0x0}, &(0x7f0000000040)=0xc) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r9, 0x89f1, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000380)={'syztnl2\x00', r10, 0x700, 0x40, 0x2, 0x5, {{0x35, 0x4, 0x1, 0x1, 0xd4, 0x0, 0x0, 0x3f, 0x4, 0x0, @remote, @loopback, {[@ssrr={0x89, 0x13, 0xe2, [@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @remote]}, @noop, @ra={0x94, 0x4, 0x1}, @generic={0x82, 0x5, "058716"}, @lsrr={0x83, 0x1f, 0xa9, [@rand_addr=0x64010101, @broadcast, @remote, @multicast2, @broadcast, @private=0xa010102, @empty]}, @timestamp_addr={0x44, 0x3c, 0x6d, 0x1, 0xa, [{@local, 0x9}, {@local}, {@local, 0xfffffffd}, {@local, 0x80000000}, {@broadcast, 0x7fff}, {@broadcast, 0x7ff}, {@multicast1, 0x1}]}, @timestamp={0x44, 0xc, 0x34, 0x0, 0x0, [0x5, 0x2]}, @generic={0x83, 0xf, "1ce281af4e35b1745d312aa54b"}, @ssrr={0x89, 0x27, 0x88, [@remote, @multicast1, @empty, @multicast1, @rand_addr=0x64010101, @loopback, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1]}, @generic={0x7, 0x3, '/'}]}}}}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f0000000180)={&(0x7f0000000840)=ANY=[@ANYBLOB="780000005400010026bd7000fbdbdf2507000000", @ANYRESOCT=r8, @ANYBLOB="ed8e0100", @ANYRES32=r10, @ANYBLOB="000201006401010200000000000000000000000086dd000020000100", @ANYRES32, @ANYBLOB="01050300ac1e000100000000000000000000000086dd000020000100", @ANYRES32, @ANYBLOB="010100002001000000000000000000000000000096dd0000"], 0x78}, 0x1, 0x0, 0x0, 0x8840}, 0x4008040) sendmsg$nl_route_sched(r1, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000600)=@newtclass={0x4ac, 0x28, 0x10, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0x5, 0x1d}, {0xfff1, 0xf}, {0x0, 0xb}}, [@tclass_kind_options, @tclass_kind_options=@c_taprio={0xb}, @tclass_kind_options=@c_netem={0xa}, @tclass_kind_options=@c_mq={0x7}, @tclass_kind_options=@c_netem={0xa}, @tclass_kind_options=@c_multiq={0xb}]}, 0x4ac}, 0x1, 0x0, 0x0, 0x4008180}, 0x40010) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newtfilter={0x6c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x3c, 0x2, [@TCA_BASIC_EMATCHES={0x38, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x2c, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1}, @TCF_EM_META={0x18, 0x2, 0x0, 0x0, {{}, [@TCA_EM_META_HDR={0xc}]}}]}]}]}}]}, 0x6c}}, 0x0) [ 2488.885868][T28913] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2488.889400][T28913] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 00:41:29 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000f000000850000007500000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r6, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x41, 0x3, 0x230, 0x0, 0x19, 0x0, 0x0, 0x0, 0x2e8, 0x1f0, 0x1f0, 0x2e8, 0x1f0, 0x3, 0x0, {[{{@ip={@private, @dev, 0x0, 0x0, 'wlan1\x00', 'wg1\x00'}, 0x0, 0xa8, 0xc8, 0x0, {0x0, 0xffffffffa0028000}, [@common=@unspec=@quota={{0x38}}]}, @unspec=@TRACE={0x20}}, {{@ip={@empty, @empty, 0x0, 0x0, 'veth0_vlan\x00', 'netpci0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x290) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000000)={@empty, @local, 0x0}, &(0x7f0000000040)=0xc) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000380)=ANY=[@ANYBLOB="72797a746e6c32000000000010bd084f", @ANYRES32=r7, @ANYBLOB="070000400000000200000005450500d4006700003f049078ac1414bb7f0000018913e2e0000001ac1e0001ffffffffac1414bb01940401008205058716831fa964010101ffffffffac1414bbe0000002ffffffff0a01010200000000443c6da1ac1414aa00000009ac14141c00000000ac1414aafffffffdac1414aa80000000ffffffff00007fffffffffff000007ffe000000100000001440c34000000000500000002830f1ce281af4e35b1745d312aa54b892788ac1414bbe000000100000000e0000001640101017f00000164010100ac1e0001e000000107032f000000"]}) r9 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r9, 0x4000000000000, 0x40, &(0x7f0000000900)=@raw={'raw\x00', 0x41, 0x3, 0x388, 0x0, 0x19, 0x0, 0x0, 0x0, 0x2f0, 0x1f0, 0x1f0, 0x2f0, 0x1f0, 0x3, 0x0, {[{{@ip={@private, @dev, 0x0, 0x0, 'wlan1\x00', 'wg1\x00'}, 0x0, 0x200, 0x220, 0x0, {0x0, 0xffffffffa0028000}, [@common=@set={{0x40}, {{0x4, [0x4, 0x2, 0xa, 0x6, 0x8, 0x2], 0x2, 0x2}}}, @common=@inet=@hashlimit2={{0x150}, {'veth1\x00', {0x0, 0x8, 0x40, 0x0, 0x0, 0x687c, 0x93}}}]}, @unspec=@TRACE={0x20}}, {{@ip={@empty, @empty, 0x0, 0x0, 'veth0_vlan\x00', 'netpci0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x0, 0x3]}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3e8) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000000)={@empty, @local, 0x0}, &(0x7f0000000040)=0xc) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r9, 0x89f1, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000380)={'syztnl2\x00', r10, 0x700, 0x40, 0x2, 0x5, {{0x35, 0x4, 0x1, 0x1, 0xd4, 0x0, 0x0, 0x3f, 0x4, 0x0, @remote, @loopback, {[@ssrr={0x89, 0x13, 0xe2, [@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @remote]}, @noop, @ra={0x94, 0x4, 0x1}, @generic={0x82, 0x5, "058716"}, @lsrr={0x83, 0x1f, 0xa9, [@rand_addr=0x64010101, @broadcast, @remote, @multicast2, @broadcast, @private=0xa010102, @empty]}, @timestamp_addr={0x44, 0x3c, 0x6d, 0x1, 0xa, [{@local, 0x9}, {@local}, {@local, 0xfffffffd}, {@local, 0x80000000}, {@broadcast, 0x7fff}, {@broadcast, 0x7ff}, {@multicast1, 0x1}]}, @timestamp={0x44, 0xc, 0x34, 0x0, 0x0, [0x5, 0x2]}, @generic={0x83, 0xf, "1ce281af4e35b1745d312aa54b"}, @ssrr={0x89, 0x27, 0x88, [@remote, @multicast1, @empty, @multicast1, @rand_addr=0x64010101, @loopback, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1]}, @generic={0x7, 0x3, '/'}]}}}}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f0000000180)={&(0x7f0000000840)=ANY=[@ANYBLOB="780000005400010026bd7000fbdbdf2507000000", @ANYRESOCT=r8, @ANYBLOB="ed8e0100", @ANYRES32=r10, @ANYBLOB="000201006401010200000000000000000000000086dd000020000100", @ANYRES32, @ANYBLOB="01050300ac1e000100000000000000000000000086dd000020000100", @ANYRES32, @ANYBLOB="010100002001000000000000000000000000000096dd0000"], 0x78}, 0x1, 0x0, 0x0, 0x8840}, 0x4008040) sendmsg$nl_route_sched(r1, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000600)=@newtclass={0x4ac, 0x28, 0x10, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0x5, 0x1d}, {0xfff1, 0xf}, {0x0, 0xb}}, [@tclass_kind_options, @tclass_kind_options=@c_taprio={0xb}, @tclass_kind_options=@c_netem={0xa}, @tclass_kind_options=@c_mq={0x7}, @tclass_kind_options=@c_netem={0xa}, @tclass_kind_options=@c_multiq={0xb}]}, 0x4ac}, 0x1, 0x0, 0x0, 0x4008180}, 0x40010) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newtfilter={0x6c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x3c, 0x2, [@TCA_BASIC_EMATCHES={0x38, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x2c, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1}, @TCF_EM_META={0x18, 0x2, 0x0, 0x0, {{}, [@TCA_EM_META_HDR={0xc}]}}]}]}]}}]}, 0x6c}}, 0x0) 00:41:29 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000f000000850000007500000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r6, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x41, 0x3, 0x230, 0x0, 0x19, 0x0, 0x0, 0x0, 0x2e8, 0x1f0, 0x1f0, 0x2e8, 0x1f0, 0x3, 0x0, {[{{@ip={@private, @dev, 0x0, 0x0, 'wlan1\x00', 'wg1\x00'}, 0x0, 0xa8, 0xc8, 0x0, {0x0, 0xffffffffa0028000}, [@common=@unspec=@quota={{0x38}}]}, @unspec=@TRACE={0x20}}, {{@ip={@empty, @empty, 0x0, 0x0, 'veth0_vlan\x00', 'netpci0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x290) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000000)={@empty, @local, 0x0}, &(0x7f0000000040)=0xc) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000380)=ANY=[@ANYBLOB="72797a746e6c32000000000010bd084f", @ANYRES32=r7, @ANYBLOB="070000400000000200000005450500d4006700003f049078ac1414bb7f0000018913e2e0000001ac1e0001ffffffffac1414bb01940401008205058716831fa964010101ffffffffac1414bbe0000002ffffffff0a01010200000000443c6da1ac1414aa00000009ac14141c00000000ac1414aafffffffdac1414aa80000000ffffffff00007fffffffffff000007ffe000000100000001440c34000000000500000002830f1ce281af4e35b1745d312aa54b892788ac1414bbe000000100000000e0000001640101017f00000164010100ac1e0001e000000107032f000000"]}) r9 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r9, 0x4000000000000, 0x40, &(0x7f0000000900)=@raw={'raw\x00', 0x41, 0x3, 0x388, 0x0, 0x19, 0x0, 0x0, 0x0, 0x2f0, 0x1f0, 0x1f0, 0x2f0, 0x1f0, 0x3, 0x0, {[{{@ip={@private, @dev, 0x0, 0x0, 'wlan1\x00', 'wg1\x00'}, 0x0, 0x200, 0x220, 0x0, {0x0, 0xffffffffa0028000}, [@common=@set={{0x40}, {{0x4, [0x4, 0x2, 0xa, 0x6, 0x8, 0x2], 0x2, 0x2}}}, @common=@inet=@hashlimit2={{0x150}, {'veth1\x00', {0x0, 0x8, 0x40, 0x0, 0x0, 0x687c, 0x93}}}]}, @unspec=@TRACE={0x20}}, {{@ip={@empty, @empty, 0x0, 0x0, 'veth0_vlan\x00', 'netpci0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x0, 0x3]}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3e8) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000000)={@empty, @local, 0x0}, &(0x7f0000000040)=0xc) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r9, 0x89f1, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000380)={'syztnl2\x00', r10, 0x700, 0x40, 0x2, 0x5, {{0x35, 0x4, 0x1, 0x1, 0xd4, 0x0, 0x0, 0x3f, 0x4, 0x0, @remote, @loopback, {[@ssrr={0x89, 0x13, 0xe2, [@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @remote]}, @noop, @ra={0x94, 0x4, 0x1}, @generic={0x82, 0x5, "058716"}, @lsrr={0x83, 0x1f, 0xa9, [@rand_addr=0x64010101, @broadcast, @remote, @multicast2, @broadcast, @private=0xa010102, @empty]}, @timestamp_addr={0x44, 0x3c, 0x6d, 0x1, 0xa, [{@local, 0x9}, {@local}, {@local, 0xfffffffd}, {@local, 0x80000000}, {@broadcast, 0x7fff}, {@broadcast, 0x7ff}, {@multicast1, 0x1}]}, @timestamp={0x44, 0xc, 0x34, 0x0, 0x0, [0x5, 0x2]}, @generic={0x83, 0xf, "1ce281af4e35b1745d312aa54b"}, @ssrr={0x89, 0x27, 0x88, [@remote, @multicast1, @empty, @multicast1, @rand_addr=0x64010101, @loopback, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1]}, @generic={0x7, 0x3, '/'}]}}}}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f0000000180)={&(0x7f0000000840)=ANY=[@ANYBLOB="780000005400010026bd7000fbdbdf2507000000", @ANYRESOCT=r8, @ANYBLOB="ed8e0100", @ANYRES32=r10, @ANYBLOB="000201006401010200000000000000000000000086dd000020000100", @ANYRES32, @ANYBLOB="01050300ac1e000100000000000000000000000086dd000020000100", @ANYRES32, @ANYBLOB="010100002001000000000000000000000000000096dd0000"], 0x78}, 0x1, 0x0, 0x0, 0x8840}, 0x4008040) sendmsg$nl_route_sched(r1, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000600)=@newtclass={0x4ac, 0x28, 0x10, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0x5, 0x1d}, {0xfff1, 0xf}, {0x0, 0xb}}, [@tclass_kind_options, @tclass_kind_options=@c_taprio={0xb}, @tclass_kind_options=@c_netem={0xa}, @tclass_kind_options=@c_mq={0x7}, @tclass_kind_options=@c_netem={0xa}, @tclass_kind_options=@c_multiq={0xb}]}, 0x4ac}, 0x1, 0x0, 0x0, 0x4008180}, 0x40010) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newtfilter={0x6c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x3c, 0x2, [@TCA_BASIC_EMATCHES={0x38, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x2c, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1}, @TCF_EM_META={0x18, 0x2, 0x0, 0x0, {{}, [@TCA_EM_META_HDR={0xc}]}}]}]}]}}]}, 0x6c}}, 0x0) 00:41:29 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af25, &(0x7f0000000080)={@local}) 00:41:30 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000f000000850000007500000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r6, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x41, 0x3, 0x230, 0x0, 0x19, 0x0, 0x0, 0x0, 0x2e8, 0x1f0, 0x1f0, 0x2e8, 0x1f0, 0x3, 0x0, {[{{@ip={@private, @dev, 0x0, 0x0, 'wlan1\x00', 'wg1\x00'}, 0x0, 0xa8, 0xc8, 0x0, {0x0, 0xffffffffa0028000}, [@common=@unspec=@quota={{0x38}}]}, @unspec=@TRACE={0x20}}, {{@ip={@empty, @empty, 0x0, 0x0, 'veth0_vlan\x00', 'netpci0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x290) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000000)={@empty, @local, 0x0}, &(0x7f0000000040)=0xc) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000380)=ANY=[@ANYBLOB="72797a746e6c32000000000010bd084f", @ANYRES32=r7, @ANYBLOB="070000400000000200000005450500d4006700003f049078ac1414bb7f0000018913e2e0000001ac1e0001ffffffffac1414bb01940401008205058716831fa964010101ffffffffac1414bbe0000002ffffffff0a01010200000000443c6da1ac1414aa00000009ac14141c00000000ac1414aafffffffdac1414aa80000000ffffffff00007fffffffffff000007ffe000000100000001440c34000000000500000002830f1ce281af4e35b1745d312aa54b892788ac1414bbe000000100000000e0000001640101017f00000164010100ac1e0001e000000107032f000000"]}) r9 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r9, 0x4000000000000, 0x40, &(0x7f0000000900)=@raw={'raw\x00', 0x41, 0x3, 0x388, 0x0, 0x19, 0x0, 0x0, 0x0, 0x2f0, 0x1f0, 0x1f0, 0x2f0, 0x1f0, 0x3, 0x0, {[{{@ip={@private, @dev, 0x0, 0x0, 'wlan1\x00', 'wg1\x00'}, 0x0, 0x200, 0x220, 0x0, {0x0, 0xffffffffa0028000}, [@common=@set={{0x40}, {{0x4, [0x4, 0x2, 0xa, 0x6, 0x8, 0x2], 0x2, 0x2}}}, @common=@inet=@hashlimit2={{0x150}, {'veth1\x00', {0x0, 0x8, 0x40, 0x0, 0x0, 0x687c, 0x93}}}]}, @unspec=@TRACE={0x20}}, {{@ip={@empty, @empty, 0x0, 0x0, 'veth0_vlan\x00', 'netpci0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x0, 0x3]}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3e8) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000000)={@empty, @local, 0x0}, &(0x7f0000000040)=0xc) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r9, 0x89f1, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000380)={'syztnl2\x00', r10, 0x700, 0x40, 0x2, 0x5, {{0x35, 0x4, 0x1, 0x1, 0xd4, 0x0, 0x0, 0x3f, 0x4, 0x0, @remote, @loopback, {[@ssrr={0x89, 0x13, 0xe2, [@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @remote]}, @noop, @ra={0x94, 0x4, 0x1}, @generic={0x82, 0x5, "058716"}, @lsrr={0x83, 0x1f, 0xa9, [@rand_addr=0x64010101, @broadcast, @remote, @multicast2, @broadcast, @private=0xa010102, @empty]}, @timestamp_addr={0x44, 0x3c, 0x6d, 0x1, 0xa, [{@local, 0x9}, {@local}, {@local, 0xfffffffd}, {@local, 0x80000000}, {@broadcast, 0x7fff}, {@broadcast, 0x7ff}, {@multicast1, 0x1}]}, @timestamp={0x44, 0xc, 0x34, 0x0, 0x0, [0x5, 0x2]}, @generic={0x83, 0xf, "1ce281af4e35b1745d312aa54b"}, @ssrr={0x89, 0x27, 0x88, [@remote, @multicast1, @empty, @multicast1, @rand_addr=0x64010101, @loopback, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1]}, @generic={0x7, 0x3, '/'}]}}}}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f0000000180)={&(0x7f0000000840)=ANY=[@ANYBLOB="780000005400010026bd7000fbdbdf2507000000", @ANYRESOCT=r8, @ANYBLOB="ed8e0100", @ANYRES32=r10, @ANYBLOB="000201006401010200000000000000000000000086dd000020000100", @ANYRES32, @ANYBLOB="01050300ac1e000100000000000000000000000086dd000020000100", @ANYRES32, @ANYBLOB="010100002001000000000000000000000000000096dd0000"], 0x78}, 0x1, 0x0, 0x0, 0x8840}, 0x4008040) sendmsg$nl_route_sched(r1, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000600)=@newtclass={0x4ac, 0x28, 0x10, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0x5, 0x1d}, {0xfff1, 0xf}, {0x2}}, [@tclass_kind_options, @tclass_kind_options=@c_taprio={0xb}, @tclass_kind_options=@c_netem={0xa}, @tclass_kind_options=@c_mq={0x7}, @tclass_kind_options=@c_netem={0xa}, @tclass_kind_options=@c_multiq={0xb}]}, 0x4ac}, 0x1, 0x0, 0x0, 0x4008180}, 0x40010) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newtfilter={0x6c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x3c, 0x2, [@TCA_BASIC_EMATCHES={0x38, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x2c, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1}, @TCF_EM_META={0x18, 0x2, 0x0, 0x0, {{}, [@TCA_EM_META_HDR={0xc}]}}]}]}]}}]}, 0x6c}}, 0x0) 00:41:30 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000f000000850000007500000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r6, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x41, 0x3, 0x230, 0x0, 0x19, 0x0, 0x0, 0x0, 0x2e8, 0x1f0, 0x1f0, 0x2e8, 0x1f0, 0x3, 0x0, {[{{@ip={@private, @dev, 0x0, 0x0, 'wlan1\x00', 'wg1\x00'}, 0x0, 0xa8, 0xc8, 0x0, {0x0, 0xffffffffa0028000}, [@common=@unspec=@quota={{0x38}}]}, @unspec=@TRACE={0x20}}, {{@ip={@empty, @empty, 0x0, 0x0, 'veth0_vlan\x00', 'netpci0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x290) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000000)={@empty, @local, 0x0}, &(0x7f0000000040)=0xc) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000380)=ANY=[@ANYBLOB="72797a746e6c32000000000010bd084f", @ANYRES32=r7, @ANYBLOB="070000400000000200000005450500d4006700003f049078ac1414bb7f0000018913e2e0000001ac1e0001ffffffffac1414bb01940401008205058716831fa964010101ffffffffac1414bbe0000002ffffffff0a01010200000000443c6da1ac1414aa00000009ac14141c00000000ac1414aafffffffdac1414aa80000000ffffffff00007fffffffffff000007ffe000000100000001440c34000000000500000002830f1ce281af4e35b1745d312aa54b892788ac1414bbe000000100000000e0000001640101017f00000164010100ac1e0001e000000107032f000000"]}) r9 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r9, 0x4000000000000, 0x40, &(0x7f0000000900)=@raw={'raw\x00', 0x41, 0x3, 0x388, 0x0, 0x19, 0x0, 0x0, 0x0, 0x2f0, 0x1f0, 0x1f0, 0x2f0, 0x1f0, 0x3, 0x0, {[{{@ip={@private, @dev, 0x0, 0x0, 'wlan1\x00', 'wg1\x00'}, 0x0, 0x200, 0x220, 0x0, {0x0, 0xffffffffa0028000}, [@common=@set={{0x40}, {{0x4, [0x4, 0x2, 0xa, 0x6, 0x8, 0x2], 0x2, 0x2}}}, @common=@inet=@hashlimit2={{0x150}, {'veth1\x00', {0x0, 0x8, 0x40, 0x0, 0x0, 0x687c, 0x93}}}]}, @unspec=@TRACE={0x20}}, {{@ip={@empty, @empty, 0x0, 0x0, 'veth0_vlan\x00', 'netpci0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x0, 0x3]}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3e8) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000000)={@empty, @local, 0x0}, &(0x7f0000000040)=0xc) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r9, 0x89f1, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000380)={'syztnl2\x00', r10, 0x700, 0x40, 0x2, 0x5, {{0x35, 0x4, 0x1, 0x1, 0xd4, 0x0, 0x0, 0x3f, 0x4, 0x0, @remote, @loopback, {[@ssrr={0x89, 0x13, 0xe2, [@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @remote]}, @noop, @ra={0x94, 0x4, 0x1}, @generic={0x82, 0x5, "058716"}, @lsrr={0x83, 0x1f, 0xa9, [@rand_addr=0x64010101, @broadcast, @remote, @multicast2, @broadcast, @private=0xa010102, @empty]}, @timestamp_addr={0x44, 0x3c, 0x6d, 0x1, 0xa, [{@local, 0x9}, {@local}, {@local, 0xfffffffd}, {@local, 0x80000000}, {@broadcast, 0x7fff}, {@broadcast, 0x7ff}, {@multicast1, 0x1}]}, @timestamp={0x44, 0xc, 0x34, 0x0, 0x0, [0x5, 0x2]}, @generic={0x83, 0xf, "1ce281af4e35b1745d312aa54b"}, @ssrr={0x89, 0x27, 0x88, [@remote, @multicast1, @empty, @multicast1, @rand_addr=0x64010101, @loopback, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1]}, @generic={0x7, 0x3, '/'}]}}}}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f0000000180)={&(0x7f0000000840)=ANY=[@ANYBLOB="780000005400010026bd7000fbdbdf2507000000", @ANYRESOCT=r8, @ANYBLOB="ed8e0100", @ANYRES32=r10, @ANYBLOB="000201006401010200000000000000000000000086dd000020000100", @ANYRES32, @ANYBLOB="01050300ac1e000100000000000000000000000086dd000020000100", @ANYRES32, @ANYBLOB="010100002001000000000000000000000000000096dd0000"], 0x78}, 0x1, 0x0, 0x0, 0x8840}, 0x4008040) sendmsg$nl_route_sched(r1, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000600)=@newtclass={0x4ac, 0x28, 0x10, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0x5, 0x1d}, {0xfff1, 0xf}, {0x2}}, [@tclass_kind_options, @tclass_kind_options=@c_taprio={0xb}, @tclass_kind_options=@c_netem={0xa}, @tclass_kind_options=@c_mq={0x7}, @tclass_kind_options=@c_netem={0xa}, @tclass_kind_options=@c_multiq={0xb}]}, 0x4ac}, 0x1, 0x0, 0x0, 0x4008180}, 0x40010) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newtfilter={0x6c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x3c, 0x2, [@TCA_BASIC_EMATCHES={0x38, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x2c, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1}, @TCF_EM_META={0x18, 0x2, 0x0, 0x0, {{}, [@TCA_EM_META_HDR={0xc}]}}]}]}]}}]}, 0x6c}}, 0x0) 00:41:31 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv4_newrule={0x1c, 0x20, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0xfd}}, 0x1c}}, 0x0) 00:41:31 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000f000000850000007500000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r6, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x41, 0x3, 0x230, 0x0, 0x19, 0x0, 0x0, 0x0, 0x2e8, 0x1f0, 0x1f0, 0x2e8, 0x1f0, 0x3, 0x0, {[{{@ip={@private, @dev, 0x0, 0x0, 'wlan1\x00', 'wg1\x00'}, 0x0, 0xa8, 0xc8, 0x0, {0x0, 0xffffffffa0028000}, [@common=@unspec=@quota={{0x38}}]}, @unspec=@TRACE={0x20}}, {{@ip={@empty, @empty, 0x0, 0x0, 'veth0_vlan\x00', 'netpci0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x290) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000000)={@empty, @local, 0x0}, &(0x7f0000000040)=0xc) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000380)=ANY=[@ANYBLOB="72797a746e6c32000000000010bd084f", @ANYRES32=r7, @ANYBLOB="070000400000000200000005450500d4006700003f049078ac1414bb7f0000018913e2e0000001ac1e0001ffffffffac1414bb01940401008205058716831fa964010101ffffffffac1414bbe0000002ffffffff0a01010200000000443c6da1ac1414aa00000009ac14141c00000000ac1414aafffffffdac1414aa80000000ffffffff00007fffffffffff000007ffe000000100000001440c34000000000500000002830f1ce281af4e35b1745d312aa54b892788ac1414bbe000000100000000e0000001640101017f00000164010100ac1e0001e000000107032f000000"]}) r9 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r9, 0x4000000000000, 0x40, &(0x7f0000000900)=@raw={'raw\x00', 0x41, 0x3, 0x388, 0x0, 0x19, 0x0, 0x0, 0x0, 0x2f0, 0x1f0, 0x1f0, 0x2f0, 0x1f0, 0x3, 0x0, {[{{@ip={@private, @dev, 0x0, 0x0, 'wlan1\x00', 'wg1\x00'}, 0x0, 0x200, 0x220, 0x0, {0x0, 0xffffffffa0028000}, [@common=@set={{0x40}, {{0x4, [0x4, 0x2, 0xa, 0x6, 0x8, 0x2], 0x2, 0x2}}}, @common=@inet=@hashlimit2={{0x150}, {'veth1\x00', {0x0, 0x8, 0x40, 0x0, 0x0, 0x687c, 0x93}}}]}, @unspec=@TRACE={0x20}}, {{@ip={@empty, @empty, 0x0, 0x0, 'veth0_vlan\x00', 'netpci0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x0, 0x3]}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3e8) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000000)={@empty, @local, 0x0}, &(0x7f0000000040)=0xc) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r9, 0x89f1, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000380)={'syztnl2\x00', r10, 0x700, 0x40, 0x2, 0x5, {{0x35, 0x4, 0x1, 0x1, 0xd4, 0x0, 0x0, 0x3f, 0x4, 0x0, @remote, @loopback, {[@ssrr={0x89, 0x13, 0xe2, [@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @remote]}, @noop, @ra={0x94, 0x4, 0x1}, @generic={0x82, 0x5, "058716"}, @lsrr={0x83, 0x1f, 0xa9, [@rand_addr=0x64010101, @broadcast, @remote, @multicast2, @broadcast, @private=0xa010102, @empty]}, @timestamp_addr={0x44, 0x3c, 0x6d, 0x1, 0xa, [{@local, 0x9}, {@local}, {@local, 0xfffffffd}, {@local, 0x80000000}, {@broadcast, 0x7fff}, {@broadcast, 0x7ff}, {@multicast1, 0x1}]}, @timestamp={0x44, 0xc, 0x34, 0x0, 0x0, [0x5, 0x2]}, @generic={0x83, 0xf, "1ce281af4e35b1745d312aa54b"}, @ssrr={0x89, 0x27, 0x88, [@remote, @multicast1, @empty, @multicast1, @rand_addr=0x64010101, @loopback, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1]}, @generic={0x7, 0x3, '/'}]}}}}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f0000000180)={&(0x7f0000000840)=ANY=[@ANYBLOB="780000005400010026bd7000fbdbdf2507000000", @ANYRESOCT=r8, @ANYBLOB="ed8e0100", @ANYRES32=r10, @ANYBLOB="000201006401010200000000000000000000000086dd000020000100", @ANYRES32, @ANYBLOB="01050300ac1e000100000000000000000000000086dd000020000100", @ANYRES32, @ANYBLOB="010100002001000000000000000000000000000096dd0000"], 0x78}, 0x1, 0x0, 0x0, 0x8840}, 0x4008040) sendmsg$nl_route_sched(r1, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000600)=@newtclass={0x4ac, 0x28, 0x10, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0x5, 0x1d}, {0xfff1, 0xf}, {0x2}}, [@tclass_kind_options, @tclass_kind_options=@c_taprio={0xb}, @tclass_kind_options=@c_netem={0xa}, @tclass_kind_options=@c_mq={0x7}, @tclass_kind_options=@c_netem={0xa}, @tclass_kind_options=@c_multiq={0xb}]}, 0x4ac}, 0x1, 0x0, 0x0, 0x4008180}, 0x40010) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newtfilter={0x6c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x3c, 0x2, [@TCA_BASIC_EMATCHES={0x38, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x2c, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1}, @TCF_EM_META={0x18, 0x2, 0x0, 0x0, {{}, [@TCA_EM_META_HDR={0xc}]}}]}]}]}}]}, 0x6c}}, 0x0) 00:41:31 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000f000000850000007500000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r6, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x41, 0x3, 0x230, 0x0, 0x19, 0x0, 0x0, 0x0, 0x2e8, 0x1f0, 0x1f0, 0x2e8, 0x1f0, 0x3, 0x0, {[{{@ip={@private, @dev, 0x0, 0x0, 'wlan1\x00', 'wg1\x00'}, 0x0, 0xa8, 0xc8, 0x0, {0x0, 0xffffffffa0028000}, [@common=@unspec=@quota={{0x38}}]}, @unspec=@TRACE={0x20}}, {{@ip={@empty, @empty, 0x0, 0x0, 'veth0_vlan\x00', 'netpci0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x290) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000000)={@empty, @local, 0x0}, &(0x7f0000000040)=0xc) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000380)=ANY=[@ANYBLOB="72797a746e6c32000000000010bd084f", @ANYRES32=r7, @ANYBLOB="070000400000000200000005450500d4006700003f049078ac1414bb7f0000018913e2e0000001ac1e0001ffffffffac1414bb01940401008205058716831fa964010101ffffffffac1414bbe0000002ffffffff0a01010200000000443c6da1ac1414aa00000009ac14141c00000000ac1414aafffffffdac1414aa80000000ffffffff00007fffffffffff000007ffe000000100000001440c34000000000500000002830f1ce281af4e35b1745d312aa54b892788ac1414bbe000000100000000e0000001640101017f00000164010100ac1e0001e000000107032f000000"]}) r9 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r9, 0x4000000000000, 0x40, &(0x7f0000000900)=@raw={'raw\x00', 0x41, 0x3, 0x388, 0x0, 0x19, 0x0, 0x0, 0x0, 0x2f0, 0x1f0, 0x1f0, 0x2f0, 0x1f0, 0x3, 0x0, {[{{@ip={@private, @dev, 0x0, 0x0, 'wlan1\x00', 'wg1\x00'}, 0x0, 0x200, 0x220, 0x0, {0x0, 0xffffffffa0028000}, [@common=@set={{0x40}, {{0x4, [0x4, 0x2, 0xa, 0x6, 0x8, 0x2], 0x2, 0x2}}}, @common=@inet=@hashlimit2={{0x150}, {'veth1\x00', {0x0, 0x8, 0x40, 0x0, 0x0, 0x687c, 0x93}}}]}, @unspec=@TRACE={0x20}}, {{@ip={@empty, @empty, 0x0, 0x0, 'veth0_vlan\x00', 'netpci0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x0, 0x3]}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3e8) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000000)={@empty, @local, 0x0}, &(0x7f0000000040)=0xc) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r9, 0x89f1, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000380)={'syztnl2\x00', r10, 0x700, 0x40, 0x2, 0x5, {{0x35, 0x4, 0x1, 0x1, 0xd4, 0x0, 0x0, 0x3f, 0x4, 0x0, @remote, @loopback, {[@ssrr={0x89, 0x13, 0xe2, [@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @remote]}, @noop, @ra={0x94, 0x4, 0x1}, @generic={0x82, 0x5, "058716"}, @lsrr={0x83, 0x1f, 0xa9, [@rand_addr=0x64010101, @broadcast, @remote, @multicast2, @broadcast, @private=0xa010102, @empty]}, @timestamp_addr={0x44, 0x3c, 0x6d, 0x1, 0xa, [{@local, 0x9}, {@local}, {@local, 0xfffffffd}, {@local, 0x80000000}, {@broadcast, 0x7fff}, {@broadcast, 0x7ff}, {@multicast1, 0x1}]}, @timestamp={0x44, 0xc, 0x34, 0x0, 0x0, [0x5, 0x2]}, @generic={0x83, 0xf, "1ce281af4e35b1745d312aa54b"}, @ssrr={0x89, 0x27, 0x88, [@remote, @multicast1, @empty, @multicast1, @rand_addr=0x64010101, @loopback, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1]}, @generic={0x7, 0x3, '/'}]}}}}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f0000000180)={&(0x7f0000000840)=ANY=[@ANYBLOB="780000005400010026bd7000fbdbdf2507000000", @ANYRESOCT=r8, @ANYBLOB="ed8e0100", @ANYRES32=r10, @ANYBLOB="000201006401010200000000000000000000000086dd000020000100", @ANYRES32, @ANYBLOB="01050300ac1e000100000000000000000000000086dd000020000100", @ANYRES32, @ANYBLOB="010100002001000000000000000000000000000096dd0000"], 0x78}, 0x1, 0x0, 0x0, 0x8840}, 0x4008040) sendmsg$nl_route_sched(r1, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000600)=@newtclass={0x64, 0x28, 0x10, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0x5, 0x1d}, {0xfff1, 0xf}, {0x2, 0xb}}, [@tclass_kind_options=@c_drr={{0x8}, {0xc, 0x2, @TCA_DRR_QUANTUM={0x8}}}, @tclass_kind_options=@c_taprio={0xb}, @tclass_kind_options=@c_netem={0xa}, @tclass_kind_options=@c_mq={0x7}, @tclass_kind_options=@c_netem={0xa}]}, 0x64}, 0x1, 0x0, 0x0, 0x4008180}, 0x40010) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newtfilter={0x6c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x3c, 0x2, [@TCA_BASIC_EMATCHES={0x38, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x2c, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1}, @TCF_EM_META={0x18, 0x2, 0x0, 0x0, {{}, [@TCA_EM_META_HDR={0xc}]}}]}]}]}}]}, 0x6c}}, 0x0) [ 2492.117923][T28938] __nla_validate_parse: 10 callbacks suppressed [ 2492.118020][T28938] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2492.243602][T28938] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 00:41:32 executing program 1: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000500), 0x0, 0x0) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) 00:41:32 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000f000000850000007500000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r6, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x41, 0x3, 0x230, 0x0, 0x19, 0x0, 0x0, 0x0, 0x2e8, 0x1f0, 0x1f0, 0x2e8, 0x1f0, 0x3, 0x0, {[{{@ip={@private, @dev, 0x0, 0x0, 'wlan1\x00', 'wg1\x00'}, 0x0, 0xa8, 0xc8, 0x0, {0x0, 0xffffffffa0028000}, [@common=@unspec=@quota={{0x38}}]}, @unspec=@TRACE={0x20}}, {{@ip={@empty, @empty, 0x0, 0x0, 'veth0_vlan\x00', 'netpci0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x290) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000000)={@empty, @local, 0x0}, &(0x7f0000000040)=0xc) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000380)=ANY=[@ANYBLOB="72797a746e6c32000000000010bd084f", @ANYRES32=r7, @ANYBLOB="070000400000000200000005450500d4006700003f049078ac1414bb7f0000018913e2e0000001ac1e0001ffffffffac1414bb01940401008205058716831fa964010101ffffffffac1414bbe0000002ffffffff0a01010200000000443c6da1ac1414aa00000009ac14141c00000000ac1414aafffffffdac1414aa80000000ffffffff00007fffffffffff000007ffe000000100000001440c34000000000500000002830f1ce281af4e35b1745d312aa54b892788ac1414bbe000000100000000e0000001640101017f00000164010100ac1e0001e000000107032f000000"]}) r9 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r9, 0x4000000000000, 0x40, &(0x7f0000000900)=@raw={'raw\x00', 0x41, 0x3, 0x388, 0x0, 0x19, 0x0, 0x0, 0x0, 0x2f0, 0x1f0, 0x1f0, 0x2f0, 0x1f0, 0x3, 0x0, {[{{@ip={@private, @dev, 0x0, 0x0, 'wlan1\x00', 'wg1\x00'}, 0x0, 0x200, 0x220, 0x0, {0x0, 0xffffffffa0028000}, [@common=@set={{0x40}, {{0x4, [0x4, 0x2, 0xa, 0x6, 0x8, 0x2], 0x2, 0x2}}}, @common=@inet=@hashlimit2={{0x150}, {'veth1\x00', {0x0, 0x8, 0x40, 0x0, 0x0, 0x687c, 0x93}}}]}, @unspec=@TRACE={0x20}}, {{@ip={@empty, @empty, 0x0, 0x0, 'veth0_vlan\x00', 'netpci0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x0, 0x3]}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3e8) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000000)={@empty, @local, 0x0}, &(0x7f0000000040)=0xc) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r9, 0x89f1, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000380)={'syztnl2\x00', r10, 0x700, 0x40, 0x2, 0x5, {{0x35, 0x4, 0x1, 0x1, 0xd4, 0x0, 0x0, 0x3f, 0x4, 0x0, @remote, @loopback, {[@ssrr={0x89, 0x13, 0xe2, [@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @remote]}, @noop, @ra={0x94, 0x4, 0x1}, @generic={0x82, 0x5, "058716"}, @lsrr={0x83, 0x1f, 0xa9, [@rand_addr=0x64010101, @broadcast, @remote, @multicast2, @broadcast, @private=0xa010102, @empty]}, @timestamp_addr={0x44, 0x3c, 0x6d, 0x1, 0xa, [{@local, 0x9}, {@local}, {@local, 0xfffffffd}, {@local, 0x80000000}, {@broadcast, 0x7fff}, {@broadcast, 0x7ff}, {@multicast1, 0x1}]}, @timestamp={0x44, 0xc, 0x34, 0x0, 0x0, [0x5, 0x2]}, @generic={0x83, 0xf, "1ce281af4e35b1745d312aa54b"}, @ssrr={0x89, 0x27, 0x88, [@remote, @multicast1, @empty, @multicast1, @rand_addr=0x64010101, @loopback, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1]}, @generic={0x7, 0x3, '/'}]}}}}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f0000000180)={&(0x7f0000000840)=ANY=[@ANYBLOB="780000005400010026bd7000fbdbdf2507000000", @ANYRESOCT=r8, @ANYBLOB="ed8e0100", @ANYRES32=r10, @ANYBLOB="000201006401010200000000000000000000000086dd000020000100", @ANYRES32, @ANYBLOB="01050300ac1e000100000000000000000000000086dd000020000100", @ANYRES32, @ANYBLOB="010100002001000000000000000000000000000096dd0000"], 0x78}, 0x1, 0x0, 0x0, 0x8840}, 0x4008040) sendmsg$nl_route_sched(r1, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000600)=@newtclass={0x64, 0x28, 0x10, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0x5, 0x1d}, {0xfff1, 0xf}, {0x2, 0xb}}, [@tclass_kind_options=@c_drr={{0x8}, {0xc, 0x2, @TCA_DRR_QUANTUM={0x8}}}, @tclass_kind_options=@c_taprio={0xb}, @tclass_kind_options=@c_netem={0xa}, @tclass_kind_options=@c_mq={0x7}, @tclass_kind_options=@c_netem={0xa}]}, 0x64}, 0x1, 0x0, 0x0, 0x4008180}, 0x40010) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newtfilter={0x6c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x3c, 0x2, [@TCA_BASIC_EMATCHES={0x38, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x2c, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1}, @TCF_EM_META={0x18, 0x2, 0x0, 0x0, {{}, [@TCA_EM_META_HDR={0xc}]}}]}]}]}}]}, 0x6c}}, 0x0) [ 2493.033682][T28941] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2493.061678][T28941] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 00:41:33 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000f000000850000007500000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r6, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x41, 0x3, 0x230, 0x0, 0x19, 0x0, 0x0, 0x0, 0x2e8, 0x1f0, 0x1f0, 0x2e8, 0x1f0, 0x3, 0x0, {[{{@ip={@private, @dev, 0x0, 0x0, 'wlan1\x00', 'wg1\x00'}, 0x0, 0xa8, 0xc8, 0x0, {0x0, 0xffffffffa0028000}, [@common=@unspec=@quota={{0x38}}]}, @unspec=@TRACE={0x20}}, {{@ip={@empty, @empty, 0x0, 0x0, 'veth0_vlan\x00', 'netpci0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x290) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000000)={@empty, @local, 0x0}, &(0x7f0000000040)=0xc) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000380)=ANY=[@ANYBLOB="72797a746e6c32000000000010bd084f", @ANYRES32=r7, @ANYBLOB="070000400000000200000005450500d4006700003f049078ac1414bb7f0000018913e2e0000001ac1e0001ffffffffac1414bb01940401008205058716831fa964010101ffffffffac1414bbe0000002ffffffff0a01010200000000443c6da1ac1414aa00000009ac14141c00000000ac1414aafffffffdac1414aa80000000ffffffff00007fffffffffff000007ffe000000100000001440c34000000000500000002830f1ce281af4e35b1745d312aa54b892788ac1414bbe000000100000000e0000001640101017f00000164010100ac1e0001e000000107032f000000"]}) r9 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r9, 0x4000000000000, 0x40, &(0x7f0000000900)=@raw={'raw\x00', 0x41, 0x3, 0x388, 0x0, 0x19, 0x0, 0x0, 0x0, 0x2f0, 0x1f0, 0x1f0, 0x2f0, 0x1f0, 0x3, 0x0, {[{{@ip={@private, @dev, 0x0, 0x0, 'wlan1\x00', 'wg1\x00'}, 0x0, 0x200, 0x220, 0x0, {0x0, 0xffffffffa0028000}, [@common=@set={{0x40}, {{0x4, [0x4, 0x2, 0xa, 0x6, 0x8, 0x2], 0x2, 0x2}}}, @common=@inet=@hashlimit2={{0x150}, {'veth1\x00', {0x0, 0x8, 0x40, 0x0, 0x0, 0x687c, 0x93}}}]}, @unspec=@TRACE={0x20}}, {{@ip={@empty, @empty, 0x0, 0x0, 'veth0_vlan\x00', 'netpci0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x0, 0x3]}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3e8) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000000)={@empty, @local, 0x0}, &(0x7f0000000040)=0xc) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r9, 0x89f1, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000380)={'syztnl2\x00', r10, 0x700, 0x40, 0x2, 0x5, {{0x35, 0x4, 0x1, 0x1, 0xd4, 0x0, 0x0, 0x3f, 0x4, 0x0, @remote, @loopback, {[@ssrr={0x89, 0x13, 0xe2, [@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @remote]}, @noop, @ra={0x94, 0x4, 0x1}, @generic={0x82, 0x5, "058716"}, @lsrr={0x83, 0x1f, 0xa9, [@rand_addr=0x64010101, @broadcast, @remote, @multicast2, @broadcast, @private=0xa010102, @empty]}, @timestamp_addr={0x44, 0x3c, 0x6d, 0x1, 0xa, [{@local, 0x9}, {@local}, {@local, 0xfffffffd}, {@local, 0x80000000}, {@broadcast, 0x7fff}, {@broadcast, 0x7ff}, {@multicast1, 0x1}]}, @timestamp={0x44, 0xc, 0x34, 0x0, 0x0, [0x5, 0x2]}, @generic={0x83, 0xf, "1ce281af4e35b1745d312aa54b"}, @ssrr={0x89, 0x27, 0x88, [@remote, @multicast1, @empty, @multicast1, @rand_addr=0x64010101, @loopback, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1]}, @generic={0x7, 0x3, '/'}]}}}}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f0000000180)={&(0x7f0000000840)=ANY=[@ANYBLOB="780000005400010026bd7000fbdbdf2507000000", @ANYRESOCT=r8, @ANYBLOB="ed8e0100", @ANYRES32=r10, @ANYBLOB="000201006401010200000000000000000000000086dd000020000100", @ANYRES32, @ANYBLOB="01050300ac1e000100000000000000000000000086dd000020000100", @ANYRES32, @ANYBLOB="010100002001000000000000000000000000000096dd0000"], 0x78}, 0x1, 0x0, 0x0, 0x8840}, 0x4008040) sendmsg$nl_route_sched(r1, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000600)=@newtclass={0x64, 0x28, 0x10, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0x5, 0x1d}, {0xfff1, 0xf}, {0x2, 0xb}}, [@tclass_kind_options=@c_drr={{0x8}, {0xc, 0x2, @TCA_DRR_QUANTUM={0x8}}}, @tclass_kind_options=@c_taprio={0xb}, @tclass_kind_options=@c_netem={0xa}, @tclass_kind_options=@c_mq={0x7}, @tclass_kind_options=@c_netem={0xa}]}, 0x64}, 0x1, 0x0, 0x0, 0x4008180}, 0x40010) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newtfilter={0x6c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x3c, 0x2, [@TCA_BASIC_EMATCHES={0x38, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x2c, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1}, @TCF_EM_META={0x18, 0x2, 0x0, 0x0, {{}, [@TCA_EM_META_HDR={0xc}]}}]}]}]}}]}, 0x6c}}, 0x0) [ 2493.606999][T28946] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2493.633279][T28946] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 00:41:33 executing program 1: syz_io_uring_setup(0x68c, &(0x7f0000000040)={0x0, 0x0, 0x302}, 0x0, 0x0) 00:41:33 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000f000000850000007500000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r6, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x41, 0x3, 0x230, 0x0, 0x19, 0x0, 0x0, 0x0, 0x2e8, 0x1f0, 0x1f0, 0x2e8, 0x1f0, 0x3, 0x0, {[{{@ip={@private, @dev, 0x0, 0x0, 'wlan1\x00', 'wg1\x00'}, 0x0, 0xa8, 0xc8, 0x0, {0x0, 0xffffffffa0028000}, [@common=@unspec=@quota={{0x38}}]}, @unspec=@TRACE={0x20}}, {{@ip={@empty, @empty, 0x0, 0x0, 'veth0_vlan\x00', 'netpci0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x290) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000000)={@empty, @local, 0x0}, &(0x7f0000000040)=0xc) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000380)=ANY=[@ANYBLOB="72797a746e6c32000000000010bd084f", @ANYRES32=r7, @ANYBLOB="070000400000000200000005450500d4006700003f049078ac1414bb7f0000018913e2e0000001ac1e0001ffffffffac1414bb01940401008205058716831fa964010101ffffffffac1414bbe0000002ffffffff0a01010200000000443c6da1ac1414aa00000009ac14141c00000000ac1414aafffffffdac1414aa80000000ffffffff00007fffffffffff000007ffe000000100000001440c34000000000500000002830f1ce281af4e35b1745d312aa54b892788ac1414bbe000000100000000e0000001640101017f00000164010100ac1e0001e000000107032f000000"]}) r9 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r9, 0x4000000000000, 0x40, &(0x7f0000000900)=@raw={'raw\x00', 0x41, 0x3, 0x388, 0x0, 0x19, 0x0, 0x0, 0x0, 0x2f0, 0x1f0, 0x1f0, 0x2f0, 0x1f0, 0x3, 0x0, {[{{@ip={@private, @dev, 0x0, 0x0, 'wlan1\x00', 'wg1\x00'}, 0x0, 0x200, 0x220, 0x0, {0x0, 0xffffffffa0028000}, [@common=@set={{0x40}, {{0x4, [0x4, 0x2, 0xa, 0x6, 0x8, 0x2], 0x2, 0x2}}}, @common=@inet=@hashlimit2={{0x150}, {'veth1\x00', {0x0, 0x8, 0x40, 0x0, 0x0, 0x687c, 0x93}}}]}, @unspec=@TRACE={0x20}}, {{@ip={@empty, @empty, 0x0, 0x0, 'veth0_vlan\x00', 'netpci0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x0, 0x3]}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3e8) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000000)={@empty, @local, 0x0}, &(0x7f0000000040)=0xc) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r9, 0x89f1, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000380)={'syztnl2\x00', r10, 0x700, 0x40, 0x2, 0x5, {{0x35, 0x4, 0x1, 0x1, 0xd4, 0x0, 0x0, 0x3f, 0x4, 0x0, @remote, @loopback, {[@ssrr={0x89, 0x13, 0xe2, [@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @remote]}, @noop, @ra={0x94, 0x4, 0x1}, @generic={0x82, 0x5, "058716"}, @lsrr={0x83, 0x1f, 0xa9, [@rand_addr=0x64010101, @broadcast, @remote, @multicast2, @broadcast, @private=0xa010102, @empty]}, @timestamp_addr={0x44, 0x3c, 0x6d, 0x1, 0xa, [{@local, 0x9}, {@local}, {@local, 0xfffffffd}, {@local, 0x80000000}, {@broadcast, 0x7fff}, {@broadcast, 0x7ff}, {@multicast1, 0x1}]}, @timestamp={0x44, 0xc, 0x34, 0x0, 0x0, [0x5, 0x2]}, @generic={0x83, 0xf, "1ce281af4e35b1745d312aa54b"}, @ssrr={0x89, 0x27, 0x88, [@remote, @multicast1, @empty, @multicast1, @rand_addr=0x64010101, @loopback, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1]}, @generic={0x7, 0x3, '/'}]}}}}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f0000000180)={&(0x7f0000000840)=ANY=[@ANYBLOB="780000005400010026bd7000fbdbdf2507000000", @ANYRESOCT=r8, @ANYBLOB="ed8e0100", @ANYRES32=r10, @ANYBLOB="000201006401010200000000000000000000000086dd000020000100", @ANYRES32, @ANYBLOB="01050300ac1e000100000000000000000000000086dd000020000100", @ANYRES32, @ANYBLOB="010100002001000000000000000000000000000096dd0000"], 0x78}, 0x1, 0x0, 0x0, 0x8840}, 0x4008040) sendmsg$nl_route_sched(r1, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000600)=@newtclass={0x64, 0x28, 0x10, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0x5, 0x1d}, {0xfff1, 0xf}, {0x2, 0xb}}, [@tclass_kind_options=@c_drr={{0x8}, {0xc, 0x2, @TCA_DRR_QUANTUM={0x8}}}, @tclass_kind_options=@c_taprio={0xb}, @tclass_kind_options=@c_netem={0xa}, @tclass_kind_options=@c_mq={0x7}, @tclass_kind_options=@c_multiq={0xb}]}, 0x64}, 0x1, 0x0, 0x0, 0x4008180}, 0x40010) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newtfilter={0x6c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x3c, 0x2, [@TCA_BASIC_EMATCHES={0x38, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x2c, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1}, @TCF_EM_META={0x18, 0x2, 0x0, 0x0, {{}, [@TCA_EM_META_HDR={0xc}]}}]}]}]}}]}, 0x6c}}, 0x0) [ 2494.271574][T28949] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2494.276910][T28949] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 00:41:34 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000f000000850000007500000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r6, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x41, 0x3, 0x230, 0x0, 0x19, 0x0, 0x0, 0x0, 0x2e8, 0x1f0, 0x1f0, 0x2e8, 0x1f0, 0x3, 0x0, {[{{@ip={@private, @dev, 0x0, 0x0, 'wlan1\x00', 'wg1\x00'}, 0x0, 0xa8, 0xc8, 0x0, {0x0, 0xffffffffa0028000}, [@common=@unspec=@quota={{0x38}}]}, @unspec=@TRACE={0x20}}, {{@ip={@empty, @empty, 0x0, 0x0, 'veth0_vlan\x00', 'netpci0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x290) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000000)={@empty, @local, 0x0}, &(0x7f0000000040)=0xc) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000380)=ANY=[@ANYBLOB="72797a746e6c32000000000010bd084f", @ANYRES32=r7, @ANYBLOB="070000400000000200000005450500d4006700003f049078ac1414bb7f0000018913e2e0000001ac1e0001ffffffffac1414bb01940401008205058716831fa964010101ffffffffac1414bbe0000002ffffffff0a01010200000000443c6da1ac1414aa00000009ac14141c00000000ac1414aafffffffdac1414aa80000000ffffffff00007fffffffffff000007ffe000000100000001440c34000000000500000002830f1ce281af4e35b1745d312aa54b892788ac1414bbe000000100000000e0000001640101017f00000164010100ac1e0001e000000107032f000000"]}) r9 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r9, 0x4000000000000, 0x40, &(0x7f0000000900)=@raw={'raw\x00', 0x41, 0x3, 0x388, 0x0, 0x19, 0x0, 0x0, 0x0, 0x2f0, 0x1f0, 0x1f0, 0x2f0, 0x1f0, 0x3, 0x0, {[{{@ip={@private, @dev, 0x0, 0x0, 'wlan1\x00', 'wg1\x00'}, 0x0, 0x200, 0x220, 0x0, {0x0, 0xffffffffa0028000}, [@common=@set={{0x40}, {{0x4, [0x4, 0x2, 0xa, 0x6, 0x8, 0x2], 0x2, 0x2}}}, @common=@inet=@hashlimit2={{0x150}, {'veth1\x00', {0x0, 0x8, 0x40, 0x0, 0x0, 0x687c, 0x93}}}]}, @unspec=@TRACE={0x20}}, {{@ip={@empty, @empty, 0x0, 0x0, 'veth0_vlan\x00', 'netpci0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x0, 0x3]}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3e8) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000000)={@empty, @local, 0x0}, &(0x7f0000000040)=0xc) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r9, 0x89f1, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000380)={'syztnl2\x00', r10, 0x700, 0x40, 0x2, 0x5, {{0x35, 0x4, 0x1, 0x1, 0xd4, 0x0, 0x0, 0x3f, 0x4, 0x0, @remote, @loopback, {[@ssrr={0x89, 0x13, 0xe2, [@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @remote]}, @noop, @ra={0x94, 0x4, 0x1}, @generic={0x82, 0x5, "058716"}, @lsrr={0x83, 0x1f, 0xa9, [@rand_addr=0x64010101, @broadcast, @remote, @multicast2, @broadcast, @private=0xa010102, @empty]}, @timestamp_addr={0x44, 0x3c, 0x6d, 0x1, 0xa, [{@local, 0x9}, {@local}, {@local, 0xfffffffd}, {@local, 0x80000000}, {@broadcast, 0x7fff}, {@broadcast, 0x7ff}, {@multicast1, 0x1}]}, @timestamp={0x44, 0xc, 0x34, 0x0, 0x0, [0x5, 0x2]}, @generic={0x83, 0xf, "1ce281af4e35b1745d312aa54b"}, @ssrr={0x89, 0x27, 0x88, [@remote, @multicast1, @empty, @multicast1, @rand_addr=0x64010101, @loopback, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1]}, @generic={0x7, 0x3, '/'}]}}}}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f0000000180)={&(0x7f0000000840)=ANY=[@ANYBLOB="780000005400010026bd7000fbdbdf2507000000", @ANYRESOCT=r8, @ANYBLOB="ed8e0100", @ANYRES32=r10, @ANYBLOB="000201006401010200000000000000000000000086dd000020000100", @ANYRES32, @ANYBLOB="01050300ac1e000100000000000000000000000086dd000020000100", @ANYRES32, @ANYBLOB="010100002001000000000000000000000000000096dd0000"], 0x78}, 0x1, 0x0, 0x0, 0x8840}, 0x4008040) sendmsg$nl_route_sched(r1, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000600)=@newtclass={0x64, 0x28, 0x10, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0x5, 0x1d}, {0xfff1, 0xf}, {0x2, 0xb}}, [@tclass_kind_options=@c_drr={{0x8}, {0xc, 0x2, @TCA_DRR_QUANTUM={0x8}}}, @tclass_kind_options=@c_taprio={0xb}, @tclass_kind_options=@c_netem={0xa}, @tclass_kind_options=@c_mq={0x7}, @tclass_kind_options=@c_multiq={0xb}]}, 0x64}, 0x1, 0x0, 0x0, 0x4008180}, 0x40010) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newtfilter={0x6c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x3c, 0x2, [@TCA_BASIC_EMATCHES={0x38, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x2c, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1}, @TCF_EM_META={0x18, 0x2, 0x0, 0x0, {{}, [@TCA_EM_META_HDR={0xc}]}}]}]}]}}]}, 0x6c}}, 0x0) [ 2494.639713][T28953] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2494.655003][T28953] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 00:41:34 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000f000000850000007500000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r6, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x41, 0x3, 0x230, 0x0, 0x19, 0x0, 0x0, 0x0, 0x2e8, 0x1f0, 0x1f0, 0x2e8, 0x1f0, 0x3, 0x0, {[{{@ip={@private, @dev, 0x0, 0x0, 'wlan1\x00', 'wg1\x00'}, 0x0, 0xa8, 0xc8, 0x0, {0x0, 0xffffffffa0028000}, [@common=@unspec=@quota={{0x38}}]}, @unspec=@TRACE={0x20}}, {{@ip={@empty, @empty, 0x0, 0x0, 'veth0_vlan\x00', 'netpci0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x290) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000000)={@empty, @local, 0x0}, &(0x7f0000000040)=0xc) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000380)=ANY=[@ANYBLOB="72797a746e6c32000000000010bd084f", @ANYRES32=r7, @ANYBLOB="070000400000000200000005450500d4006700003f049078ac1414bb7f0000018913e2e0000001ac1e0001ffffffffac1414bb01940401008205058716831fa964010101ffffffffac1414bbe0000002ffffffff0a01010200000000443c6da1ac1414aa00000009ac14141c00000000ac1414aafffffffdac1414aa80000000ffffffff00007fffffffffff000007ffe000000100000001440c34000000000500000002830f1ce281af4e35b1745d312aa54b892788ac1414bbe000000100000000e0000001640101017f00000164010100ac1e0001e000000107032f000000"]}) r9 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r9, 0x4000000000000, 0x40, &(0x7f0000000900)=@raw={'raw\x00', 0x41, 0x3, 0x388, 0x0, 0x19, 0x0, 0x0, 0x0, 0x2f0, 0x1f0, 0x1f0, 0x2f0, 0x1f0, 0x3, 0x0, {[{{@ip={@private, @dev, 0x0, 0x0, 'wlan1\x00', 'wg1\x00'}, 0x0, 0x200, 0x220, 0x0, {0x0, 0xffffffffa0028000}, [@common=@set={{0x40}, {{0x4, [0x4, 0x2, 0xa, 0x6, 0x8, 0x2], 0x2, 0x2}}}, @common=@inet=@hashlimit2={{0x150}, {'veth1\x00', {0x0, 0x8, 0x40, 0x0, 0x0, 0x687c, 0x93}}}]}, @unspec=@TRACE={0x20}}, {{@ip={@empty, @empty, 0x0, 0x0, 'veth0_vlan\x00', 'netpci0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x0, 0x3]}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3e8) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000000)={@empty, @local, 0x0}, &(0x7f0000000040)=0xc) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r9, 0x89f1, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000380)={'syztnl2\x00', r10, 0x700, 0x40, 0x2, 0x5, {{0x35, 0x4, 0x1, 0x1, 0xd4, 0x0, 0x0, 0x3f, 0x4, 0x0, @remote, @loopback, {[@ssrr={0x89, 0x13, 0xe2, [@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @remote]}, @noop, @ra={0x94, 0x4, 0x1}, @generic={0x82, 0x5, "058716"}, @lsrr={0x83, 0x1f, 0xa9, [@rand_addr=0x64010101, @broadcast, @remote, @multicast2, @broadcast, @private=0xa010102, @empty]}, @timestamp_addr={0x44, 0x3c, 0x6d, 0x1, 0xa, [{@local, 0x9}, {@local}, {@local, 0xfffffffd}, {@local, 0x80000000}, {@broadcast, 0x7fff}, {@broadcast, 0x7ff}, {@multicast1, 0x1}]}, @timestamp={0x44, 0xc, 0x34, 0x0, 0x0, [0x5, 0x2]}, @generic={0x83, 0xf, "1ce281af4e35b1745d312aa54b"}, @ssrr={0x89, 0x27, 0x88, [@remote, @multicast1, @empty, @multicast1, @rand_addr=0x64010101, @loopback, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1]}, @generic={0x7, 0x3, '/'}]}}}}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f0000000180)={&(0x7f0000000840)=ANY=[@ANYBLOB="780000005400010026bd7000fbdbdf2507000000", @ANYRESOCT=r8, @ANYBLOB="ed8e0100", @ANYRES32=r10, @ANYBLOB="000201006401010200000000000000000000000086dd000020000100", @ANYRES32, @ANYBLOB="01050300ac1e000100000000000000000000000086dd000020000100", @ANYRES32, @ANYBLOB="010100002001000000000000000000000000000096dd0000"], 0x78}, 0x1, 0x0, 0x0, 0x8840}, 0x4008040) sendmsg$nl_route_sched(r1, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000600)=@newtclass={0x64, 0x28, 0x10, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0x5, 0x1d}, {0xfff1, 0xf}, {0x2, 0xb}}, [@tclass_kind_options=@c_drr={{0x8}, {0xc, 0x2, @TCA_DRR_QUANTUM={0x8}}}, @tclass_kind_options=@c_taprio={0xb}, @tclass_kind_options=@c_netem={0xa}, @tclass_kind_options=@c_mq={0x7}, @tclass_kind_options=@c_multiq={0xb}]}, 0x64}, 0x1, 0x0, 0x0, 0x4008180}, 0x40010) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newtfilter={0x6c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x3c, 0x2, [@TCA_BASIC_EMATCHES={0x38, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x2c, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1}, @TCF_EM_META={0x18, 0x2, 0x0, 0x0, {{}, [@TCA_EM_META_HDR={0xc}]}}]}]}]}}]}, 0x6c}}, 0x0) 00:41:35 executing program 1: openat$pidfd(0xffffffffffffff9c, &(0x7f0000000040), 0x14480, 0x0) 00:41:35 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000f000000850000007500000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r6, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x41, 0x3, 0x230, 0x0, 0x19, 0x0, 0x0, 0x0, 0x2e8, 0x1f0, 0x1f0, 0x2e8, 0x1f0, 0x3, 0x0, {[{{@ip={@private, @dev, 0x0, 0x0, 'wlan1\x00', 'wg1\x00'}, 0x0, 0xa8, 0xc8, 0x0, {0x0, 0xffffffffa0028000}, [@common=@unspec=@quota={{0x38}}]}, @unspec=@TRACE={0x20}}, {{@ip={@empty, @empty, 0x0, 0x0, 'veth0_vlan\x00', 'netpci0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x290) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000000)={@empty, @local, 0x0}, &(0x7f0000000040)=0xc) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000380)=ANY=[@ANYBLOB="72797a746e6c32000000000010bd084f", @ANYRES32=r7, @ANYBLOB="070000400000000200000005450500d4006700003f049078ac1414bb7f0000018913e2e0000001ac1e0001ffffffffac1414bb01940401008205058716831fa964010101ffffffffac1414bbe0000002ffffffff0a01010200000000443c6da1ac1414aa00000009ac14141c00000000ac1414aafffffffdac1414aa80000000ffffffff00007fffffffffff000007ffe000000100000001440c34000000000500000002830f1ce281af4e35b1745d312aa54b892788ac1414bbe000000100000000e0000001640101017f00000164010100ac1e0001e000000107032f000000"]}) r9 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r9, 0x4000000000000, 0x40, &(0x7f0000000900)=@raw={'raw\x00', 0x41, 0x3, 0x388, 0x0, 0x19, 0x0, 0x0, 0x0, 0x2f0, 0x1f0, 0x1f0, 0x2f0, 0x1f0, 0x3, 0x0, {[{{@ip={@private, @dev, 0x0, 0x0, 'wlan1\x00', 'wg1\x00'}, 0x0, 0x200, 0x220, 0x0, {0x0, 0xffffffffa0028000}, [@common=@set={{0x40}, {{0x4, [0x4, 0x2, 0xa, 0x6, 0x8, 0x2], 0x2, 0x2}}}, @common=@inet=@hashlimit2={{0x150}, {'veth1\x00', {0x0, 0x8, 0x40, 0x0, 0x0, 0x687c, 0x93}}}]}, @unspec=@TRACE={0x20}}, {{@ip={@empty, @empty, 0x0, 0x0, 'veth0_vlan\x00', 'netpci0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x0, 0x3]}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3e8) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000000)={@empty, @local, 0x0}, &(0x7f0000000040)=0xc) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r9, 0x89f1, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000380)={'syztnl2\x00', r10, 0x700, 0x40, 0x2, 0x5, {{0x35, 0x4, 0x1, 0x1, 0xd4, 0x0, 0x0, 0x3f, 0x4, 0x0, @remote, @loopback, {[@ssrr={0x89, 0x13, 0xe2, [@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @remote]}, @noop, @ra={0x94, 0x4, 0x1}, @generic={0x82, 0x5, "058716"}, @lsrr={0x83, 0x1f, 0xa9, [@rand_addr=0x64010101, @broadcast, @remote, @multicast2, @broadcast, @private=0xa010102, @empty]}, @timestamp_addr={0x44, 0x3c, 0x6d, 0x1, 0xa, [{@local, 0x9}, {@local}, {@local, 0xfffffffd}, {@local, 0x80000000}, {@broadcast, 0x7fff}, {@broadcast, 0x7ff}, {@multicast1, 0x1}]}, @timestamp={0x44, 0xc, 0x34, 0x0, 0x0, [0x5, 0x2]}, @generic={0x83, 0xf, "1ce281af4e35b1745d312aa54b"}, @ssrr={0x89, 0x27, 0x88, [@remote, @multicast1, @empty, @multicast1, @rand_addr=0x64010101, @loopback, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1]}, @generic={0x7, 0x3, '/'}]}}}}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f0000000180)={&(0x7f0000000840)=ANY=[@ANYBLOB="780000005400010026bd7000fbdbdf2507000000", @ANYRESOCT=r8, @ANYBLOB="ed8e0100", @ANYRES32=r10, @ANYBLOB="000201006401010200000000000000000000000086dd000020000100", @ANYRES32, @ANYBLOB="01050300ac1e000100000000000000000000000086dd000020000100", @ANYRES32, @ANYBLOB="010100002001000000000000000000000000000096dd0000"], 0x78}, 0x1, 0x0, 0x0, 0x8840}, 0x4008040) sendmsg$nl_route_sched(r1, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000600)=@newtclass={0x68, 0x28, 0x10, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0x5, 0x1d}, {0xfff1, 0xf}, {0x2, 0xb}}, [@tclass_kind_options=@c_drr={{0x8}, {0xc, 0x2, @TCA_DRR_QUANTUM={0x8}}}, @tclass_kind_options=@c_taprio={0xb}, @tclass_kind_options=@c_netem={0xa}, @tclass_kind_options=@c_netem={0xa}, @tclass_kind_options=@c_multiq={0xb}]}, 0x68}, 0x1, 0x0, 0x0, 0x4008180}, 0x40010) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newtfilter={0x6c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x3c, 0x2, [@TCA_BASIC_EMATCHES={0x38, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x2c, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1}, @TCF_EM_META={0x18, 0x2, 0x0, 0x0, {{}, [@TCA_EM_META_HDR={0xc}]}}]}]}]}}]}, 0x6c}}, 0x0) 00:41:36 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000f000000850000007500000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r6, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x41, 0x3, 0x230, 0x0, 0x19, 0x0, 0x0, 0x0, 0x2e8, 0x1f0, 0x1f0, 0x2e8, 0x1f0, 0x3, 0x0, {[{{@ip={@private, @dev, 0x0, 0x0, 'wlan1\x00', 'wg1\x00'}, 0x0, 0xa8, 0xc8, 0x0, {0x0, 0xffffffffa0028000}, [@common=@unspec=@quota={{0x38}}]}, @unspec=@TRACE={0x20}}, {{@ip={@empty, @empty, 0x0, 0x0, 'veth0_vlan\x00', 'netpci0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x290) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000000)={@empty, @local, 0x0}, &(0x7f0000000040)=0xc) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000380)=ANY=[@ANYBLOB="72797a746e6c32000000000010bd084f", @ANYRES32=r7, @ANYBLOB="070000400000000200000005450500d4006700003f049078ac1414bb7f0000018913e2e0000001ac1e0001ffffffffac1414bb01940401008205058716831fa964010101ffffffffac1414bbe0000002ffffffff0a01010200000000443c6da1ac1414aa00000009ac14141c00000000ac1414aafffffffdac1414aa80000000ffffffff00007fffffffffff000007ffe000000100000001440c34000000000500000002830f1ce281af4e35b1745d312aa54b892788ac1414bbe000000100000000e0000001640101017f00000164010100ac1e0001e000000107032f000000"]}) r9 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r9, 0x4000000000000, 0x40, &(0x7f0000000900)=@raw={'raw\x00', 0x41, 0x3, 0x388, 0x0, 0x19, 0x0, 0x0, 0x0, 0x2f0, 0x1f0, 0x1f0, 0x2f0, 0x1f0, 0x3, 0x0, {[{{@ip={@private, @dev, 0x0, 0x0, 'wlan1\x00', 'wg1\x00'}, 0x0, 0x200, 0x220, 0x0, {0x0, 0xffffffffa0028000}, [@common=@set={{0x40}, {{0x4, [0x4, 0x2, 0xa, 0x6, 0x8, 0x2], 0x2, 0x2}}}, @common=@inet=@hashlimit2={{0x150}, {'veth1\x00', {0x0, 0x8, 0x40, 0x0, 0x0, 0x687c, 0x93}}}]}, @unspec=@TRACE={0x20}}, {{@ip={@empty, @empty, 0x0, 0x0, 'veth0_vlan\x00', 'netpci0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x0, 0x3]}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3e8) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000000)={@empty, @local, 0x0}, &(0x7f0000000040)=0xc) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r9, 0x89f1, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000380)={'syztnl2\x00', r10, 0x700, 0x40, 0x2, 0x5, {{0x35, 0x4, 0x1, 0x1, 0xd4, 0x0, 0x0, 0x3f, 0x4, 0x0, @remote, @loopback, {[@ssrr={0x89, 0x13, 0xe2, [@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @remote]}, @noop, @ra={0x94, 0x4, 0x1}, @generic={0x82, 0x5, "058716"}, @lsrr={0x83, 0x1f, 0xa9, [@rand_addr=0x64010101, @broadcast, @remote, @multicast2, @broadcast, @private=0xa010102, @empty]}, @timestamp_addr={0x44, 0x3c, 0x6d, 0x1, 0xa, [{@local, 0x9}, {@local}, {@local, 0xfffffffd}, {@local, 0x80000000}, {@broadcast, 0x7fff}, {@broadcast, 0x7ff}, {@multicast1, 0x1}]}, @timestamp={0x44, 0xc, 0x34, 0x0, 0x0, [0x5, 0x2]}, @generic={0x83, 0xf, "1ce281af4e35b1745d312aa54b"}, @ssrr={0x89, 0x27, 0x88, [@remote, @multicast1, @empty, @multicast1, @rand_addr=0x64010101, @loopback, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1]}, @generic={0x7, 0x3, '/'}]}}}}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f0000000180)={&(0x7f0000000840)=ANY=[@ANYBLOB="780000005400010026bd7000fbdbdf2507000000", @ANYRESOCT=r8, @ANYBLOB="ed8e0100", @ANYRES32=r10, @ANYBLOB="000201006401010200000000000000000000000086dd000020000100", @ANYRES32, @ANYBLOB="01050300ac1e000100000000000000000000000086dd000020000100", @ANYRES32, @ANYBLOB="010100002001000000000000000000000000000096dd0000"], 0x78}, 0x1, 0x0, 0x0, 0x8840}, 0x4008040) sendmsg$nl_route_sched(r1, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000600)=@newtclass={0x68, 0x28, 0x10, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0x5, 0x1d}, {0xfff1, 0xf}, {0x2, 0xb}}, [@tclass_kind_options=@c_drr={{0x8}, {0xc, 0x2, @TCA_DRR_QUANTUM={0x8}}}, @tclass_kind_options=@c_taprio={0xb}, @tclass_kind_options=@c_netem={0xa}, @tclass_kind_options=@c_netem={0xa}, @tclass_kind_options=@c_multiq={0xb}]}, 0x68}, 0x1, 0x0, 0x0, 0x4008180}, 0x40010) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newtfilter={0x6c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x3c, 0x2, [@TCA_BASIC_EMATCHES={0x38, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x2c, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1}, @TCF_EM_META={0x18, 0x2, 0x0, 0x0, {{}, [@TCA_EM_META_HDR={0xc}]}}]}]}]}}]}, 0x6c}}, 0x0) 00:41:36 executing program 1: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r0, 0x0, 0x0, 0x40, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev}, 0x20) 00:41:37 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000f000000850000007500000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r6, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x41, 0x3, 0x230, 0x0, 0x19, 0x0, 0x0, 0x0, 0x2e8, 0x1f0, 0x1f0, 0x2e8, 0x1f0, 0x3, 0x0, {[{{@ip={@private, @dev, 0x0, 0x0, 'wlan1\x00', 'wg1\x00'}, 0x0, 0xa8, 0xc8, 0x0, {0x0, 0xffffffffa0028000}, [@common=@unspec=@quota={{0x38}}]}, @unspec=@TRACE={0x20}}, {{@ip={@empty, @empty, 0x0, 0x0, 'veth0_vlan\x00', 'netpci0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x290) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000000)={@empty, @local, 0x0}, &(0x7f0000000040)=0xc) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000380)=ANY=[@ANYBLOB="72797a746e6c32000000000010bd084f", @ANYRES32=r7, @ANYBLOB="070000400000000200000005450500d4006700003f049078ac1414bb7f0000018913e2e0000001ac1e0001ffffffffac1414bb01940401008205058716831fa964010101ffffffffac1414bbe0000002ffffffff0a01010200000000443c6da1ac1414aa00000009ac14141c00000000ac1414aafffffffdac1414aa80000000ffffffff00007fffffffffff000007ffe000000100000001440c34000000000500000002830f1ce281af4e35b1745d312aa54b892788ac1414bbe000000100000000e0000001640101017f00000164010100ac1e0001e000000107032f000000"]}) r9 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r9, 0x4000000000000, 0x40, &(0x7f0000000900)=@raw={'raw\x00', 0x41, 0x3, 0x388, 0x0, 0x19, 0x0, 0x0, 0x0, 0x2f0, 0x1f0, 0x1f0, 0x2f0, 0x1f0, 0x3, 0x0, {[{{@ip={@private, @dev, 0x0, 0x0, 'wlan1\x00', 'wg1\x00'}, 0x0, 0x200, 0x220, 0x0, {0x0, 0xffffffffa0028000}, [@common=@set={{0x40}, {{0x4, [0x4, 0x2, 0xa, 0x6, 0x8, 0x2], 0x2, 0x2}}}, @common=@inet=@hashlimit2={{0x150}, {'veth1\x00', {0x0, 0x8, 0x40, 0x0, 0x0, 0x687c, 0x93}}}]}, @unspec=@TRACE={0x20}}, {{@ip={@empty, @empty, 0x0, 0x0, 'veth0_vlan\x00', 'netpci0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x0, 0x3]}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3e8) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000000)={@empty, @local, 0x0}, &(0x7f0000000040)=0xc) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r9, 0x89f1, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000380)={'syztnl2\x00', r10, 0x700, 0x40, 0x2, 0x5, {{0x35, 0x4, 0x1, 0x1, 0xd4, 0x0, 0x0, 0x3f, 0x4, 0x0, @remote, @loopback, {[@ssrr={0x89, 0x13, 0xe2, [@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @remote]}, @noop, @ra={0x94, 0x4, 0x1}, @generic={0x82, 0x5, "058716"}, @lsrr={0x83, 0x1f, 0xa9, [@rand_addr=0x64010101, @broadcast, @remote, @multicast2, @broadcast, @private=0xa010102, @empty]}, @timestamp_addr={0x44, 0x3c, 0x6d, 0x1, 0xa, [{@local, 0x9}, {@local}, {@local, 0xfffffffd}, {@local, 0x80000000}, {@broadcast, 0x7fff}, {@broadcast, 0x7ff}, {@multicast1, 0x1}]}, @timestamp={0x44, 0xc, 0x34, 0x0, 0x0, [0x5, 0x2]}, @generic={0x83, 0xf, "1ce281af4e35b1745d312aa54b"}, @ssrr={0x89, 0x27, 0x88, [@remote, @multicast1, @empty, @multicast1, @rand_addr=0x64010101, @loopback, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1]}, @generic={0x7, 0x3, '/'}]}}}}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f0000000180)={&(0x7f0000000840)=ANY=[@ANYBLOB="780000005400010026bd7000fbdbdf2507000000", @ANYRESOCT=r8, @ANYBLOB="ed8e0100", @ANYRES32=r10, @ANYBLOB="000201006401010200000000000000000000000086dd000020000100", @ANYRES32, @ANYBLOB="01050300ac1e000100000000000000000000000086dd000020000100", @ANYRES32, @ANYBLOB="010100002001000000000000000000000000000096dd0000"], 0x78}, 0x1, 0x0, 0x0, 0x8840}, 0x4008040) sendmsg$nl_route_sched(r1, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000600)=@newtclass={0x68, 0x28, 0x10, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0x5, 0x1d}, {0xfff1, 0xf}, {0x2, 0xb}}, [@tclass_kind_options=@c_drr={{0x8}, {0xc, 0x2, @TCA_DRR_QUANTUM={0x8}}}, @tclass_kind_options=@c_taprio={0xb}, @tclass_kind_options=@c_netem={0xa}, @tclass_kind_options=@c_netem={0xa}, @tclass_kind_options=@c_multiq={0xb}]}, 0x68}, 0x1, 0x0, 0x0, 0x4008180}, 0x40010) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newtfilter={0x6c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x3c, 0x2, [@TCA_BASIC_EMATCHES={0x38, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x2c, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1}, @TCF_EM_META={0x18, 0x2, 0x0, 0x0, {{}, [@TCA_EM_META_HDR={0xc}]}}]}]}]}}]}, 0x6c}}, 0x0) [ 2497.229501][T28969] __nla_validate_parse: 6 callbacks suppressed [ 2497.229579][T28969] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2497.248499][T28969] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 00:41:37 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000f000000850000007500000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r6, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x41, 0x3, 0x230, 0x0, 0x19, 0x0, 0x0, 0x0, 0x2e8, 0x1f0, 0x1f0, 0x2e8, 0x1f0, 0x3, 0x0, {[{{@ip={@private, @dev, 0x0, 0x0, 'wlan1\x00', 'wg1\x00'}, 0x0, 0xa8, 0xc8, 0x0, {0x0, 0xffffffffa0028000}, [@common=@unspec=@quota={{0x38}}]}, @unspec=@TRACE={0x20}}, {{@ip={@empty, @empty, 0x0, 0x0, 'veth0_vlan\x00', 'netpci0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x290) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000000)={@empty, @local, 0x0}, &(0x7f0000000040)=0xc) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000380)=ANY=[@ANYBLOB="72797a746e6c32000000000010bd084f", @ANYRES32=r7, @ANYBLOB="070000400000000200000005450500d4006700003f049078ac1414bb7f0000018913e2e0000001ac1e0001ffffffffac1414bb01940401008205058716831fa964010101ffffffffac1414bbe0000002ffffffff0a01010200000000443c6da1ac1414aa00000009ac14141c00000000ac1414aafffffffdac1414aa80000000ffffffff00007fffffffffff000007ffe000000100000001440c34000000000500000002830f1ce281af4e35b1745d312aa54b892788ac1414bbe000000100000000e0000001640101017f00000164010100ac1e0001e000000107032f000000"]}) r9 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r9, 0x4000000000000, 0x40, &(0x7f0000000900)=@raw={'raw\x00', 0x41, 0x3, 0x388, 0x0, 0x19, 0x0, 0x0, 0x0, 0x2f0, 0x1f0, 0x1f0, 0x2f0, 0x1f0, 0x3, 0x0, {[{{@ip={@private, @dev, 0x0, 0x0, 'wlan1\x00', 'wg1\x00'}, 0x0, 0x200, 0x220, 0x0, {0x0, 0xffffffffa0028000}, [@common=@set={{0x40}, {{0x4, [0x4, 0x2, 0xa, 0x6, 0x8, 0x2], 0x2, 0x2}}}, @common=@inet=@hashlimit2={{0x150}, {'veth1\x00', {0x0, 0x8, 0x40, 0x0, 0x0, 0x687c, 0x93}}}]}, @unspec=@TRACE={0x20}}, {{@ip={@empty, @empty, 0x0, 0x0, 'veth0_vlan\x00', 'netpci0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x0, 0x3]}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3e8) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000000)={@empty, @local, 0x0}, &(0x7f0000000040)=0xc) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r9, 0x89f1, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000380)={'syztnl2\x00', r10, 0x700, 0x40, 0x2, 0x5, {{0x35, 0x4, 0x1, 0x1, 0xd4, 0x0, 0x0, 0x3f, 0x4, 0x0, @remote, @loopback, {[@ssrr={0x89, 0x13, 0xe2, [@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @remote]}, @noop, @ra={0x94, 0x4, 0x1}, @generic={0x82, 0x5, "058716"}, @lsrr={0x83, 0x1f, 0xa9, [@rand_addr=0x64010101, @broadcast, @remote, @multicast2, @broadcast, @private=0xa010102, @empty]}, @timestamp_addr={0x44, 0x3c, 0x6d, 0x1, 0xa, [{@local, 0x9}, {@local}, {@local, 0xfffffffd}, {@local, 0x80000000}, {@broadcast, 0x7fff}, {@broadcast, 0x7ff}, {@multicast1, 0x1}]}, @timestamp={0x44, 0xc, 0x34, 0x0, 0x0, [0x5, 0x2]}, @generic={0x83, 0xf, "1ce281af4e35b1745d312aa54b"}, @ssrr={0x89, 0x27, 0x88, [@remote, @multicast1, @empty, @multicast1, @rand_addr=0x64010101, @loopback, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1]}, @generic={0x7, 0x3, '/'}]}}}}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f0000000180)={&(0x7f0000000840)=ANY=[@ANYBLOB="780000005400010026bd7000fbdbdf2507000000", @ANYRESOCT=r8, @ANYBLOB="ed8e0100", @ANYRES32=r10, @ANYBLOB="000201006401010200000000000000000000000086dd000020000100", @ANYRES32, @ANYBLOB="01050300ac1e000100000000000000000000000086dd000020000100", @ANYRES32, @ANYBLOB="010100002001000000000000000000000000000096dd0000"], 0x78}, 0x1, 0x0, 0x0, 0x8840}, 0x4008040) sendmsg$nl_route_sched(r1, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000600)=@newtclass={0x64, 0x28, 0x10, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0x5, 0x1d}, {0xfff1, 0xf}, {0x2, 0xb}}, [@tclass_kind_options=@c_drr={{0x8}, {0xc, 0x2, @TCA_DRR_QUANTUM={0x8}}}, @tclass_kind_options=@c_taprio={0xb}, @tclass_kind_options=@c_mq={0x7}, @tclass_kind_options=@c_netem={0xa}, @tclass_kind_options=@c_multiq={0xb}]}, 0x64}, 0x1, 0x0, 0x0, 0x4008180}, 0x40010) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newtfilter={0x6c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x3c, 0x2, [@TCA_BASIC_EMATCHES={0x38, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x2c, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1}, @TCF_EM_META={0x18, 0x2, 0x0, 0x0, {{}, [@TCA_EM_META_HDR={0xc}]}}]}]}]}}]}, 0x6c}}, 0x0) [ 2497.774675][T28973] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2497.778504][T28973] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 00:41:37 executing program 1: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r0, 0x0, 0x0, 0x40, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev}, 0x20) 00:41:38 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000f000000850000007500000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r6, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x41, 0x3, 0x230, 0x0, 0x19, 0x0, 0x0, 0x0, 0x2e8, 0x1f0, 0x1f0, 0x2e8, 0x1f0, 0x3, 0x0, {[{{@ip={@private, @dev, 0x0, 0x0, 'wlan1\x00', 'wg1\x00'}, 0x0, 0xa8, 0xc8, 0x0, {0x0, 0xffffffffa0028000}, [@common=@unspec=@quota={{0x38}}]}, @unspec=@TRACE={0x20}}, {{@ip={@empty, @empty, 0x0, 0x0, 'veth0_vlan\x00', 'netpci0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x290) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000000)={@empty, @local, 0x0}, &(0x7f0000000040)=0xc) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000380)=ANY=[@ANYBLOB="72797a746e6c32000000000010bd084f", @ANYRES32=r7, @ANYBLOB="070000400000000200000005450500d4006700003f049078ac1414bb7f0000018913e2e0000001ac1e0001ffffffffac1414bb01940401008205058716831fa964010101ffffffffac1414bbe0000002ffffffff0a01010200000000443c6da1ac1414aa00000009ac14141c00000000ac1414aafffffffdac1414aa80000000ffffffff00007fffffffffff000007ffe000000100000001440c34000000000500000002830f1ce281af4e35b1745d312aa54b892788ac1414bbe000000100000000e0000001640101017f00000164010100ac1e0001e000000107032f000000"]}) r9 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r9, 0x4000000000000, 0x40, &(0x7f0000000900)=@raw={'raw\x00', 0x41, 0x3, 0x388, 0x0, 0x19, 0x0, 0x0, 0x0, 0x2f0, 0x1f0, 0x1f0, 0x2f0, 0x1f0, 0x3, 0x0, {[{{@ip={@private, @dev, 0x0, 0x0, 'wlan1\x00', 'wg1\x00'}, 0x0, 0x200, 0x220, 0x0, {0x0, 0xffffffffa0028000}, [@common=@set={{0x40}, {{0x4, [0x4, 0x2, 0xa, 0x6, 0x8, 0x2], 0x2, 0x2}}}, @common=@inet=@hashlimit2={{0x150}, {'veth1\x00', {0x0, 0x8, 0x40, 0x0, 0x0, 0x687c, 0x93}}}]}, @unspec=@TRACE={0x20}}, {{@ip={@empty, @empty, 0x0, 0x0, 'veth0_vlan\x00', 'netpci0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x0, 0x3]}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3e8) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000000)={@empty, @local, 0x0}, &(0x7f0000000040)=0xc) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r9, 0x89f1, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000380)={'syztnl2\x00', r10, 0x700, 0x40, 0x2, 0x5, {{0x35, 0x4, 0x1, 0x1, 0xd4, 0x0, 0x0, 0x3f, 0x4, 0x0, @remote, @loopback, {[@ssrr={0x89, 0x13, 0xe2, [@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @remote]}, @noop, @ra={0x94, 0x4, 0x1}, @generic={0x82, 0x5, "058716"}, @lsrr={0x83, 0x1f, 0xa9, [@rand_addr=0x64010101, @broadcast, @remote, @multicast2, @broadcast, @private=0xa010102, @empty]}, @timestamp_addr={0x44, 0x3c, 0x6d, 0x1, 0xa, [{@local, 0x9}, {@local}, {@local, 0xfffffffd}, {@local, 0x80000000}, {@broadcast, 0x7fff}, {@broadcast, 0x7ff}, {@multicast1, 0x1}]}, @timestamp={0x44, 0xc, 0x34, 0x0, 0x0, [0x5, 0x2]}, @generic={0x83, 0xf, "1ce281af4e35b1745d312aa54b"}, @ssrr={0x89, 0x27, 0x88, [@remote, @multicast1, @empty, @multicast1, @rand_addr=0x64010101, @loopback, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1]}, @generic={0x7, 0x3, '/'}]}}}}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f0000000180)={&(0x7f0000000840)=ANY=[@ANYBLOB="780000005400010026bd7000fbdbdf2507000000", @ANYRESOCT=r8, @ANYBLOB="ed8e0100", @ANYRES32=r10, @ANYBLOB="000201006401010200000000000000000000000086dd000020000100", @ANYRES32, @ANYBLOB="01050300ac1e000100000000000000000000000086dd000020000100", @ANYRES32, @ANYBLOB="010100002001000000000000000000000000000096dd0000"], 0x78}, 0x1, 0x0, 0x0, 0x8840}, 0x4008040) sendmsg$nl_route_sched(r1, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000600)=@newtclass={0x64, 0x28, 0x10, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0x5, 0x1d}, {0xfff1, 0xf}, {0x2, 0xb}}, [@tclass_kind_options=@c_drr={{0x8}, {0xc, 0x2, @TCA_DRR_QUANTUM={0x8}}}, @tclass_kind_options=@c_taprio={0xb}, @tclass_kind_options=@c_mq={0x7}, @tclass_kind_options=@c_netem={0xa}, @tclass_kind_options=@c_multiq={0xb}]}, 0x64}, 0x1, 0x0, 0x0, 0x4008180}, 0x40010) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newtfilter={0x6c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x3c, 0x2, [@TCA_BASIC_EMATCHES={0x38, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x2c, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1}, @TCF_EM_META={0x18, 0x2, 0x0, 0x0, {{}, [@TCA_EM_META_HDR={0xc}]}}]}]}]}}]}, 0x6c}}, 0x0) [ 2498.428486][T28977] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2498.452715][T28977] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 00:41:38 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000f000000850000007500000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r6, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x41, 0x3, 0x230, 0x0, 0x19, 0x0, 0x0, 0x0, 0x2e8, 0x1f0, 0x1f0, 0x2e8, 0x1f0, 0x3, 0x0, {[{{@ip={@private, @dev, 0x0, 0x0, 'wlan1\x00', 'wg1\x00'}, 0x0, 0xa8, 0xc8, 0x0, {0x0, 0xffffffffa0028000}, [@common=@unspec=@quota={{0x38}}]}, @unspec=@TRACE={0x20}}, {{@ip={@empty, @empty, 0x0, 0x0, 'veth0_vlan\x00', 'netpci0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x290) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000000)={@empty, @local, 0x0}, &(0x7f0000000040)=0xc) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000380)=ANY=[@ANYBLOB="72797a746e6c32000000000010bd084f", @ANYRES32=r7, @ANYBLOB="070000400000000200000005450500d4006700003f049078ac1414bb7f0000018913e2e0000001ac1e0001ffffffffac1414bb01940401008205058716831fa964010101ffffffffac1414bbe0000002ffffffff0a01010200000000443c6da1ac1414aa00000009ac14141c00000000ac1414aafffffffdac1414aa80000000ffffffff00007fffffffffff000007ffe000000100000001440c34000000000500000002830f1ce281af4e35b1745d312aa54b892788ac1414bbe000000100000000e0000001640101017f00000164010100ac1e0001e000000107032f000000"]}) r9 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r9, 0x4000000000000, 0x40, &(0x7f0000000900)=@raw={'raw\x00', 0x41, 0x3, 0x388, 0x0, 0x19, 0x0, 0x0, 0x0, 0x2f0, 0x1f0, 0x1f0, 0x2f0, 0x1f0, 0x3, 0x0, {[{{@ip={@private, @dev, 0x0, 0x0, 'wlan1\x00', 'wg1\x00'}, 0x0, 0x200, 0x220, 0x0, {0x0, 0xffffffffa0028000}, [@common=@set={{0x40}, {{0x4, [0x4, 0x2, 0xa, 0x6, 0x8, 0x2], 0x2, 0x2}}}, @common=@inet=@hashlimit2={{0x150}, {'veth1\x00', {0x0, 0x8, 0x40, 0x0, 0x0, 0x687c, 0x93}}}]}, @unspec=@TRACE={0x20}}, {{@ip={@empty, @empty, 0x0, 0x0, 'veth0_vlan\x00', 'netpci0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x0, 0x3]}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3e8) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000000)={@empty, @local, 0x0}, &(0x7f0000000040)=0xc) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r9, 0x89f1, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000380)={'syztnl2\x00', r10, 0x700, 0x40, 0x2, 0x5, {{0x35, 0x4, 0x1, 0x1, 0xd4, 0x0, 0x0, 0x3f, 0x4, 0x0, @remote, @loopback, {[@ssrr={0x89, 0x13, 0xe2, [@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @remote]}, @noop, @ra={0x94, 0x4, 0x1}, @generic={0x82, 0x5, "058716"}, @lsrr={0x83, 0x1f, 0xa9, [@rand_addr=0x64010101, @broadcast, @remote, @multicast2, @broadcast, @private=0xa010102, @empty]}, @timestamp_addr={0x44, 0x3c, 0x6d, 0x1, 0xa, [{@local, 0x9}, {@local}, {@local, 0xfffffffd}, {@local, 0x80000000}, {@broadcast, 0x7fff}, {@broadcast, 0x7ff}, {@multicast1, 0x1}]}, @timestamp={0x44, 0xc, 0x34, 0x0, 0x0, [0x5, 0x2]}, @generic={0x83, 0xf, "1ce281af4e35b1745d312aa54b"}, @ssrr={0x89, 0x27, 0x88, [@remote, @multicast1, @empty, @multicast1, @rand_addr=0x64010101, @loopback, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1]}, @generic={0x7, 0x3, '/'}]}}}}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f0000000180)={&(0x7f0000000840)=ANY=[@ANYBLOB="780000005400010026bd7000fbdbdf2507000000", @ANYRESOCT=r8, @ANYBLOB="ed8e0100", @ANYRES32=r10, @ANYBLOB="000201006401010200000000000000000000000086dd000020000100", @ANYRES32, @ANYBLOB="01050300ac1e000100000000000000000000000086dd000020000100", @ANYRES32, @ANYBLOB="010100002001000000000000000000000000000096dd0000"], 0x78}, 0x1, 0x0, 0x0, 0x8840}, 0x4008040) sendmsg$nl_route_sched(r1, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000600)=@newtclass={0x64, 0x28, 0x10, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0x5, 0x1d}, {0xfff1, 0xf}, {0x2, 0xb}}, [@tclass_kind_options=@c_drr={{0x8}, {0xc, 0x2, @TCA_DRR_QUANTUM={0x8}}}, @tclass_kind_options=@c_taprio={0xb}, @tclass_kind_options=@c_mq={0x7}, @tclass_kind_options=@c_netem={0xa}, @tclass_kind_options=@c_multiq={0xb}]}, 0x64}, 0x1, 0x0, 0x0, 0x4008180}, 0x40010) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newtfilter={0x6c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x3c, 0x2, [@TCA_BASIC_EMATCHES={0x38, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x2c, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1}, @TCF_EM_META={0x18, 0x2, 0x0, 0x0, {{}, [@TCA_EM_META_HDR={0xc}]}}]}]}]}}]}, 0x6c}}, 0x0) [ 2499.211819][T28981] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2499.288613][T28981] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 00:41:39 executing program 1: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r0, 0x0, 0x0, 0x40, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev}, 0x20) 00:41:39 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000f000000850000007500000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r6, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x41, 0x3, 0x230, 0x0, 0x19, 0x0, 0x0, 0x0, 0x2e8, 0x1f0, 0x1f0, 0x2e8, 0x1f0, 0x3, 0x0, {[{{@ip={@private, @dev, 0x0, 0x0, 'wlan1\x00', 'wg1\x00'}, 0x0, 0xa8, 0xc8, 0x0, {0x0, 0xffffffffa0028000}, [@common=@unspec=@quota={{0x38}}]}, @unspec=@TRACE={0x20}}, {{@ip={@empty, @empty, 0x0, 0x0, 'veth0_vlan\x00', 'netpci0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x290) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000000)={@empty, @local, 0x0}, &(0x7f0000000040)=0xc) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000380)=ANY=[@ANYBLOB="72797a746e6c32000000000010bd084f", @ANYRES32=r7, @ANYBLOB="070000400000000200000005450500d4006700003f049078ac1414bb7f0000018913e2e0000001ac1e0001ffffffffac1414bb01940401008205058716831fa964010101ffffffffac1414bbe0000002ffffffff0a01010200000000443c6da1ac1414aa00000009ac14141c00000000ac1414aafffffffdac1414aa80000000ffffffff00007fffffffffff000007ffe000000100000001440c34000000000500000002830f1ce281af4e35b1745d312aa54b892788ac1414bbe000000100000000e0000001640101017f00000164010100ac1e0001e000000107032f000000"]}) r9 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r9, 0x4000000000000, 0x40, &(0x7f0000000900)=@raw={'raw\x00', 0x41, 0x3, 0x388, 0x0, 0x19, 0x0, 0x0, 0x0, 0x2f0, 0x1f0, 0x1f0, 0x2f0, 0x1f0, 0x3, 0x0, {[{{@ip={@private, @dev, 0x0, 0x0, 'wlan1\x00', 'wg1\x00'}, 0x0, 0x200, 0x220, 0x0, {0x0, 0xffffffffa0028000}, [@common=@set={{0x40}, {{0x4, [0x4, 0x2, 0xa, 0x6, 0x8, 0x2], 0x2, 0x2}}}, @common=@inet=@hashlimit2={{0x150}, {'veth1\x00', {0x0, 0x8, 0x40, 0x0, 0x0, 0x687c, 0x93}}}]}, @unspec=@TRACE={0x20}}, {{@ip={@empty, @empty, 0x0, 0x0, 'veth0_vlan\x00', 'netpci0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x0, 0x3]}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3e8) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000000)={@empty, @local, 0x0}, &(0x7f0000000040)=0xc) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r9, 0x89f1, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000380)={'syztnl2\x00', r10, 0x700, 0x40, 0x2, 0x5, {{0x35, 0x4, 0x1, 0x1, 0xd4, 0x0, 0x0, 0x3f, 0x4, 0x0, @remote, @loopback, {[@ssrr={0x89, 0x13, 0xe2, [@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @remote]}, @noop, @ra={0x94, 0x4, 0x1}, @generic={0x82, 0x5, "058716"}, @lsrr={0x83, 0x1f, 0xa9, [@rand_addr=0x64010101, @broadcast, @remote, @multicast2, @broadcast, @private=0xa010102, @empty]}, @timestamp_addr={0x44, 0x3c, 0x6d, 0x1, 0xa, [{@local, 0x9}, {@local}, {@local, 0xfffffffd}, {@local, 0x80000000}, {@broadcast, 0x7fff}, {@broadcast, 0x7ff}, {@multicast1, 0x1}]}, @timestamp={0x44, 0xc, 0x34, 0x0, 0x0, [0x5, 0x2]}, @generic={0x83, 0xf, "1ce281af4e35b1745d312aa54b"}, @ssrr={0x89, 0x27, 0x88, [@remote, @multicast1, @empty, @multicast1, @rand_addr=0x64010101, @loopback, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1]}, @generic={0x7, 0x3, '/'}]}}}}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f0000000180)={&(0x7f0000000840)=ANY=[@ANYBLOB="780000005400010026bd7000fbdbdf2507000000", @ANYRESOCT=r8, @ANYBLOB="ed8e0100", @ANYRES32=r10, @ANYBLOB="000201006401010200000000000000000000000086dd000020000100", @ANYRES32, @ANYBLOB="01050300ac1e000100000000000000000000000086dd000020000100", @ANYRES32, @ANYBLOB="010100002001000000000000000000000000000096dd0000"], 0x78}, 0x1, 0x0, 0x0, 0x8840}, 0x4008040) sendmsg$nl_route_sched(r1, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000600)=@newtclass={0x64, 0x28, 0x10, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0x5, 0x1d}, {0xfff1, 0xf}, {0x2, 0xb}}, [@tclass_kind_options=@c_drr={{0x8}, {0xc, 0x2, @TCA_DRR_QUANTUM={0x8}}}, @tclass_kind_options=@c_netem={0xa}, @tclass_kind_options=@c_mq={0x7}, @tclass_kind_options=@c_netem={0xa}, @tclass_kind_options=@c_multiq={0xb}]}, 0x64}, 0x1, 0x0, 0x0, 0x4008180}, 0x40010) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newtfilter={0x6c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x3c, 0x2, [@TCA_BASIC_EMATCHES={0x38, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x2c, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1}, @TCF_EM_META={0x18, 0x2, 0x0, 0x0, {{}, [@TCA_EM_META_HDR={0xc}]}}]}]}]}}]}, 0x6c}}, 0x0) [ 2499.915134][T28985] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2499.951782][T28985] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 00:41:40 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000f000000850000007500000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r6, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x41, 0x3, 0x230, 0x0, 0x19, 0x0, 0x0, 0x0, 0x2e8, 0x1f0, 0x1f0, 0x2e8, 0x1f0, 0x3, 0x0, {[{{@ip={@private, @dev, 0x0, 0x0, 'wlan1\x00', 'wg1\x00'}, 0x0, 0xa8, 0xc8, 0x0, {0x0, 0xffffffffa0028000}, [@common=@unspec=@quota={{0x38}}]}, @unspec=@TRACE={0x20}}, {{@ip={@empty, @empty, 0x0, 0x0, 'veth0_vlan\x00', 'netpci0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x290) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000000)={@empty, @local, 0x0}, &(0x7f0000000040)=0xc) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000380)=ANY=[@ANYBLOB="72797a746e6c32000000000010bd084f", @ANYRES32=r7, @ANYBLOB="070000400000000200000005450500d4006700003f049078ac1414bb7f0000018913e2e0000001ac1e0001ffffffffac1414bb01940401008205058716831fa964010101ffffffffac1414bbe0000002ffffffff0a01010200000000443c6da1ac1414aa00000009ac14141c00000000ac1414aafffffffdac1414aa80000000ffffffff00007fffffffffff000007ffe000000100000001440c34000000000500000002830f1ce281af4e35b1745d312aa54b892788ac1414bbe000000100000000e0000001640101017f00000164010100ac1e0001e000000107032f000000"]}) r9 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r9, 0x4000000000000, 0x40, &(0x7f0000000900)=@raw={'raw\x00', 0x41, 0x3, 0x388, 0x0, 0x19, 0x0, 0x0, 0x0, 0x2f0, 0x1f0, 0x1f0, 0x2f0, 0x1f0, 0x3, 0x0, {[{{@ip={@private, @dev, 0x0, 0x0, 'wlan1\x00', 'wg1\x00'}, 0x0, 0x200, 0x220, 0x0, {0x0, 0xffffffffa0028000}, [@common=@set={{0x40}, {{0x4, [0x4, 0x2, 0xa, 0x6, 0x8, 0x2], 0x2, 0x2}}}, @common=@inet=@hashlimit2={{0x150}, {'veth1\x00', {0x0, 0x8, 0x40, 0x0, 0x0, 0x687c, 0x93}}}]}, @unspec=@TRACE={0x20}}, {{@ip={@empty, @empty, 0x0, 0x0, 'veth0_vlan\x00', 'netpci0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x0, 0x3]}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3e8) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000000)={@empty, @local, 0x0}, &(0x7f0000000040)=0xc) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r9, 0x89f1, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000380)={'syztnl2\x00', r10, 0x700, 0x40, 0x2, 0x5, {{0x35, 0x4, 0x1, 0x1, 0xd4, 0x0, 0x0, 0x3f, 0x4, 0x0, @remote, @loopback, {[@ssrr={0x89, 0x13, 0xe2, [@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @remote]}, @noop, @ra={0x94, 0x4, 0x1}, @generic={0x82, 0x5, "058716"}, @lsrr={0x83, 0x1f, 0xa9, [@rand_addr=0x64010101, @broadcast, @remote, @multicast2, @broadcast, @private=0xa010102, @empty]}, @timestamp_addr={0x44, 0x3c, 0x6d, 0x1, 0xa, [{@local, 0x9}, {@local}, {@local, 0xfffffffd}, {@local, 0x80000000}, {@broadcast, 0x7fff}, {@broadcast, 0x7ff}, {@multicast1, 0x1}]}, @timestamp={0x44, 0xc, 0x34, 0x0, 0x0, [0x5, 0x2]}, @generic={0x83, 0xf, "1ce281af4e35b1745d312aa54b"}, @ssrr={0x89, 0x27, 0x88, [@remote, @multicast1, @empty, @multicast1, @rand_addr=0x64010101, @loopback, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1]}, @generic={0x7, 0x3, '/'}]}}}}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f0000000180)={&(0x7f0000000840)=ANY=[@ANYBLOB="780000005400010026bd7000fbdbdf2507000000", @ANYRESOCT=r8, @ANYBLOB="ed8e0100", @ANYRES32=r10, @ANYBLOB="000201006401010200000000000000000000000086dd000020000100", @ANYRES32, @ANYBLOB="01050300ac1e000100000000000000000000000086dd000020000100", @ANYRES32, @ANYBLOB="010100002001000000000000000000000000000096dd0000"], 0x78}, 0x1, 0x0, 0x0, 0x8840}, 0x4008040) sendmsg$nl_route_sched(r1, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000600)=@newtclass={0x64, 0x28, 0x10, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0x5, 0x1d}, {0xfff1, 0xf}, {0x2, 0xb}}, [@tclass_kind_options=@c_drr={{0x8}, {0xc, 0x2, @TCA_DRR_QUANTUM={0x8}}}, @tclass_kind_options=@c_netem={0xa}, @tclass_kind_options=@c_mq={0x7}, @tclass_kind_options=@c_netem={0xa}, @tclass_kind_options=@c_multiq={0xb}]}, 0x64}, 0x1, 0x0, 0x0, 0x4008180}, 0x40010) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newtfilter={0x6c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x3c, 0x2, [@TCA_BASIC_EMATCHES={0x38, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x2c, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1}, @TCF_EM_META={0x18, 0x2, 0x0, 0x0, {{}, [@TCA_EM_META_HDR={0xc}]}}]}]}]}}]}, 0x6c}}, 0x0) 00:41:40 executing program 1: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r0, 0x0, 0x0, 0x40, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev}, 0x20) 00:41:40 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000f000000850000007500000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r6, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x41, 0x3, 0x230, 0x0, 0x19, 0x0, 0x0, 0x0, 0x2e8, 0x1f0, 0x1f0, 0x2e8, 0x1f0, 0x3, 0x0, {[{{@ip={@private, @dev, 0x0, 0x0, 'wlan1\x00', 'wg1\x00'}, 0x0, 0xa8, 0xc8, 0x0, {0x0, 0xffffffffa0028000}, [@common=@unspec=@quota={{0x38}}]}, @unspec=@TRACE={0x20}}, {{@ip={@empty, @empty, 0x0, 0x0, 'veth0_vlan\x00', 'netpci0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x290) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000000)={@empty, @local, 0x0}, &(0x7f0000000040)=0xc) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000380)=ANY=[@ANYBLOB="72797a746e6c32000000000010bd084f", @ANYRES32=r7, @ANYBLOB="070000400000000200000005450500d4006700003f049078ac1414bb7f0000018913e2e0000001ac1e0001ffffffffac1414bb01940401008205058716831fa964010101ffffffffac1414bbe0000002ffffffff0a01010200000000443c6da1ac1414aa00000009ac14141c00000000ac1414aafffffffdac1414aa80000000ffffffff00007fffffffffff000007ffe000000100000001440c34000000000500000002830f1ce281af4e35b1745d312aa54b892788ac1414bbe000000100000000e0000001640101017f00000164010100ac1e0001e000000107032f000000"]}) r9 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r9, 0x4000000000000, 0x40, &(0x7f0000000900)=@raw={'raw\x00', 0x41, 0x3, 0x388, 0x0, 0x19, 0x0, 0x0, 0x0, 0x2f0, 0x1f0, 0x1f0, 0x2f0, 0x1f0, 0x3, 0x0, {[{{@ip={@private, @dev, 0x0, 0x0, 'wlan1\x00', 'wg1\x00'}, 0x0, 0x200, 0x220, 0x0, {0x0, 0xffffffffa0028000}, [@common=@set={{0x40}, {{0x4, [0x4, 0x2, 0xa, 0x6, 0x8, 0x2], 0x2, 0x2}}}, @common=@inet=@hashlimit2={{0x150}, {'veth1\x00', {0x0, 0x8, 0x40, 0x0, 0x0, 0x687c, 0x93}}}]}, @unspec=@TRACE={0x20}}, {{@ip={@empty, @empty, 0x0, 0x0, 'veth0_vlan\x00', 'netpci0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x0, 0x3]}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3e8) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000000)={@empty, @local, 0x0}, &(0x7f0000000040)=0xc) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r9, 0x89f1, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000380)={'syztnl2\x00', r10, 0x700, 0x40, 0x2, 0x5, {{0x35, 0x4, 0x1, 0x1, 0xd4, 0x0, 0x0, 0x3f, 0x4, 0x0, @remote, @loopback, {[@ssrr={0x89, 0x13, 0xe2, [@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @remote]}, @noop, @ra={0x94, 0x4, 0x1}, @generic={0x82, 0x5, "058716"}, @lsrr={0x83, 0x1f, 0xa9, [@rand_addr=0x64010101, @broadcast, @remote, @multicast2, @broadcast, @private=0xa010102, @empty]}, @timestamp_addr={0x44, 0x3c, 0x6d, 0x1, 0xa, [{@local, 0x9}, {@local}, {@local, 0xfffffffd}, {@local, 0x80000000}, {@broadcast, 0x7fff}, {@broadcast, 0x7ff}, {@multicast1, 0x1}]}, @timestamp={0x44, 0xc, 0x34, 0x0, 0x0, [0x5, 0x2]}, @generic={0x83, 0xf, "1ce281af4e35b1745d312aa54b"}, @ssrr={0x89, 0x27, 0x88, [@remote, @multicast1, @empty, @multicast1, @rand_addr=0x64010101, @loopback, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1]}, @generic={0x7, 0x3, '/'}]}}}}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f0000000180)={&(0x7f0000000840)=ANY=[@ANYBLOB="780000005400010026bd7000fbdbdf2507000000", @ANYRESOCT=r8, @ANYBLOB="ed8e0100", @ANYRES32=r10, @ANYBLOB="000201006401010200000000000000000000000086dd000020000100", @ANYRES32, @ANYBLOB="01050300ac1e000100000000000000000000000086dd000020000100", @ANYRES32, @ANYBLOB="010100002001000000000000000000000000000096dd0000"], 0x78}, 0x1, 0x0, 0x0, 0x8840}, 0x4008040) sendmsg$nl_route_sched(r1, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000600)=@newtclass={0x64, 0x28, 0x10, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0x5, 0x1d}, {0xfff1, 0xf}, {0x2, 0xb}}, [@tclass_kind_options=@c_drr={{0x8}, {0xc, 0x2, @TCA_DRR_QUANTUM={0x8}}}, @tclass_kind_options=@c_netem={0xa}, @tclass_kind_options=@c_mq={0x7}, @tclass_kind_options=@c_netem={0xa}, @tclass_kind_options=@c_multiq={0xb}]}, 0x64}, 0x1, 0x0, 0x0, 0x4008180}, 0x40010) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newtfilter={0x6c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x3c, 0x2, [@TCA_BASIC_EMATCHES={0x38, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x2c, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1}, @TCF_EM_META={0x18, 0x2, 0x0, 0x0, {{}, [@TCA_EM_META_HDR={0xc}]}}]}]}]}}]}, 0x6c}}, 0x0) 00:41:41 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000f000000850000007500000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r6, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x41, 0x3, 0x230, 0x0, 0x19, 0x0, 0x0, 0x0, 0x2e8, 0x1f0, 0x1f0, 0x2e8, 0x1f0, 0x3, 0x0, {[{{@ip={@private, @dev, 0x0, 0x0, 'wlan1\x00', 'wg1\x00'}, 0x0, 0xa8, 0xc8, 0x0, {0x0, 0xffffffffa0028000}, [@common=@unspec=@quota={{0x38}}]}, @unspec=@TRACE={0x20}}, {{@ip={@empty, @empty, 0x0, 0x0, 'veth0_vlan\x00', 'netpci0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x290) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000000)={@empty, @local, 0x0}, &(0x7f0000000040)=0xc) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000380)=ANY=[@ANYBLOB="72797a746e6c32000000000010bd084f", @ANYRES32=r7, @ANYBLOB="070000400000000200000005450500d4006700003f049078ac1414bb7f0000018913e2e0000001ac1e0001ffffffffac1414bb01940401008205058716831fa964010101ffffffffac1414bbe0000002ffffffff0a01010200000000443c6da1ac1414aa00000009ac14141c00000000ac1414aafffffffdac1414aa80000000ffffffff00007fffffffffff000007ffe000000100000001440c34000000000500000002830f1ce281af4e35b1745d312aa54b892788ac1414bbe000000100000000e0000001640101017f00000164010100ac1e0001e000000107032f000000"]}) r9 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r9, 0x4000000000000, 0x40, &(0x7f0000000900)=@raw={'raw\x00', 0x41, 0x3, 0x388, 0x0, 0x19, 0x0, 0x0, 0x0, 0x2f0, 0x1f0, 0x1f0, 0x2f0, 0x1f0, 0x3, 0x0, {[{{@ip={@private, @dev, 0x0, 0x0, 'wlan1\x00', 'wg1\x00'}, 0x0, 0x200, 0x220, 0x0, {0x0, 0xffffffffa0028000}, [@common=@set={{0x40}, {{0x4, [0x4, 0x2, 0xa, 0x6, 0x8, 0x2], 0x2, 0x2}}}, @common=@inet=@hashlimit2={{0x150}, {'veth1\x00', {0x0, 0x8, 0x40, 0x0, 0x0, 0x687c, 0x93}}}]}, @unspec=@TRACE={0x20}}, {{@ip={@empty, @empty, 0x0, 0x0, 'veth0_vlan\x00', 'netpci0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x0, 0x3]}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3e8) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000000)={@empty, @local, 0x0}, &(0x7f0000000040)=0xc) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r9, 0x89f1, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000380)={'syztnl2\x00', r10, 0x700, 0x40, 0x2, 0x5, {{0x35, 0x4, 0x1, 0x1, 0xd4, 0x0, 0x0, 0x3f, 0x4, 0x0, @remote, @loopback, {[@ssrr={0x89, 0x13, 0xe2, [@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @remote]}, @noop, @ra={0x94, 0x4, 0x1}, @generic={0x82, 0x5, "058716"}, @lsrr={0x83, 0x1f, 0xa9, [@rand_addr=0x64010101, @broadcast, @remote, @multicast2, @broadcast, @private=0xa010102, @empty]}, @timestamp_addr={0x44, 0x3c, 0x6d, 0x1, 0xa, [{@local, 0x9}, {@local}, {@local, 0xfffffffd}, {@local, 0x80000000}, {@broadcast, 0x7fff}, {@broadcast, 0x7ff}, {@multicast1, 0x1}]}, @timestamp={0x44, 0xc, 0x34, 0x0, 0x0, [0x5, 0x2]}, @generic={0x83, 0xf, "1ce281af4e35b1745d312aa54b"}, @ssrr={0x89, 0x27, 0x88, [@remote, @multicast1, @empty, @multicast1, @rand_addr=0x64010101, @loopback, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1]}, @generic={0x7, 0x3, '/'}]}}}}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f0000000180)={&(0x7f0000000840)=ANY=[@ANYBLOB="780000005400010026bd7000fbdbdf2507000000", @ANYRESOCT=r8, @ANYBLOB="ed8e0100", @ANYRES32=r10, @ANYBLOB="000201006401010200000000000000000000000086dd000020000100", @ANYRES32, @ANYBLOB="01050300ac1e000100000000000000000000000086dd000020000100", @ANYRES32, @ANYBLOB="010100002001000000000000000000000000000096dd0000"], 0x78}, 0x1, 0x0, 0x0, 0x8840}, 0x4008040) sendmsg$nl_route_sched(r1, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000600)=@newtclass={0x5c, 0x28, 0x10, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0x5, 0x1d}, {0xfff1, 0xf}, {0x2, 0xb}}, [@tclass_kind_options=@c_taprio={0xb}, @tclass_kind_options=@c_netem={0xa}, @tclass_kind_options=@c_mq={0x7}, @tclass_kind_options=@c_netem={0xa}, @tclass_kind_options=@c_multiq={0xb}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4008180}, 0x40010) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newtfilter={0x6c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x3c, 0x2, [@TCA_BASIC_EMATCHES={0x38, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x2c, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1}, @TCF_EM_META={0x18, 0x2, 0x0, 0x0, {{}, [@TCA_EM_META_HDR={0xc}]}}]}]}]}}]}, 0x6c}}, 0x0) 00:41:41 executing program 1: sendto$l2tp6(0xffffffffffffffff, 0x0, 0x0, 0x40, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev}, 0x20) 00:41:41 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000f000000850000007500000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r6, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x41, 0x3, 0x230, 0x0, 0x19, 0x0, 0x0, 0x0, 0x2e8, 0x1f0, 0x1f0, 0x2e8, 0x1f0, 0x3, 0x0, {[{{@ip={@private, @dev, 0x0, 0x0, 'wlan1\x00', 'wg1\x00'}, 0x0, 0xa8, 0xc8, 0x0, {0x0, 0xffffffffa0028000}, [@common=@unspec=@quota={{0x38}}]}, @unspec=@TRACE={0x20}}, {{@ip={@empty, @empty, 0x0, 0x0, 'veth0_vlan\x00', 'netpci0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x290) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000000)={@empty, @local, 0x0}, &(0x7f0000000040)=0xc) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000380)=ANY=[@ANYBLOB="72797a746e6c32000000000010bd084f", @ANYRES32=r7, @ANYBLOB="070000400000000200000005450500d4006700003f049078ac1414bb7f0000018913e2e0000001ac1e0001ffffffffac1414bb01940401008205058716831fa964010101ffffffffac1414bbe0000002ffffffff0a01010200000000443c6da1ac1414aa00000009ac14141c00000000ac1414aafffffffdac1414aa80000000ffffffff00007fffffffffff000007ffe000000100000001440c34000000000500000002830f1ce281af4e35b1745d312aa54b892788ac1414bbe000000100000000e0000001640101017f00000164010100ac1e0001e000000107032f000000"]}) r9 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r9, 0x4000000000000, 0x40, &(0x7f0000000900)=@raw={'raw\x00', 0x41, 0x3, 0x388, 0x0, 0x19, 0x0, 0x0, 0x0, 0x2f0, 0x1f0, 0x1f0, 0x2f0, 0x1f0, 0x3, 0x0, {[{{@ip={@private, @dev, 0x0, 0x0, 'wlan1\x00', 'wg1\x00'}, 0x0, 0x200, 0x220, 0x0, {0x0, 0xffffffffa0028000}, [@common=@set={{0x40}, {{0x4, [0x4, 0x2, 0xa, 0x6, 0x8, 0x2], 0x2, 0x2}}}, @common=@inet=@hashlimit2={{0x150}, {'veth1\x00', {0x0, 0x8, 0x40, 0x0, 0x0, 0x687c, 0x93}}}]}, @unspec=@TRACE={0x20}}, {{@ip={@empty, @empty, 0x0, 0x0, 'veth0_vlan\x00', 'netpci0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x0, 0x3]}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3e8) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000000)={@empty, @local, 0x0}, &(0x7f0000000040)=0xc) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r9, 0x89f1, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000380)={'syztnl2\x00', r10, 0x700, 0x40, 0x2, 0x5, {{0x35, 0x4, 0x1, 0x1, 0xd4, 0x0, 0x0, 0x3f, 0x4, 0x0, @remote, @loopback, {[@ssrr={0x89, 0x13, 0xe2, [@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @remote]}, @noop, @ra={0x94, 0x4, 0x1}, @generic={0x82, 0x5, "058716"}, @lsrr={0x83, 0x1f, 0xa9, [@rand_addr=0x64010101, @broadcast, @remote, @multicast2, @broadcast, @private=0xa010102, @empty]}, @timestamp_addr={0x44, 0x3c, 0x6d, 0x1, 0xa, [{@local, 0x9}, {@local}, {@local, 0xfffffffd}, {@local, 0x80000000}, {@broadcast, 0x7fff}, {@broadcast, 0x7ff}, {@multicast1, 0x1}]}, @timestamp={0x44, 0xc, 0x34, 0x0, 0x0, [0x5, 0x2]}, @generic={0x83, 0xf, "1ce281af4e35b1745d312aa54b"}, @ssrr={0x89, 0x27, 0x88, [@remote, @multicast1, @empty, @multicast1, @rand_addr=0x64010101, @loopback, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1]}, @generic={0x7, 0x3, '/'}]}}}}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f0000000180)={&(0x7f0000000840)=ANY=[@ANYBLOB="780000005400010026bd7000fbdbdf2507000000", @ANYRESOCT=r8, @ANYBLOB="ed8e0100", @ANYRES32=r10, @ANYBLOB="000201006401010200000000000000000000000086dd000020000100", @ANYRES32, @ANYBLOB="01050300ac1e000100000000000000000000000086dd000020000100", @ANYRES32, @ANYBLOB="010100002001000000000000000000000000000096dd0000"], 0x78}, 0x1, 0x0, 0x0, 0x8840}, 0x4008040) sendmsg$nl_route_sched(r1, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000600)=@newtclass={0x5c, 0x28, 0x10, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0x5, 0x1d}, {0xfff1, 0xf}, {0x2, 0xb}}, [@tclass_kind_options=@c_taprio={0xb}, @tclass_kind_options=@c_netem={0xa}, @tclass_kind_options=@c_mq={0x7}, @tclass_kind_options=@c_netem={0xa}, @tclass_kind_options=@c_multiq={0xb}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4008180}, 0x40010) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newtfilter={0x6c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x3c, 0x2, [@TCA_BASIC_EMATCHES={0x38, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x2c, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1}, @TCF_EM_META={0x18, 0x2, 0x0, 0x0, {{}, [@TCA_EM_META_HDR={0xc}]}}]}]}]}}]}, 0x6c}}, 0x0) [ 2502.351861][T29000] __nla_validate_parse: 6 callbacks suppressed [ 2502.351981][T29000] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2502.412395][T29000] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 00:41:42 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000f000000850000007500000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r6, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x41, 0x3, 0x230, 0x0, 0x19, 0x0, 0x0, 0x0, 0x2e8, 0x1f0, 0x1f0, 0x2e8, 0x1f0, 0x3, 0x0, {[{{@ip={@private, @dev, 0x0, 0x0, 'wlan1\x00', 'wg1\x00'}, 0x0, 0xa8, 0xc8, 0x0, {0x0, 0xffffffffa0028000}, [@common=@unspec=@quota={{0x38}}]}, @unspec=@TRACE={0x20}}, {{@ip={@empty, @empty, 0x0, 0x0, 'veth0_vlan\x00', 'netpci0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x290) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000000)={@empty, @local, 0x0}, &(0x7f0000000040)=0xc) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000380)=ANY=[@ANYBLOB="72797a746e6c32000000000010bd084f", @ANYRES32=r7, @ANYBLOB="070000400000000200000005450500d4006700003f049078ac1414bb7f0000018913e2e0000001ac1e0001ffffffffac1414bb01940401008205058716831fa964010101ffffffffac1414bbe0000002ffffffff0a01010200000000443c6da1ac1414aa00000009ac14141c00000000ac1414aafffffffdac1414aa80000000ffffffff00007fffffffffff000007ffe000000100000001440c34000000000500000002830f1ce281af4e35b1745d312aa54b892788ac1414bbe000000100000000e0000001640101017f00000164010100ac1e0001e000000107032f000000"]}) r9 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r9, 0x4000000000000, 0x40, &(0x7f0000000900)=@raw={'raw\x00', 0x41, 0x3, 0x388, 0x0, 0x19, 0x0, 0x0, 0x0, 0x2f0, 0x1f0, 0x1f0, 0x2f0, 0x1f0, 0x3, 0x0, {[{{@ip={@private, @dev, 0x0, 0x0, 'wlan1\x00', 'wg1\x00'}, 0x0, 0x200, 0x220, 0x0, {0x0, 0xffffffffa0028000}, [@common=@set={{0x40}, {{0x4, [0x4, 0x2, 0xa, 0x6, 0x8, 0x2], 0x2, 0x2}}}, @common=@inet=@hashlimit2={{0x150}, {'veth1\x00', {0x0, 0x8, 0x40, 0x0, 0x0, 0x687c, 0x93}}}]}, @unspec=@TRACE={0x20}}, {{@ip={@empty, @empty, 0x0, 0x0, 'veth0_vlan\x00', 'netpci0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x0, 0x3]}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3e8) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000000)={@empty, @local, 0x0}, &(0x7f0000000040)=0xc) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r9, 0x89f1, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000380)={'syztnl2\x00', r10, 0x700, 0x40, 0x2, 0x5, {{0x35, 0x4, 0x1, 0x1, 0xd4, 0x0, 0x0, 0x3f, 0x4, 0x0, @remote, @loopback, {[@ssrr={0x89, 0x13, 0xe2, [@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @remote]}, @noop, @ra={0x94, 0x4, 0x1}, @generic={0x82, 0x5, "058716"}, @lsrr={0x83, 0x1f, 0xa9, [@rand_addr=0x64010101, @broadcast, @remote, @multicast2, @broadcast, @private=0xa010102, @empty]}, @timestamp_addr={0x44, 0x3c, 0x6d, 0x1, 0xa, [{@local, 0x9}, {@local}, {@local, 0xfffffffd}, {@local, 0x80000000}, {@broadcast, 0x7fff}, {@broadcast, 0x7ff}, {@multicast1, 0x1}]}, @timestamp={0x44, 0xc, 0x34, 0x0, 0x0, [0x5, 0x2]}, @generic={0x83, 0xf, "1ce281af4e35b1745d312aa54b"}, @ssrr={0x89, 0x27, 0x88, [@remote, @multicast1, @empty, @multicast1, @rand_addr=0x64010101, @loopback, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1]}, @generic={0x7, 0x3, '/'}]}}}}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f0000000180)={&(0x7f0000000840)=ANY=[@ANYBLOB="780000005400010026bd7000fbdbdf2507000000", @ANYRESOCT=r8, @ANYBLOB="ed8e0100", @ANYRES32=r10, @ANYBLOB="000201006401010200000000000000000000000086dd000020000100", @ANYRES32, @ANYBLOB="01050300ac1e000100000000000000000000000086dd000020000100", @ANYRES32, @ANYBLOB="010100002001000000000000000000000000000096dd0000"], 0x78}, 0x1, 0x0, 0x0, 0x8840}, 0x4008040) sendmsg$nl_route_sched(r1, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000600)=@newtclass={0x5c, 0x28, 0x10, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0x5, 0x1d}, {0xfff1, 0xf}, {0x2, 0xb}}, [@tclass_kind_options=@c_taprio={0xb}, @tclass_kind_options=@c_netem={0xa}, @tclass_kind_options=@c_mq={0x7}, @tclass_kind_options=@c_netem={0xa}, @tclass_kind_options=@c_multiq={0xb}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4008180}, 0x40010) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newtfilter={0x6c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x3c, 0x2, [@TCA_BASIC_EMATCHES={0x38, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x2c, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1}, @TCF_EM_META={0x18, 0x2, 0x0, 0x0, {{}, [@TCA_EM_META_HDR={0xc}]}}]}]}]}}]}, 0x6c}}, 0x0) [ 2502.991916][T29004] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2503.061948][T29004] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 00:41:43 executing program 1: sendto$l2tp6(0xffffffffffffffff, 0x0, 0x0, 0x40, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev}, 0x20) 00:41:43 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000f000000850000007500000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r6, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x41, 0x3, 0x230, 0x0, 0x19, 0x0, 0x0, 0x0, 0x2e8, 0x1f0, 0x1f0, 0x2e8, 0x1f0, 0x3, 0x0, {[{{@ip={@private, @dev, 0x0, 0x0, 'wlan1\x00', 'wg1\x00'}, 0x0, 0xa8, 0xc8, 0x0, {0x0, 0xffffffffa0028000}, [@common=@unspec=@quota={{0x38}}]}, @unspec=@TRACE={0x20}}, {{@ip={@empty, @empty, 0x0, 0x0, 'veth0_vlan\x00', 'netpci0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x290) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000000)={@empty, @local, 0x0}, &(0x7f0000000040)=0xc) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000380)=ANY=[@ANYBLOB="72797a746e6c32000000000010bd084f", @ANYRES32=r7, @ANYBLOB="070000400000000200000005450500d4006700003f049078ac1414bb7f0000018913e2e0000001ac1e0001ffffffffac1414bb01940401008205058716831fa964010101ffffffffac1414bbe0000002ffffffff0a01010200000000443c6da1ac1414aa00000009ac14141c00000000ac1414aafffffffdac1414aa80000000ffffffff00007fffffffffff000007ffe000000100000001440c34000000000500000002830f1ce281af4e35b1745d312aa54b892788ac1414bbe000000100000000e0000001640101017f00000164010100ac1e0001e000000107032f000000"]}) r9 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r9, 0x4000000000000, 0x40, &(0x7f0000000900)=@raw={'raw\x00', 0x41, 0x3, 0x388, 0x0, 0x19, 0x0, 0x0, 0x0, 0x2f0, 0x1f0, 0x1f0, 0x2f0, 0x1f0, 0x3, 0x0, {[{{@ip={@private, @dev, 0x0, 0x0, 'wlan1\x00', 'wg1\x00'}, 0x0, 0x200, 0x220, 0x0, {0x0, 0xffffffffa0028000}, [@common=@set={{0x40}, {{0x4, [0x4, 0x2, 0xa, 0x6, 0x8, 0x2], 0x2, 0x2}}}, @common=@inet=@hashlimit2={{0x150}, {'veth1\x00', {0x0, 0x8, 0x40, 0x0, 0x0, 0x687c, 0x93}}}]}, @unspec=@TRACE={0x20}}, {{@ip={@empty, @empty, 0x0, 0x0, 'veth0_vlan\x00', 'netpci0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x0, 0x3]}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3e8) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000000)={@empty, @local, 0x0}, &(0x7f0000000040)=0xc) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r9, 0x89f1, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000380)={'syztnl2\x00', r10, 0x700, 0x40, 0x2, 0x5, {{0x35, 0x4, 0x1, 0x1, 0xd4, 0x0, 0x0, 0x3f, 0x4, 0x0, @remote, @loopback, {[@ssrr={0x89, 0x13, 0xe2, [@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @remote]}, @noop, @ra={0x94, 0x4, 0x1}, @generic={0x82, 0x5, "058716"}, @lsrr={0x83, 0x1f, 0xa9, [@rand_addr=0x64010101, @broadcast, @remote, @multicast2, @broadcast, @private=0xa010102, @empty]}, @timestamp_addr={0x44, 0x3c, 0x6d, 0x1, 0xa, [{@local, 0x9}, {@local}, {@local, 0xfffffffd}, {@local, 0x80000000}, {@broadcast, 0x7fff}, {@broadcast, 0x7ff}, {@multicast1, 0x1}]}, @timestamp={0x44, 0xc, 0x34, 0x0, 0x0, [0x5, 0x2]}, @generic={0x83, 0xf, "1ce281af4e35b1745d312aa54b"}, @ssrr={0x89, 0x27, 0x88, [@remote, @multicast1, @empty, @multicast1, @rand_addr=0x64010101, @loopback, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1]}, @generic={0x7, 0x3, '/'}]}}}}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f0000000180)={&(0x7f0000000840)=ANY=[@ANYBLOB="780000005400010026bd7000fbdbdf2507000000", @ANYRESOCT=r8, @ANYBLOB="ed8e0100", @ANYRES32=r10, @ANYBLOB="000201006401010200000000000000000000000086dd000020000100", @ANYRES32, @ANYBLOB="01050300ac1e000100000000000000000000000086dd000020000100", @ANYRES32, @ANYBLOB="010100002001000000000000000000000000000096dd0000"], 0x78}, 0x1, 0x0, 0x0, 0x8840}, 0x4008040) sendmsg$nl_route_sched(r1, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000600)=@newtclass={0x4ac, 0x28, 0x10, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0x5, 0x1d}, {0xfff1, 0xf}, {0x2, 0xb}}, [@tclass_kind_options, @tclass_kind_options=@c_taprio={0xb}, @tclass_kind_options=@c_netem={0xa}, @tclass_kind_options=@c_mq={0x7}, @tclass_kind_options=@c_netem={0xa}, @tclass_kind_options=@c_multiq={0xb}]}, 0x4ac}}, 0x40010) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newtfilter={0x6c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x3c, 0x2, [@TCA_BASIC_EMATCHES={0x38, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x2c, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1}, @TCF_EM_META={0x18, 0x2, 0x0, 0x0, {{}, [@TCA_EM_META_HDR={0xc}]}}]}]}]}}]}, 0x6c}}, 0x0) [ 2503.853246][T29010] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2503.864225][T29010] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 00:41:43 executing program 1: sendto$l2tp6(0xffffffffffffffff, 0x0, 0x0, 0x40, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev}, 0x20) 00:41:44 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000f000000850000007500000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r6, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x41, 0x3, 0x230, 0x0, 0x19, 0x0, 0x0, 0x0, 0x2e8, 0x1f0, 0x1f0, 0x2e8, 0x1f0, 0x3, 0x0, {[{{@ip={@private, @dev, 0x0, 0x0, 'wlan1\x00', 'wg1\x00'}, 0x0, 0xa8, 0xc8, 0x0, {0x0, 0xffffffffa0028000}, [@common=@unspec=@quota={{0x38}}]}, @unspec=@TRACE={0x20}}, {{@ip={@empty, @empty, 0x0, 0x0, 'veth0_vlan\x00', 'netpci0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x290) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000000)={@empty, @local, 0x0}, &(0x7f0000000040)=0xc) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000380)=ANY=[@ANYBLOB="72797a746e6c32000000000010bd084f", @ANYRES32=r7, @ANYBLOB="070000400000000200000005450500d4006700003f049078ac1414bb7f0000018913e2e0000001ac1e0001ffffffffac1414bb01940401008205058716831fa964010101ffffffffac1414bbe0000002ffffffff0a01010200000000443c6da1ac1414aa00000009ac14141c00000000ac1414aafffffffdac1414aa80000000ffffffff00007fffffffffff000007ffe000000100000001440c34000000000500000002830f1ce281af4e35b1745d312aa54b892788ac1414bbe000000100000000e0000001640101017f00000164010100ac1e0001e000000107032f000000"]}) r9 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r9, 0x4000000000000, 0x40, &(0x7f0000000900)=@raw={'raw\x00', 0x41, 0x3, 0x388, 0x0, 0x19, 0x0, 0x0, 0x0, 0x2f0, 0x1f0, 0x1f0, 0x2f0, 0x1f0, 0x3, 0x0, {[{{@ip={@private, @dev, 0x0, 0x0, 'wlan1\x00', 'wg1\x00'}, 0x0, 0x200, 0x220, 0x0, {0x0, 0xffffffffa0028000}, [@common=@set={{0x40}, {{0x4, [0x4, 0x2, 0xa, 0x6, 0x8, 0x2], 0x2, 0x2}}}, @common=@inet=@hashlimit2={{0x150}, {'veth1\x00', {0x0, 0x8, 0x40, 0x0, 0x0, 0x687c, 0x93}}}]}, @unspec=@TRACE={0x20}}, {{@ip={@empty, @empty, 0x0, 0x0, 'veth0_vlan\x00', 'netpci0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x0, 0x3]}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3e8) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000000)={@empty, @local, 0x0}, &(0x7f0000000040)=0xc) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r9, 0x89f1, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000380)={'syztnl2\x00', r10, 0x700, 0x40, 0x2, 0x5, {{0x35, 0x4, 0x1, 0x1, 0xd4, 0x0, 0x0, 0x3f, 0x4, 0x0, @remote, @loopback, {[@ssrr={0x89, 0x13, 0xe2, [@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @remote]}, @noop, @ra={0x94, 0x4, 0x1}, @generic={0x82, 0x5, "058716"}, @lsrr={0x83, 0x1f, 0xa9, [@rand_addr=0x64010101, @broadcast, @remote, @multicast2, @broadcast, @private=0xa010102, @empty]}, @timestamp_addr={0x44, 0x3c, 0x6d, 0x1, 0xa, [{@local, 0x9}, {@local}, {@local, 0xfffffffd}, {@local, 0x80000000}, {@broadcast, 0x7fff}, {@broadcast, 0x7ff}, {@multicast1, 0x1}]}, @timestamp={0x44, 0xc, 0x34, 0x0, 0x0, [0x5, 0x2]}, @generic={0x83, 0xf, "1ce281af4e35b1745d312aa54b"}, @ssrr={0x89, 0x27, 0x88, [@remote, @multicast1, @empty, @multicast1, @rand_addr=0x64010101, @loopback, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1]}, @generic={0x7, 0x3, '/'}]}}}}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f0000000180)={&(0x7f0000000840)=ANY=[@ANYBLOB="780000005400010026bd7000fbdbdf2507000000", @ANYRESOCT=r8, @ANYBLOB="ed8e0100", @ANYRES32=r10, @ANYBLOB="000201006401010200000000000000000000000086dd000020000100", @ANYRES32, @ANYBLOB="01050300ac1e000100000000000000000000000086dd000020000100", @ANYRES32, @ANYBLOB="010100002001000000000000000000000000000096dd0000"], 0x78}, 0x1, 0x0, 0x0, 0x8840}, 0x4008040) sendmsg$nl_route_sched(r1, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000600)=@newtclass={0x4ac, 0x28, 0x10, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0x5, 0x1d}, {0xfff1, 0xf}, {0x2, 0xb}}, [@tclass_kind_options, @tclass_kind_options=@c_taprio={0xb}, @tclass_kind_options=@c_netem={0xa}, @tclass_kind_options=@c_mq={0x7}, @tclass_kind_options=@c_netem={0xa}, @tclass_kind_options=@c_multiq={0xb}]}, 0x4ac}}, 0x40010) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newtfilter={0x6c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x3c, 0x2, [@TCA_BASIC_EMATCHES={0x38, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x2c, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1}, @TCF_EM_META={0x18, 0x2, 0x0, 0x0, {{}, [@TCA_EM_META_HDR={0xc}]}}]}]}]}}]}, 0x6c}}, 0x0) [ 2504.752309][T29013] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2504.861443][T29013] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 00:41:45 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000f000000850000007500000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r6, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x41, 0x3, 0x230, 0x0, 0x19, 0x0, 0x0, 0x0, 0x2e8, 0x1f0, 0x1f0, 0x2e8, 0x1f0, 0x3, 0x0, {[{{@ip={@private, @dev, 0x0, 0x0, 'wlan1\x00', 'wg1\x00'}, 0x0, 0xa8, 0xc8, 0x0, {0x0, 0xffffffffa0028000}, [@common=@unspec=@quota={{0x38}}]}, @unspec=@TRACE={0x20}}, {{@ip={@empty, @empty, 0x0, 0x0, 'veth0_vlan\x00', 'netpci0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x290) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000000)={@empty, @local, 0x0}, &(0x7f0000000040)=0xc) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000380)=ANY=[@ANYBLOB="72797a746e6c32000000000010bd084f", @ANYRES32=r7, @ANYBLOB="070000400000000200000005450500d4006700003f049078ac1414bb7f0000018913e2e0000001ac1e0001ffffffffac1414bb01940401008205058716831fa964010101ffffffffac1414bbe0000002ffffffff0a01010200000000443c6da1ac1414aa00000009ac14141c00000000ac1414aafffffffdac1414aa80000000ffffffff00007fffffffffff000007ffe000000100000001440c34000000000500000002830f1ce281af4e35b1745d312aa54b892788ac1414bbe000000100000000e0000001640101017f00000164010100ac1e0001e000000107032f000000"]}) r9 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r9, 0x4000000000000, 0x40, &(0x7f0000000900)=@raw={'raw\x00', 0x41, 0x3, 0x388, 0x0, 0x19, 0x0, 0x0, 0x0, 0x2f0, 0x1f0, 0x1f0, 0x2f0, 0x1f0, 0x3, 0x0, {[{{@ip={@private, @dev, 0x0, 0x0, 'wlan1\x00', 'wg1\x00'}, 0x0, 0x200, 0x220, 0x0, {0x0, 0xffffffffa0028000}, [@common=@set={{0x40}, {{0x4, [0x4, 0x2, 0xa, 0x6, 0x8, 0x2], 0x2, 0x2}}}, @common=@inet=@hashlimit2={{0x150}, {'veth1\x00', {0x0, 0x8, 0x40, 0x0, 0x0, 0x687c, 0x93}}}]}, @unspec=@TRACE={0x20}}, {{@ip={@empty, @empty, 0x0, 0x0, 'veth0_vlan\x00', 'netpci0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x0, 0x3]}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3e8) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000000)={@empty, @local, 0x0}, &(0x7f0000000040)=0xc) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r9, 0x89f1, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000380)={'syztnl2\x00', r10, 0x700, 0x40, 0x2, 0x5, {{0x35, 0x4, 0x1, 0x1, 0xd4, 0x0, 0x0, 0x3f, 0x4, 0x0, @remote, @loopback, {[@ssrr={0x89, 0x13, 0xe2, [@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @remote]}, @noop, @ra={0x94, 0x4, 0x1}, @generic={0x82, 0x5, "058716"}, @lsrr={0x83, 0x1f, 0xa9, [@rand_addr=0x64010101, @broadcast, @remote, @multicast2, @broadcast, @private=0xa010102, @empty]}, @timestamp_addr={0x44, 0x3c, 0x6d, 0x1, 0xa, [{@local, 0x9}, {@local}, {@local, 0xfffffffd}, {@local, 0x80000000}, {@broadcast, 0x7fff}, {@broadcast, 0x7ff}, {@multicast1, 0x1}]}, @timestamp={0x44, 0xc, 0x34, 0x0, 0x0, [0x5, 0x2]}, @generic={0x83, 0xf, "1ce281af4e35b1745d312aa54b"}, @ssrr={0x89, 0x27, 0x88, [@remote, @multicast1, @empty, @multicast1, @rand_addr=0x64010101, @loopback, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1]}, @generic={0x7, 0x3, '/'}]}}}}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f0000000180)={&(0x7f0000000840)=ANY=[@ANYBLOB="780000005400010026bd7000fbdbdf2507000000", @ANYRESOCT=r8, @ANYBLOB="ed8e0100", @ANYRES32=r10, @ANYBLOB="000201006401010200000000000000000000000086dd000020000100", @ANYRES32, @ANYBLOB="01050300ac1e000100000000000000000000000086dd000020000100", @ANYRES32, @ANYBLOB="010100002001000000000000000000000000000096dd0000"], 0x78}, 0x1, 0x0, 0x0, 0x8840}, 0x4008040) sendmsg$nl_route_sched(r1, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000600)=@newtclass={0x4ac, 0x28, 0x10, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0x5, 0x1d}, {0xfff1, 0xf}, {0x2, 0xb}}, [@tclass_kind_options, @tclass_kind_options=@c_taprio={0xb}, @tclass_kind_options=@c_netem={0xa}, @tclass_kind_options=@c_mq={0x7}, @tclass_kind_options=@c_netem={0xa}, @tclass_kind_options=@c_multiq={0xb}]}, 0x4ac}}, 0x40010) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newtfilter={0x6c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x3c, 0x2, [@TCA_BASIC_EMATCHES={0x38, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x2c, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1}, @TCF_EM_META={0x18, 0x2, 0x0, 0x0, {{}, [@TCA_EM_META_HDR={0xc}]}}]}]}]}}]}, 0x6c}}, 0x0) 00:41:45 executing program 1: socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(0xffffffffffffffff, 0x0, 0x0, 0x40, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev}, 0x20) [ 2505.357771][T29018] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2505.368974][T29018] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 00:41:45 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000f000000850000007500000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r6, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x41, 0x3, 0x230, 0x0, 0x19, 0x0, 0x0, 0x0, 0x2e8, 0x1f0, 0x1f0, 0x2e8, 0x1f0, 0x3, 0x0, {[{{@ip={@private, @dev, 0x0, 0x0, 'wlan1\x00', 'wg1\x00'}, 0x0, 0xa8, 0xc8, 0x0, {0x0, 0xffffffffa0028000}, [@common=@unspec=@quota={{0x38}}]}, @unspec=@TRACE={0x20}}, {{@ip={@empty, @empty, 0x0, 0x0, 'veth0_vlan\x00', 'netpci0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x290) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000000)={@empty, @local, 0x0}, &(0x7f0000000040)=0xc) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000380)=ANY=[@ANYBLOB="72797a746e6c32000000000010bd084f", @ANYRES32=r7, @ANYBLOB="070000400000000200000005450500d4006700003f049078ac1414bb7f0000018913e2e0000001ac1e0001ffffffffac1414bb01940401008205058716831fa964010101ffffffffac1414bbe0000002ffffffff0a01010200000000443c6da1ac1414aa00000009ac14141c00000000ac1414aafffffffdac1414aa80000000ffffffff00007fffffffffff000007ffe000000100000001440c34000000000500000002830f1ce281af4e35b1745d312aa54b892788ac1414bbe000000100000000e0000001640101017f00000164010100ac1e0001e000000107032f000000"]}) r9 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r9, 0x4000000000000, 0x40, &(0x7f0000000900)=@raw={'raw\x00', 0x41, 0x3, 0x388, 0x0, 0x19, 0x0, 0x0, 0x0, 0x2f0, 0x1f0, 0x1f0, 0x2f0, 0x1f0, 0x3, 0x0, {[{{@ip={@private, @dev, 0x0, 0x0, 'wlan1\x00', 'wg1\x00'}, 0x0, 0x200, 0x220, 0x0, {0x0, 0xffffffffa0028000}, [@common=@set={{0x40}, {{0x4, [0x4, 0x2, 0xa, 0x6, 0x8, 0x2], 0x2, 0x2}}}, @common=@inet=@hashlimit2={{0x150}, {'veth1\x00', {0x0, 0x8, 0x40, 0x0, 0x0, 0x687c, 0x93}}}]}, @unspec=@TRACE={0x20}}, {{@ip={@empty, @empty, 0x0, 0x0, 'veth0_vlan\x00', 'netpci0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x0, 0x3]}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3e8) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000000)={@empty, @local, 0x0}, &(0x7f0000000040)=0xc) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r9, 0x89f1, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000380)={'syztnl2\x00', r10, 0x700, 0x40, 0x2, 0x5, {{0x35, 0x4, 0x1, 0x1, 0xd4, 0x0, 0x0, 0x3f, 0x4, 0x0, @remote, @loopback, {[@ssrr={0x89, 0x13, 0xe2, [@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @remote]}, @noop, @ra={0x94, 0x4, 0x1}, @generic={0x82, 0x5, "058716"}, @lsrr={0x83, 0x1f, 0xa9, [@rand_addr=0x64010101, @broadcast, @remote, @multicast2, @broadcast, @private=0xa010102, @empty]}, @timestamp_addr={0x44, 0x3c, 0x6d, 0x1, 0xa, [{@local, 0x9}, {@local}, {@local, 0xfffffffd}, {@local, 0x80000000}, {@broadcast, 0x7fff}, {@broadcast, 0x7ff}, {@multicast1, 0x1}]}, @timestamp={0x44, 0xc, 0x34, 0x0, 0x0, [0x5, 0x2]}, @generic={0x83, 0xf, "1ce281af4e35b1745d312aa54b"}, @ssrr={0x89, 0x27, 0x88, [@remote, @multicast1, @empty, @multicast1, @rand_addr=0x64010101, @loopback, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1]}, @generic={0x7, 0x3, '/'}]}}}}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f0000000180)={&(0x7f0000000840)=ANY=[@ANYBLOB="780000005400010026bd7000fbdbdf2507000000", @ANYRESOCT=r8, @ANYBLOB="ed8e0100", @ANYRES32=r10, @ANYBLOB="000201006401010200000000000000000000000086dd000020000100", @ANYRES32, @ANYBLOB="01050300ac1e000100000000000000000000000086dd000020000100", @ANYRES32, @ANYBLOB="010100002001000000000000000000000000000096dd0000"], 0x78}, 0x1, 0x0, 0x0, 0x8840}, 0x4008040) sendmsg$nl_route_sched(r1, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000600)=@newtclass={0x4ac, 0x28, 0x10, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0x5, 0x1d}, {0xfff1, 0xf}, {0x2, 0xb}}, [@tclass_kind_options, @tclass_kind_options=@c_taprio={0xb}, @tclass_kind_options=@c_netem={0xa}, @tclass_kind_options=@c_mq={0x7}, @tclass_kind_options=@c_netem={0xa}, @tclass_kind_options=@c_multiq={0xb}]}, 0x4ac}, 0x1, 0x0, 0x0, 0x4008180}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newtfilter={0x6c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x3c, 0x2, [@TCA_BASIC_EMATCHES={0x38, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x2c, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1}, @TCF_EM_META={0x18, 0x2, 0x0, 0x0, {{}, [@TCA_EM_META_HDR={0xc}]}}]}]}]}}]}, 0x6c}}, 0x0) 00:41:45 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000f000000850000007500000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r6, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x41, 0x3, 0x230, 0x0, 0x19, 0x0, 0x0, 0x0, 0x2e8, 0x1f0, 0x1f0, 0x2e8, 0x1f0, 0x3, 0x0, {[{{@ip={@private, @dev, 0x0, 0x0, 'wlan1\x00', 'wg1\x00'}, 0x0, 0xa8, 0xc8, 0x0, {0x0, 0xffffffffa0028000}, [@common=@unspec=@quota={{0x38}}]}, @unspec=@TRACE={0x20}}, {{@ip={@empty, @empty, 0x0, 0x0, 'veth0_vlan\x00', 'netpci0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x290) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000000)={@empty, @local, 0x0}, &(0x7f0000000040)=0xc) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000380)=ANY=[@ANYBLOB="72797a746e6c32000000000010bd084f", @ANYRES32=r7, @ANYBLOB="070000400000000200000005450500d4006700003f049078ac1414bb7f0000018913e2e0000001ac1e0001ffffffffac1414bb01940401008205058716831fa964010101ffffffffac1414bbe0000002ffffffff0a01010200000000443c6da1ac1414aa00000009ac14141c00000000ac1414aafffffffdac1414aa80000000ffffffff00007fffffffffff000007ffe000000100000001440c34000000000500000002830f1ce281af4e35b1745d312aa54b892788ac1414bbe000000100000000e0000001640101017f00000164010100ac1e0001e000000107032f000000"]}) r9 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r9, 0x4000000000000, 0x40, &(0x7f0000000900)=@raw={'raw\x00', 0x41, 0x3, 0x388, 0x0, 0x19, 0x0, 0x0, 0x0, 0x2f0, 0x1f0, 0x1f0, 0x2f0, 0x1f0, 0x3, 0x0, {[{{@ip={@private, @dev, 0x0, 0x0, 'wlan1\x00', 'wg1\x00'}, 0x0, 0x200, 0x220, 0x0, {0x0, 0xffffffffa0028000}, [@common=@set={{0x40}, {{0x4, [0x4, 0x2, 0xa, 0x6, 0x8, 0x2], 0x2, 0x2}}}, @common=@inet=@hashlimit2={{0x150}, {'veth1\x00', {0x0, 0x8, 0x40, 0x0, 0x0, 0x687c, 0x93}}}]}, @unspec=@TRACE={0x20}}, {{@ip={@empty, @empty, 0x0, 0x0, 'veth0_vlan\x00', 'netpci0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x0, 0x3]}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3e8) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000000)={@empty, @local, 0x0}, &(0x7f0000000040)=0xc) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r9, 0x89f1, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000380)={'syztnl2\x00', r10, 0x700, 0x40, 0x2, 0x5, {{0x35, 0x4, 0x1, 0x1, 0xd4, 0x0, 0x0, 0x3f, 0x4, 0x0, @remote, @loopback, {[@ssrr={0x89, 0x13, 0xe2, [@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @remote]}, @noop, @ra={0x94, 0x4, 0x1}, @generic={0x82, 0x5, "058716"}, @lsrr={0x83, 0x1f, 0xa9, [@rand_addr=0x64010101, @broadcast, @remote, @multicast2, @broadcast, @private=0xa010102, @empty]}, @timestamp_addr={0x44, 0x3c, 0x6d, 0x1, 0xa, [{@local, 0x9}, {@local}, {@local, 0xfffffffd}, {@local, 0x80000000}, {@broadcast, 0x7fff}, {@broadcast, 0x7ff}, {@multicast1, 0x1}]}, @timestamp={0x44, 0xc, 0x34, 0x0, 0x0, [0x5, 0x2]}, @generic={0x83, 0xf, "1ce281af4e35b1745d312aa54b"}, @ssrr={0x89, 0x27, 0x88, [@remote, @multicast1, @empty, @multicast1, @rand_addr=0x64010101, @loopback, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1]}, @generic={0x7, 0x3, '/'}]}}}}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f0000000180)={&(0x7f0000000840)=ANY=[@ANYBLOB="780000005400010026bd7000fbdbdf2507000000", @ANYRESOCT=r8, @ANYBLOB="ed8e0100", @ANYRES32=r10, @ANYBLOB="000201006401010200000000000000000000000086dd000020000100", @ANYRES32, @ANYBLOB="01050300ac1e000100000000000000000000000086dd000020000100", @ANYRES32, @ANYBLOB="010100002001000000000000000000000000000096dd0000"], 0x78}, 0x1, 0x0, 0x0, 0x8840}, 0x4008040) sendmsg$nl_route_sched(r1, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000600)=@newtclass={0x4ac, 0x28, 0x10, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0x5, 0x1d}, {0xfff1, 0xf}, {0x2, 0xb}}, [@tclass_kind_options, @tclass_kind_options=@c_taprio={0xb}, @tclass_kind_options=@c_netem={0xa}, @tclass_kind_options=@c_mq={0x7}, @tclass_kind_options=@c_netem={0xa}, @tclass_kind_options=@c_multiq={0xb}]}, 0x4ac}, 0x1, 0x0, 0x0, 0x4008180}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newtfilter={0x6c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x3c, 0x2, [@TCA_BASIC_EMATCHES={0x38, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x2c, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1}, @TCF_EM_META={0x18, 0x2, 0x0, 0x0, {{}, [@TCA_EM_META_HDR={0xc}]}}]}]}]}}]}, 0x6c}}, 0x0) 00:41:46 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000f000000850000007500000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r6, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x41, 0x3, 0x230, 0x0, 0x19, 0x0, 0x0, 0x0, 0x2e8, 0x1f0, 0x1f0, 0x2e8, 0x1f0, 0x3, 0x0, {[{{@ip={@private, @dev, 0x0, 0x0, 'wlan1\x00', 'wg1\x00'}, 0x0, 0xa8, 0xc8, 0x0, {0x0, 0xffffffffa0028000}, [@common=@unspec=@quota={{0x38}}]}, @unspec=@TRACE={0x20}}, {{@ip={@empty, @empty, 0x0, 0x0, 'veth0_vlan\x00', 'netpci0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x290) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000000)={@empty, @local, 0x0}, &(0x7f0000000040)=0xc) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000380)=ANY=[@ANYBLOB="72797a746e6c32000000000010bd084f", @ANYRES32=r7, @ANYBLOB="070000400000000200000005450500d4006700003f049078ac1414bb7f0000018913e2e0000001ac1e0001ffffffffac1414bb01940401008205058716831fa964010101ffffffffac1414bbe0000002ffffffff0a01010200000000443c6da1ac1414aa00000009ac14141c00000000ac1414aafffffffdac1414aa80000000ffffffff00007fffffffffff000007ffe000000100000001440c34000000000500000002830f1ce281af4e35b1745d312aa54b892788ac1414bbe000000100000000e0000001640101017f00000164010100ac1e0001e000000107032f000000"]}) r9 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r9, 0x4000000000000, 0x40, &(0x7f0000000900)=@raw={'raw\x00', 0x41, 0x3, 0x388, 0x0, 0x19, 0x0, 0x0, 0x0, 0x2f0, 0x1f0, 0x1f0, 0x2f0, 0x1f0, 0x3, 0x0, {[{{@ip={@private, @dev, 0x0, 0x0, 'wlan1\x00', 'wg1\x00'}, 0x0, 0x200, 0x220, 0x0, {0x0, 0xffffffffa0028000}, [@common=@set={{0x40}, {{0x4, [0x4, 0x2, 0xa, 0x6, 0x8, 0x2], 0x2, 0x2}}}, @common=@inet=@hashlimit2={{0x150}, {'veth1\x00', {0x0, 0x8, 0x40, 0x0, 0x0, 0x687c, 0x93}}}]}, @unspec=@TRACE={0x20}}, {{@ip={@empty, @empty, 0x0, 0x0, 'veth0_vlan\x00', 'netpci0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x0, 0x3]}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3e8) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000000)={@empty, @local, 0x0}, &(0x7f0000000040)=0xc) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r9, 0x89f1, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000380)={'syztnl2\x00', r10, 0x700, 0x40, 0x2, 0x5, {{0x35, 0x4, 0x1, 0x1, 0xd4, 0x0, 0x0, 0x3f, 0x4, 0x0, @remote, @loopback, {[@ssrr={0x89, 0x13, 0xe2, [@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @remote]}, @noop, @ra={0x94, 0x4, 0x1}, @generic={0x82, 0x5, "058716"}, @lsrr={0x83, 0x1f, 0xa9, [@rand_addr=0x64010101, @broadcast, @remote, @multicast2, @broadcast, @private=0xa010102, @empty]}, @timestamp_addr={0x44, 0x3c, 0x6d, 0x1, 0xa, [{@local, 0x9}, {@local}, {@local, 0xfffffffd}, {@local, 0x80000000}, {@broadcast, 0x7fff}, {@broadcast, 0x7ff}, {@multicast1, 0x1}]}, @timestamp={0x44, 0xc, 0x34, 0x0, 0x0, [0x5, 0x2]}, @generic={0x83, 0xf, "1ce281af4e35b1745d312aa54b"}, @ssrr={0x89, 0x27, 0x88, [@remote, @multicast1, @empty, @multicast1, @rand_addr=0x64010101, @loopback, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1]}, @generic={0x7, 0x3, '/'}]}}}}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f0000000180)={&(0x7f0000000840)=ANY=[@ANYBLOB="780000005400010026bd7000fbdbdf2507000000", @ANYRESOCT=r8, @ANYBLOB="ed8e0100", @ANYRES32=r10, @ANYBLOB="000201006401010200000000000000000000000086dd000020000100", @ANYRES32, @ANYBLOB="01050300ac1e000100000000000000000000000086dd000020000100", @ANYRES32, @ANYBLOB="010100002001000000000000000000000000000096dd0000"], 0x78}, 0x1, 0x0, 0x0, 0x8840}, 0x4008040) sendmsg$nl_route_sched(r1, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000600)=@newtclass={0x4ac, 0x28, 0x10, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0x5, 0x1d}, {0xfff1, 0xf}, {0x2, 0xb}}, [@tclass_kind_options, @tclass_kind_options=@c_taprio={0xb}, @tclass_kind_options=@c_netem={0xa}, @tclass_kind_options=@c_mq={0x7}, @tclass_kind_options=@c_netem={0xa}, @tclass_kind_options=@c_multiq={0xb}]}, 0x4ac}, 0x1, 0x0, 0x0, 0x4008180}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newtfilter={0x6c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x3c, 0x2, [@TCA_BASIC_EMATCHES={0x38, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x2c, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1}, @TCF_EM_META={0x18, 0x2, 0x0, 0x0, {{}, [@TCA_EM_META_HDR={0xc}]}}]}]}]}}]}, 0x6c}}, 0x0) 00:41:46 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000f000000850000007500000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r5, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x41, 0x3, 0x230, 0x0, 0x19, 0x0, 0x0, 0x0, 0x2e8, 0x1f0, 0x1f0, 0x2e8, 0x1f0, 0x3, 0x0, {[{{@ip={@private, @dev, 0x0, 0x0, 'wlan1\x00', 'wg1\x00'}, 0x0, 0xa8, 0xc8, 0x0, {0x0, 0xffffffffa0028000}, [@common=@unspec=@quota={{0x38}}]}, @unspec=@TRACE={0x20}}, {{@ip={@empty, @empty, 0x0, 0x0, 'veth0_vlan\x00', 'netpci0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x290) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000000)={@empty, @local, 0x0}, &(0x7f0000000040)=0xc) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000380)=ANY=[@ANYBLOB="72797a746e6c32000000000010bd084f", @ANYRES32=r6, @ANYBLOB="070000400000000200000005450500d4006700003f049078ac1414bb7f0000018913e2e0000001ac1e0001ffffffffac1414bb01940401008205058716831fa964010101ffffffffac1414bbe0000002ffffffff0a01010200000000443c6da1ac1414aa00000009ac14141c00000000ac1414aafffffffdac1414aa80000000ffffffff00007fffffffffff000007ffe000000100000001440c34000000000500000002830f1ce281af4e35b1745d312aa54b892788ac1414bbe000000100000000e0000001640101017f00000164010100ac1e0001e000000107032f000000"]}) r8 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r8, 0x4000000000000, 0x40, &(0x7f0000000900)=@raw={'raw\x00', 0x41, 0x3, 0x388, 0x0, 0x19, 0x0, 0x0, 0x0, 0x2f0, 0x1f0, 0x1f0, 0x2f0, 0x1f0, 0x3, 0x0, {[{{@ip={@private, @dev, 0x0, 0x0, 'wlan1\x00', 'wg1\x00'}, 0x0, 0x200, 0x220, 0x0, {0x0, 0xffffffffa0028000}, [@common=@set={{0x40}, {{0x4, [0x4, 0x2, 0xa, 0x6, 0x8, 0x2], 0x2, 0x2}}}, @common=@inet=@hashlimit2={{0x150}, {'veth1\x00', {0x0, 0x8, 0x40, 0x0, 0x0, 0x687c, 0x93}}}]}, @unspec=@TRACE={0x20}}, {{@ip={@empty, @empty, 0x0, 0x0, 'veth0_vlan\x00', 'netpci0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x0, 0x3]}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3e8) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000000)={@empty, @local, 0x0}, &(0x7f0000000040)=0xc) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r8, 0x89f1, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000380)={'syztnl2\x00', r9, 0x700, 0x40, 0x2, 0x5, {{0x35, 0x4, 0x1, 0x1, 0xd4, 0x0, 0x0, 0x3f, 0x4, 0x0, @remote, @loopback, {[@ssrr={0x89, 0x13, 0xe2, [@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @remote]}, @noop, @ra={0x94, 0x4, 0x1}, @generic={0x82, 0x5, "058716"}, @lsrr={0x83, 0x1f, 0xa9, [@rand_addr=0x64010101, @broadcast, @remote, @multicast2, @broadcast, @private=0xa010102, @empty]}, @timestamp_addr={0x44, 0x3c, 0x6d, 0x1, 0xa, [{@local, 0x9}, {@local}, {@local, 0xfffffffd}, {@local, 0x80000000}, {@broadcast, 0x7fff}, {@broadcast, 0x7ff}, {@multicast1, 0x1}]}, @timestamp={0x44, 0xc, 0x34, 0x0, 0x0, [0x5, 0x2]}, @generic={0x83, 0xf, "1ce281af4e35b1745d312aa54b"}, @ssrr={0x89, 0x27, 0x88, [@remote, @multicast1, @empty, @multicast1, @rand_addr=0x64010101, @loopback, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1]}, @generic={0x7, 0x3, '/'}]}}}}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f0000000180)={&(0x7f0000000840)=ANY=[@ANYBLOB="780000005400010026bd7000fbdbdf2507000000", @ANYRESOCT=r7, @ANYBLOB="ed8e0100", @ANYRES32=r9, @ANYBLOB="000201006401010200000000000000000000000086dd000020000100", @ANYRES32, @ANYBLOB="01050300ac1e000100000000000000000000000086dd000020000100", @ANYRES32, @ANYBLOB="010100002001000000000000000000000000000096dd0000"], 0x78}, 0x1, 0x0, 0x0, 0x8840}, 0x4008040) sendmsg$nl_route_sched(r1, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000600)=@newtclass={0x4ac, 0x28, 0x10, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0x5, 0x1d}, {0xfff1, 0xf}, {0x2, 0xb}}, [@tclass_kind_options, @tclass_kind_options=@c_taprio={0xb}, @tclass_kind_options=@c_netem={0xa}, @tclass_kind_options=@c_mq={0x7}, @tclass_kind_options=@c_netem={0xa}, @tclass_kind_options=@c_multiq={0xb}]}, 0x4ac}, 0x1, 0x0, 0x0, 0x4008180}, 0x40010) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newtfilter={0x6c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x3c, 0x2, [@TCA_BASIC_EMATCHES={0x38, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x2c, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1}, @TCF_EM_META={0x18, 0x2, 0x0, 0x0, {{}, [@TCA_EM_META_HDR={0xc}]}}]}]}]}}]}, 0x6c}}, 0x0) 00:41:46 executing program 1: socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(0xffffffffffffffff, 0x0, 0x0, 0x40, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev}, 0x20) 00:41:46 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000f000000850000007500000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r5, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x41, 0x3, 0x230, 0x0, 0x19, 0x0, 0x0, 0x0, 0x2e8, 0x1f0, 0x1f0, 0x2e8, 0x1f0, 0x3, 0x0, {[{{@ip={@private, @dev, 0x0, 0x0, 'wlan1\x00', 'wg1\x00'}, 0x0, 0xa8, 0xc8, 0x0, {0x0, 0xffffffffa0028000}, [@common=@unspec=@quota={{0x38}}]}, @unspec=@TRACE={0x20}}, {{@ip={@empty, @empty, 0x0, 0x0, 'veth0_vlan\x00', 'netpci0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x290) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000000)={@empty, @local, 0x0}, &(0x7f0000000040)=0xc) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000380)=ANY=[@ANYBLOB="72797a746e6c32000000000010bd084f", @ANYRES32=r6, @ANYBLOB="070000400000000200000005450500d4006700003f049078ac1414bb7f0000018913e2e0000001ac1e0001ffffffffac1414bb01940401008205058716831fa964010101ffffffffac1414bbe0000002ffffffff0a01010200000000443c6da1ac1414aa00000009ac14141c00000000ac1414aafffffffdac1414aa80000000ffffffff00007fffffffffff000007ffe000000100000001440c34000000000500000002830f1ce281af4e35b1745d312aa54b892788ac1414bbe000000100000000e0000001640101017f00000164010100ac1e0001e000000107032f000000"]}) r8 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r8, 0x4000000000000, 0x40, &(0x7f0000000900)=@raw={'raw\x00', 0x41, 0x3, 0x388, 0x0, 0x19, 0x0, 0x0, 0x0, 0x2f0, 0x1f0, 0x1f0, 0x2f0, 0x1f0, 0x3, 0x0, {[{{@ip={@private, @dev, 0x0, 0x0, 'wlan1\x00', 'wg1\x00'}, 0x0, 0x200, 0x220, 0x0, {0x0, 0xffffffffa0028000}, [@common=@set={{0x40}, {{0x4, [0x4, 0x2, 0xa, 0x6, 0x8, 0x2], 0x2, 0x2}}}, @common=@inet=@hashlimit2={{0x150}, {'veth1\x00', {0x0, 0x8, 0x40, 0x0, 0x0, 0x687c, 0x93}}}]}, @unspec=@TRACE={0x20}}, {{@ip={@empty, @empty, 0x0, 0x0, 'veth0_vlan\x00', 'netpci0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x0, 0x3]}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3e8) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000000)={@empty, @local, 0x0}, &(0x7f0000000040)=0xc) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r8, 0x89f1, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000380)={'syztnl2\x00', r9, 0x700, 0x40, 0x2, 0x5, {{0x35, 0x4, 0x1, 0x1, 0xd4, 0x0, 0x0, 0x3f, 0x4, 0x0, @remote, @loopback, {[@ssrr={0x89, 0x13, 0xe2, [@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @remote]}, @noop, @ra={0x94, 0x4, 0x1}, @generic={0x82, 0x5, "058716"}, @lsrr={0x83, 0x1f, 0xa9, [@rand_addr=0x64010101, @broadcast, @remote, @multicast2, @broadcast, @private=0xa010102, @empty]}, @timestamp_addr={0x44, 0x3c, 0x6d, 0x1, 0xa, [{@local, 0x9}, {@local}, {@local, 0xfffffffd}, {@local, 0x80000000}, {@broadcast, 0x7fff}, {@broadcast, 0x7ff}, {@multicast1, 0x1}]}, @timestamp={0x44, 0xc, 0x34, 0x0, 0x0, [0x5, 0x2]}, @generic={0x83, 0xf, "1ce281af4e35b1745d312aa54b"}, @ssrr={0x89, 0x27, 0x88, [@remote, @multicast1, @empty, @multicast1, @rand_addr=0x64010101, @loopback, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1]}, @generic={0x7, 0x3, '/'}]}}}}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f0000000180)={&(0x7f0000000840)=ANY=[@ANYBLOB="780000005400010026bd7000fbdbdf2507000000", @ANYRESOCT=r7, @ANYBLOB="ed8e0100", @ANYRES32=r9, @ANYBLOB="000201006401010200000000000000000000000086dd000020000100", @ANYRES32, @ANYBLOB="01050300ac1e000100000000000000000000000086dd000020000100", @ANYRES32, @ANYBLOB="010100002001000000000000000000000000000096dd0000"], 0x78}, 0x1, 0x0, 0x0, 0x8840}, 0x4008040) sendmsg$nl_route_sched(r1, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000600)=@newtclass={0x4ac, 0x28, 0x10, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0x5, 0x1d}, {0xfff1, 0xf}, {0x2, 0xb}}, [@tclass_kind_options, @tclass_kind_options=@c_taprio={0xb}, @tclass_kind_options=@c_netem={0xa}, @tclass_kind_options=@c_mq={0x7}, @tclass_kind_options=@c_netem={0xa}, @tclass_kind_options=@c_multiq={0xb}]}, 0x4ac}, 0x1, 0x0, 0x0, 0x4008180}, 0x40010) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newtfilter={0x6c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x3c, 0x2, [@TCA_BASIC_EMATCHES={0x38, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x2c, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1}, @TCF_EM_META={0x18, 0x2, 0x0, 0x0, {{}, [@TCA_EM_META_HDR={0xc}]}}]}]}]}}]}, 0x6c}}, 0x0) 00:41:47 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000f000000850000007500000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r5, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x41, 0x3, 0x230, 0x0, 0x19, 0x0, 0x0, 0x0, 0x2e8, 0x1f0, 0x1f0, 0x2e8, 0x1f0, 0x3, 0x0, {[{{@ip={@private, @dev, 0x0, 0x0, 'wlan1\x00', 'wg1\x00'}, 0x0, 0xa8, 0xc8, 0x0, {0x0, 0xffffffffa0028000}, [@common=@unspec=@quota={{0x38}}]}, @unspec=@TRACE={0x20}}, {{@ip={@empty, @empty, 0x0, 0x0, 'veth0_vlan\x00', 'netpci0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x290) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000000)={@empty, @local, 0x0}, &(0x7f0000000040)=0xc) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000380)=ANY=[@ANYBLOB="72797a746e6c32000000000010bd084f", @ANYRES32=r6, @ANYBLOB="070000400000000200000005450500d4006700003f049078ac1414bb7f0000018913e2e0000001ac1e0001ffffffffac1414bb01940401008205058716831fa964010101ffffffffac1414bbe0000002ffffffff0a01010200000000443c6da1ac1414aa00000009ac14141c00000000ac1414aafffffffdac1414aa80000000ffffffff00007fffffffffff000007ffe000000100000001440c34000000000500000002830f1ce281af4e35b1745d312aa54b892788ac1414bbe000000100000000e0000001640101017f00000164010100ac1e0001e000000107032f000000"]}) r8 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r8, 0x4000000000000, 0x40, &(0x7f0000000900)=@raw={'raw\x00', 0x41, 0x3, 0x388, 0x0, 0x19, 0x0, 0x0, 0x0, 0x2f0, 0x1f0, 0x1f0, 0x2f0, 0x1f0, 0x3, 0x0, {[{{@ip={@private, @dev, 0x0, 0x0, 'wlan1\x00', 'wg1\x00'}, 0x0, 0x200, 0x220, 0x0, {0x0, 0xffffffffa0028000}, [@common=@set={{0x40}, {{0x4, [0x4, 0x2, 0xa, 0x6, 0x8, 0x2], 0x2, 0x2}}}, @common=@inet=@hashlimit2={{0x150}, {'veth1\x00', {0x0, 0x8, 0x40, 0x0, 0x0, 0x687c, 0x93}}}]}, @unspec=@TRACE={0x20}}, {{@ip={@empty, @empty, 0x0, 0x0, 'veth0_vlan\x00', 'netpci0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x0, 0x3]}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3e8) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000000)={@empty, @local, 0x0}, &(0x7f0000000040)=0xc) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r8, 0x89f1, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000380)={'syztnl2\x00', r9, 0x700, 0x40, 0x2, 0x5, {{0x35, 0x4, 0x1, 0x1, 0xd4, 0x0, 0x0, 0x3f, 0x4, 0x0, @remote, @loopback, {[@ssrr={0x89, 0x13, 0xe2, [@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @remote]}, @noop, @ra={0x94, 0x4, 0x1}, @generic={0x82, 0x5, "058716"}, @lsrr={0x83, 0x1f, 0xa9, [@rand_addr=0x64010101, @broadcast, @remote, @multicast2, @broadcast, @private=0xa010102, @empty]}, @timestamp_addr={0x44, 0x3c, 0x6d, 0x1, 0xa, [{@local, 0x9}, {@local}, {@local, 0xfffffffd}, {@local, 0x80000000}, {@broadcast, 0x7fff}, {@broadcast, 0x7ff}, {@multicast1, 0x1}]}, @timestamp={0x44, 0xc, 0x34, 0x0, 0x0, [0x5, 0x2]}, @generic={0x83, 0xf, "1ce281af4e35b1745d312aa54b"}, @ssrr={0x89, 0x27, 0x88, [@remote, @multicast1, @empty, @multicast1, @rand_addr=0x64010101, @loopback, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1]}, @generic={0x7, 0x3, '/'}]}}}}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f0000000180)={&(0x7f0000000840)=ANY=[@ANYBLOB="780000005400010026bd7000fbdbdf2507000000", @ANYRESOCT=r7, @ANYBLOB="ed8e0100", @ANYRES32=r9, @ANYBLOB="000201006401010200000000000000000000000086dd000020000100", @ANYRES32, @ANYBLOB="01050300ac1e000100000000000000000000000086dd000020000100", @ANYRES32, @ANYBLOB="010100002001000000000000000000000000000096dd0000"], 0x78}, 0x1, 0x0, 0x0, 0x8840}, 0x4008040) sendmsg$nl_route_sched(r1, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000600)=@newtclass={0x4ac, 0x28, 0x10, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0x5, 0x1d}, {0xfff1, 0xf}, {0x2, 0xb}}, [@tclass_kind_options, @tclass_kind_options=@c_taprio={0xb}, @tclass_kind_options=@c_netem={0xa}, @tclass_kind_options=@c_mq={0x7}, @tclass_kind_options=@c_netem={0xa}, @tclass_kind_options=@c_multiq={0xb}]}, 0x4ac}, 0x1, 0x0, 0x0, 0x4008180}, 0x40010) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newtfilter={0x6c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x3c, 0x2, [@TCA_BASIC_EMATCHES={0x38, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x2c, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1}, @TCF_EM_META={0x18, 0x2, 0x0, 0x0, {{}, [@TCA_EM_META_HDR={0xc}]}}]}]}]}}]}, 0x6c}}, 0x0) [ 2507.778801][T29040] __nla_validate_parse: 10 callbacks suppressed [ 2507.778912][T29040] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2507.826343][T29040] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 00:41:47 executing program 1: socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(0xffffffffffffffff, 0x0, 0x0, 0x40, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev}, 0x20) 00:41:48 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000f000000850000007500000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r6, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x41, 0x3, 0x230, 0x0, 0x19, 0x0, 0x0, 0x0, 0x2e8, 0x1f0, 0x1f0, 0x2e8, 0x1f0, 0x3, 0x0, {[{{@ip={@private, @dev, 0x0, 0x0, 'wlan1\x00', 'wg1\x00'}, 0x0, 0xa8, 0xc8, 0x0, {0x0, 0xffffffffa0028000}, [@common=@unspec=@quota={{0x38}}]}, @unspec=@TRACE={0x20}}, {{@ip={@empty, @empty, 0x0, 0x0, 'veth0_vlan\x00', 'netpci0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x290) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000000)={@empty, @local, 0x0}, &(0x7f0000000040)=0xc) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000380)=ANY=[@ANYBLOB="72797a746e6c32000000000010bd084f", @ANYRES32=r7, @ANYBLOB="070000400000000200000005450500d4006700003f049078ac1414bb7f0000018913e2e0000001ac1e0001ffffffffac1414bb01940401008205058716831fa964010101ffffffffac1414bbe0000002ffffffff0a01010200000000443c6da1ac1414aa00000009ac14141c00000000ac1414aafffffffdac1414aa80000000ffffffff00007fffffffffff000007ffe000000100000001440c34000000000500000002830f1ce281af4e35b1745d312aa54b892788ac1414bbe000000100000000e0000001640101017f00000164010100ac1e0001e000000107032f000000"]}) r9 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r9, 0x4000000000000, 0x40, &(0x7f0000000900)=@raw={'raw\x00', 0x41, 0x3, 0x388, 0x0, 0x19, 0x0, 0x0, 0x0, 0x2f0, 0x1f0, 0x1f0, 0x2f0, 0x1f0, 0x3, 0x0, {[{{@ip={@private, @dev, 0x0, 0x0, 'wlan1\x00', 'wg1\x00'}, 0x0, 0x200, 0x220, 0x0, {0x0, 0xffffffffa0028000}, [@common=@set={{0x40}, {{0x4, [0x4, 0x2, 0xa, 0x6, 0x8, 0x2], 0x2, 0x2}}}, @common=@inet=@hashlimit2={{0x150}, {'veth1\x00', {0x0, 0x8, 0x40, 0x0, 0x0, 0x687c, 0x93}}}]}, @unspec=@TRACE={0x20}}, {{@ip={@empty, @empty, 0x0, 0x0, 'veth0_vlan\x00', 'netpci0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x0, 0x3]}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3e8) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000000)={@empty, @local, 0x0}, &(0x7f0000000040)=0xc) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r9, 0x89f1, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000380)={'syztnl2\x00', r10, 0x700, 0x40, 0x2, 0x5, {{0x35, 0x4, 0x1, 0x1, 0xd4, 0x0, 0x0, 0x3f, 0x4, 0x0, @remote, @loopback, {[@ssrr={0x89, 0x13, 0xe2, [@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @remote]}, @noop, @ra={0x94, 0x4, 0x1}, @generic={0x82, 0x5, "058716"}, @lsrr={0x83, 0x1f, 0xa9, [@rand_addr=0x64010101, @broadcast, @remote, @multicast2, @broadcast, @private=0xa010102, @empty]}, @timestamp_addr={0x44, 0x3c, 0x6d, 0x1, 0xa, [{@local, 0x9}, {@local}, {@local, 0xfffffffd}, {@local, 0x80000000}, {@broadcast, 0x7fff}, {@broadcast, 0x7ff}, {@multicast1, 0x1}]}, @timestamp={0x44, 0xc, 0x34, 0x0, 0x0, [0x5, 0x2]}, @generic={0x83, 0xf, "1ce281af4e35b1745d312aa54b"}, @ssrr={0x89, 0x27, 0x88, [@remote, @multicast1, @empty, @multicast1, @rand_addr=0x64010101, @loopback, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1]}, @generic={0x7, 0x3, '/'}]}}}}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f0000000180)={&(0x7f0000000840)=ANY=[@ANYBLOB="780000005400010026bd7000fbdbdf2507000000", @ANYRESOCT=r8, @ANYBLOB="ed8e0100", @ANYRES32=r10, @ANYBLOB="000201006401010200000000000000000000000086dd000020000100", @ANYRES32, @ANYBLOB="01050300ac1e000100000000000000000000000086dd000020000100", @ANYRES32, @ANYBLOB="010100002001000000000000000000000000000096dd0000"], 0x78}, 0x1, 0x0, 0x0, 0x8840}, 0x4008040) sendmsg$nl_route_sched(r1, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000600)=@newtclass={0x4ac, 0x28, 0x10, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0x5, 0x1d}, {0xfff1, 0xf}, {0x2, 0xb}}, [@tclass_kind_options, @tclass_kind_options=@c_taprio={0xb}, @tclass_kind_options=@c_netem={0xa}, @tclass_kind_options=@c_mq={0x7}, @tclass_kind_options=@c_netem={0xa}, @tclass_kind_options=@c_multiq={0xb}]}, 0x4ac}, 0x1, 0x0, 0x0, 0x4008180}, 0x40010) sendmsg$nl_route_sched(r2, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newtfilter={0x6c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x3c, 0x2, [@TCA_BASIC_EMATCHES={0x38, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x2c, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1}, @TCF_EM_META={0x18, 0x2, 0x0, 0x0, {{}, [@TCA_EM_META_HDR={0xc}]}}]}]}]}}]}, 0x6c}}, 0x0) [ 2508.299227][T29043] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2508.333414][T29043] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 00:41:48 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000f000000850000007500000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r6, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x41, 0x3, 0x230, 0x0, 0x19, 0x0, 0x0, 0x0, 0x2e8, 0x1f0, 0x1f0, 0x2e8, 0x1f0, 0x3, 0x0, {[{{@ip={@private, @dev, 0x0, 0x0, 'wlan1\x00', 'wg1\x00'}, 0x0, 0xa8, 0xc8, 0x0, {0x0, 0xffffffffa0028000}, [@common=@unspec=@quota={{0x38}}]}, @unspec=@TRACE={0x20}}, {{@ip={@empty, @empty, 0x0, 0x0, 'veth0_vlan\x00', 'netpci0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x290) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000000)={@empty, @local, 0x0}, &(0x7f0000000040)=0xc) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000380)=ANY=[@ANYBLOB="72797a746e6c32000000000010bd084f", @ANYRES32=r7, @ANYBLOB="070000400000000200000005450500d4006700003f049078ac1414bb7f0000018913e2e0000001ac1e0001ffffffffac1414bb01940401008205058716831fa964010101ffffffffac1414bbe0000002ffffffff0a01010200000000443c6da1ac1414aa00000009ac14141c00000000ac1414aafffffffdac1414aa80000000ffffffff00007fffffffffff000007ffe000000100000001440c34000000000500000002830f1ce281af4e35b1745d312aa54b892788ac1414bbe000000100000000e0000001640101017f00000164010100ac1e0001e000000107032f000000"]}) r9 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r9, 0x4000000000000, 0x40, &(0x7f0000000900)=@raw={'raw\x00', 0x41, 0x3, 0x388, 0x0, 0x19, 0x0, 0x0, 0x0, 0x2f0, 0x1f0, 0x1f0, 0x2f0, 0x1f0, 0x3, 0x0, {[{{@ip={@private, @dev, 0x0, 0x0, 'wlan1\x00', 'wg1\x00'}, 0x0, 0x200, 0x220, 0x0, {0x0, 0xffffffffa0028000}, [@common=@set={{0x40}, {{0x4, [0x4, 0x2, 0xa, 0x6, 0x8, 0x2], 0x2, 0x2}}}, @common=@inet=@hashlimit2={{0x150}, {'veth1\x00', {0x0, 0x8, 0x40, 0x0, 0x0, 0x687c, 0x93}}}]}, @unspec=@TRACE={0x20}}, {{@ip={@empty, @empty, 0x0, 0x0, 'veth0_vlan\x00', 'netpci0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x0, 0x3]}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3e8) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000000)={@empty, @local, 0x0}, &(0x7f0000000040)=0xc) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r9, 0x89f1, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000380)={'syztnl2\x00', r10, 0x700, 0x40, 0x2, 0x5, {{0x35, 0x4, 0x1, 0x1, 0xd4, 0x0, 0x0, 0x3f, 0x4, 0x0, @remote, @loopback, {[@ssrr={0x89, 0x13, 0xe2, [@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @remote]}, @noop, @ra={0x94, 0x4, 0x1}, @generic={0x82, 0x5, "058716"}, @lsrr={0x83, 0x1f, 0xa9, [@rand_addr=0x64010101, @broadcast, @remote, @multicast2, @broadcast, @private=0xa010102, @empty]}, @timestamp_addr={0x44, 0x3c, 0x6d, 0x1, 0xa, [{@local, 0x9}, {@local}, {@local, 0xfffffffd}, {@local, 0x80000000}, {@broadcast, 0x7fff}, {@broadcast, 0x7ff}, {@multicast1, 0x1}]}, @timestamp={0x44, 0xc, 0x34, 0x0, 0x0, [0x5, 0x2]}, @generic={0x83, 0xf, "1ce281af4e35b1745d312aa54b"}, @ssrr={0x89, 0x27, 0x88, [@remote, @multicast1, @empty, @multicast1, @rand_addr=0x64010101, @loopback, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1]}, @generic={0x7, 0x3, '/'}]}}}}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f0000000180)={&(0x7f0000000840)=ANY=[@ANYBLOB="780000005400010026bd7000fbdbdf2507000000", @ANYRESOCT=r8, @ANYBLOB="ed8e0100", @ANYRES32=r10, @ANYBLOB="000201006401010200000000000000000000000086dd000020000100", @ANYRES32, @ANYBLOB="01050300ac1e000100000000000000000000000086dd000020000100", @ANYRES32, @ANYBLOB="010100002001000000000000000000000000000096dd0000"], 0x78}, 0x1, 0x0, 0x0, 0x8840}, 0x4008040) sendmsg$nl_route_sched(r1, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000600)=@newtclass={0x4ac, 0x28, 0x10, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0x5, 0x1d}, {0xfff1, 0xf}, {0x2, 0xb}}, [@tclass_kind_options, @tclass_kind_options=@c_taprio={0xb}, @tclass_kind_options=@c_netem={0xa}, @tclass_kind_options=@c_mq={0x7}, @tclass_kind_options=@c_netem={0xa}, @tclass_kind_options=@c_multiq={0xb}]}, 0x4ac}, 0x1, 0x0, 0x0, 0x4008180}, 0x40010) sendmsg$nl_route_sched(r2, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newtfilter={0x6c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x3c, 0x2, [@TCA_BASIC_EMATCHES={0x38, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x2c, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1}, @TCF_EM_META={0x18, 0x2, 0x0, 0x0, {{}, [@TCA_EM_META_HDR={0xc}]}}]}]}]}}]}, 0x6c}}, 0x0) [ 2508.922285][T29047] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2508.951312][T29047] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 00:41:49 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000f000000850000007500000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r6, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x41, 0x3, 0x230, 0x0, 0x19, 0x0, 0x0, 0x0, 0x2e8, 0x1f0, 0x1f0, 0x2e8, 0x1f0, 0x3, 0x0, {[{{@ip={@private, @dev, 0x0, 0x0, 'wlan1\x00', 'wg1\x00'}, 0x0, 0xa8, 0xc8, 0x0, {0x0, 0xffffffffa0028000}, [@common=@unspec=@quota={{0x38}}]}, @unspec=@TRACE={0x20}}, {{@ip={@empty, @empty, 0x0, 0x0, 'veth0_vlan\x00', 'netpci0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x290) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000000)={@empty, @local, 0x0}, &(0x7f0000000040)=0xc) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000380)=ANY=[@ANYBLOB="72797a746e6c32000000000010bd084f", @ANYRES32=r7, @ANYBLOB="070000400000000200000005450500d4006700003f049078ac1414bb7f0000018913e2e0000001ac1e0001ffffffffac1414bb01940401008205058716831fa964010101ffffffffac1414bbe0000002ffffffff0a01010200000000443c6da1ac1414aa00000009ac14141c00000000ac1414aafffffffdac1414aa80000000ffffffff00007fffffffffff000007ffe000000100000001440c34000000000500000002830f1ce281af4e35b1745d312aa54b892788ac1414bbe000000100000000e0000001640101017f00000164010100ac1e0001e000000107032f000000"]}) r9 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r9, 0x4000000000000, 0x40, &(0x7f0000000900)=@raw={'raw\x00', 0x41, 0x3, 0x388, 0x0, 0x19, 0x0, 0x0, 0x0, 0x2f0, 0x1f0, 0x1f0, 0x2f0, 0x1f0, 0x3, 0x0, {[{{@ip={@private, @dev, 0x0, 0x0, 'wlan1\x00', 'wg1\x00'}, 0x0, 0x200, 0x220, 0x0, {0x0, 0xffffffffa0028000}, [@common=@set={{0x40}, {{0x4, [0x4, 0x2, 0xa, 0x6, 0x8, 0x2], 0x2, 0x2}}}, @common=@inet=@hashlimit2={{0x150}, {'veth1\x00', {0x0, 0x8, 0x40, 0x0, 0x0, 0x687c, 0x93}}}]}, @unspec=@TRACE={0x20}}, {{@ip={@empty, @empty, 0x0, 0x0, 'veth0_vlan\x00', 'netpci0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x0, 0x3]}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3e8) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000000)={@empty, @local, 0x0}, &(0x7f0000000040)=0xc) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r9, 0x89f1, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000380)={'syztnl2\x00', r10, 0x700, 0x40, 0x2, 0x5, {{0x35, 0x4, 0x1, 0x1, 0xd4, 0x0, 0x0, 0x3f, 0x4, 0x0, @remote, @loopback, {[@ssrr={0x89, 0x13, 0xe2, [@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @remote]}, @noop, @ra={0x94, 0x4, 0x1}, @generic={0x82, 0x5, "058716"}, @lsrr={0x83, 0x1f, 0xa9, [@rand_addr=0x64010101, @broadcast, @remote, @multicast2, @broadcast, @private=0xa010102, @empty]}, @timestamp_addr={0x44, 0x3c, 0x6d, 0x1, 0xa, [{@local, 0x9}, {@local}, {@local, 0xfffffffd}, {@local, 0x80000000}, {@broadcast, 0x7fff}, {@broadcast, 0x7ff}, {@multicast1, 0x1}]}, @timestamp={0x44, 0xc, 0x34, 0x0, 0x0, [0x5, 0x2]}, @generic={0x83, 0xf, "1ce281af4e35b1745d312aa54b"}, @ssrr={0x89, 0x27, 0x88, [@remote, @multicast1, @empty, @multicast1, @rand_addr=0x64010101, @loopback, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1]}, @generic={0x7, 0x3, '/'}]}}}}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f0000000180)={&(0x7f0000000840)=ANY=[@ANYBLOB="780000005400010026bd7000fbdbdf2507000000", @ANYRESOCT=r8, @ANYBLOB="ed8e0100", @ANYRES32=r10, @ANYBLOB="000201006401010200000000000000000000000086dd000020000100", @ANYRES32, @ANYBLOB="01050300ac1e000100000000000000000000000086dd000020000100", @ANYRES32, @ANYBLOB="010100002001000000000000000000000000000096dd0000"], 0x78}, 0x1, 0x0, 0x0, 0x8840}, 0x4008040) sendmsg$nl_route_sched(r1, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000600)=@newtclass={0x4ac, 0x28, 0x10, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0x5, 0x1d}, {0xfff1, 0xf}, {0x2, 0xb}}, [@tclass_kind_options, @tclass_kind_options=@c_taprio={0xb}, @tclass_kind_options=@c_netem={0xa}, @tclass_kind_options=@c_mq={0x7}, @tclass_kind_options=@c_netem={0xa}, @tclass_kind_options=@c_multiq={0xb}]}, 0x4ac}, 0x1, 0x0, 0x0, 0x4008180}, 0x40010) sendmsg$nl_route_sched(r2, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newtfilter={0x6c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x3c, 0x2, [@TCA_BASIC_EMATCHES={0x38, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x2c, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1}, @TCF_EM_META={0x18, 0x2, 0x0, 0x0, {{}, [@TCA_EM_META_HDR={0xc}]}}]}]}]}}]}, 0x6c}}, 0x0) [ 2509.611554][T29051] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2509.668919][T29051] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 00:41:49 executing program 1: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev}, 0x20) 00:41:50 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000f000000850000007500000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r6, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x41, 0x3, 0x230, 0x0, 0x19, 0x0, 0x0, 0x0, 0x2e8, 0x1f0, 0x1f0, 0x2e8, 0x1f0, 0x3, 0x0, {[{{@ip={@private, @dev, 0x0, 0x0, 'wlan1\x00', 'wg1\x00'}, 0x0, 0xa8, 0xc8, 0x0, {0x0, 0xffffffffa0028000}, [@common=@unspec=@quota={{0x38}}]}, @unspec=@TRACE={0x20}}, {{@ip={@empty, @empty, 0x0, 0x0, 'veth0_vlan\x00', 'netpci0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x290) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000000)={@empty, @local, 0x0}, &(0x7f0000000040)=0xc) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000380)=ANY=[@ANYBLOB="72797a746e6c32000000000010bd084f", @ANYRES32=r7, @ANYBLOB="070000400000000200000005450500d4006700003f049078ac1414bb7f0000018913e2e0000001ac1e0001ffffffffac1414bb01940401008205058716831fa964010101ffffffffac1414bbe0000002ffffffff0a01010200000000443c6da1ac1414aa00000009ac14141c00000000ac1414aafffffffdac1414aa80000000ffffffff00007fffffffffff000007ffe000000100000001440c34000000000500000002830f1ce281af4e35b1745d312aa54b892788ac1414bbe000000100000000e0000001640101017f00000164010100ac1e0001e000000107032f000000"]}) r9 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r9, 0x4000000000000, 0x40, &(0x7f0000000900)=@raw={'raw\x00', 0x41, 0x3, 0x388, 0x0, 0x19, 0x0, 0x0, 0x0, 0x2f0, 0x1f0, 0x1f0, 0x2f0, 0x1f0, 0x3, 0x0, {[{{@ip={@private, @dev, 0x0, 0x0, 'wlan1\x00', 'wg1\x00'}, 0x0, 0x200, 0x220, 0x0, {0x0, 0xffffffffa0028000}, [@common=@set={{0x40}, {{0x4, [0x4, 0x2, 0xa, 0x6, 0x8, 0x2], 0x2, 0x2}}}, @common=@inet=@hashlimit2={{0x150}, {'veth1\x00', {0x0, 0x8, 0x40, 0x0, 0x0, 0x687c, 0x93}}}]}, @unspec=@TRACE={0x20}}, {{@ip={@empty, @empty, 0x0, 0x0, 'veth0_vlan\x00', 'netpci0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x0, 0x3]}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3e8) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000000)={@empty, @local, 0x0}, &(0x7f0000000040)=0xc) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r9, 0x89f1, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000380)={'syztnl2\x00', r10, 0x700, 0x40, 0x2, 0x5, {{0x35, 0x4, 0x1, 0x1, 0xd4, 0x0, 0x0, 0x3f, 0x4, 0x0, @remote, @loopback, {[@ssrr={0x89, 0x13, 0xe2, [@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @remote]}, @noop, @ra={0x94, 0x4, 0x1}, @generic={0x82, 0x5, "058716"}, @lsrr={0x83, 0x1f, 0xa9, [@rand_addr=0x64010101, @broadcast, @remote, @multicast2, @broadcast, @private=0xa010102, @empty]}, @timestamp_addr={0x44, 0x3c, 0x6d, 0x1, 0xa, [{@local, 0x9}, {@local}, {@local, 0xfffffffd}, {@local, 0x80000000}, {@broadcast, 0x7fff}, {@broadcast, 0x7ff}, {@multicast1, 0x1}]}, @timestamp={0x44, 0xc, 0x34, 0x0, 0x0, [0x5, 0x2]}, @generic={0x83, 0xf, "1ce281af4e35b1745d312aa54b"}, @ssrr={0x89, 0x27, 0x88, [@remote, @multicast1, @empty, @multicast1, @rand_addr=0x64010101, @loopback, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1]}, @generic={0x7, 0x3, '/'}]}}}}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f0000000180)={&(0x7f0000000840)=ANY=[@ANYBLOB="780000005400010026bd7000fbdbdf2507000000", @ANYRESOCT=r8, @ANYBLOB="ed8e0100", @ANYRES32=r10, @ANYBLOB="000201006401010200000000000000000000000086dd000020000100", @ANYRES32, @ANYBLOB="01050300ac1e000100000000000000000000000086dd000020000100", @ANYRES32, @ANYBLOB="010100002001000000000000000000000000000096dd0000"], 0x78}, 0x1, 0x0, 0x0, 0x8840}, 0x4008040) sendmsg$nl_route_sched(r1, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000600)=@newtclass={0x4ac, 0x28, 0x10, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0x5, 0x1d}, {0xfff1, 0xf}, {0x2, 0xb}}, [@tclass_kind_options, @tclass_kind_options=@c_taprio={0xb}, @tclass_kind_options=@c_netem={0xa}, @tclass_kind_options=@c_mq={0x7}, @tclass_kind_options=@c_netem={0xa}, @tclass_kind_options=@c_multiq={0xb}]}, 0x4ac}, 0x1, 0x0, 0x0, 0x4008180}, 0x40010) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newtfilter={0x6c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x3c, 0x2, [@TCA_BASIC_EMATCHES={0x38, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x2c, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1}, @TCF_EM_META={0x18, 0x2, 0x0, 0x0, {{}, [@TCA_EM_META_HDR={0xc}]}}]}]}]}}]}, 0x6c}}, 0x0) [ 2510.272484][T29054] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2510.281108][T29054] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 00:41:50 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000f000000850000007500000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r6, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x41, 0x3, 0x230, 0x0, 0x19, 0x0, 0x0, 0x0, 0x2e8, 0x1f0, 0x1f0, 0x2e8, 0x1f0, 0x3, 0x0, {[{{@ip={@private, @dev, 0x0, 0x0, 'wlan1\x00', 'wg1\x00'}, 0x0, 0xa8, 0xc8, 0x0, {0x0, 0xffffffffa0028000}, [@common=@unspec=@quota={{0x38}}]}, @unspec=@TRACE={0x20}}, {{@ip={@empty, @empty, 0x0, 0x0, 'veth0_vlan\x00', 'netpci0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x290) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000000)={@empty, @local, 0x0}, &(0x7f0000000040)=0xc) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000380)=ANY=[@ANYBLOB="72797a746e6c32000000000010bd084f", @ANYRES32=r7, @ANYBLOB="070000400000000200000005450500d4006700003f049078ac1414bb7f0000018913e2e0000001ac1e0001ffffffffac1414bb01940401008205058716831fa964010101ffffffffac1414bbe0000002ffffffff0a01010200000000443c6da1ac1414aa00000009ac14141c00000000ac1414aafffffffdac1414aa80000000ffffffff00007fffffffffff000007ffe000000100000001440c34000000000500000002830f1ce281af4e35b1745d312aa54b892788ac1414bbe000000100000000e0000001640101017f00000164010100ac1e0001e000000107032f000000"]}) r9 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r9, 0x4000000000000, 0x40, &(0x7f0000000900)=@raw={'raw\x00', 0x41, 0x3, 0x388, 0x0, 0x19, 0x0, 0x0, 0x0, 0x2f0, 0x1f0, 0x1f0, 0x2f0, 0x1f0, 0x3, 0x0, {[{{@ip={@private, @dev, 0x0, 0x0, 'wlan1\x00', 'wg1\x00'}, 0x0, 0x200, 0x220, 0x0, {0x0, 0xffffffffa0028000}, [@common=@set={{0x40}, {{0x4, [0x4, 0x2, 0xa, 0x6, 0x8, 0x2], 0x2, 0x2}}}, @common=@inet=@hashlimit2={{0x150}, {'veth1\x00', {0x0, 0x8, 0x40, 0x0, 0x0, 0x687c, 0x93}}}]}, @unspec=@TRACE={0x20}}, {{@ip={@empty, @empty, 0x0, 0x0, 'veth0_vlan\x00', 'netpci0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x0, 0x3]}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3e8) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000000)={@empty, @local, 0x0}, &(0x7f0000000040)=0xc) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r9, 0x89f1, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000380)={'syztnl2\x00', r10, 0x700, 0x40, 0x2, 0x5, {{0x35, 0x4, 0x1, 0x1, 0xd4, 0x0, 0x0, 0x3f, 0x4, 0x0, @remote, @loopback, {[@ssrr={0x89, 0x13, 0xe2, [@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @remote]}, @noop, @ra={0x94, 0x4, 0x1}, @generic={0x82, 0x5, "058716"}, @lsrr={0x83, 0x1f, 0xa9, [@rand_addr=0x64010101, @broadcast, @remote, @multicast2, @broadcast, @private=0xa010102, @empty]}, @timestamp_addr={0x44, 0x3c, 0x6d, 0x1, 0xa, [{@local, 0x9}, {@local}, {@local, 0xfffffffd}, {@local, 0x80000000}, {@broadcast, 0x7fff}, {@broadcast, 0x7ff}, {@multicast1, 0x1}]}, @timestamp={0x44, 0xc, 0x34, 0x0, 0x0, [0x5, 0x2]}, @generic={0x83, 0xf, "1ce281af4e35b1745d312aa54b"}, @ssrr={0x89, 0x27, 0x88, [@remote, @multicast1, @empty, @multicast1, @rand_addr=0x64010101, @loopback, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1]}, @generic={0x7, 0x3, '/'}]}}}}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f0000000180)={&(0x7f0000000840)=ANY=[@ANYBLOB="780000005400010026bd7000fbdbdf2507000000", @ANYRESOCT=r8, @ANYBLOB="ed8e0100", @ANYRES32=r10, @ANYBLOB="000201006401010200000000000000000000000086dd000020000100", @ANYRES32, @ANYBLOB="01050300ac1e000100000000000000000000000086dd000020000100", @ANYRES32, @ANYBLOB="010100002001000000000000000000000000000096dd0000"], 0x78}, 0x1, 0x0, 0x0, 0x8840}, 0x4008040) sendmsg$nl_route_sched(r1, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000600)=@newtclass={0x4ac, 0x28, 0x10, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0x5, 0x1d}, {0xfff1, 0xf}, {0x2, 0xb}}, [@tclass_kind_options, @tclass_kind_options=@c_taprio={0xb}, @tclass_kind_options=@c_netem={0xa}, @tclass_kind_options=@c_mq={0x7}, @tclass_kind_options=@c_netem={0xa}, @tclass_kind_options=@c_multiq={0xb}]}, 0x4ac}, 0x1, 0x0, 0x0, 0x4008180}, 0x40010) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newtfilter={0x6c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x3c, 0x2, [@TCA_BASIC_EMATCHES={0x38, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x2c, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1}, @TCF_EM_META={0x18, 0x2, 0x0, 0x0, {{}, [@TCA_EM_META_HDR={0xc}]}}]}]}]}}]}, 0x6c}}, 0x0) 00:41:51 executing program 1: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev}, 0x20) 00:41:51 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000f000000850000007500000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r6, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x41, 0x3, 0x230, 0x0, 0x19, 0x0, 0x0, 0x0, 0x2e8, 0x1f0, 0x1f0, 0x2e8, 0x1f0, 0x3, 0x0, {[{{@ip={@private, @dev, 0x0, 0x0, 'wlan1\x00', 'wg1\x00'}, 0x0, 0xa8, 0xc8, 0x0, {0x0, 0xffffffffa0028000}, [@common=@unspec=@quota={{0x38}}]}, @unspec=@TRACE={0x20}}, {{@ip={@empty, @empty, 0x0, 0x0, 'veth0_vlan\x00', 'netpci0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x290) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000000)={@empty, @local, 0x0}, &(0x7f0000000040)=0xc) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000380)=ANY=[@ANYBLOB="72797a746e6c32000000000010bd084f", @ANYRES32=r7, @ANYBLOB="070000400000000200000005450500d4006700003f049078ac1414bb7f0000018913e2e0000001ac1e0001ffffffffac1414bb01940401008205058716831fa964010101ffffffffac1414bbe0000002ffffffff0a01010200000000443c6da1ac1414aa00000009ac14141c00000000ac1414aafffffffdac1414aa80000000ffffffff00007fffffffffff000007ffe000000100000001440c34000000000500000002830f1ce281af4e35b1745d312aa54b892788ac1414bbe000000100000000e0000001640101017f00000164010100ac1e0001e000000107032f000000"]}) r9 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r9, 0x4000000000000, 0x40, &(0x7f0000000900)=@raw={'raw\x00', 0x41, 0x3, 0x388, 0x0, 0x19, 0x0, 0x0, 0x0, 0x2f0, 0x1f0, 0x1f0, 0x2f0, 0x1f0, 0x3, 0x0, {[{{@ip={@private, @dev, 0x0, 0x0, 'wlan1\x00', 'wg1\x00'}, 0x0, 0x200, 0x220, 0x0, {0x0, 0xffffffffa0028000}, [@common=@set={{0x40}, {{0x4, [0x4, 0x2, 0xa, 0x6, 0x8, 0x2], 0x2, 0x2}}}, @common=@inet=@hashlimit2={{0x150}, {'veth1\x00', {0x0, 0x8, 0x40, 0x0, 0x0, 0x687c, 0x93}}}]}, @unspec=@TRACE={0x20}}, {{@ip={@empty, @empty, 0x0, 0x0, 'veth0_vlan\x00', 'netpci0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x0, 0x3]}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3e8) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000000)={@empty, @local, 0x0}, &(0x7f0000000040)=0xc) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r9, 0x89f1, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000380)={'syztnl2\x00', r10, 0x700, 0x40, 0x2, 0x5, {{0x35, 0x4, 0x1, 0x1, 0xd4, 0x0, 0x0, 0x3f, 0x4, 0x0, @remote, @loopback, {[@ssrr={0x89, 0x13, 0xe2, [@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @remote]}, @noop, @ra={0x94, 0x4, 0x1}, @generic={0x82, 0x5, "058716"}, @lsrr={0x83, 0x1f, 0xa9, [@rand_addr=0x64010101, @broadcast, @remote, @multicast2, @broadcast, @private=0xa010102, @empty]}, @timestamp_addr={0x44, 0x3c, 0x6d, 0x1, 0xa, [{@local, 0x9}, {@local}, {@local, 0xfffffffd}, {@local, 0x80000000}, {@broadcast, 0x7fff}, {@broadcast, 0x7ff}, {@multicast1, 0x1}]}, @timestamp={0x44, 0xc, 0x34, 0x0, 0x0, [0x5, 0x2]}, @generic={0x83, 0xf, "1ce281af4e35b1745d312aa54b"}, @ssrr={0x89, 0x27, 0x88, [@remote, @multicast1, @empty, @multicast1, @rand_addr=0x64010101, @loopback, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1]}, @generic={0x7, 0x3, '/'}]}}}}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f0000000180)={&(0x7f0000000840)=ANY=[@ANYBLOB="780000005400010026bd7000fbdbdf2507000000", @ANYRESOCT=r8, @ANYBLOB="ed8e0100", @ANYRES32=r10, @ANYBLOB="000201006401010200000000000000000000000086dd000020000100", @ANYRES32, @ANYBLOB="01050300ac1e000100000000000000000000000086dd000020000100", @ANYRES32, @ANYBLOB="010100002001000000000000000000000000000096dd0000"], 0x78}, 0x1, 0x0, 0x0, 0x8840}, 0x4008040) sendmsg$nl_route_sched(r1, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000600)=@newtclass={0x4ac, 0x28, 0x10, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0x5, 0x1d}, {0xfff1, 0xf}, {0x2, 0xb}}, [@tclass_kind_options, @tclass_kind_options=@c_taprio={0xb}, @tclass_kind_options=@c_netem={0xa}, @tclass_kind_options=@c_mq={0x7}, @tclass_kind_options=@c_netem={0xa}, @tclass_kind_options=@c_multiq={0xb}]}, 0x4ac}, 0x1, 0x0, 0x0, 0x4008180}, 0x40010) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newtfilter={0x6c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x3c, 0x2, [@TCA_BASIC_EMATCHES={0x38, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x2c, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1}, @TCF_EM_META={0x18, 0x2, 0x0, 0x0, {{}, [@TCA_EM_META_HDR={0xc}]}}]}]}]}}]}, 0x6c}}, 0x0) 00:41:52 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000f000000850000007500000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r6, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x41, 0x3, 0x230, 0x0, 0x19, 0x0, 0x0, 0x0, 0x2e8, 0x1f0, 0x1f0, 0x2e8, 0x1f0, 0x3, 0x0, {[{{@ip={@private, @dev, 0x0, 0x0, 'wlan1\x00', 'wg1\x00'}, 0x0, 0xa8, 0xc8, 0x0, {0x0, 0xffffffffa0028000}, [@common=@unspec=@quota={{0x38}}]}, @unspec=@TRACE={0x20}}, {{@ip={@empty, @empty, 0x0, 0x0, 'veth0_vlan\x00', 'netpci0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x290) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000000)={@empty, @local, 0x0}, &(0x7f0000000040)=0xc) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000380)=ANY=[@ANYBLOB="72797a746e6c32000000000010bd084f", @ANYRES32=r7, @ANYBLOB="070000400000000200000005450500d4006700003f049078ac1414bb7f0000018913e2e0000001ac1e0001ffffffffac1414bb01940401008205058716831fa964010101ffffffffac1414bbe0000002ffffffff0a01010200000000443c6da1ac1414aa00000009ac14141c00000000ac1414aafffffffdac1414aa80000000ffffffff00007fffffffffff000007ffe000000100000001440c34000000000500000002830f1ce281af4e35b1745d312aa54b892788ac1414bbe000000100000000e0000001640101017f00000164010100ac1e0001e000000107032f000000"]}) r9 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r9, 0x4000000000000, 0x40, &(0x7f0000000900)=@raw={'raw\x00', 0x41, 0x3, 0x388, 0x0, 0x19, 0x0, 0x0, 0x0, 0x2f0, 0x1f0, 0x1f0, 0x2f0, 0x1f0, 0x3, 0x0, {[{{@ip={@private, @dev, 0x0, 0x0, 'wlan1\x00', 'wg1\x00'}, 0x0, 0x200, 0x220, 0x0, {0x0, 0xffffffffa0028000}, [@common=@set={{0x40}, {{0x4, [0x4, 0x2, 0xa, 0x6, 0x8, 0x2], 0x2, 0x2}}}, @common=@inet=@hashlimit2={{0x150}, {'veth1\x00', {0x0, 0x8, 0x40, 0x0, 0x0, 0x687c, 0x93}}}]}, @unspec=@TRACE={0x20}}, {{@ip={@empty, @empty, 0x0, 0x0, 'veth0_vlan\x00', 'netpci0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x0, 0x3]}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3e8) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000000)={@empty, @local, 0x0}, &(0x7f0000000040)=0xc) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r9, 0x89f1, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000380)={'syztnl2\x00', r10, 0x700, 0x40, 0x2, 0x5, {{0x35, 0x4, 0x1, 0x1, 0xd4, 0x0, 0x0, 0x3f, 0x4, 0x0, @remote, @loopback, {[@ssrr={0x89, 0x13, 0xe2, [@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @remote]}, @noop, @ra={0x94, 0x4, 0x1}, @generic={0x82, 0x5, "058716"}, @lsrr={0x83, 0x1f, 0xa9, [@rand_addr=0x64010101, @broadcast, @remote, @multicast2, @broadcast, @private=0xa010102, @empty]}, @timestamp_addr={0x44, 0x3c, 0x6d, 0x1, 0xa, [{@local, 0x9}, {@local}, {@local, 0xfffffffd}, {@local, 0x80000000}, {@broadcast, 0x7fff}, {@broadcast, 0x7ff}, {@multicast1, 0x1}]}, @timestamp={0x44, 0xc, 0x34, 0x0, 0x0, [0x5, 0x2]}, @generic={0x83, 0xf, "1ce281af4e35b1745d312aa54b"}, @ssrr={0x89, 0x27, 0x88, [@remote, @multicast1, @empty, @multicast1, @rand_addr=0x64010101, @loopback, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1]}, @generic={0x7, 0x3, '/'}]}}}}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f0000000180)={&(0x7f0000000840)=ANY=[@ANYBLOB="780000005400010026bd7000fbdbdf2507000000", @ANYRESOCT=r8, @ANYBLOB="ed8e0100", @ANYRES32=r10, @ANYBLOB="000201006401010200000000000000000000000086dd000020000100", @ANYRES32, @ANYBLOB="01050300ac1e000100000000000000000000000086dd000020000100", @ANYRES32, @ANYBLOB="010100002001000000000000000000000000000096dd0000"], 0x78}, 0x1, 0x0, 0x0, 0x8840}, 0x4008040) sendmsg$nl_route_sched(r1, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000600)=@newtclass={0x4ac, 0x28, 0x10, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0x5, 0x1d}, {0xfff1, 0xf}, {0x2, 0xb}}, [@tclass_kind_options, @tclass_kind_options=@c_taprio={0xb}, @tclass_kind_options=@c_netem={0xa}, @tclass_kind_options=@c_mq={0x7}, @tclass_kind_options=@c_netem={0xa}, @tclass_kind_options=@c_multiq={0xb}]}, 0x4ac}, 0x1, 0x0, 0x0, 0x4008180}, 0x40010) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={0x0}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newtfilter={0x6c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x3c, 0x2, [@TCA_BASIC_EMATCHES={0x38, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x2c, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1}, @TCF_EM_META={0x18, 0x2, 0x0, 0x0, {{}, [@TCA_EM_META_HDR={0xc}]}}]}]}]}}]}, 0x6c}}, 0x0) 00:41:52 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000f000000850000007500000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r6, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x41, 0x3, 0x230, 0x0, 0x19, 0x0, 0x0, 0x0, 0x2e8, 0x1f0, 0x1f0, 0x2e8, 0x1f0, 0x3, 0x0, {[{{@ip={@private, @dev, 0x0, 0x0, 'wlan1\x00', 'wg1\x00'}, 0x0, 0xa8, 0xc8, 0x0, {0x0, 0xffffffffa0028000}, [@common=@unspec=@quota={{0x38}}]}, @unspec=@TRACE={0x20}}, {{@ip={@empty, @empty, 0x0, 0x0, 'veth0_vlan\x00', 'netpci0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x290) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000000)={@empty, @local, 0x0}, &(0x7f0000000040)=0xc) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000380)=ANY=[@ANYBLOB="72797a746e6c32000000000010bd084f", @ANYRES32=r7, @ANYBLOB="070000400000000200000005450500d4006700003f049078ac1414bb7f0000018913e2e0000001ac1e0001ffffffffac1414bb01940401008205058716831fa964010101ffffffffac1414bbe0000002ffffffff0a01010200000000443c6da1ac1414aa00000009ac14141c00000000ac1414aafffffffdac1414aa80000000ffffffff00007fffffffffff000007ffe000000100000001440c34000000000500000002830f1ce281af4e35b1745d312aa54b892788ac1414bbe000000100000000e0000001640101017f00000164010100ac1e0001e000000107032f000000"]}) r9 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r9, 0x4000000000000, 0x40, &(0x7f0000000900)=@raw={'raw\x00', 0x41, 0x3, 0x388, 0x0, 0x19, 0x0, 0x0, 0x0, 0x2f0, 0x1f0, 0x1f0, 0x2f0, 0x1f0, 0x3, 0x0, {[{{@ip={@private, @dev, 0x0, 0x0, 'wlan1\x00', 'wg1\x00'}, 0x0, 0x200, 0x220, 0x0, {0x0, 0xffffffffa0028000}, [@common=@set={{0x40}, {{0x4, [0x4, 0x2, 0xa, 0x6, 0x8, 0x2], 0x2, 0x2}}}, @common=@inet=@hashlimit2={{0x150}, {'veth1\x00', {0x0, 0x8, 0x40, 0x0, 0x0, 0x687c, 0x93}}}]}, @unspec=@TRACE={0x20}}, {{@ip={@empty, @empty, 0x0, 0x0, 'veth0_vlan\x00', 'netpci0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x0, 0x3]}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3e8) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000000)={@empty, @local, 0x0}, &(0x7f0000000040)=0xc) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r9, 0x89f1, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000380)={'syztnl2\x00', r10, 0x700, 0x40, 0x2, 0x5, {{0x35, 0x4, 0x1, 0x1, 0xd4, 0x0, 0x0, 0x3f, 0x4, 0x0, @remote, @loopback, {[@ssrr={0x89, 0x13, 0xe2, [@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @remote]}, @noop, @ra={0x94, 0x4, 0x1}, @generic={0x82, 0x5, "058716"}, @lsrr={0x83, 0x1f, 0xa9, [@rand_addr=0x64010101, @broadcast, @remote, @multicast2, @broadcast, @private=0xa010102, @empty]}, @timestamp_addr={0x44, 0x3c, 0x6d, 0x1, 0xa, [{@local, 0x9}, {@local}, {@local, 0xfffffffd}, {@local, 0x80000000}, {@broadcast, 0x7fff}, {@broadcast, 0x7ff}, {@multicast1, 0x1}]}, @timestamp={0x44, 0xc, 0x34, 0x0, 0x0, [0x5, 0x2]}, @generic={0x83, 0xf, "1ce281af4e35b1745d312aa54b"}, @ssrr={0x89, 0x27, 0x88, [@remote, @multicast1, @empty, @multicast1, @rand_addr=0x64010101, @loopback, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1]}, @generic={0x7, 0x3, '/'}]}}}}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f0000000180)={&(0x7f0000000840)=ANY=[@ANYBLOB="780000005400010026bd7000fbdbdf2507000000", @ANYRESOCT=r8, @ANYBLOB="ed8e0100", @ANYRES32=r10, @ANYBLOB="000201006401010200000000000000000000000086dd000020000100", @ANYRES32, @ANYBLOB="01050300ac1e000100000000000000000000000086dd000020000100", @ANYRES32, @ANYBLOB="010100002001000000000000000000000000000096dd0000"], 0x78}, 0x1, 0x0, 0x0, 0x8840}, 0x4008040) sendmsg$nl_route_sched(r1, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000600)=@newtclass={0x4ac, 0x28, 0x10, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0x5, 0x1d}, {0xfff1, 0xf}, {0x2, 0xb}}, [@tclass_kind_options, @tclass_kind_options=@c_taprio={0xb}, @tclass_kind_options=@c_netem={0xa}, @tclass_kind_options=@c_mq={0x7}, @tclass_kind_options=@c_netem={0xa}, @tclass_kind_options=@c_multiq={0xb}]}, 0x4ac}, 0x1, 0x0, 0x0, 0x4008180}, 0x40010) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={0x0}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newtfilter={0x6c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x3c, 0x2, [@TCA_BASIC_EMATCHES={0x38, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x2c, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1}, @TCF_EM_META={0x18, 0x2, 0x0, 0x0, {{}, [@TCA_EM_META_HDR={0xc}]}}]}]}]}}]}, 0x6c}}, 0x0) [ 2513.026249][T29069] __nla_validate_parse: 6 callbacks suppressed [ 2513.026360][T29069] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2513.052086][T29069] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 00:41:53 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000f000000850000007500000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r6, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x41, 0x3, 0x230, 0x0, 0x19, 0x0, 0x0, 0x0, 0x2e8, 0x1f0, 0x1f0, 0x2e8, 0x1f0, 0x3, 0x0, {[{{@ip={@private, @dev, 0x0, 0x0, 'wlan1\x00', 'wg1\x00'}, 0x0, 0xa8, 0xc8, 0x0, {0x0, 0xffffffffa0028000}, [@common=@unspec=@quota={{0x38}}]}, @unspec=@TRACE={0x20}}, {{@ip={@empty, @empty, 0x0, 0x0, 'veth0_vlan\x00', 'netpci0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x290) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000000)={@empty, @local, 0x0}, &(0x7f0000000040)=0xc) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000380)=ANY=[@ANYBLOB="72797a746e6c32000000000010bd084f", @ANYRES32=r7, @ANYBLOB="070000400000000200000005450500d4006700003f049078ac1414bb7f0000018913e2e0000001ac1e0001ffffffffac1414bb01940401008205058716831fa964010101ffffffffac1414bbe0000002ffffffff0a01010200000000443c6da1ac1414aa00000009ac14141c00000000ac1414aafffffffdac1414aa80000000ffffffff00007fffffffffff000007ffe000000100000001440c34000000000500000002830f1ce281af4e35b1745d312aa54b892788ac1414bbe000000100000000e0000001640101017f00000164010100ac1e0001e000000107032f000000"]}) r9 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r9, 0x4000000000000, 0x40, &(0x7f0000000900)=@raw={'raw\x00', 0x41, 0x3, 0x388, 0x0, 0x19, 0x0, 0x0, 0x0, 0x2f0, 0x1f0, 0x1f0, 0x2f0, 0x1f0, 0x3, 0x0, {[{{@ip={@private, @dev, 0x0, 0x0, 'wlan1\x00', 'wg1\x00'}, 0x0, 0x200, 0x220, 0x0, {0x0, 0xffffffffa0028000}, [@common=@set={{0x40}, {{0x4, [0x4, 0x2, 0xa, 0x6, 0x8, 0x2], 0x2, 0x2}}}, @common=@inet=@hashlimit2={{0x150}, {'veth1\x00', {0x0, 0x8, 0x40, 0x0, 0x0, 0x687c, 0x93}}}]}, @unspec=@TRACE={0x20}}, {{@ip={@empty, @empty, 0x0, 0x0, 'veth0_vlan\x00', 'netpci0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x0, 0x3]}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3e8) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000000)={@empty, @local, 0x0}, &(0x7f0000000040)=0xc) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r9, 0x89f1, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000380)={'syztnl2\x00', r10, 0x700, 0x40, 0x2, 0x5, {{0x35, 0x4, 0x1, 0x1, 0xd4, 0x0, 0x0, 0x3f, 0x4, 0x0, @remote, @loopback, {[@ssrr={0x89, 0x13, 0xe2, [@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @remote]}, @noop, @ra={0x94, 0x4, 0x1}, @generic={0x82, 0x5, "058716"}, @lsrr={0x83, 0x1f, 0xa9, [@rand_addr=0x64010101, @broadcast, @remote, @multicast2, @broadcast, @private=0xa010102, @empty]}, @timestamp_addr={0x44, 0x3c, 0x6d, 0x1, 0xa, [{@local, 0x9}, {@local}, {@local, 0xfffffffd}, {@local, 0x80000000}, {@broadcast, 0x7fff}, {@broadcast, 0x7ff}, {@multicast1, 0x1}]}, @timestamp={0x44, 0xc, 0x34, 0x0, 0x0, [0x5, 0x2]}, @generic={0x83, 0xf, "1ce281af4e35b1745d312aa54b"}, @ssrr={0x89, 0x27, 0x88, [@remote, @multicast1, @empty, @multicast1, @rand_addr=0x64010101, @loopback, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1]}, @generic={0x7, 0x3, '/'}]}}}}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f0000000180)={&(0x7f0000000840)=ANY=[@ANYBLOB="780000005400010026bd7000fbdbdf2507000000", @ANYRESOCT=r8, @ANYBLOB="ed8e0100", @ANYRES32=r10, @ANYBLOB="000201006401010200000000000000000000000086dd000020000100", @ANYRES32, @ANYBLOB="01050300ac1e000100000000000000000000000086dd000020000100", @ANYRES32, @ANYBLOB="010100002001000000000000000000000000000096dd0000"], 0x78}, 0x1, 0x0, 0x0, 0x8840}, 0x4008040) sendmsg$nl_route_sched(r1, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000600)=@newtclass={0x4ac, 0x28, 0x10, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0x5, 0x1d}, {0xfff1, 0xf}, {0x2, 0xb}}, [@tclass_kind_options, @tclass_kind_options=@c_taprio={0xb}, @tclass_kind_options=@c_netem={0xa}, @tclass_kind_options=@c_mq={0x7}, @tclass_kind_options=@c_netem={0xa}, @tclass_kind_options=@c_multiq={0xb}]}, 0x4ac}, 0x1, 0x0, 0x0, 0x4008180}, 0x40010) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={0x0}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newtfilter={0x6c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x3c, 0x2, [@TCA_BASIC_EMATCHES={0x38, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x2c, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1}, @TCF_EM_META={0x18, 0x2, 0x0, 0x0, {{}, [@TCA_EM_META_HDR={0xc}]}}]}]}]}}]}, 0x6c}}, 0x0) [ 2513.666059][T29073] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2513.673477][T29073] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 00:41:53 executing program 1: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev}, 0x20) 00:41:53 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000f000000850000007500000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r6, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x41, 0x3, 0x230, 0x0, 0x19, 0x0, 0x0, 0x0, 0x2e8, 0x1f0, 0x1f0, 0x2e8, 0x1f0, 0x3, 0x0, {[{{@ip={@private, @dev, 0x0, 0x0, 'wlan1\x00', 'wg1\x00'}, 0x0, 0xa8, 0xc8, 0x0, {0x0, 0xffffffffa0028000}, [@common=@unspec=@quota={{0x38}}]}, @unspec=@TRACE={0x20}}, {{@ip={@empty, @empty, 0x0, 0x0, 'veth0_vlan\x00', 'netpci0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x290) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000000)={@empty, @local, 0x0}, &(0x7f0000000040)=0xc) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000380)=ANY=[@ANYBLOB="72797a746e6c32000000000010bd084f", @ANYRES32=r7, @ANYBLOB="070000400000000200000005450500d4006700003f049078ac1414bb7f0000018913e2e0000001ac1e0001ffffffffac1414bb01940401008205058716831fa964010101ffffffffac1414bbe0000002ffffffff0a01010200000000443c6da1ac1414aa00000009ac14141c00000000ac1414aafffffffdac1414aa80000000ffffffff00007fffffffffff000007ffe000000100000001440c34000000000500000002830f1ce281af4e35b1745d312aa54b892788ac1414bbe000000100000000e0000001640101017f00000164010100ac1e0001e000000107032f000000"]}) r9 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r9, 0x4000000000000, 0x40, &(0x7f0000000900)=@raw={'raw\x00', 0x41, 0x3, 0x388, 0x0, 0x19, 0x0, 0x0, 0x0, 0x2f0, 0x1f0, 0x1f0, 0x2f0, 0x1f0, 0x3, 0x0, {[{{@ip={@private, @dev, 0x0, 0x0, 'wlan1\x00', 'wg1\x00'}, 0x0, 0x200, 0x220, 0x0, {0x0, 0xffffffffa0028000}, [@common=@set={{0x40}, {{0x4, [0x4, 0x2, 0xa, 0x6, 0x8, 0x2], 0x2, 0x2}}}, @common=@inet=@hashlimit2={{0x150}, {'veth1\x00', {0x0, 0x8, 0x40, 0x0, 0x0, 0x687c, 0x93}}}]}, @unspec=@TRACE={0x20}}, {{@ip={@empty, @empty, 0x0, 0x0, 'veth0_vlan\x00', 'netpci0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x0, 0x3]}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3e8) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000000)={@empty, @local, 0x0}, &(0x7f0000000040)=0xc) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r9, 0x89f1, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000380)={'syztnl2\x00', r10, 0x700, 0x40, 0x2, 0x5, {{0x35, 0x4, 0x1, 0x1, 0xd4, 0x0, 0x0, 0x3f, 0x4, 0x0, @remote, @loopback, {[@ssrr={0x89, 0x13, 0xe2, [@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @remote]}, @noop, @ra={0x94, 0x4, 0x1}, @generic={0x82, 0x5, "058716"}, @lsrr={0x83, 0x1f, 0xa9, [@rand_addr=0x64010101, @broadcast, @remote, @multicast2, @broadcast, @private=0xa010102, @empty]}, @timestamp_addr={0x44, 0x3c, 0x6d, 0x1, 0xa, [{@local, 0x9}, {@local}, {@local, 0xfffffffd}, {@local, 0x80000000}, {@broadcast, 0x7fff}, {@broadcast, 0x7ff}, {@multicast1, 0x1}]}, @timestamp={0x44, 0xc, 0x34, 0x0, 0x0, [0x5, 0x2]}, @generic={0x83, 0xf, "1ce281af4e35b1745d312aa54b"}, @ssrr={0x89, 0x27, 0x88, [@remote, @multicast1, @empty, @multicast1, @rand_addr=0x64010101, @loopback, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1]}, @generic={0x7, 0x3, '/'}]}}}}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f0000000180)={&(0x7f0000000840)=ANY=[@ANYBLOB="780000005400010026bd7000fbdbdf2507000000", @ANYRESOCT=r8, @ANYBLOB="ed8e0100", @ANYRES32=r10, @ANYBLOB="000201006401010200000000000000000000000086dd000020000100", @ANYRES32, @ANYBLOB="01050300ac1e000100000000000000000000000086dd000020000100", @ANYRES32, @ANYBLOB="010100002001000000000000000000000000000096dd0000"], 0x78}, 0x1, 0x0, 0x0, 0x8840}, 0x4008040) sendmsg$nl_route_sched(r1, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000600)=@newtclass={0x4ac, 0x28, 0x10, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0x5, 0x1d}, {0xfff1, 0xf}, {0x2, 0xb}}, [@tclass_kind_options, @tclass_kind_options=@c_taprio={0xb}, @tclass_kind_options=@c_netem={0xa}, @tclass_kind_options=@c_mq={0x7}, @tclass_kind_options=@c_netem={0xa}, @tclass_kind_options=@c_multiq={0xb}]}, 0x4ac}, 0x1, 0x0, 0x0, 0x4008180}, 0x40010) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newtfilter={0x6c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x3c, 0x2, [@TCA_BASIC_EMATCHES={0x38, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x2c, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1}, @TCF_EM_META={0x18, 0x2, 0x0, 0x0, {{}, [@TCA_EM_META_HDR={0xc}]}}]}]}]}}]}, 0x6c}}, 0x0) [ 2514.351876][T29076] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2514.510817][T29076] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 00:41:54 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000f000000850000007500000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r6, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x41, 0x3, 0x230, 0x0, 0x19, 0x0, 0x0, 0x0, 0x2e8, 0x1f0, 0x1f0, 0x2e8, 0x1f0, 0x3, 0x0, {[{{@ip={@private, @dev, 0x0, 0x0, 'wlan1\x00', 'wg1\x00'}, 0x0, 0xa8, 0xc8, 0x0, {0x0, 0xffffffffa0028000}, [@common=@unspec=@quota={{0x38}}]}, @unspec=@TRACE={0x20}}, {{@ip={@empty, @empty, 0x0, 0x0, 'veth0_vlan\x00', 'netpci0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x290) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000000)={@empty, @local, 0x0}, &(0x7f0000000040)=0xc) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000380)=ANY=[@ANYBLOB="72797a746e6c32000000000010bd084f", @ANYRES32=r7, @ANYBLOB="070000400000000200000005450500d4006700003f049078ac1414bb7f0000018913e2e0000001ac1e0001ffffffffac1414bb01940401008205058716831fa964010101ffffffffac1414bbe0000002ffffffff0a01010200000000443c6da1ac1414aa00000009ac14141c00000000ac1414aafffffffdac1414aa80000000ffffffff00007fffffffffff000007ffe000000100000001440c34000000000500000002830f1ce281af4e35b1745d312aa54b892788ac1414bbe000000100000000e0000001640101017f00000164010100ac1e0001e000000107032f000000"]}) r9 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r9, 0x4000000000000, 0x40, &(0x7f0000000900)=@raw={'raw\x00', 0x41, 0x3, 0x388, 0x0, 0x19, 0x0, 0x0, 0x0, 0x2f0, 0x1f0, 0x1f0, 0x2f0, 0x1f0, 0x3, 0x0, {[{{@ip={@private, @dev, 0x0, 0x0, 'wlan1\x00', 'wg1\x00'}, 0x0, 0x200, 0x220, 0x0, {0x0, 0xffffffffa0028000}, [@common=@set={{0x40}, {{0x4, [0x4, 0x2, 0xa, 0x6, 0x8, 0x2], 0x2, 0x2}}}, @common=@inet=@hashlimit2={{0x150}, {'veth1\x00', {0x0, 0x8, 0x40, 0x0, 0x0, 0x687c, 0x93}}}]}, @unspec=@TRACE={0x20}}, {{@ip={@empty, @empty, 0x0, 0x0, 'veth0_vlan\x00', 'netpci0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x0, 0x3]}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3e8) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000000)={@empty, @local, 0x0}, &(0x7f0000000040)=0xc) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r9, 0x89f1, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000380)={'syztnl2\x00', r10, 0x700, 0x40, 0x2, 0x5, {{0x35, 0x4, 0x1, 0x1, 0xd4, 0x0, 0x0, 0x3f, 0x4, 0x0, @remote, @loopback, {[@ssrr={0x89, 0x13, 0xe2, [@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @remote]}, @noop, @ra={0x94, 0x4, 0x1}, @generic={0x82, 0x5, "058716"}, @lsrr={0x83, 0x1f, 0xa9, [@rand_addr=0x64010101, @broadcast, @remote, @multicast2, @broadcast, @private=0xa010102, @empty]}, @timestamp_addr={0x44, 0x3c, 0x6d, 0x1, 0xa, [{@local, 0x9}, {@local}, {@local, 0xfffffffd}, {@local, 0x80000000}, {@broadcast, 0x7fff}, {@broadcast, 0x7ff}, {@multicast1, 0x1}]}, @timestamp={0x44, 0xc, 0x34, 0x0, 0x0, [0x5, 0x2]}, @generic={0x83, 0xf, "1ce281af4e35b1745d312aa54b"}, @ssrr={0x89, 0x27, 0x88, [@remote, @multicast1, @empty, @multicast1, @rand_addr=0x64010101, @loopback, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1]}, @generic={0x7, 0x3, '/'}]}}}}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f0000000180)={&(0x7f0000000840)=ANY=[@ANYBLOB="780000005400010026bd7000fbdbdf2507000000", @ANYRESOCT=r8, @ANYBLOB="ed8e0100", @ANYRES32=r10, @ANYBLOB="000201006401010200000000000000000000000086dd000020000100", @ANYRES32, @ANYBLOB="01050300ac1e000100000000000000000000000086dd000020000100", @ANYRES32, @ANYBLOB="010100002001000000000000000000000000000096dd0000"], 0x78}, 0x1, 0x0, 0x0, 0x8840}, 0x4008040) sendmsg$nl_route_sched(r1, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000600)=@newtclass={0x4ac, 0x28, 0x10, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0x5, 0x1d}, {0xfff1, 0xf}, {0x2, 0xb}}, [@tclass_kind_options, @tclass_kind_options=@c_taprio={0xb}, @tclass_kind_options=@c_netem={0xa}, @tclass_kind_options=@c_mq={0x7}, @tclass_kind_options=@c_netem={0xa}, @tclass_kind_options=@c_multiq={0xb}]}, 0x4ac}, 0x1, 0x0, 0x0, 0x4008180}, 0x40010) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newtfilter={0x6c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x3c, 0x2, [@TCA_BASIC_EMATCHES={0x38, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x2c, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1}, @TCF_EM_META={0x18, 0x2, 0x0, 0x0, {{}, [@TCA_EM_META_HDR={0xc}]}}]}]}]}}]}, 0x6c}}, 0x0) [ 2515.015752][T29081] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2515.055007][T29081] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 00:41:55 executing program 1: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r0, 0x0, 0x0, 0x40, 0x0, 0x0) 00:41:55 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000f000000850000007500000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r6, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x41, 0x3, 0x230, 0x0, 0x19, 0x0, 0x0, 0x0, 0x2e8, 0x1f0, 0x1f0, 0x2e8, 0x1f0, 0x3, 0x0, {[{{@ip={@private, @dev, 0x0, 0x0, 'wlan1\x00', 'wg1\x00'}, 0x0, 0xa8, 0xc8, 0x0, {0x0, 0xffffffffa0028000}, [@common=@unspec=@quota={{0x38}}]}, @unspec=@TRACE={0x20}}, {{@ip={@empty, @empty, 0x0, 0x0, 'veth0_vlan\x00', 'netpci0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x290) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000000)={@empty, @local, 0x0}, &(0x7f0000000040)=0xc) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000380)=ANY=[@ANYBLOB="72797a746e6c32000000000010bd084f", @ANYRES32=r7, @ANYBLOB="070000400000000200000005450500d4006700003f049078ac1414bb7f0000018913e2e0000001ac1e0001ffffffffac1414bb01940401008205058716831fa964010101ffffffffac1414bbe0000002ffffffff0a01010200000000443c6da1ac1414aa00000009ac14141c00000000ac1414aafffffffdac1414aa80000000ffffffff00007fffffffffff000007ffe000000100000001440c34000000000500000002830f1ce281af4e35b1745d312aa54b892788ac1414bbe000000100000000e0000001640101017f00000164010100ac1e0001e000000107032f000000"]}) r9 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r9, 0x4000000000000, 0x40, &(0x7f0000000900)=@raw={'raw\x00', 0x41, 0x3, 0x388, 0x0, 0x19, 0x0, 0x0, 0x0, 0x2f0, 0x1f0, 0x1f0, 0x2f0, 0x1f0, 0x3, 0x0, {[{{@ip={@private, @dev, 0x0, 0x0, 'wlan1\x00', 'wg1\x00'}, 0x0, 0x200, 0x220, 0x0, {0x0, 0xffffffffa0028000}, [@common=@set={{0x40}, {{0x4, [0x4, 0x2, 0xa, 0x6, 0x8, 0x2], 0x2, 0x2}}}, @common=@inet=@hashlimit2={{0x150}, {'veth1\x00', {0x0, 0x8, 0x40, 0x0, 0x0, 0x687c, 0x93}}}]}, @unspec=@TRACE={0x20}}, {{@ip={@empty, @empty, 0x0, 0x0, 'veth0_vlan\x00', 'netpci0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x0, 0x3]}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3e8) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000000)={@empty, @local, 0x0}, &(0x7f0000000040)=0xc) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r9, 0x89f1, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000380)={'syztnl2\x00', r10, 0x700, 0x40, 0x2, 0x5, {{0x35, 0x4, 0x1, 0x1, 0xd4, 0x0, 0x0, 0x3f, 0x4, 0x0, @remote, @loopback, {[@ssrr={0x89, 0x13, 0xe2, [@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @remote]}, @noop, @ra={0x94, 0x4, 0x1}, @generic={0x82, 0x5, "058716"}, @lsrr={0x83, 0x1f, 0xa9, [@rand_addr=0x64010101, @broadcast, @remote, @multicast2, @broadcast, @private=0xa010102, @empty]}, @timestamp_addr={0x44, 0x3c, 0x6d, 0x1, 0xa, [{@local, 0x9}, {@local}, {@local, 0xfffffffd}, {@local, 0x80000000}, {@broadcast, 0x7fff}, {@broadcast, 0x7ff}, {@multicast1, 0x1}]}, @timestamp={0x44, 0xc, 0x34, 0x0, 0x0, [0x5, 0x2]}, @generic={0x83, 0xf, "1ce281af4e35b1745d312aa54b"}, @ssrr={0x89, 0x27, 0x88, [@remote, @multicast1, @empty, @multicast1, @rand_addr=0x64010101, @loopback, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1]}, @generic={0x7, 0x3, '/'}]}}}}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f0000000180)={&(0x7f0000000840)=ANY=[@ANYBLOB="780000005400010026bd7000fbdbdf2507000000", @ANYRESOCT=r8, @ANYBLOB="ed8e0100", @ANYRES32=r10, @ANYBLOB="000201006401010200000000000000000000000086dd000020000100", @ANYRES32, @ANYBLOB="01050300ac1e000100000000000000000000000086dd000020000100", @ANYRES32, @ANYBLOB="010100002001000000000000000000000000000096dd0000"], 0x78}, 0x1, 0x0, 0x0, 0x8840}, 0x4008040) sendmsg$nl_route_sched(r1, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000600)=@newtclass={0x4ac, 0x28, 0x10, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0x5, 0x1d}, {0xfff1, 0xf}, {0x2, 0xb}}, [@tclass_kind_options, @tclass_kind_options=@c_taprio={0xb}, @tclass_kind_options=@c_netem={0xa}, @tclass_kind_options=@c_mq={0x7}, @tclass_kind_options=@c_netem={0xa}, @tclass_kind_options=@c_multiq={0xb}]}, 0x4ac}, 0x1, 0x0, 0x0, 0x4008180}, 0x40010) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newtfilter={0x6c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x3c, 0x2, [@TCA_BASIC_EMATCHES={0x38, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x2c, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1}, @TCF_EM_META={0x18, 0x2, 0x0, 0x0, {{}, [@TCA_EM_META_HDR={0xc}]}}]}]}]}}]}, 0x6c}}, 0x0) [ 2515.825167][T29085] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2515.863818][T29085] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 00:41:56 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000f000000850000007500000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r6, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x41, 0x3, 0x230, 0x0, 0x19, 0x0, 0x0, 0x0, 0x2e8, 0x1f0, 0x1f0, 0x2e8, 0x1f0, 0x3, 0x0, {[{{@ip={@private, @dev, 0x0, 0x0, 'wlan1\x00', 'wg1\x00'}, 0x0, 0xa8, 0xc8, 0x0, {0x0, 0xffffffffa0028000}, [@common=@unspec=@quota={{0x38}}]}, @unspec=@TRACE={0x20}}, {{@ip={@empty, @empty, 0x0, 0x0, 'veth0_vlan\x00', 'netpci0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x290) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000000)={@empty, @local, 0x0}, &(0x7f0000000040)=0xc) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000380)=ANY=[@ANYBLOB="72797a746e6c32000000000010bd084f", @ANYRES32=r7, @ANYBLOB="070000400000000200000005450500d4006700003f049078ac1414bb7f0000018913e2e0000001ac1e0001ffffffffac1414bb01940401008205058716831fa964010101ffffffffac1414bbe0000002ffffffff0a01010200000000443c6da1ac1414aa00000009ac14141c00000000ac1414aafffffffdac1414aa80000000ffffffff00007fffffffffff000007ffe000000100000001440c34000000000500000002830f1ce281af4e35b1745d312aa54b892788ac1414bbe000000100000000e0000001640101017f00000164010100ac1e0001e000000107032f000000"]}) r9 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r9, 0x4000000000000, 0x40, &(0x7f0000000900)=@raw={'raw\x00', 0x41, 0x3, 0x388, 0x0, 0x19, 0x0, 0x0, 0x0, 0x2f0, 0x1f0, 0x1f0, 0x2f0, 0x1f0, 0x3, 0x0, {[{{@ip={@private, @dev, 0x0, 0x0, 'wlan1\x00', 'wg1\x00'}, 0x0, 0x200, 0x220, 0x0, {0x0, 0xffffffffa0028000}, [@common=@set={{0x40}, {{0x4, [0x4, 0x2, 0xa, 0x6, 0x8, 0x2], 0x2, 0x2}}}, @common=@inet=@hashlimit2={{0x150}, {'veth1\x00', {0x0, 0x8, 0x40, 0x0, 0x0, 0x687c, 0x93}}}]}, @unspec=@TRACE={0x20}}, {{@ip={@empty, @empty, 0x0, 0x0, 'veth0_vlan\x00', 'netpci0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x0, 0x3]}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3e8) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000000)={@empty, @local, 0x0}, &(0x7f0000000040)=0xc) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r9, 0x89f1, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000380)={'syztnl2\x00', r10, 0x700, 0x40, 0x2, 0x5, {{0x35, 0x4, 0x1, 0x1, 0xd4, 0x0, 0x0, 0x3f, 0x4, 0x0, @remote, @loopback, {[@ssrr={0x89, 0x13, 0xe2, [@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @remote]}, @noop, @ra={0x94, 0x4, 0x1}, @generic={0x82, 0x5, "058716"}, @lsrr={0x83, 0x1f, 0xa9, [@rand_addr=0x64010101, @broadcast, @remote, @multicast2, @broadcast, @private=0xa010102, @empty]}, @timestamp_addr={0x44, 0x3c, 0x6d, 0x1, 0xa, [{@local, 0x9}, {@local}, {@local, 0xfffffffd}, {@local, 0x80000000}, {@broadcast, 0x7fff}, {@broadcast, 0x7ff}, {@multicast1, 0x1}]}, @timestamp={0x44, 0xc, 0x34, 0x0, 0x0, [0x5, 0x2]}, @generic={0x83, 0xf, "1ce281af4e35b1745d312aa54b"}, @ssrr={0x89, 0x27, 0x88, [@remote, @multicast1, @empty, @multicast1, @rand_addr=0x64010101, @loopback, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1]}, @generic={0x7, 0x3, '/'}]}}}}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f0000000180)={&(0x7f0000000840)=ANY=[@ANYBLOB="780000005400010026bd7000fbdbdf2507000000", @ANYRESOCT=r8, @ANYBLOB="ed8e0100", @ANYRES32=r10, @ANYBLOB="000201006401010200000000000000000000000086dd000020000100", @ANYRES32, @ANYBLOB="01050300ac1e000100000000000000000000000086dd000020000100", @ANYRES32, @ANYBLOB="010100002001000000000000000000000000000096dd0000"], 0x78}, 0x1, 0x0, 0x0, 0x8840}, 0x4008040) sendmsg$nl_route_sched(r1, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000600)=@newtclass={0x4ac, 0x28, 0x10, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0x5, 0x1d}, {0xfff1, 0xf}, {0x2, 0xb}}, [@tclass_kind_options, @tclass_kind_options=@c_taprio={0xb}, @tclass_kind_options=@c_netem={0xa}, @tclass_kind_options=@c_mq={0x7}, @tclass_kind_options=@c_netem={0xa}, @tclass_kind_options=@c_multiq={0xb}]}, 0x4ac}, 0x1, 0x0, 0x0, 0x4008180}, 0x40010) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newtfilter={0x6c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x3c, 0x2, [@TCA_BASIC_EMATCHES={0x38, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x2c, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1}, @TCF_EM_META={0x18, 0x2, 0x0, 0x0, {{}, [@TCA_EM_META_HDR={0xc}]}}]}]}]}}]}, 0x6c}}, 0x0) 00:41:56 executing program 1: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r0, 0x0, 0x0, 0x40, 0x0, 0x0) 00:41:56 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000f000000850000007500000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r6, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x41, 0x3, 0x230, 0x0, 0x19, 0x0, 0x0, 0x0, 0x2e8, 0x1f0, 0x1f0, 0x2e8, 0x1f0, 0x3, 0x0, {[{{@ip={@private, @dev, 0x0, 0x0, 'wlan1\x00', 'wg1\x00'}, 0x0, 0xa8, 0xc8, 0x0, {0x0, 0xffffffffa0028000}, [@common=@unspec=@quota={{0x38}}]}, @unspec=@TRACE={0x20}}, {{@ip={@empty, @empty, 0x0, 0x0, 'veth0_vlan\x00', 'netpci0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x290) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000000)={@empty, @local, 0x0}, &(0x7f0000000040)=0xc) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000380)=ANY=[@ANYBLOB="72797a746e6c32000000000010bd084f", @ANYRES32=r7, @ANYBLOB="070000400000000200000005450500d4006700003f049078ac1414bb7f0000018913e2e0000001ac1e0001ffffffffac1414bb01940401008205058716831fa964010101ffffffffac1414bbe0000002ffffffff0a01010200000000443c6da1ac1414aa00000009ac14141c00000000ac1414aafffffffdac1414aa80000000ffffffff00007fffffffffff000007ffe000000100000001440c34000000000500000002830f1ce281af4e35b1745d312aa54b892788ac1414bbe000000100000000e0000001640101017f00000164010100ac1e0001e000000107032f000000"]}) r9 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r9, 0x4000000000000, 0x40, &(0x7f0000000900)=@raw={'raw\x00', 0x41, 0x3, 0x388, 0x0, 0x19, 0x0, 0x0, 0x0, 0x2f0, 0x1f0, 0x1f0, 0x2f0, 0x1f0, 0x3, 0x0, {[{{@ip={@private, @dev, 0x0, 0x0, 'wlan1\x00', 'wg1\x00'}, 0x0, 0x200, 0x220, 0x0, {0x0, 0xffffffffa0028000}, [@common=@set={{0x40}, {{0x4, [0x4, 0x2, 0xa, 0x6, 0x8, 0x2], 0x2, 0x2}}}, @common=@inet=@hashlimit2={{0x150}, {'veth1\x00', {0x0, 0x8, 0x40, 0x0, 0x0, 0x687c, 0x93}}}]}, @unspec=@TRACE={0x20}}, {{@ip={@empty, @empty, 0x0, 0x0, 'veth0_vlan\x00', 'netpci0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x0, 0x3]}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3e8) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000000)={@empty, @local, 0x0}, &(0x7f0000000040)=0xc) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r9, 0x89f1, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000380)={'syztnl2\x00', r10, 0x700, 0x40, 0x2, 0x5, {{0x35, 0x4, 0x1, 0x1, 0xd4, 0x0, 0x0, 0x3f, 0x4, 0x0, @remote, @loopback, {[@ssrr={0x89, 0x13, 0xe2, [@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @remote]}, @noop, @ra={0x94, 0x4, 0x1}, @generic={0x82, 0x5, "058716"}, @lsrr={0x83, 0x1f, 0xa9, [@rand_addr=0x64010101, @broadcast, @remote, @multicast2, @broadcast, @private=0xa010102, @empty]}, @timestamp_addr={0x44, 0x3c, 0x6d, 0x1, 0xa, [{@local, 0x9}, {@local}, {@local, 0xfffffffd}, {@local, 0x80000000}, {@broadcast, 0x7fff}, {@broadcast, 0x7ff}, {@multicast1, 0x1}]}, @timestamp={0x44, 0xc, 0x34, 0x0, 0x0, [0x5, 0x2]}, @generic={0x83, 0xf, "1ce281af4e35b1745d312aa54b"}, @ssrr={0x89, 0x27, 0x88, [@remote, @multicast1, @empty, @multicast1, @rand_addr=0x64010101, @loopback, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1]}, @generic={0x7, 0x3, '/'}]}}}}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f0000000180)={&(0x7f0000000840)=ANY=[@ANYBLOB="780000005400010026bd7000fbdbdf2507000000", @ANYRESOCT=r8, @ANYBLOB="ed8e0100", @ANYRES32=r10, @ANYBLOB="000201006401010200000000000000000000000086dd000020000100", @ANYRES32, @ANYBLOB="01050300ac1e000100000000000000000000000086dd000020000100", @ANYRES32, @ANYBLOB="010100002001000000000000000000000000000096dd0000"], 0x78}, 0x1, 0x0, 0x0, 0x8840}, 0x4008040) sendmsg$nl_route_sched(r1, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000600)=@newtclass={0x4ac, 0x28, 0x10, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0x5, 0x1d}, {0xfff1, 0xf}, {0x2, 0xb}}, [@tclass_kind_options, @tclass_kind_options=@c_taprio={0xb}, @tclass_kind_options=@c_netem={0xa}, @tclass_kind_options=@c_mq={0x7}, @tclass_kind_options=@c_netem={0xa}, @tclass_kind_options=@c_multiq={0xb}]}, 0x4ac}, 0x1, 0x0, 0x0, 0x4008180}, 0x40010) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newtfilter={0x6c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x3c, 0x2, [@TCA_BASIC_EMATCHES={0x38, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x2c, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1}, @TCF_EM_META={0x18, 0x2, 0x0, 0x0, {{}, [@TCA_EM_META_HDR={0xc}]}}]}]}]}}]}, 0x6c}}, 0x0) 00:41:57 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000f000000850000007500000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r6, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x41, 0x3, 0x230, 0x0, 0x19, 0x0, 0x0, 0x0, 0x2e8, 0x1f0, 0x1f0, 0x2e8, 0x1f0, 0x3, 0x0, {[{{@ip={@private, @dev, 0x0, 0x0, 'wlan1\x00', 'wg1\x00'}, 0x0, 0xa8, 0xc8, 0x0, {0x0, 0xffffffffa0028000}, [@common=@unspec=@quota={{0x38}}]}, @unspec=@TRACE={0x20}}, {{@ip={@empty, @empty, 0x0, 0x0, 'veth0_vlan\x00', 'netpci0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x290) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000000)={@empty, @local, 0x0}, &(0x7f0000000040)=0xc) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000380)=ANY=[@ANYBLOB="72797a746e6c32000000000010bd084f", @ANYRES32=r7, @ANYBLOB="070000400000000200000005450500d4006700003f049078ac1414bb7f0000018913e2e0000001ac1e0001ffffffffac1414bb01940401008205058716831fa964010101ffffffffac1414bbe0000002ffffffff0a01010200000000443c6da1ac1414aa00000009ac14141c00000000ac1414aafffffffdac1414aa80000000ffffffff00007fffffffffff000007ffe000000100000001440c34000000000500000002830f1ce281af4e35b1745d312aa54b892788ac1414bbe000000100000000e0000001640101017f00000164010100ac1e0001e000000107032f000000"]}) r9 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r9, 0x4000000000000, 0x40, &(0x7f0000000900)=@raw={'raw\x00', 0x41, 0x3, 0x388, 0x0, 0x19, 0x0, 0x0, 0x0, 0x2f0, 0x1f0, 0x1f0, 0x2f0, 0x1f0, 0x3, 0x0, {[{{@ip={@private, @dev, 0x0, 0x0, 'wlan1\x00', 'wg1\x00'}, 0x0, 0x200, 0x220, 0x0, {0x0, 0xffffffffa0028000}, [@common=@set={{0x40}, {{0x4, [0x4, 0x2, 0xa, 0x6, 0x8, 0x2], 0x2, 0x2}}}, @common=@inet=@hashlimit2={{0x150}, {'veth1\x00', {0x0, 0x8, 0x40, 0x0, 0x0, 0x687c, 0x93}}}]}, @unspec=@TRACE={0x20}}, {{@ip={@empty, @empty, 0x0, 0x0, 'veth0_vlan\x00', 'netpci0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x0, 0x3]}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3e8) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000000)={@empty, @local, 0x0}, &(0x7f0000000040)=0xc) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r9, 0x89f1, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000380)={'syztnl2\x00', r10, 0x700, 0x40, 0x2, 0x5, {{0x35, 0x4, 0x1, 0x1, 0xd4, 0x0, 0x0, 0x3f, 0x4, 0x0, @remote, @loopback, {[@ssrr={0x89, 0x13, 0xe2, [@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @remote]}, @noop, @ra={0x94, 0x4, 0x1}, @generic={0x82, 0x5, "058716"}, @lsrr={0x83, 0x1f, 0xa9, [@rand_addr=0x64010101, @broadcast, @remote, @multicast2, @broadcast, @private=0xa010102, @empty]}, @timestamp_addr={0x44, 0x3c, 0x6d, 0x1, 0xa, [{@local, 0x9}, {@local}, {@local, 0xfffffffd}, {@local, 0x80000000}, {@broadcast, 0x7fff}, {@broadcast, 0x7ff}, {@multicast1, 0x1}]}, @timestamp={0x44, 0xc, 0x34, 0x0, 0x0, [0x5, 0x2]}, @generic={0x83, 0xf, "1ce281af4e35b1745d312aa54b"}, @ssrr={0x89, 0x27, 0x88, [@remote, @multicast1, @empty, @multicast1, @rand_addr=0x64010101, @loopback, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1]}, @generic={0x7, 0x3, '/'}]}}}}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f0000000180)={&(0x7f0000000840)=ANY=[@ANYBLOB="780000005400010026bd7000fbdbdf2507000000", @ANYRESOCT=r8, @ANYBLOB="ed8e0100", @ANYRES32=r10, @ANYBLOB="000201006401010200000000000000000000000086dd000020000100", @ANYRES32, @ANYBLOB="01050300ac1e000100000000000000000000000086dd000020000100", @ANYRES32, @ANYBLOB="010100002001000000000000000000000000000096dd0000"], 0x78}, 0x1, 0x0, 0x0, 0x8840}, 0x4008040) sendmsg$nl_route_sched(r1, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000600)=@newtclass={0x4ac, 0x28, 0x10, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0x5, 0x1d}, {0xfff1, 0xf}, {0x2, 0xb}}, [@tclass_kind_options, @tclass_kind_options=@c_taprio={0xb}, @tclass_kind_options=@c_netem={0xa}, @tclass_kind_options=@c_mq={0x7}, @tclass_kind_options=@c_netem={0xa}, @tclass_kind_options=@c_multiq={0xb}]}, 0x4ac}, 0x1, 0x0, 0x0, 0x4008180}, 0x40010) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newtfilter={0x6c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x3c, 0x2, [@TCA_BASIC_EMATCHES={0x38, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x2c, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1}, @TCF_EM_META={0x18, 0x2, 0x0, 0x0, {{}, [@TCA_EM_META_HDR={0xc}]}}]}]}]}}]}, 0x6c}}, 0x0) [ 2518.308053][T29096] __nla_validate_parse: 4 callbacks suppressed [ 2518.308156][T29096] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2518.322965][T29096] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 00:41:58 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000f000000850000007500000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r6, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x41, 0x3, 0x230, 0x0, 0x19, 0x0, 0x0, 0x0, 0x2e8, 0x1f0, 0x1f0, 0x2e8, 0x1f0, 0x3, 0x0, {[{{@ip={@private, @dev, 0x0, 0x0, 'wlan1\x00', 'wg1\x00'}, 0x0, 0xa8, 0xc8, 0x0, {0x0, 0xffffffffa0028000}, [@common=@unspec=@quota={{0x38}}]}, @unspec=@TRACE={0x20}}, {{@ip={@empty, @empty, 0x0, 0x0, 'veth0_vlan\x00', 'netpci0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x290) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000000)={@empty, @local, 0x0}, &(0x7f0000000040)=0xc) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000380)=ANY=[@ANYBLOB="72797a746e6c32000000000010bd084f", @ANYRES32=r7, @ANYBLOB="070000400000000200000005450500d4006700003f049078ac1414bb7f0000018913e2e0000001ac1e0001ffffffffac1414bb01940401008205058716831fa964010101ffffffffac1414bbe0000002ffffffff0a01010200000000443c6da1ac1414aa00000009ac14141c00000000ac1414aafffffffdac1414aa80000000ffffffff00007fffffffffff000007ffe000000100000001440c34000000000500000002830f1ce281af4e35b1745d312aa54b892788ac1414bbe000000100000000e0000001640101017f00000164010100ac1e0001e000000107032f000000"]}) r9 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r9, 0x4000000000000, 0x40, &(0x7f0000000900)=@raw={'raw\x00', 0x41, 0x3, 0x388, 0x0, 0x19, 0x0, 0x0, 0x0, 0x2f0, 0x1f0, 0x1f0, 0x2f0, 0x1f0, 0x3, 0x0, {[{{@ip={@private, @dev, 0x0, 0x0, 'wlan1\x00', 'wg1\x00'}, 0x0, 0x200, 0x220, 0x0, {0x0, 0xffffffffa0028000}, [@common=@set={{0x40}, {{0x4, [0x4, 0x2, 0xa, 0x6, 0x8, 0x2], 0x2, 0x2}}}, @common=@inet=@hashlimit2={{0x150}, {'veth1\x00', {0x0, 0x8, 0x40, 0x0, 0x0, 0x687c, 0x93}}}]}, @unspec=@TRACE={0x20}}, {{@ip={@empty, @empty, 0x0, 0x0, 'veth0_vlan\x00', 'netpci0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x0, 0x3]}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3e8) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000000)={@empty, @local, 0x0}, &(0x7f0000000040)=0xc) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r9, 0x89f1, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000380)={'syztnl2\x00', r10, 0x700, 0x40, 0x2, 0x5, {{0x35, 0x4, 0x1, 0x1, 0xd4, 0x0, 0x0, 0x3f, 0x4, 0x0, @remote, @loopback, {[@ssrr={0x89, 0x13, 0xe2, [@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @remote]}, @noop, @ra={0x94, 0x4, 0x1}, @generic={0x82, 0x5, "058716"}, @lsrr={0x83, 0x1f, 0xa9, [@rand_addr=0x64010101, @broadcast, @remote, @multicast2, @broadcast, @private=0xa010102, @empty]}, @timestamp_addr={0x44, 0x3c, 0x6d, 0x1, 0xa, [{@local, 0x9}, {@local}, {@local, 0xfffffffd}, {@local, 0x80000000}, {@broadcast, 0x7fff}, {@broadcast, 0x7ff}, {@multicast1, 0x1}]}, @timestamp={0x44, 0xc, 0x34, 0x0, 0x0, [0x5, 0x2]}, @generic={0x83, 0xf, "1ce281af4e35b1745d312aa54b"}, @ssrr={0x89, 0x27, 0x88, [@remote, @multicast1, @empty, @multicast1, @rand_addr=0x64010101, @loopback, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1]}, @generic={0x7, 0x3, '/'}]}}}}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f0000000180)={&(0x7f0000000840)=ANY=[@ANYBLOB="780000005400010026bd7000fbdbdf2507000000", @ANYRESOCT=r8, @ANYBLOB="ed8e0100", @ANYRES32=r10, @ANYBLOB="000201006401010200000000000000000000000086dd000020000100", @ANYRES32, @ANYBLOB="01050300ac1e000100000000000000000000000086dd000020000100", @ANYRES32, @ANYBLOB="010100002001000000000000000000000000000096dd0000"], 0x78}, 0x1, 0x0, 0x0, 0x8840}, 0x4008040) sendmsg$nl_route_sched(r1, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000600)=@newtclass={0x4ac, 0x28, 0x10, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0x5, 0x1d}, {0xfff1, 0xf}, {0x2, 0xb}}, [@tclass_kind_options, @tclass_kind_options=@c_taprio={0xb}, @tclass_kind_options=@c_netem={0xa}, @tclass_kind_options=@c_mq={0x7}, @tclass_kind_options=@c_netem={0xa}, @tclass_kind_options=@c_multiq={0xb}]}, 0x4ac}, 0x1, 0x0, 0x0, 0x4008180}, 0x40010) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newtfilter={0x6c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x3c, 0x2, [@TCA_BASIC_EMATCHES={0x38, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x2c, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1}, @TCF_EM_META={0x18, 0x2, 0x0, 0x0, {{}, [@TCA_EM_META_HDR={0xc}]}}]}]}]}}]}, 0x6c}}, 0x0) 00:41:58 executing program 1: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r0, 0x0, 0x0, 0x40, 0x0, 0x0) [ 2519.151969][T29100] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2519.201439][T29100] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 00:41:59 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000f000000850000007500000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r6, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x41, 0x3, 0x230, 0x0, 0x19, 0x0, 0x0, 0x0, 0x2e8, 0x1f0, 0x1f0, 0x2e8, 0x1f0, 0x3, 0x0, {[{{@ip={@private, @dev, 0x0, 0x0, 'wlan1\x00', 'wg1\x00'}, 0x0, 0xa8, 0xc8, 0x0, {0x0, 0xffffffffa0028000}, [@common=@unspec=@quota={{0x38}}]}, @unspec=@TRACE={0x20}}, {{@ip={@empty, @empty, 0x0, 0x0, 'veth0_vlan\x00', 'netpci0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x290) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000000)={@empty, @local, 0x0}, &(0x7f0000000040)=0xc) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000380)=ANY=[@ANYBLOB="72797a746e6c32000000000010bd084f", @ANYRES32=r7, @ANYBLOB="070000400000000200000005450500d4006700003f049078ac1414bb7f0000018913e2e0000001ac1e0001ffffffffac1414bb01940401008205058716831fa964010101ffffffffac1414bbe0000002ffffffff0a01010200000000443c6da1ac1414aa00000009ac14141c00000000ac1414aafffffffdac1414aa80000000ffffffff00007fffffffffff000007ffe000000100000001440c34000000000500000002830f1ce281af4e35b1745d312aa54b892788ac1414bbe000000100000000e0000001640101017f00000164010100ac1e0001e000000107032f000000"]}) r9 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r9, 0x4000000000000, 0x40, &(0x7f0000000900)=@raw={'raw\x00', 0x41, 0x3, 0x388, 0x0, 0x19, 0x0, 0x0, 0x0, 0x2f0, 0x1f0, 0x1f0, 0x2f0, 0x1f0, 0x3, 0x0, {[{{@ip={@private, @dev, 0x0, 0x0, 'wlan1\x00', 'wg1\x00'}, 0x0, 0x200, 0x220, 0x0, {0x0, 0xffffffffa0028000}, [@common=@set={{0x40}, {{0x4, [0x4, 0x2, 0xa, 0x6, 0x8, 0x2], 0x2, 0x2}}}, @common=@inet=@hashlimit2={{0x150}, {'veth1\x00', {0x0, 0x8, 0x40, 0x0, 0x0, 0x687c, 0x93}}}]}, @unspec=@TRACE={0x20}}, {{@ip={@empty, @empty, 0x0, 0x0, 'veth0_vlan\x00', 'netpci0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x0, 0x3]}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3e8) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000000)={@empty, @local, 0x0}, &(0x7f0000000040)=0xc) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r9, 0x89f1, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000380)={'syztnl2\x00', r10, 0x700, 0x40, 0x2, 0x5, {{0x35, 0x4, 0x1, 0x1, 0xd4, 0x0, 0x0, 0x3f, 0x4, 0x0, @remote, @loopback, {[@ssrr={0x89, 0x13, 0xe2, [@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @remote]}, @noop, @ra={0x94, 0x4, 0x1}, @generic={0x82, 0x5, "058716"}, @lsrr={0x83, 0x1f, 0xa9, [@rand_addr=0x64010101, @broadcast, @remote, @multicast2, @broadcast, @private=0xa010102, @empty]}, @timestamp_addr={0x44, 0x3c, 0x6d, 0x1, 0xa, [{@local, 0x9}, {@local}, {@local, 0xfffffffd}, {@local, 0x80000000}, {@broadcast, 0x7fff}, {@broadcast, 0x7ff}, {@multicast1, 0x1}]}, @timestamp={0x44, 0xc, 0x34, 0x0, 0x0, [0x5, 0x2]}, @generic={0x83, 0xf, "1ce281af4e35b1745d312aa54b"}, @ssrr={0x89, 0x27, 0x88, [@remote, @multicast1, @empty, @multicast1, @rand_addr=0x64010101, @loopback, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1]}, @generic={0x7, 0x3, '/'}]}}}}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f0000000180)={&(0x7f0000000840)=ANY=[@ANYBLOB="780000005400010026bd7000fbdbdf2507000000", @ANYRESOCT=r8, @ANYBLOB="ed8e0100", @ANYRES32=r10, @ANYBLOB="000201006401010200000000000000000000000086dd000020000100", @ANYRES32, @ANYBLOB="01050300ac1e000100000000000000000000000086dd000020000100", @ANYRES32, @ANYBLOB="010100002001000000000000000000000000000096dd0000"], 0x78}, 0x1, 0x0, 0x0, 0x8840}, 0x4008040) sendmsg$nl_route_sched(r1, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000600)=@newtclass={0x4ac, 0x28, 0x10, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0x5, 0x1d}, {0xfff1, 0xf}, {0x2, 0xb}}, [@tclass_kind_options, @tclass_kind_options=@c_taprio={0xb}, @tclass_kind_options=@c_netem={0xa}, @tclass_kind_options=@c_mq={0x7}, @tclass_kind_options=@c_netem={0xa}, @tclass_kind_options=@c_multiq={0xb}]}, 0x4ac}, 0x1, 0x0, 0x0, 0x4008180}, 0x40010) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newtfilter={0x6c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x3c, 0x2, [@TCA_BASIC_EMATCHES={0x38, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x2c, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1}, @TCF_EM_META={0x18, 0x2, 0x0, 0x0, {{}, [@TCA_EM_META_HDR={0xc}]}}]}]}]}}]}, 0x6c}}, 0x0) [ 2519.651175][T29103] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2519.655628][T29103] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 00:42:00 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000f000000850000007500000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r6, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x41, 0x3, 0x230, 0x0, 0x19, 0x0, 0x0, 0x0, 0x2e8, 0x1f0, 0x1f0, 0x2e8, 0x1f0, 0x3, 0x0, {[{{@ip={@private, @dev, 0x0, 0x0, 'wlan1\x00', 'wg1\x00'}, 0x0, 0xa8, 0xc8, 0x0, {0x0, 0xffffffffa0028000}, [@common=@unspec=@quota={{0x38}}]}, @unspec=@TRACE={0x20}}, {{@ip={@empty, @empty, 0x0, 0x0, 'veth0_vlan\x00', 'netpci0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x290) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000000)={@empty, @local, 0x0}, &(0x7f0000000040)=0xc) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000380)=ANY=[@ANYBLOB="72797a746e6c32000000000010bd084f", @ANYRES32=r7, @ANYBLOB="070000400000000200000005450500d4006700003f049078ac1414bb7f0000018913e2e0000001ac1e0001ffffffffac1414bb01940401008205058716831fa964010101ffffffffac1414bbe0000002ffffffff0a01010200000000443c6da1ac1414aa00000009ac14141c00000000ac1414aafffffffdac1414aa80000000ffffffff00007fffffffffff000007ffe000000100000001440c34000000000500000002830f1ce281af4e35b1745d312aa54b892788ac1414bbe000000100000000e0000001640101017f00000164010100ac1e0001e000000107032f000000"]}) r9 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r9, 0x4000000000000, 0x40, &(0x7f0000000900)=@raw={'raw\x00', 0x41, 0x3, 0x388, 0x0, 0x19, 0x0, 0x0, 0x0, 0x2f0, 0x1f0, 0x1f0, 0x2f0, 0x1f0, 0x3, 0x0, {[{{@ip={@private, @dev, 0x0, 0x0, 'wlan1\x00', 'wg1\x00'}, 0x0, 0x200, 0x220, 0x0, {0x0, 0xffffffffa0028000}, [@common=@set={{0x40}, {{0x4, [0x4, 0x2, 0xa, 0x6, 0x8, 0x2], 0x2, 0x2}}}, @common=@inet=@hashlimit2={{0x150}, {'veth1\x00', {0x0, 0x8, 0x40, 0x0, 0x0, 0x687c, 0x93}}}]}, @unspec=@TRACE={0x20}}, {{@ip={@empty, @empty, 0x0, 0x0, 'veth0_vlan\x00', 'netpci0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x0, 0x3]}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3e8) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000000)={@empty, @local, 0x0}, &(0x7f0000000040)=0xc) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r9, 0x89f1, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000380)={'syztnl2\x00', r10, 0x700, 0x40, 0x2, 0x5, {{0x35, 0x4, 0x1, 0x1, 0xd4, 0x0, 0x0, 0x3f, 0x4, 0x0, @remote, @loopback, {[@ssrr={0x89, 0x13, 0xe2, [@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @remote]}, @noop, @ra={0x94, 0x4, 0x1}, @generic={0x82, 0x5, "058716"}, @lsrr={0x83, 0x1f, 0xa9, [@rand_addr=0x64010101, @broadcast, @remote, @multicast2, @broadcast, @private=0xa010102, @empty]}, @timestamp_addr={0x44, 0x3c, 0x6d, 0x1, 0xa, [{@local, 0x9}, {@local}, {@local, 0xfffffffd}, {@local, 0x80000000}, {@broadcast, 0x7fff}, {@broadcast, 0x7ff}, {@multicast1, 0x1}]}, @timestamp={0x44, 0xc, 0x34, 0x0, 0x0, [0x5, 0x2]}, @generic={0x83, 0xf, "1ce281af4e35b1745d312aa54b"}, @ssrr={0x89, 0x27, 0x88, [@remote, @multicast1, @empty, @multicast1, @rand_addr=0x64010101, @loopback, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1]}, @generic={0x7, 0x3, '/'}]}}}}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f0000000180)={&(0x7f0000000840)=ANY=[@ANYBLOB="780000005400010026bd7000fbdbdf2507000000", @ANYRESOCT=r8, @ANYBLOB="ed8e0100", @ANYRES32=r10, @ANYBLOB="000201006401010200000000000000000000000086dd000020000100", @ANYRES32, @ANYBLOB="01050300ac1e000100000000000000000000000086dd000020000100", @ANYRES32, @ANYBLOB="010100002001000000000000000000000000000096dd0000"], 0x78}, 0x1, 0x0, 0x0, 0x8840}, 0x4008040) sendmsg$nl_route_sched(r1, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000600)=@newtclass={0x4ac, 0x28, 0x10, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0x5, 0x1d}, {0xfff1, 0xf}, {0x2, 0xb}}, [@tclass_kind_options, @tclass_kind_options=@c_taprio={0xb}, @tclass_kind_options=@c_netem={0xa}, @tclass_kind_options=@c_mq={0x7}, @tclass_kind_options=@c_netem={0xa}, @tclass_kind_options=@c_multiq={0xb}]}, 0x4ac}, 0x1, 0x0, 0x0, 0x4008180}, 0x40010) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newtfilter={0x6c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x3c, 0x2, [@TCA_BASIC_EMATCHES={0x38, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x2c, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1}, @TCF_EM_META={0x18, 0x2, 0x0, 0x0, {{}, [@TCA_EM_META_HDR={0xc}]}}]}]}]}}]}, 0x6c}}, 0x0) 00:42:00 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="8db4c6d3916872c4d26e8e39f30e9ce9ab", 0x11) [ 2520.511427][T29108] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2520.548073][T29108] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 00:42:00 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000f000000850000007500000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r6, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x41, 0x3, 0x230, 0x0, 0x19, 0x0, 0x0, 0x0, 0x2e8, 0x1f0, 0x1f0, 0x2e8, 0x1f0, 0x3, 0x0, {[{{@ip={@private, @dev, 0x0, 0x0, 'wlan1\x00', 'wg1\x00'}, 0x0, 0xa8, 0xc8, 0x0, {0x0, 0xffffffffa0028000}, [@common=@unspec=@quota={{0x38}}]}, @unspec=@TRACE={0x20}}, {{@ip={@empty, @empty, 0x0, 0x0, 'veth0_vlan\x00', 'netpci0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x290) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000000)={@empty, @local, 0x0}, &(0x7f0000000040)=0xc) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000380)=ANY=[@ANYBLOB="72797a746e6c32000000000010bd084f", @ANYRES32=r7, @ANYBLOB="070000400000000200000005450500d4006700003f049078ac1414bb7f0000018913e2e0000001ac1e0001ffffffffac1414bb01940401008205058716831fa964010101ffffffffac1414bbe0000002ffffffff0a01010200000000443c6da1ac1414aa00000009ac14141c00000000ac1414aafffffffdac1414aa80000000ffffffff00007fffffffffff000007ffe000000100000001440c34000000000500000002830f1ce281af4e35b1745d312aa54b892788ac1414bbe000000100000000e0000001640101017f00000164010100ac1e0001e000000107032f000000"]}) r9 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r9, 0x4000000000000, 0x40, &(0x7f0000000900)=@raw={'raw\x00', 0x41, 0x3, 0x388, 0x0, 0x19, 0x0, 0x0, 0x0, 0x2f0, 0x1f0, 0x1f0, 0x2f0, 0x1f0, 0x3, 0x0, {[{{@ip={@private, @dev, 0x0, 0x0, 'wlan1\x00', 'wg1\x00'}, 0x0, 0x200, 0x220, 0x0, {0x0, 0xffffffffa0028000}, [@common=@set={{0x40}, {{0x4, [0x4, 0x2, 0xa, 0x6, 0x8, 0x2], 0x2, 0x2}}}, @common=@inet=@hashlimit2={{0x150}, {'veth1\x00', {0x0, 0x8, 0x40, 0x0, 0x0, 0x687c, 0x93}}}]}, @unspec=@TRACE={0x20}}, {{@ip={@empty, @empty, 0x0, 0x0, 'veth0_vlan\x00', 'netpci0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x0, 0x3]}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3e8) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000000)={@empty, @local, 0x0}, &(0x7f0000000040)=0xc) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r9, 0x89f1, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000380)={'syztnl2\x00', r10, 0x700, 0x40, 0x2, 0x5, {{0x35, 0x4, 0x1, 0x1, 0xd4, 0x0, 0x0, 0x3f, 0x4, 0x0, @remote, @loopback, {[@ssrr={0x89, 0x13, 0xe2, [@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @remote]}, @noop, @ra={0x94, 0x4, 0x1}, @generic={0x82, 0x5, "058716"}, @lsrr={0x83, 0x1f, 0xa9, [@rand_addr=0x64010101, @broadcast, @remote, @multicast2, @broadcast, @private=0xa010102, @empty]}, @timestamp_addr={0x44, 0x3c, 0x6d, 0x1, 0xa, [{@local, 0x9}, {@local}, {@local, 0xfffffffd}, {@local, 0x80000000}, {@broadcast, 0x7fff}, {@broadcast, 0x7ff}, {@multicast1, 0x1}]}, @timestamp={0x44, 0xc, 0x34, 0x0, 0x0, [0x5, 0x2]}, @generic={0x83, 0xf, "1ce281af4e35b1745d312aa54b"}, @ssrr={0x89, 0x27, 0x88, [@remote, @multicast1, @empty, @multicast1, @rand_addr=0x64010101, @loopback, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1]}, @generic={0x7, 0x3, '/'}]}}}}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f0000000180)={&(0x7f0000000840)=ANY=[@ANYBLOB="780000005400010026bd7000fbdbdf2507000000", @ANYRESOCT=r8, @ANYBLOB="ed8e0100", @ANYRES32=r10, @ANYBLOB="000201006401010200000000000000000000000086dd000020000100", @ANYRES32, @ANYBLOB="01050300ac1e000100000000000000000000000086dd000020000100", @ANYRES32, @ANYBLOB="010100002001000000000000000000000000000096dd0000"], 0x78}, 0x1, 0x0, 0x0, 0x8840}, 0x4008040) sendmsg$nl_route_sched(r1, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000600)=@newtclass={0x4ac, 0x28, 0x10, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0x5, 0x1d}, {0xfff1, 0xf}, {0x2, 0xb}}, [@tclass_kind_options, @tclass_kind_options=@c_taprio={0xb}, @tclass_kind_options=@c_netem={0xa}, @tclass_kind_options=@c_mq={0x7}, @tclass_kind_options=@c_netem={0xa}, @tclass_kind_options=@c_multiq={0xb}]}, 0x4ac}, 0x1, 0x0, 0x0, 0x4008180}, 0x40010) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newtfilter={0x6c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x3c, 0x2, [@TCA_BASIC_EMATCHES={0x38, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x2c, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1}, @TCF_EM_META={0x18, 0x2, 0x0, 0x0, {{}, [@TCA_EM_META_HDR={0xc}]}}]}]}]}}]}, 0x6c}}, 0x0) [ 2521.076293][T29111] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2521.091212][T29111] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 00:42:01 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000f000000850000007500000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r6, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x41, 0x3, 0x230, 0x0, 0x19, 0x0, 0x0, 0x0, 0x2e8, 0x1f0, 0x1f0, 0x2e8, 0x1f0, 0x3, 0x0, {[{{@ip={@private, @dev, 0x0, 0x0, 'wlan1\x00', 'wg1\x00'}, 0x0, 0xa8, 0xc8, 0x0, {0x0, 0xffffffffa0028000}, [@common=@unspec=@quota={{0x38}}]}, @unspec=@TRACE={0x20}}, {{@ip={@empty, @empty, 0x0, 0x0, 'veth0_vlan\x00', 'netpci0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x290) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000000)={@empty, @local, 0x0}, &(0x7f0000000040)=0xc) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000380)=ANY=[@ANYBLOB="72797a746e6c32000000000010bd084f", @ANYRES32=r7, @ANYBLOB="070000400000000200000005450500d4006700003f049078ac1414bb7f0000018913e2e0000001ac1e0001ffffffffac1414bb01940401008205058716831fa964010101ffffffffac1414bbe0000002ffffffff0a01010200000000443c6da1ac1414aa00000009ac14141c00000000ac1414aafffffffdac1414aa80000000ffffffff00007fffffffffff000007ffe000000100000001440c34000000000500000002830f1ce281af4e35b1745d312aa54b892788ac1414bbe000000100000000e0000001640101017f00000164010100ac1e0001e000000107032f000000"]}) r9 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r9, 0x4000000000000, 0x40, &(0x7f0000000900)=@raw={'raw\x00', 0x41, 0x3, 0x388, 0x0, 0x19, 0x0, 0x0, 0x0, 0x2f0, 0x1f0, 0x1f0, 0x2f0, 0x1f0, 0x3, 0x0, {[{{@ip={@private, @dev, 0x0, 0x0, 'wlan1\x00', 'wg1\x00'}, 0x0, 0x200, 0x220, 0x0, {0x0, 0xffffffffa0028000}, [@common=@set={{0x40}, {{0x4, [0x4, 0x2, 0xa, 0x6, 0x8, 0x2], 0x2, 0x2}}}, @common=@inet=@hashlimit2={{0x150}, {'veth1\x00', {0x0, 0x8, 0x40, 0x0, 0x0, 0x687c, 0x93}}}]}, @unspec=@TRACE={0x20}}, {{@ip={@empty, @empty, 0x0, 0x0, 'veth0_vlan\x00', 'netpci0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x0, 0x3]}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3e8) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000000)={@empty, @local, 0x0}, &(0x7f0000000040)=0xc) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r9, 0x89f1, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000380)={'syztnl2\x00', r10, 0x700, 0x40, 0x2, 0x5, {{0x35, 0x4, 0x1, 0x1, 0xd4, 0x0, 0x0, 0x3f, 0x4, 0x0, @remote, @loopback, {[@ssrr={0x89, 0x13, 0xe2, [@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @remote]}, @noop, @ra={0x94, 0x4, 0x1}, @generic={0x82, 0x5, "058716"}, @lsrr={0x83, 0x1f, 0xa9, [@rand_addr=0x64010101, @broadcast, @remote, @multicast2, @broadcast, @private=0xa010102, @empty]}, @timestamp_addr={0x44, 0x3c, 0x6d, 0x1, 0xa, [{@local, 0x9}, {@local}, {@local, 0xfffffffd}, {@local, 0x80000000}, {@broadcast, 0x7fff}, {@broadcast, 0x7ff}, {@multicast1, 0x1}]}, @timestamp={0x44, 0xc, 0x34, 0x0, 0x0, [0x5, 0x2]}, @generic={0x83, 0xf, "1ce281af4e35b1745d312aa54b"}, @ssrr={0x89, 0x27, 0x88, [@remote, @multicast1, @empty, @multicast1, @rand_addr=0x64010101, @loopback, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1]}, @generic={0x7, 0x3, '/'}]}}}}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f0000000180)={&(0x7f0000000840)=ANY=[@ANYBLOB="780000005400010026bd7000fbdbdf2507000000", @ANYRESOCT=r8, @ANYBLOB="ed8e0100", @ANYRES32=r10, @ANYBLOB="000201006401010200000000000000000000000086dd000020000100", @ANYRES32, @ANYBLOB="01050300ac1e000100000000000000000000000086dd000020000100", @ANYRES32, @ANYBLOB="010100002001000000000000000000000000000096dd0000"], 0x78}, 0x1, 0x0, 0x0, 0x8840}, 0x4008040) sendmsg$nl_route_sched(r1, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000600)=@newtclass={0x4ac, 0x28, 0x10, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0x5, 0x1d}, {0xfff1, 0xf}, {0x2, 0xb}}, [@tclass_kind_options, @tclass_kind_options=@c_taprio={0xb}, @tclass_kind_options=@c_netem={0xa}, @tclass_kind_options=@c_mq={0x7}, @tclass_kind_options=@c_netem={0xa}, @tclass_kind_options=@c_multiq={0xb}]}, 0x4ac}, 0x1, 0x0, 0x0, 0x4008180}, 0x40010) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newtfilter={0x6c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x3c, 0x2, [@TCA_BASIC_EMATCHES={0x38, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x2c, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1}, @TCF_EM_META={0x18, 0x2, 0x0, 0x0, {{}, [@TCA_EM_META_HDR={0xc}]}}]}]}]}}]}, 0x6c}}, 0x0) 00:42:02 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000f000000850000007500000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r6, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x41, 0x3, 0x230, 0x0, 0x19, 0x0, 0x0, 0x0, 0x2e8, 0x1f0, 0x1f0, 0x2e8, 0x1f0, 0x3, 0x0, {[{{@ip={@private, @dev, 0x0, 0x0, 'wlan1\x00', 'wg1\x00'}, 0x0, 0xa8, 0xc8, 0x0, {0x0, 0xffffffffa0028000}, [@common=@unspec=@quota={{0x38}}]}, @unspec=@TRACE={0x20}}, {{@ip={@empty, @empty, 0x0, 0x0, 'veth0_vlan\x00', 'netpci0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x290) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000000)={@empty, @local, 0x0}, &(0x7f0000000040)=0xc) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000380)=ANY=[@ANYBLOB="72797a746e6c32000000000010bd084f", @ANYRES32=r7, @ANYBLOB="070000400000000200000005450500d4006700003f049078ac1414bb7f0000018913e2e0000001ac1e0001ffffffffac1414bb01940401008205058716831fa964010101ffffffffac1414bbe0000002ffffffff0a01010200000000443c6da1ac1414aa00000009ac14141c00000000ac1414aafffffffdac1414aa80000000ffffffff00007fffffffffff000007ffe000000100000001440c34000000000500000002830f1ce281af4e35b1745d312aa54b892788ac1414bbe000000100000000e0000001640101017f00000164010100ac1e0001e000000107032f000000"]}) r9 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r9, 0x4000000000000, 0x40, &(0x7f0000000900)=@raw={'raw\x00', 0x41, 0x3, 0x388, 0x0, 0x19, 0x0, 0x0, 0x0, 0x2f0, 0x1f0, 0x1f0, 0x2f0, 0x1f0, 0x3, 0x0, {[{{@ip={@private, @dev, 0x0, 0x0, 'wlan1\x00', 'wg1\x00'}, 0x0, 0x200, 0x220, 0x0, {0x0, 0xffffffffa0028000}, [@common=@set={{0x40}, {{0x4, [0x4, 0x2, 0xa, 0x6, 0x8, 0x2], 0x2, 0x2}}}, @common=@inet=@hashlimit2={{0x150}, {'veth1\x00', {0x0, 0x8, 0x40, 0x0, 0x0, 0x687c, 0x93}}}]}, @unspec=@TRACE={0x20}}, {{@ip={@empty, @empty, 0x0, 0x0, 'veth0_vlan\x00', 'netpci0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x0, 0x3]}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3e8) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000000)={@empty, @local, 0x0}, &(0x7f0000000040)=0xc) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r9, 0x89f1, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000380)={'syztnl2\x00', r10, 0x700, 0x40, 0x2, 0x5, {{0x35, 0x4, 0x1, 0x1, 0xd4, 0x0, 0x0, 0x3f, 0x4, 0x0, @remote, @loopback, {[@ssrr={0x89, 0x13, 0xe2, [@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @remote]}, @noop, @ra={0x94, 0x4, 0x1}, @generic={0x82, 0x5, "058716"}, @lsrr={0x83, 0x1f, 0xa9, [@rand_addr=0x64010101, @broadcast, @remote, @multicast2, @broadcast, @private=0xa010102, @empty]}, @timestamp_addr={0x44, 0x3c, 0x6d, 0x1, 0xa, [{@local, 0x9}, {@local}, {@local, 0xfffffffd}, {@local, 0x80000000}, {@broadcast, 0x7fff}, {@broadcast, 0x7ff}, {@multicast1, 0x1}]}, @timestamp={0x44, 0xc, 0x34, 0x0, 0x0, [0x5, 0x2]}, @generic={0x83, 0xf, "1ce281af4e35b1745d312aa54b"}, @ssrr={0x89, 0x27, 0x88, [@remote, @multicast1, @empty, @multicast1, @rand_addr=0x64010101, @loopback, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1]}, @generic={0x7, 0x3, '/'}]}}}}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f0000000180)={&(0x7f0000000840)=ANY=[@ANYBLOB="780000005400010026bd7000fbdbdf2507000000", @ANYRESOCT=r8, @ANYBLOB="ed8e0100", @ANYRES32=r10, @ANYBLOB="000201006401010200000000000000000000000086dd000020000100", @ANYRES32, @ANYBLOB="01050300ac1e000100000000000000000000000086dd000020000100", @ANYRES32, @ANYBLOB="010100002001000000000000000000000000000096dd0000"], 0x78}, 0x1, 0x0, 0x0, 0x8840}, 0x4008040) sendmsg$nl_route_sched(r1, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000600)=@newtclass={0x4ac, 0x28, 0x10, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0x5, 0x1d}, {0xfff1, 0xf}, {0x2, 0xb}}, [@tclass_kind_options, @tclass_kind_options=@c_taprio={0xb}, @tclass_kind_options=@c_netem={0xa}, @tclass_kind_options=@c_mq={0x7}, @tclass_kind_options=@c_netem={0xa}, @tclass_kind_options=@c_multiq={0xb}]}, 0x4ac}, 0x1, 0x0, 0x0, 0x4008180}, 0x40010) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newtfilter={0x6c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x3c, 0x2, [@TCA_BASIC_EMATCHES={0x38, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x2c, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1}, @TCF_EM_META={0x18, 0x2, 0x0, 0x0, {{}, [@TCA_EM_META_HDR={0xc}]}}]}]}]}}]}, 0x6c}}, 0x0) 00:42:02 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000f000000850000007500000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r6, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x41, 0x3, 0x230, 0x0, 0x19, 0x0, 0x0, 0x0, 0x2e8, 0x1f0, 0x1f0, 0x2e8, 0x1f0, 0x3, 0x0, {[{{@ip={@private, @dev, 0x0, 0x0, 'wlan1\x00', 'wg1\x00'}, 0x0, 0xa8, 0xc8, 0x0, {0x0, 0xffffffffa0028000}, [@common=@unspec=@quota={{0x38}}]}, @unspec=@TRACE={0x20}}, {{@ip={@empty, @empty, 0x0, 0x0, 'veth0_vlan\x00', 'netpci0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x290) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000000)={@empty, @local, 0x0}, &(0x7f0000000040)=0xc) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000380)=ANY=[@ANYBLOB="72797a746e6c32000000000010bd084f", @ANYRES32=r7, @ANYBLOB="070000400000000200000005450500d4006700003f049078ac1414bb7f0000018913e2e0000001ac1e0001ffffffffac1414bb01940401008205058716831fa964010101ffffffffac1414bbe0000002ffffffff0a01010200000000443c6da1ac1414aa00000009ac14141c00000000ac1414aafffffffdac1414aa80000000ffffffff00007fffffffffff000007ffe000000100000001440c34000000000500000002830f1ce281af4e35b1745d312aa54b892788ac1414bbe000000100000000e0000001640101017f00000164010100ac1e0001e000000107032f000000"]}) r9 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r9, 0x4000000000000, 0x40, &(0x7f0000000900)=@raw={'raw\x00', 0x41, 0x3, 0x388, 0x0, 0x19, 0x0, 0x0, 0x0, 0x2f0, 0x1f0, 0x1f0, 0x2f0, 0x1f0, 0x3, 0x0, {[{{@ip={@private, @dev, 0x0, 0x0, 'wlan1\x00', 'wg1\x00'}, 0x0, 0x200, 0x220, 0x0, {0x0, 0xffffffffa0028000}, [@common=@set={{0x40}, {{0x4, [0x4, 0x2, 0xa, 0x6, 0x8, 0x2], 0x2, 0x2}}}, @common=@inet=@hashlimit2={{0x150}, {'veth1\x00', {0x0, 0x8, 0x40, 0x0, 0x0, 0x687c, 0x93}}}]}, @unspec=@TRACE={0x20}}, {{@ip={@empty, @empty, 0x0, 0x0, 'veth0_vlan\x00', 'netpci0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x0, 0x3]}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3e8) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000000)={@empty, @local, 0x0}, &(0x7f0000000040)=0xc) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r9, 0x89f1, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000380)={'syztnl2\x00', r10, 0x700, 0x40, 0x2, 0x5, {{0x35, 0x4, 0x1, 0x1, 0xd4, 0x0, 0x0, 0x3f, 0x4, 0x0, @remote, @loopback, {[@ssrr={0x89, 0x13, 0xe2, [@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @remote]}, @noop, @ra={0x94, 0x4, 0x1}, @generic={0x82, 0x5, "058716"}, @lsrr={0x83, 0x1f, 0xa9, [@rand_addr=0x64010101, @broadcast, @remote, @multicast2, @broadcast, @private=0xa010102, @empty]}, @timestamp_addr={0x44, 0x3c, 0x6d, 0x1, 0xa, [{@local, 0x9}, {@local}, {@local, 0xfffffffd}, {@local, 0x80000000}, {@broadcast, 0x7fff}, {@broadcast, 0x7ff}, {@multicast1, 0x1}]}, @timestamp={0x44, 0xc, 0x34, 0x0, 0x0, [0x5, 0x2]}, @generic={0x83, 0xf, "1ce281af4e35b1745d312aa54b"}, @ssrr={0x89, 0x27, 0x88, [@remote, @multicast1, @empty, @multicast1, @rand_addr=0x64010101, @loopback, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1]}, @generic={0x7, 0x3, '/'}]}}}}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f0000000180)={&(0x7f0000000840)=ANY=[@ANYBLOB="780000005400010026bd7000fbdbdf2507000000", @ANYRESOCT=r8, @ANYBLOB="ed8e0100", @ANYRES32=r10, @ANYBLOB="000201006401010200000000000000000000000086dd000020000100", @ANYRES32, @ANYBLOB="01050300ac1e000100000000000000000000000086dd000020000100", @ANYRES32, @ANYBLOB="010100002001000000000000000000000000000096dd0000"], 0x78}, 0x1, 0x0, 0x0, 0x8840}, 0x4008040) sendmsg$nl_route_sched(r1, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000600)=@newtclass={0x4ac, 0x28, 0x10, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0x5, 0x1d}, {0xfff1, 0xf}, {0x2, 0xb}}, [@tclass_kind_options, @tclass_kind_options=@c_taprio={0xb}, @tclass_kind_options=@c_netem={0xa}, @tclass_kind_options=@c_mq={0x7}, @tclass_kind_options=@c_netem={0xa}, @tclass_kind_options=@c_multiq={0xb}]}, 0x4ac}, 0x1, 0x0, 0x0, 0x4008180}, 0x40010) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x24, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newtfilter={0x6c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x3c, 0x2, [@TCA_BASIC_EMATCHES={0x38, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x2c, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1}, @TCF_EM_META={0x18, 0x2, 0x0, 0x0, {{}, [@TCA_EM_META_HDR={0xc}]}}]}]}]}}]}, 0x6c}}, 0x0) 00:42:03 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000f000000850000007500000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r6, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x41, 0x3, 0x230, 0x0, 0x19, 0x0, 0x0, 0x0, 0x2e8, 0x1f0, 0x1f0, 0x2e8, 0x1f0, 0x3, 0x0, {[{{@ip={@private, @dev, 0x0, 0x0, 'wlan1\x00', 'wg1\x00'}, 0x0, 0xa8, 0xc8, 0x0, {0x0, 0xffffffffa0028000}, [@common=@unspec=@quota={{0x38}}]}, @unspec=@TRACE={0x20}}, {{@ip={@empty, @empty, 0x0, 0x0, 'veth0_vlan\x00', 'netpci0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x290) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000000)={@empty, @local, 0x0}, &(0x7f0000000040)=0xc) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000380)=ANY=[@ANYBLOB="72797a746e6c32000000000010bd084f", @ANYRES32=r7, @ANYBLOB="070000400000000200000005450500d4006700003f049078ac1414bb7f0000018913e2e0000001ac1e0001ffffffffac1414bb01940401008205058716831fa964010101ffffffffac1414bbe0000002ffffffff0a01010200000000443c6da1ac1414aa00000009ac14141c00000000ac1414aafffffffdac1414aa80000000ffffffff00007fffffffffff000007ffe000000100000001440c34000000000500000002830f1ce281af4e35b1745d312aa54b892788ac1414bbe000000100000000e0000001640101017f00000164010100ac1e0001e000000107032f000000"]}) r9 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r9, 0x4000000000000, 0x40, &(0x7f0000000900)=@raw={'raw\x00', 0x41, 0x3, 0x388, 0x0, 0x19, 0x0, 0x0, 0x0, 0x2f0, 0x1f0, 0x1f0, 0x2f0, 0x1f0, 0x3, 0x0, {[{{@ip={@private, @dev, 0x0, 0x0, 'wlan1\x00', 'wg1\x00'}, 0x0, 0x200, 0x220, 0x0, {0x0, 0xffffffffa0028000}, [@common=@set={{0x40}, {{0x4, [0x4, 0x2, 0xa, 0x6, 0x8, 0x2], 0x2, 0x2}}}, @common=@inet=@hashlimit2={{0x150}, {'veth1\x00', {0x0, 0x8, 0x40, 0x0, 0x0, 0x687c, 0x93}}}]}, @unspec=@TRACE={0x20}}, {{@ip={@empty, @empty, 0x0, 0x0, 'veth0_vlan\x00', 'netpci0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x0, 0x3]}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3e8) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000000)={@empty, @local, 0x0}, &(0x7f0000000040)=0xc) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r9, 0x89f1, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000380)={'syztnl2\x00', r10, 0x700, 0x40, 0x2, 0x5, {{0x35, 0x4, 0x1, 0x1, 0xd4, 0x0, 0x0, 0x3f, 0x4, 0x0, @remote, @loopback, {[@ssrr={0x89, 0x13, 0xe2, [@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @remote]}, @noop, @ra={0x94, 0x4, 0x1}, @generic={0x82, 0x5, "058716"}, @lsrr={0x83, 0x1f, 0xa9, [@rand_addr=0x64010101, @broadcast, @remote, @multicast2, @broadcast, @private=0xa010102, @empty]}, @timestamp_addr={0x44, 0x3c, 0x6d, 0x1, 0xa, [{@local, 0x9}, {@local}, {@local, 0xfffffffd}, {@local, 0x80000000}, {@broadcast, 0x7fff}, {@broadcast, 0x7ff}, {@multicast1, 0x1}]}, @timestamp={0x44, 0xc, 0x34, 0x0, 0x0, [0x5, 0x2]}, @generic={0x83, 0xf, "1ce281af4e35b1745d312aa54b"}, @ssrr={0x89, 0x27, 0x88, [@remote, @multicast1, @empty, @multicast1, @rand_addr=0x64010101, @loopback, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1]}, @generic={0x7, 0x3, '/'}]}}}}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f0000000180)={&(0x7f0000000840)=ANY=[@ANYBLOB="780000005400010026bd7000fbdbdf2507000000", @ANYRESOCT=r8, @ANYBLOB="ed8e0100", @ANYRES32=r10, @ANYBLOB="000201006401010200000000000000000000000086dd000020000100", @ANYRES32, @ANYBLOB="01050300ac1e000100000000000000000000000086dd000020000100", @ANYRES32, @ANYBLOB="010100002001000000000000000000000000000096dd0000"], 0x78}, 0x1, 0x0, 0x0, 0x8840}, 0x4008040) sendmsg$nl_route_sched(r1, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000600)=@newtclass={0x4ac, 0x28, 0x10, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0x5, 0x1d}, {0xfff1, 0xf}, {0x2, 0xb}}, [@tclass_kind_options, @tclass_kind_options=@c_taprio={0xb}, @tclass_kind_options=@c_netem={0xa}, @tclass_kind_options=@c_mq={0x7}, @tclass_kind_options=@c_netem={0xa}, @tclass_kind_options=@c_multiq={0xb}]}, 0x4ac}, 0x1, 0x0, 0x0, 0x4008180}, 0x40010) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x24, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newtfilter={0x6c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x3c, 0x2, [@TCA_BASIC_EMATCHES={0x38, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x2c, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1}, @TCF_EM_META={0x18, 0x2, 0x0, 0x0, {{}, [@TCA_EM_META_HDR={0xc}]}}]}]}]}}]}, 0x6c}}, 0x0) [ 2523.518939][T29141] __nla_validate_parse: 6 callbacks suppressed [ 2523.519025][T29141] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2523.618739][T29141] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 00:42:03 executing program 1: socketpair(0x2c, 0x3, 0x40000000, &(0x7f0000000140)) 00:42:03 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000f000000850000007500000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r6, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x41, 0x3, 0x230, 0x0, 0x19, 0x0, 0x0, 0x0, 0x2e8, 0x1f0, 0x1f0, 0x2e8, 0x1f0, 0x3, 0x0, {[{{@ip={@private, @dev, 0x0, 0x0, 'wlan1\x00', 'wg1\x00'}, 0x0, 0xa8, 0xc8, 0x0, {0x0, 0xffffffffa0028000}, [@common=@unspec=@quota={{0x38}}]}, @unspec=@TRACE={0x20}}, {{@ip={@empty, @empty, 0x0, 0x0, 'veth0_vlan\x00', 'netpci0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x290) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000000)={@empty, @local, 0x0}, &(0x7f0000000040)=0xc) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000380)=ANY=[@ANYBLOB="72797a746e6c32000000000010bd084f", @ANYRES32=r7, @ANYBLOB="070000400000000200000005450500d4006700003f049078ac1414bb7f0000018913e2e0000001ac1e0001ffffffffac1414bb01940401008205058716831fa964010101ffffffffac1414bbe0000002ffffffff0a01010200000000443c6da1ac1414aa00000009ac14141c00000000ac1414aafffffffdac1414aa80000000ffffffff00007fffffffffff000007ffe000000100000001440c34000000000500000002830f1ce281af4e35b1745d312aa54b892788ac1414bbe000000100000000e0000001640101017f00000164010100ac1e0001e000000107032f000000"]}) r9 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r9, 0x4000000000000, 0x40, &(0x7f0000000900)=@raw={'raw\x00', 0x41, 0x3, 0x388, 0x0, 0x19, 0x0, 0x0, 0x0, 0x2f0, 0x1f0, 0x1f0, 0x2f0, 0x1f0, 0x3, 0x0, {[{{@ip={@private, @dev, 0x0, 0x0, 'wlan1\x00', 'wg1\x00'}, 0x0, 0x200, 0x220, 0x0, {0x0, 0xffffffffa0028000}, [@common=@set={{0x40}, {{0x4, [0x4, 0x2, 0xa, 0x6, 0x8, 0x2], 0x2, 0x2}}}, @common=@inet=@hashlimit2={{0x150}, {'veth1\x00', {0x0, 0x8, 0x40, 0x0, 0x0, 0x687c, 0x93}}}]}, @unspec=@TRACE={0x20}}, {{@ip={@empty, @empty, 0x0, 0x0, 'veth0_vlan\x00', 'netpci0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x0, 0x3]}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3e8) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000000)={@empty, @local, 0x0}, &(0x7f0000000040)=0xc) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r9, 0x89f1, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000380)={'syztnl2\x00', r10, 0x700, 0x40, 0x2, 0x5, {{0x35, 0x4, 0x1, 0x1, 0xd4, 0x0, 0x0, 0x3f, 0x4, 0x0, @remote, @loopback, {[@ssrr={0x89, 0x13, 0xe2, [@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @remote]}, @noop, @ra={0x94, 0x4, 0x1}, @generic={0x82, 0x5, "058716"}, @lsrr={0x83, 0x1f, 0xa9, [@rand_addr=0x64010101, @broadcast, @remote, @multicast2, @broadcast, @private=0xa010102, @empty]}, @timestamp_addr={0x44, 0x3c, 0x6d, 0x1, 0xa, [{@local, 0x9}, {@local}, {@local, 0xfffffffd}, {@local, 0x80000000}, {@broadcast, 0x7fff}, {@broadcast, 0x7ff}, {@multicast1, 0x1}]}, @timestamp={0x44, 0xc, 0x34, 0x0, 0x0, [0x5, 0x2]}, @generic={0x83, 0xf, "1ce281af4e35b1745d312aa54b"}, @ssrr={0x89, 0x27, 0x88, [@remote, @multicast1, @empty, @multicast1, @rand_addr=0x64010101, @loopback, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1]}, @generic={0x7, 0x3, '/'}]}}}}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f0000000180)={&(0x7f0000000840)=ANY=[@ANYBLOB="780000005400010026bd7000fbdbdf2507000000", @ANYRESOCT=r8, @ANYBLOB="ed8e0100", @ANYRES32=r10, @ANYBLOB="000201006401010200000000000000000000000086dd000020000100", @ANYRES32, @ANYBLOB="01050300ac1e000100000000000000000000000086dd000020000100", @ANYRES32, @ANYBLOB="010100002001000000000000000000000000000096dd0000"], 0x78}, 0x1, 0x0, 0x0, 0x8840}, 0x4008040) sendmsg$nl_route_sched(r1, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000600)=@newtclass={0x4ac, 0x28, 0x10, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0x5, 0x1d}, {0xfff1, 0xf}, {0x2, 0xb}}, [@tclass_kind_options, @tclass_kind_options=@c_taprio={0xb}, @tclass_kind_options=@c_netem={0xa}, @tclass_kind_options=@c_mq={0x7}, @tclass_kind_options=@c_netem={0xa}, @tclass_kind_options=@c_multiq={0xb}]}, 0x4ac}, 0x1, 0x0, 0x0, 0x4008180}, 0x40010) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x24, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newtfilter={0x6c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x3c, 0x2, [@TCA_BASIC_EMATCHES={0x38, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x2c, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1}, @TCF_EM_META={0x18, 0x2, 0x0, 0x0, {{}, [@TCA_EM_META_HDR={0xc}]}}]}]}]}}]}, 0x6c}}, 0x0) [ 2524.306405][T29145] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2524.441426][T29145] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 00:42:04 executing program 1: getgroups(0x3, &(0x7f0000000940)=[0x0, 0x0, 0xffffffffffffffff]) 00:42:04 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000f000000850000007500000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r6, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x41, 0x3, 0x230, 0x0, 0x19, 0x0, 0x0, 0x0, 0x2e8, 0x1f0, 0x1f0, 0x2e8, 0x1f0, 0x3, 0x0, {[{{@ip={@private, @dev, 0x0, 0x0, 'wlan1\x00', 'wg1\x00'}, 0x0, 0xa8, 0xc8, 0x0, {0x0, 0xffffffffa0028000}, [@common=@unspec=@quota={{0x38}}]}, @unspec=@TRACE={0x20}}, {{@ip={@empty, @empty, 0x0, 0x0, 'veth0_vlan\x00', 'netpci0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x290) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000000)={@empty, @local, 0x0}, &(0x7f0000000040)=0xc) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000380)=ANY=[@ANYBLOB="72797a746e6c32000000000010bd084f", @ANYRES32=r7, @ANYBLOB="070000400000000200000005450500d4006700003f049078ac1414bb7f0000018913e2e0000001ac1e0001ffffffffac1414bb01940401008205058716831fa964010101ffffffffac1414bbe0000002ffffffff0a01010200000000443c6da1ac1414aa00000009ac14141c00000000ac1414aafffffffdac1414aa80000000ffffffff00007fffffffffff000007ffe000000100000001440c34000000000500000002830f1ce281af4e35b1745d312aa54b892788ac1414bbe000000100000000e0000001640101017f00000164010100ac1e0001e000000107032f000000"]}) r9 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r9, 0x4000000000000, 0x40, &(0x7f0000000900)=@raw={'raw\x00', 0x41, 0x3, 0x388, 0x0, 0x19, 0x0, 0x0, 0x0, 0x2f0, 0x1f0, 0x1f0, 0x2f0, 0x1f0, 0x3, 0x0, {[{{@ip={@private, @dev, 0x0, 0x0, 'wlan1\x00', 'wg1\x00'}, 0x0, 0x200, 0x220, 0x0, {0x0, 0xffffffffa0028000}, [@common=@set={{0x40}, {{0x4, [0x4, 0x2, 0xa, 0x6, 0x8, 0x2], 0x2, 0x2}}}, @common=@inet=@hashlimit2={{0x150}, {'veth1\x00', {0x0, 0x8, 0x40, 0x0, 0x0, 0x687c, 0x93}}}]}, @unspec=@TRACE={0x20}}, {{@ip={@empty, @empty, 0x0, 0x0, 'veth0_vlan\x00', 'netpci0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x0, 0x3]}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3e8) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000000)={@empty, @local, 0x0}, &(0x7f0000000040)=0xc) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r9, 0x89f1, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000380)={'syztnl2\x00', r10, 0x700, 0x40, 0x2, 0x5, {{0x35, 0x4, 0x1, 0x1, 0xd4, 0x0, 0x0, 0x3f, 0x4, 0x0, @remote, @loopback, {[@ssrr={0x89, 0x13, 0xe2, [@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @remote]}, @noop, @ra={0x94, 0x4, 0x1}, @generic={0x82, 0x5, "058716"}, @lsrr={0x83, 0x1f, 0xa9, [@rand_addr=0x64010101, @broadcast, @remote, @multicast2, @broadcast, @private=0xa010102, @empty]}, @timestamp_addr={0x44, 0x3c, 0x6d, 0x1, 0xa, [{@local, 0x9}, {@local}, {@local, 0xfffffffd}, {@local, 0x80000000}, {@broadcast, 0x7fff}, {@broadcast, 0x7ff}, {@multicast1, 0x1}]}, @timestamp={0x44, 0xc, 0x34, 0x0, 0x0, [0x5, 0x2]}, @generic={0x83, 0xf, "1ce281af4e35b1745d312aa54b"}, @ssrr={0x89, 0x27, 0x88, [@remote, @multicast1, @empty, @multicast1, @rand_addr=0x64010101, @loopback, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1]}, @generic={0x7, 0x3, '/'}]}}}}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f0000000180)={&(0x7f0000000840)=ANY=[@ANYBLOB="780000005400010026bd7000fbdbdf2507000000", @ANYRESOCT=r8, @ANYBLOB="ed8e0100", @ANYRES32=r10, @ANYBLOB="000201006401010200000000000000000000000086dd000020000100", @ANYRES32, @ANYBLOB="01050300ac1e000100000000000000000000000086dd000020000100", @ANYRES32, @ANYBLOB="010100002001000000000000000000000000000096dd0000"], 0x78}, 0x1, 0x0, 0x0, 0x8840}, 0x4008040) sendmsg$nl_route_sched(r1, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000600)=@newtclass={0x4ac, 0x28, 0x10, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0x5, 0x1d}, {0xfff1, 0xf}, {0x2, 0xb}}, [@tclass_kind_options, @tclass_kind_options=@c_taprio={0xb}, @tclass_kind_options=@c_netem={0xa}, @tclass_kind_options=@c_mq={0x7}, @tclass_kind_options=@c_netem={0xa}, @tclass_kind_options=@c_multiq={0xb}]}, 0x4ac}, 0x1, 0x0, 0x0, 0x4008180}, 0x40010) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newtfilter={0x6c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x3c, 0x2, [@TCA_BASIC_EMATCHES={0x38, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x2c, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1}, @TCF_EM_META={0x18, 0x2, 0x0, 0x0, {{}, [@TCA_EM_META_HDR={0xc}]}}]}]}]}}]}, 0x6c}}, 0x0) [ 2525.251561][T29149] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2525.273967][T29149] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 00:42:05 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000f000000850000007500000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r6, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x41, 0x3, 0x230, 0x0, 0x19, 0x0, 0x0, 0x0, 0x2e8, 0x1f0, 0x1f0, 0x2e8, 0x1f0, 0x3, 0x0, {[{{@ip={@private, @dev, 0x0, 0x0, 'wlan1\x00', 'wg1\x00'}, 0x0, 0xa8, 0xc8, 0x0, {0x0, 0xffffffffa0028000}, [@common=@unspec=@quota={{0x38}}]}, @unspec=@TRACE={0x20}}, {{@ip={@empty, @empty, 0x0, 0x0, 'veth0_vlan\x00', 'netpci0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x290) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000000)={@empty, @local, 0x0}, &(0x7f0000000040)=0xc) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000380)=ANY=[@ANYBLOB="72797a746e6c32000000000010bd084f", @ANYRES32=r7, @ANYBLOB="070000400000000200000005450500d4006700003f049078ac1414bb7f0000018913e2e0000001ac1e0001ffffffffac1414bb01940401008205058716831fa964010101ffffffffac1414bbe0000002ffffffff0a01010200000000443c6da1ac1414aa00000009ac14141c00000000ac1414aafffffffdac1414aa80000000ffffffff00007fffffffffff000007ffe000000100000001440c34000000000500000002830f1ce281af4e35b1745d312aa54b892788ac1414bbe000000100000000e0000001640101017f00000164010100ac1e0001e000000107032f000000"]}) r9 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r9, 0x4000000000000, 0x40, &(0x7f0000000900)=@raw={'raw\x00', 0x41, 0x3, 0x388, 0x0, 0x19, 0x0, 0x0, 0x0, 0x2f0, 0x1f0, 0x1f0, 0x2f0, 0x1f0, 0x3, 0x0, {[{{@ip={@private, @dev, 0x0, 0x0, 'wlan1\x00', 'wg1\x00'}, 0x0, 0x200, 0x220, 0x0, {0x0, 0xffffffffa0028000}, [@common=@set={{0x40}, {{0x4, [0x4, 0x2, 0xa, 0x6, 0x8, 0x2], 0x2, 0x2}}}, @common=@inet=@hashlimit2={{0x150}, {'veth1\x00', {0x0, 0x8, 0x40, 0x0, 0x0, 0x687c, 0x93}}}]}, @unspec=@TRACE={0x20}}, {{@ip={@empty, @empty, 0x0, 0x0, 'veth0_vlan\x00', 'netpci0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x0, 0x3]}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3e8) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000000)={@empty, @local, 0x0}, &(0x7f0000000040)=0xc) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r9, 0x89f1, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000380)={'syztnl2\x00', r10, 0x700, 0x40, 0x2, 0x5, {{0x35, 0x4, 0x1, 0x1, 0xd4, 0x0, 0x0, 0x3f, 0x4, 0x0, @remote, @loopback, {[@ssrr={0x89, 0x13, 0xe2, [@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @remote]}, @noop, @ra={0x94, 0x4, 0x1}, @generic={0x82, 0x5, "058716"}, @lsrr={0x83, 0x1f, 0xa9, [@rand_addr=0x64010101, @broadcast, @remote, @multicast2, @broadcast, @private=0xa010102, @empty]}, @timestamp_addr={0x44, 0x3c, 0x6d, 0x1, 0xa, [{@local, 0x9}, {@local}, {@local, 0xfffffffd}, {@local, 0x80000000}, {@broadcast, 0x7fff}, {@broadcast, 0x7ff}, {@multicast1, 0x1}]}, @timestamp={0x44, 0xc, 0x34, 0x0, 0x0, [0x5, 0x2]}, @generic={0x83, 0xf, "1ce281af4e35b1745d312aa54b"}, @ssrr={0x89, 0x27, 0x88, [@remote, @multicast1, @empty, @multicast1, @rand_addr=0x64010101, @loopback, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1]}, @generic={0x7, 0x3, '/'}]}}}}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f0000000180)={&(0x7f0000000840)=ANY=[@ANYBLOB="780000005400010026bd7000fbdbdf2507000000", @ANYRESOCT=r8, @ANYBLOB="ed8e0100", @ANYRES32=r10, @ANYBLOB="000201006401010200000000000000000000000086dd000020000100", @ANYRES32, @ANYBLOB="01050300ac1e000100000000000000000000000086dd000020000100", @ANYRES32, @ANYBLOB="010100002001000000000000000000000000000096dd0000"], 0x78}, 0x1, 0x0, 0x0, 0x8840}, 0x4008040) sendmsg$nl_route_sched(r1, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000600)=@newtclass={0x4ac, 0x28, 0x10, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0x5, 0x1d}, {0xfff1, 0xf}, {0x2, 0xb}}, [@tclass_kind_options, @tclass_kind_options=@c_taprio={0xb}, @tclass_kind_options=@c_netem={0xa}, @tclass_kind_options=@c_mq={0x7}, @tclass_kind_options=@c_netem={0xa}, @tclass_kind_options=@c_multiq={0xb}]}, 0x4ac}, 0x1, 0x0, 0x0, 0x4008180}, 0x40010) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newtfilter={0x6c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x3c, 0x2, [@TCA_BASIC_EMATCHES={0x38, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x2c, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1}, @TCF_EM_META={0x18, 0x2, 0x0, 0x0, {{}, [@TCA_EM_META_HDR={0xc}]}}]}]}]}}]}, 0x6c}}, 0x0) [ 2525.706585][T29153] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2525.710202][T29153] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 00:42:05 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000f000000850000007500000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r6, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x41, 0x3, 0x230, 0x0, 0x19, 0x0, 0x0, 0x0, 0x2e8, 0x1f0, 0x1f0, 0x2e8, 0x1f0, 0x3, 0x0, {[{{@ip={@private, @dev, 0x0, 0x0, 'wlan1\x00', 'wg1\x00'}, 0x0, 0xa8, 0xc8, 0x0, {0x0, 0xffffffffa0028000}, [@common=@unspec=@quota={{0x38}}]}, @unspec=@TRACE={0x20}}, {{@ip={@empty, @empty, 0x0, 0x0, 'veth0_vlan\x00', 'netpci0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x290) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000000)={@empty, @local, 0x0}, &(0x7f0000000040)=0xc) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000380)=ANY=[@ANYBLOB="72797a746e6c32000000000010bd084f", @ANYRES32=r7, @ANYBLOB="070000400000000200000005450500d4006700003f049078ac1414bb7f0000018913e2e0000001ac1e0001ffffffffac1414bb01940401008205058716831fa964010101ffffffffac1414bbe0000002ffffffff0a01010200000000443c6da1ac1414aa00000009ac14141c00000000ac1414aafffffffdac1414aa80000000ffffffff00007fffffffffff000007ffe000000100000001440c34000000000500000002830f1ce281af4e35b1745d312aa54b892788ac1414bbe000000100000000e0000001640101017f00000164010100ac1e0001e000000107032f000000"]}) r9 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r9, 0x4000000000000, 0x40, &(0x7f0000000900)=@raw={'raw\x00', 0x41, 0x3, 0x388, 0x0, 0x19, 0x0, 0x0, 0x0, 0x2f0, 0x1f0, 0x1f0, 0x2f0, 0x1f0, 0x3, 0x0, {[{{@ip={@private, @dev, 0x0, 0x0, 'wlan1\x00', 'wg1\x00'}, 0x0, 0x200, 0x220, 0x0, {0x0, 0xffffffffa0028000}, [@common=@set={{0x40}, {{0x4, [0x4, 0x2, 0xa, 0x6, 0x8, 0x2], 0x2, 0x2}}}, @common=@inet=@hashlimit2={{0x150}, {'veth1\x00', {0x0, 0x8, 0x40, 0x0, 0x0, 0x687c, 0x93}}}]}, @unspec=@TRACE={0x20}}, {{@ip={@empty, @empty, 0x0, 0x0, 'veth0_vlan\x00', 'netpci0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x0, 0x3]}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3e8) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000000)={@empty, @local, 0x0}, &(0x7f0000000040)=0xc) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r9, 0x89f1, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000380)={'syztnl2\x00', r10, 0x700, 0x40, 0x2, 0x5, {{0x35, 0x4, 0x1, 0x1, 0xd4, 0x0, 0x0, 0x3f, 0x4, 0x0, @remote, @loopback, {[@ssrr={0x89, 0x13, 0xe2, [@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @remote]}, @noop, @ra={0x94, 0x4, 0x1}, @generic={0x82, 0x5, "058716"}, @lsrr={0x83, 0x1f, 0xa9, [@rand_addr=0x64010101, @broadcast, @remote, @multicast2, @broadcast, @private=0xa010102, @empty]}, @timestamp_addr={0x44, 0x3c, 0x6d, 0x1, 0xa, [{@local, 0x9}, {@local}, {@local, 0xfffffffd}, {@local, 0x80000000}, {@broadcast, 0x7fff}, {@broadcast, 0x7ff}, {@multicast1, 0x1}]}, @timestamp={0x44, 0xc, 0x34, 0x0, 0x0, [0x5, 0x2]}, @generic={0x83, 0xf, "1ce281af4e35b1745d312aa54b"}, @ssrr={0x89, 0x27, 0x88, [@remote, @multicast1, @empty, @multicast1, @rand_addr=0x64010101, @loopback, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1]}, @generic={0x7, 0x3, '/'}]}}}}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f0000000180)={&(0x7f0000000840)=ANY=[@ANYBLOB="780000005400010026bd7000fbdbdf2507000000", @ANYRESOCT=r8, @ANYBLOB="ed8e0100", @ANYRES32=r10, @ANYBLOB="000201006401010200000000000000000000000086dd000020000100", @ANYRES32, @ANYBLOB="01050300ac1e000100000000000000000000000086dd000020000100", @ANYRES32, @ANYBLOB="010100002001000000000000000000000000000096dd0000"], 0x78}, 0x1, 0x0, 0x0, 0x8840}, 0x4008040) sendmsg$nl_route_sched(r1, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000600)=@newtclass={0x4ac, 0x28, 0x10, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0x5, 0x1d}, {0xfff1, 0xf}, {0x2, 0xb}}, [@tclass_kind_options, @tclass_kind_options=@c_taprio={0xb}, @tclass_kind_options=@c_netem={0xa}, @tclass_kind_options=@c_mq={0x7}, @tclass_kind_options=@c_netem={0xa}, @tclass_kind_options=@c_multiq={0xb}]}, 0x4ac}, 0x1, 0x0, 0x0, 0x4008180}, 0x40010) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newtfilter={0x6c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x3c, 0x2, [@TCA_BASIC_EMATCHES={0x38, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x2c, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1}, @TCF_EM_META={0x18, 0x2, 0x0, 0x0, {{}, [@TCA_EM_META_HDR={0xc}]}}]}]}]}}]}, 0x6c}}, 0x0) [ 2526.113871][T29157] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2526.117739][T29157] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 00:42:06 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_opts(r0, 0x0, 0x1, &(0x7f0000000000)="20978ce23477bbdbac15a83d9591614ae10b63be36c41c0ea0abeb99c0bd77ed71bbc7a931b8b6e25250c5644e5e78a1888f7a043883c09b807ea0e1d321a5bd5489aaf0004c1d53713ab9fe5e5e89ba430be4e2598e799c97381a086cd9b4ceaeb3492027bbe03631e8f8ce36444d43bac6741641e82ff875c238dab780913fc181c66bc4e5946b5f42004e1868ec5111af25efb49d9f0ff12c257761644484441bfb8b6da399c6413bc6c30bc98cc0df7434db1e88a941e09f1331f984018caed98863cc58839460a2b015f5588aa07bf3da439332a664f1dd8b5c8a644166", 0xe0) 00:42:06 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000f000000850000007500000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r6, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x41, 0x3, 0x230, 0x0, 0x19, 0x0, 0x0, 0x0, 0x2e8, 0x1f0, 0x1f0, 0x2e8, 0x1f0, 0x3, 0x0, {[{{@ip={@private, @dev, 0x0, 0x0, 'wlan1\x00', 'wg1\x00'}, 0x0, 0xa8, 0xc8, 0x0, {0x0, 0xffffffffa0028000}, [@common=@unspec=@quota={{0x38}}]}, @unspec=@TRACE={0x20}}, {{@ip={@empty, @empty, 0x0, 0x0, 'veth0_vlan\x00', 'netpci0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x290) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000000)={@empty, @local, 0x0}, &(0x7f0000000040)=0xc) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000380)=ANY=[@ANYBLOB="72797a746e6c32000000000010bd084f", @ANYRES32=r7, @ANYBLOB="070000400000000200000005450500d4006700003f049078ac1414bb7f0000018913e2e0000001ac1e0001ffffffffac1414bb01940401008205058716831fa964010101ffffffffac1414bbe0000002ffffffff0a01010200000000443c6da1ac1414aa00000009ac14141c00000000ac1414aafffffffdac1414aa80000000ffffffff00007fffffffffff000007ffe000000100000001440c34000000000500000002830f1ce281af4e35b1745d312aa54b892788ac1414bbe000000100000000e0000001640101017f00000164010100ac1e0001e000000107032f000000"]}) r9 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r9, 0x4000000000000, 0x40, &(0x7f0000000900)=@raw={'raw\x00', 0x41, 0x3, 0x388, 0x0, 0x19, 0x0, 0x0, 0x0, 0x2f0, 0x1f0, 0x1f0, 0x2f0, 0x1f0, 0x3, 0x0, {[{{@ip={@private, @dev, 0x0, 0x0, 'wlan1\x00', 'wg1\x00'}, 0x0, 0x200, 0x220, 0x0, {0x0, 0xffffffffa0028000}, [@common=@set={{0x40}, {{0x4, [0x4, 0x2, 0xa, 0x6, 0x8, 0x2], 0x2, 0x2}}}, @common=@inet=@hashlimit2={{0x150}, {'veth1\x00', {0x0, 0x8, 0x40, 0x0, 0x0, 0x687c, 0x93}}}]}, @unspec=@TRACE={0x20}}, {{@ip={@empty, @empty, 0x0, 0x0, 'veth0_vlan\x00', 'netpci0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x0, 0x3]}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3e8) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000000)={@empty, @local, 0x0}, &(0x7f0000000040)=0xc) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r9, 0x89f1, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000380)={'syztnl2\x00', r10, 0x700, 0x40, 0x2, 0x5, {{0x35, 0x4, 0x1, 0x1, 0xd4, 0x0, 0x0, 0x3f, 0x4, 0x0, @remote, @loopback, {[@ssrr={0x89, 0x13, 0xe2, [@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @remote]}, @noop, @ra={0x94, 0x4, 0x1}, @generic={0x82, 0x5, "058716"}, @lsrr={0x83, 0x1f, 0xa9, [@rand_addr=0x64010101, @broadcast, @remote, @multicast2, @broadcast, @private=0xa010102, @empty]}, @timestamp_addr={0x44, 0x3c, 0x6d, 0x1, 0xa, [{@local, 0x9}, {@local}, {@local, 0xfffffffd}, {@local, 0x80000000}, {@broadcast, 0x7fff}, {@broadcast, 0x7ff}, {@multicast1, 0x1}]}, @timestamp={0x44, 0xc, 0x34, 0x0, 0x0, [0x5, 0x2]}, @generic={0x83, 0xf, "1ce281af4e35b1745d312aa54b"}, @ssrr={0x89, 0x27, 0x88, [@remote, @multicast1, @empty, @multicast1, @rand_addr=0x64010101, @loopback, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1]}, @generic={0x7, 0x3, '/'}]}}}}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f0000000180)={&(0x7f0000000840)=ANY=[@ANYBLOB="780000005400010026bd7000fbdbdf2507000000", @ANYRESOCT=r8, @ANYBLOB="ed8e0100", @ANYRES32=r10, @ANYBLOB="000201006401010200000000000000000000000086dd000020000100", @ANYRES32, @ANYBLOB="01050300ac1e000100000000000000000000000086dd000020000100", @ANYRES32, @ANYBLOB="010100002001000000000000000000000000000096dd0000"], 0x78}, 0x1, 0x0, 0x0, 0x8840}, 0x4008040) sendmsg$nl_route_sched(r1, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000600)=@newtclass={0x4ac, 0x28, 0x10, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0x5, 0x1d}, {0xfff1, 0xf}, {0x2, 0xb}}, [@tclass_kind_options, @tclass_kind_options=@c_taprio={0xb}, @tclass_kind_options=@c_netem={0xa}, @tclass_kind_options=@c_mq={0x7}, @tclass_kind_options=@c_netem={0xa}, @tclass_kind_options=@c_multiq={0xb}]}, 0x4ac}, 0x1, 0x0, 0x0, 0x4008180}, 0x40010) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x0) 00:42:06 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000f000000850000007500000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r6, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x41, 0x3, 0x230, 0x0, 0x19, 0x0, 0x0, 0x0, 0x2e8, 0x1f0, 0x1f0, 0x2e8, 0x1f0, 0x3, 0x0, {[{{@ip={@private, @dev, 0x0, 0x0, 'wlan1\x00', 'wg1\x00'}, 0x0, 0xa8, 0xc8, 0x0, {0x0, 0xffffffffa0028000}, [@common=@unspec=@quota={{0x38}}]}, @unspec=@TRACE={0x20}}, {{@ip={@empty, @empty, 0x0, 0x0, 'veth0_vlan\x00', 'netpci0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x290) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000000)={@empty, @local, 0x0}, &(0x7f0000000040)=0xc) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000380)=ANY=[@ANYBLOB="72797a746e6c32000000000010bd084f", @ANYRES32=r7, @ANYBLOB="070000400000000200000005450500d4006700003f049078ac1414bb7f0000018913e2e0000001ac1e0001ffffffffac1414bb01940401008205058716831fa964010101ffffffffac1414bbe0000002ffffffff0a01010200000000443c6da1ac1414aa00000009ac14141c00000000ac1414aafffffffdac1414aa80000000ffffffff00007fffffffffff000007ffe000000100000001440c34000000000500000002830f1ce281af4e35b1745d312aa54b892788ac1414bbe000000100000000e0000001640101017f00000164010100ac1e0001e000000107032f000000"]}) r9 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r9, 0x4000000000000, 0x40, &(0x7f0000000900)=@raw={'raw\x00', 0x41, 0x3, 0x388, 0x0, 0x19, 0x0, 0x0, 0x0, 0x2f0, 0x1f0, 0x1f0, 0x2f0, 0x1f0, 0x3, 0x0, {[{{@ip={@private, @dev, 0x0, 0x0, 'wlan1\x00', 'wg1\x00'}, 0x0, 0x200, 0x220, 0x0, {0x0, 0xffffffffa0028000}, [@common=@set={{0x40}, {{0x4, [0x4, 0x2, 0xa, 0x6, 0x8, 0x2], 0x2, 0x2}}}, @common=@inet=@hashlimit2={{0x150}, {'veth1\x00', {0x0, 0x8, 0x40, 0x0, 0x0, 0x687c, 0x93}}}]}, @unspec=@TRACE={0x20}}, {{@ip={@empty, @empty, 0x0, 0x0, 'veth0_vlan\x00', 'netpci0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x0, 0x3]}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3e8) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000000)={@empty, @local, 0x0}, &(0x7f0000000040)=0xc) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r9, 0x89f1, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000380)={'syztnl2\x00', r10, 0x700, 0x40, 0x2, 0x5, {{0x35, 0x4, 0x1, 0x1, 0xd4, 0x0, 0x0, 0x3f, 0x4, 0x0, @remote, @loopback, {[@ssrr={0x89, 0x13, 0xe2, [@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @remote]}, @noop, @ra={0x94, 0x4, 0x1}, @generic={0x82, 0x5, "058716"}, @lsrr={0x83, 0x1f, 0xa9, [@rand_addr=0x64010101, @broadcast, @remote, @multicast2, @broadcast, @private=0xa010102, @empty]}, @timestamp_addr={0x44, 0x3c, 0x6d, 0x1, 0xa, [{@local, 0x9}, {@local}, {@local, 0xfffffffd}, {@local, 0x80000000}, {@broadcast, 0x7fff}, {@broadcast, 0x7ff}, {@multicast1, 0x1}]}, @timestamp={0x44, 0xc, 0x34, 0x0, 0x0, [0x5, 0x2]}, @generic={0x83, 0xf, "1ce281af4e35b1745d312aa54b"}, @ssrr={0x89, 0x27, 0x88, [@remote, @multicast1, @empty, @multicast1, @rand_addr=0x64010101, @loopback, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1]}, @generic={0x7, 0x3, '/'}]}}}}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f0000000180)={&(0x7f0000000840)=ANY=[@ANYBLOB="780000005400010026bd7000fbdbdf2507000000", @ANYRESOCT=r8, @ANYBLOB="ed8e0100", @ANYRES32=r10, @ANYBLOB="000201006401010200000000000000000000000086dd000020000100", @ANYRES32, @ANYBLOB="01050300ac1e000100000000000000000000000086dd000020000100", @ANYRES32, @ANYBLOB="010100002001000000000000000000000000000096dd0000"], 0x78}, 0x1, 0x0, 0x0, 0x8840}, 0x4008040) sendmsg$nl_route_sched(r1, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000600)=@newtclass={0x4ac, 0x28, 0x10, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0x5, 0x1d}, {0xfff1, 0xf}, {0x2, 0xb}}, [@tclass_kind_options, @tclass_kind_options=@c_taprio={0xb}, @tclass_kind_options=@c_netem={0xa}, @tclass_kind_options=@c_mq={0x7}, @tclass_kind_options=@c_netem={0xa}, @tclass_kind_options=@c_multiq={0xb}]}, 0x4ac}, 0x1, 0x0, 0x0, 0x4008180}, 0x40010) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x0) 00:42:07 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_opts(r0, 0x0, 0x1, &(0x7f0000000000)=' ', 0x1) 00:42:07 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000f000000850000007500000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r6, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x41, 0x3, 0x230, 0x0, 0x19, 0x0, 0x0, 0x0, 0x2e8, 0x1f0, 0x1f0, 0x2e8, 0x1f0, 0x3, 0x0, {[{{@ip={@private, @dev, 0x0, 0x0, 'wlan1\x00', 'wg1\x00'}, 0x0, 0xa8, 0xc8, 0x0, {0x0, 0xffffffffa0028000}, [@common=@unspec=@quota={{0x38}}]}, @unspec=@TRACE={0x20}}, {{@ip={@empty, @empty, 0x0, 0x0, 'veth0_vlan\x00', 'netpci0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x290) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000000)={@empty, @local, 0x0}, &(0x7f0000000040)=0xc) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000380)=ANY=[@ANYBLOB="72797a746e6c32000000000010bd084f", @ANYRES32=r7, @ANYBLOB="070000400000000200000005450500d4006700003f049078ac1414bb7f0000018913e2e0000001ac1e0001ffffffffac1414bb01940401008205058716831fa964010101ffffffffac1414bbe0000002ffffffff0a01010200000000443c6da1ac1414aa00000009ac14141c00000000ac1414aafffffffdac1414aa80000000ffffffff00007fffffffffff000007ffe000000100000001440c34000000000500000002830f1ce281af4e35b1745d312aa54b892788ac1414bbe000000100000000e0000001640101017f00000164010100ac1e0001e000000107032f000000"]}) r9 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r9, 0x4000000000000, 0x40, &(0x7f0000000900)=@raw={'raw\x00', 0x41, 0x3, 0x388, 0x0, 0x19, 0x0, 0x0, 0x0, 0x2f0, 0x1f0, 0x1f0, 0x2f0, 0x1f0, 0x3, 0x0, {[{{@ip={@private, @dev, 0x0, 0x0, 'wlan1\x00', 'wg1\x00'}, 0x0, 0x200, 0x220, 0x0, {0x0, 0xffffffffa0028000}, [@common=@set={{0x40}, {{0x4, [0x4, 0x2, 0xa, 0x6, 0x8, 0x2], 0x2, 0x2}}}, @common=@inet=@hashlimit2={{0x150}, {'veth1\x00', {0x0, 0x8, 0x40, 0x0, 0x0, 0x687c, 0x93}}}]}, @unspec=@TRACE={0x20}}, {{@ip={@empty, @empty, 0x0, 0x0, 'veth0_vlan\x00', 'netpci0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x0, 0x3]}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3e8) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000000)={@empty, @local, 0x0}, &(0x7f0000000040)=0xc) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r9, 0x89f1, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000380)={'syztnl2\x00', r10, 0x700, 0x40, 0x2, 0x5, {{0x35, 0x4, 0x1, 0x1, 0xd4, 0x0, 0x0, 0x3f, 0x4, 0x0, @remote, @loopback, {[@ssrr={0x89, 0x13, 0xe2, [@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @remote]}, @noop, @ra={0x94, 0x4, 0x1}, @generic={0x82, 0x5, "058716"}, @lsrr={0x83, 0x1f, 0xa9, [@rand_addr=0x64010101, @broadcast, @remote, @multicast2, @broadcast, @private=0xa010102, @empty]}, @timestamp_addr={0x44, 0x3c, 0x6d, 0x1, 0xa, [{@local, 0x9}, {@local}, {@local, 0xfffffffd}, {@local, 0x80000000}, {@broadcast, 0x7fff}, {@broadcast, 0x7ff}, {@multicast1, 0x1}]}, @timestamp={0x44, 0xc, 0x34, 0x0, 0x0, [0x5, 0x2]}, @generic={0x83, 0xf, "1ce281af4e35b1745d312aa54b"}, @ssrr={0x89, 0x27, 0x88, [@remote, @multicast1, @empty, @multicast1, @rand_addr=0x64010101, @loopback, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1]}, @generic={0x7, 0x3, '/'}]}}}}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f0000000180)={&(0x7f0000000840)=ANY=[@ANYBLOB="780000005400010026bd7000fbdbdf2507000000", @ANYRESOCT=r8, @ANYBLOB="ed8e0100", @ANYRES32=r10, @ANYBLOB="000201006401010200000000000000000000000086dd000020000100", @ANYRES32, @ANYBLOB="01050300ac1e000100000000000000000000000086dd000020000100", @ANYRES32, @ANYBLOB="010100002001000000000000000000000000000096dd0000"], 0x78}, 0x1, 0x0, 0x0, 0x8840}, 0x4008040) sendmsg$nl_route_sched(r1, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000600)=@newtclass={0x4ac, 0x28, 0x10, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0x5, 0x1d}, {0xfff1, 0xf}, {0x2, 0xb}}, [@tclass_kind_options, @tclass_kind_options=@c_taprio={0xb}, @tclass_kind_options=@c_netem={0xa}, @tclass_kind_options=@c_mq={0x7}, @tclass_kind_options=@c_netem={0xa}, @tclass_kind_options=@c_multiq={0xb}]}, 0x4ac}, 0x1, 0x0, 0x0, 0x4008180}, 0x40010) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x0) 00:42:08 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000f000000850000007500000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r6, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x41, 0x3, 0x230, 0x0, 0x19, 0x0, 0x0, 0x0, 0x2e8, 0x1f0, 0x1f0, 0x2e8, 0x1f0, 0x3, 0x0, {[{{@ip={@private, @dev, 0x0, 0x0, 'wlan1\x00', 'wg1\x00'}, 0x0, 0xa8, 0xc8, 0x0, {0x0, 0xffffffffa0028000}, [@common=@unspec=@quota={{0x38}}]}, @unspec=@TRACE={0x20}}, {{@ip={@empty, @empty, 0x0, 0x0, 'veth0_vlan\x00', 'netpci0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x290) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000000)={@empty, @local, 0x0}, &(0x7f0000000040)=0xc) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000380)=ANY=[@ANYBLOB="72797a746e6c32000000000010bd084f", @ANYRES32=r7, @ANYBLOB="070000400000000200000005450500d4006700003f049078ac1414bb7f0000018913e2e0000001ac1e0001ffffffffac1414bb01940401008205058716831fa964010101ffffffffac1414bbe0000002ffffffff0a01010200000000443c6da1ac1414aa00000009ac14141c00000000ac1414aafffffffdac1414aa80000000ffffffff00007fffffffffff000007ffe000000100000001440c34000000000500000002830f1ce281af4e35b1745d312aa54b892788ac1414bbe000000100000000e0000001640101017f00000164010100ac1e0001e000000107032f000000"]}) r9 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r9, 0x4000000000000, 0x40, &(0x7f0000000900)=@raw={'raw\x00', 0x41, 0x3, 0x388, 0x0, 0x19, 0x0, 0x0, 0x0, 0x2f0, 0x1f0, 0x1f0, 0x2f0, 0x1f0, 0x3, 0x0, {[{{@ip={@private, @dev, 0x0, 0x0, 'wlan1\x00', 'wg1\x00'}, 0x0, 0x200, 0x220, 0x0, {0x0, 0xffffffffa0028000}, [@common=@set={{0x40}, {{0x4, [0x4, 0x2, 0xa, 0x6, 0x8, 0x2], 0x2, 0x2}}}, @common=@inet=@hashlimit2={{0x150}, {'veth1\x00', {0x0, 0x8, 0x40, 0x0, 0x0, 0x687c, 0x93}}}]}, @unspec=@TRACE={0x20}}, {{@ip={@empty, @empty, 0x0, 0x0, 'veth0_vlan\x00', 'netpci0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x0, 0x3]}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3e8) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000000)={@empty, @local, 0x0}, &(0x7f0000000040)=0xc) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r9, 0x89f1, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000380)={'syztnl2\x00', r10, 0x700, 0x40, 0x2, 0x5, {{0x35, 0x4, 0x1, 0x1, 0xd4, 0x0, 0x0, 0x3f, 0x4, 0x0, @remote, @loopback, {[@ssrr={0x89, 0x13, 0xe2, [@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @remote]}, @noop, @ra={0x94, 0x4, 0x1}, @generic={0x82, 0x5, "058716"}, @lsrr={0x83, 0x1f, 0xa9, [@rand_addr=0x64010101, @broadcast, @remote, @multicast2, @broadcast, @private=0xa010102, @empty]}, @timestamp_addr={0x44, 0x3c, 0x6d, 0x1, 0xa, [{@local, 0x9}, {@local}, {@local, 0xfffffffd}, {@local, 0x80000000}, {@broadcast, 0x7fff}, {@broadcast, 0x7ff}, {@multicast1, 0x1}]}, @timestamp={0x44, 0xc, 0x34, 0x0, 0x0, [0x5, 0x2]}, @generic={0x83, 0xf, "1ce281af4e35b1745d312aa54b"}, @ssrr={0x89, 0x27, 0x88, [@remote, @multicast1, @empty, @multicast1, @rand_addr=0x64010101, @loopback, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1]}, @generic={0x7, 0x3, '/'}]}}}}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f0000000180)={&(0x7f0000000840)=ANY=[@ANYBLOB="780000005400010026bd7000fbdbdf2507000000", @ANYRESOCT=r8, @ANYBLOB="ed8e0100", @ANYRES32=r10, @ANYBLOB="000201006401010200000000000000000000000086dd000020000100", @ANYRES32, @ANYBLOB="01050300ac1e000100000000000000000000000086dd000020000100", @ANYRES32, @ANYBLOB="010100002001000000000000000000000000000096dd0000"], 0x78}, 0x1, 0x0, 0x0, 0x8840}, 0x4008040) sendmsg$nl_route_sched(r1, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000600)=@newtclass={0x4ac, 0x28, 0x10, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0x5, 0x1d}, {0xfff1, 0xf}, {0x2, 0xb}}, [@tclass_kind_options, @tclass_kind_options=@c_taprio={0xb}, @tclass_kind_options=@c_netem={0xa}, @tclass_kind_options=@c_mq={0x7}, @tclass_kind_options=@c_netem={0xa}, @tclass_kind_options=@c_multiq={0xb}]}, 0x4ac}, 0x1, 0x0, 0x0, 0x4008180}, 0x40010) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) [ 2528.738905][T29173] __nla_validate_parse: 6 callbacks suppressed [ 2528.739003][T29173] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2528.764858][T29173] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 00:42:08 executing program 1: r0 = socket$inet6_icmp_raw(0x1c, 0x3, 0x3a) getsockname$inet6(r0, 0x0, &(0x7f0000001340)) 00:42:09 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000f000000850000007500000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r6, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x41, 0x3, 0x230, 0x0, 0x19, 0x0, 0x0, 0x0, 0x2e8, 0x1f0, 0x1f0, 0x2e8, 0x1f0, 0x3, 0x0, {[{{@ip={@private, @dev, 0x0, 0x0, 'wlan1\x00', 'wg1\x00'}, 0x0, 0xa8, 0xc8, 0x0, {0x0, 0xffffffffa0028000}, [@common=@unspec=@quota={{0x38}}]}, @unspec=@TRACE={0x20}}, {{@ip={@empty, @empty, 0x0, 0x0, 'veth0_vlan\x00', 'netpci0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x290) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000000)={@empty, @local, 0x0}, &(0x7f0000000040)=0xc) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000380)=ANY=[@ANYBLOB="72797a746e6c32000000000010bd084f", @ANYRES32=r7, @ANYBLOB="070000400000000200000005450500d4006700003f049078ac1414bb7f0000018913e2e0000001ac1e0001ffffffffac1414bb01940401008205058716831fa964010101ffffffffac1414bbe0000002ffffffff0a01010200000000443c6da1ac1414aa00000009ac14141c00000000ac1414aafffffffdac1414aa80000000ffffffff00007fffffffffff000007ffe000000100000001440c34000000000500000002830f1ce281af4e35b1745d312aa54b892788ac1414bbe000000100000000e0000001640101017f00000164010100ac1e0001e000000107032f000000"]}) r9 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r9, 0x4000000000000, 0x40, &(0x7f0000000900)=@raw={'raw\x00', 0x41, 0x3, 0x388, 0x0, 0x19, 0x0, 0x0, 0x0, 0x2f0, 0x1f0, 0x1f0, 0x2f0, 0x1f0, 0x3, 0x0, {[{{@ip={@private, @dev, 0x0, 0x0, 'wlan1\x00', 'wg1\x00'}, 0x0, 0x200, 0x220, 0x0, {0x0, 0xffffffffa0028000}, [@common=@set={{0x40}, {{0x4, [0x4, 0x2, 0xa, 0x6, 0x8, 0x2], 0x2, 0x2}}}, @common=@inet=@hashlimit2={{0x150}, {'veth1\x00', {0x0, 0x8, 0x40, 0x0, 0x0, 0x687c, 0x93}}}]}, @unspec=@TRACE={0x20}}, {{@ip={@empty, @empty, 0x0, 0x0, 'veth0_vlan\x00', 'netpci0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x0, 0x3]}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3e8) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000000)={@empty, @local, 0x0}, &(0x7f0000000040)=0xc) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r9, 0x89f1, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000380)={'syztnl2\x00', r10, 0x700, 0x40, 0x2, 0x5, {{0x35, 0x4, 0x1, 0x1, 0xd4, 0x0, 0x0, 0x3f, 0x4, 0x0, @remote, @loopback, {[@ssrr={0x89, 0x13, 0xe2, [@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @remote]}, @noop, @ra={0x94, 0x4, 0x1}, @generic={0x82, 0x5, "058716"}, @lsrr={0x83, 0x1f, 0xa9, [@rand_addr=0x64010101, @broadcast, @remote, @multicast2, @broadcast, @private=0xa010102, @empty]}, @timestamp_addr={0x44, 0x3c, 0x6d, 0x1, 0xa, [{@local, 0x9}, {@local}, {@local, 0xfffffffd}, {@local, 0x80000000}, {@broadcast, 0x7fff}, {@broadcast, 0x7ff}, {@multicast1, 0x1}]}, @timestamp={0x44, 0xc, 0x34, 0x0, 0x0, [0x5, 0x2]}, @generic={0x83, 0xf, "1ce281af4e35b1745d312aa54b"}, @ssrr={0x89, 0x27, 0x88, [@remote, @multicast1, @empty, @multicast1, @rand_addr=0x64010101, @loopback, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1]}, @generic={0x7, 0x3, '/'}]}}}}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f0000000180)={&(0x7f0000000840)=ANY=[@ANYBLOB="780000005400010026bd7000fbdbdf2507000000", @ANYRESOCT=r8, @ANYBLOB="ed8e0100", @ANYRES32=r10, @ANYBLOB="000201006401010200000000000000000000000086dd000020000100", @ANYRES32, @ANYBLOB="01050300ac1e000100000000000000000000000086dd000020000100", @ANYRES32, @ANYBLOB="010100002001000000000000000000000000000096dd0000"], 0x78}, 0x1, 0x0, 0x0, 0x8840}, 0x4008040) sendmsg$nl_route_sched(r1, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000600)=@newtclass={0x4ac, 0x28, 0x10, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0x5, 0x1d}, {0xfff1, 0xf}, {0x2, 0xb}}, [@tclass_kind_options, @tclass_kind_options=@c_taprio={0xb}, @tclass_kind_options=@c_netem={0xa}, @tclass_kind_options=@c_mq={0x7}, @tclass_kind_options=@c_netem={0xa}, @tclass_kind_options=@c_multiq={0xb}]}, 0x4ac}, 0x1, 0x0, 0x0, 0x4008180}, 0x40010) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) [ 2529.169201][T29177] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2529.189241][T29177] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 00:42:09 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000f000000850000007500000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r6, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x41, 0x3, 0x230, 0x0, 0x19, 0x0, 0x0, 0x0, 0x2e8, 0x1f0, 0x1f0, 0x2e8, 0x1f0, 0x3, 0x0, {[{{@ip={@private, @dev, 0x0, 0x0, 'wlan1\x00', 'wg1\x00'}, 0x0, 0xa8, 0xc8, 0x0, {0x0, 0xffffffffa0028000}, [@common=@unspec=@quota={{0x38}}]}, @unspec=@TRACE={0x20}}, {{@ip={@empty, @empty, 0x0, 0x0, 'veth0_vlan\x00', 'netpci0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x290) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000000)={@empty, @local, 0x0}, &(0x7f0000000040)=0xc) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000380)=ANY=[@ANYBLOB="72797a746e6c32000000000010bd084f", @ANYRES32=r7, @ANYBLOB="070000400000000200000005450500d4006700003f049078ac1414bb7f0000018913e2e0000001ac1e0001ffffffffac1414bb01940401008205058716831fa964010101ffffffffac1414bbe0000002ffffffff0a01010200000000443c6da1ac1414aa00000009ac14141c00000000ac1414aafffffffdac1414aa80000000ffffffff00007fffffffffff000007ffe000000100000001440c34000000000500000002830f1ce281af4e35b1745d312aa54b892788ac1414bbe000000100000000e0000001640101017f00000164010100ac1e0001e000000107032f000000"]}) r9 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r9, 0x4000000000000, 0x40, &(0x7f0000000900)=@raw={'raw\x00', 0x41, 0x3, 0x388, 0x0, 0x19, 0x0, 0x0, 0x0, 0x2f0, 0x1f0, 0x1f0, 0x2f0, 0x1f0, 0x3, 0x0, {[{{@ip={@private, @dev, 0x0, 0x0, 'wlan1\x00', 'wg1\x00'}, 0x0, 0x200, 0x220, 0x0, {0x0, 0xffffffffa0028000}, [@common=@set={{0x40}, {{0x4, [0x4, 0x2, 0xa, 0x6, 0x8, 0x2], 0x2, 0x2}}}, @common=@inet=@hashlimit2={{0x150}, {'veth1\x00', {0x0, 0x8, 0x40, 0x0, 0x0, 0x687c, 0x93}}}]}, @unspec=@TRACE={0x20}}, {{@ip={@empty, @empty, 0x0, 0x0, 'veth0_vlan\x00', 'netpci0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x0, 0x3]}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3e8) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000000)={@empty, @local, 0x0}, &(0x7f0000000040)=0xc) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r9, 0x89f1, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000380)={'syztnl2\x00', r10, 0x700, 0x40, 0x2, 0x5, {{0x35, 0x4, 0x1, 0x1, 0xd4, 0x0, 0x0, 0x3f, 0x4, 0x0, @remote, @loopback, {[@ssrr={0x89, 0x13, 0xe2, [@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @remote]}, @noop, @ra={0x94, 0x4, 0x1}, @generic={0x82, 0x5, "058716"}, @lsrr={0x83, 0x1f, 0xa9, [@rand_addr=0x64010101, @broadcast, @remote, @multicast2, @broadcast, @private=0xa010102, @empty]}, @timestamp_addr={0x44, 0x3c, 0x6d, 0x1, 0xa, [{@local, 0x9}, {@local}, {@local, 0xfffffffd}, {@local, 0x80000000}, {@broadcast, 0x7fff}, {@broadcast, 0x7ff}, {@multicast1, 0x1}]}, @timestamp={0x44, 0xc, 0x34, 0x0, 0x0, [0x5, 0x2]}, @generic={0x83, 0xf, "1ce281af4e35b1745d312aa54b"}, @ssrr={0x89, 0x27, 0x88, [@remote, @multicast1, @empty, @multicast1, @rand_addr=0x64010101, @loopback, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1]}, @generic={0x7, 0x3, '/'}]}}}}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f0000000180)={&(0x7f0000000840)=ANY=[@ANYBLOB="780000005400010026bd7000fbdbdf2507000000", @ANYRESOCT=r8, @ANYBLOB="ed8e0100", @ANYRES32=r10, @ANYBLOB="000201006401010200000000000000000000000086dd000020000100", @ANYRES32, @ANYBLOB="01050300ac1e000100000000000000000000000086dd000020000100", @ANYRES32, @ANYBLOB="010100002001000000000000000000000000000096dd0000"], 0x78}, 0x1, 0x0, 0x0, 0x8840}, 0x4008040) sendmsg$nl_route_sched(r1, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000600)=@newtclass={0x4ac, 0x28, 0x10, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0x5, 0x1d}, {0xfff1, 0xf}, {0x2, 0xb}}, [@tclass_kind_options, @tclass_kind_options=@c_taprio={0xb}, @tclass_kind_options=@c_netem={0xa}, @tclass_kind_options=@c_mq={0x7}, @tclass_kind_options=@c_netem={0xa}, @tclass_kind_options=@c_multiq={0xb}]}, 0x4ac}, 0x1, 0x0, 0x0, 0x4008180}, 0x40010) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) [ 2529.806470][T29182] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2529.851939][T29182] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 00:42:09 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x51, 0x0, 0x0) 00:42:10 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000f000000850000007500000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r6, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x41, 0x3, 0x230, 0x0, 0x19, 0x0, 0x0, 0x0, 0x2e8, 0x1f0, 0x1f0, 0x2e8, 0x1f0, 0x3, 0x0, {[{{@ip={@private, @dev, 0x0, 0x0, 'wlan1\x00', 'wg1\x00'}, 0x0, 0xa8, 0xc8, 0x0, {0x0, 0xffffffffa0028000}, [@common=@unspec=@quota={{0x38}}]}, @unspec=@TRACE={0x20}}, {{@ip={@empty, @empty, 0x0, 0x0, 'veth0_vlan\x00', 'netpci0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x290) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000000)={@empty, @local, 0x0}, &(0x7f0000000040)=0xc) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000380)=ANY=[@ANYBLOB="72797a746e6c32000000000010bd084f", @ANYRES32=r7, @ANYBLOB="070000400000000200000005450500d4006700003f049078ac1414bb7f0000018913e2e0000001ac1e0001ffffffffac1414bb01940401008205058716831fa964010101ffffffffac1414bbe0000002ffffffff0a01010200000000443c6da1ac1414aa00000009ac14141c00000000ac1414aafffffffdac1414aa80000000ffffffff00007fffffffffff000007ffe000000100000001440c34000000000500000002830f1ce281af4e35b1745d312aa54b892788ac1414bbe000000100000000e0000001640101017f00000164010100ac1e0001e000000107032f000000"]}) r9 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r9, 0x4000000000000, 0x40, &(0x7f0000000900)=@raw={'raw\x00', 0x41, 0x3, 0x388, 0x0, 0x19, 0x0, 0x0, 0x0, 0x2f0, 0x1f0, 0x1f0, 0x2f0, 0x1f0, 0x3, 0x0, {[{{@ip={@private, @dev, 0x0, 0x0, 'wlan1\x00', 'wg1\x00'}, 0x0, 0x200, 0x220, 0x0, {0x0, 0xffffffffa0028000}, [@common=@set={{0x40}, {{0x4, [0x4, 0x2, 0xa, 0x6, 0x8, 0x2], 0x2, 0x2}}}, @common=@inet=@hashlimit2={{0x150}, {'veth1\x00', {0x0, 0x8, 0x40, 0x0, 0x0, 0x687c, 0x93}}}]}, @unspec=@TRACE={0x20}}, {{@ip={@empty, @empty, 0x0, 0x0, 'veth0_vlan\x00', 'netpci0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x0, 0x3]}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3e8) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000000)={@empty, @local, 0x0}, &(0x7f0000000040)=0xc) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r9, 0x89f1, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000380)={'syztnl2\x00', r10, 0x700, 0x40, 0x2, 0x5, {{0x35, 0x4, 0x1, 0x1, 0xd4, 0x0, 0x0, 0x3f, 0x4, 0x0, @remote, @loopback, {[@ssrr={0x89, 0x13, 0xe2, [@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @remote]}, @noop, @ra={0x94, 0x4, 0x1}, @generic={0x82, 0x5, "058716"}, @lsrr={0x83, 0x1f, 0xa9, [@rand_addr=0x64010101, @broadcast, @remote, @multicast2, @broadcast, @private=0xa010102, @empty]}, @timestamp_addr={0x44, 0x3c, 0x6d, 0x1, 0xa, [{@local, 0x9}, {@local}, {@local, 0xfffffffd}, {@local, 0x80000000}, {@broadcast, 0x7fff}, {@broadcast, 0x7ff}, {@multicast1, 0x1}]}, @timestamp={0x44, 0xc, 0x34, 0x0, 0x0, [0x5, 0x2]}, @generic={0x83, 0xf, "1ce281af4e35b1745d312aa54b"}, @ssrr={0x89, 0x27, 0x88, [@remote, @multicast1, @empty, @multicast1, @rand_addr=0x64010101, @loopback, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1]}, @generic={0x7, 0x3, '/'}]}}}}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f0000000180)={&(0x7f0000000840)=ANY=[@ANYBLOB="780000005400010026bd7000fbdbdf2507000000", @ANYRESOCT=r8, @ANYBLOB="ed8e0100", @ANYRES32=r10, @ANYBLOB="000201006401010200000000000000000000000086dd000020000100", @ANYRES32, @ANYBLOB="01050300ac1e000100000000000000000000000086dd000020000100", @ANYRES32, @ANYBLOB="010100002001000000000000000000000000000096dd0000"], 0x78}, 0x1, 0x0, 0x0, 0x8840}, 0x4008040) sendmsg$nl_route_sched(r1, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000600)=@newtclass={0x4ac, 0x28, 0x10, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0x5, 0x1d}, {0xfff1, 0xf}, {0x2, 0xb}}, [@tclass_kind_options, @tclass_kind_options=@c_taprio={0xb}, @tclass_kind_options=@c_netem={0xa}, @tclass_kind_options=@c_mq={0x7}, @tclass_kind_options=@c_netem={0xa}, @tclass_kind_options=@c_multiq={0xb}]}, 0x4ac}, 0x1, 0x0, 0x0, 0x4008180}, 0x40010) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) [ 2530.572941][T29187] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2530.593311][T29187] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 00:42:10 executing program 1: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x2e, &(0x7f00000000c0)={@loopback}, 0x14) 00:42:10 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000f000000850000007500000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r6, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x41, 0x3, 0x230, 0x0, 0x19, 0x0, 0x0, 0x0, 0x2e8, 0x1f0, 0x1f0, 0x2e8, 0x1f0, 0x3, 0x0, {[{{@ip={@private, @dev, 0x0, 0x0, 'wlan1\x00', 'wg1\x00'}, 0x0, 0xa8, 0xc8, 0x0, {0x0, 0xffffffffa0028000}, [@common=@unspec=@quota={{0x38}}]}, @unspec=@TRACE={0x20}}, {{@ip={@empty, @empty, 0x0, 0x0, 'veth0_vlan\x00', 'netpci0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x290) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000000)={@empty, @local, 0x0}, &(0x7f0000000040)=0xc) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000380)=ANY=[@ANYBLOB="72797a746e6c32000000000010bd084f", @ANYRES32=r7, @ANYBLOB="070000400000000200000005450500d4006700003f049078ac1414bb7f0000018913e2e0000001ac1e0001ffffffffac1414bb01940401008205058716831fa964010101ffffffffac1414bbe0000002ffffffff0a01010200000000443c6da1ac1414aa00000009ac14141c00000000ac1414aafffffffdac1414aa80000000ffffffff00007fffffffffff000007ffe000000100000001440c34000000000500000002830f1ce281af4e35b1745d312aa54b892788ac1414bbe000000100000000e0000001640101017f00000164010100ac1e0001e000000107032f000000"]}) r9 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r9, 0x4000000000000, 0x40, &(0x7f0000000900)=@raw={'raw\x00', 0x41, 0x3, 0x388, 0x0, 0x19, 0x0, 0x0, 0x0, 0x2f0, 0x1f0, 0x1f0, 0x2f0, 0x1f0, 0x3, 0x0, {[{{@ip={@private, @dev, 0x0, 0x0, 'wlan1\x00', 'wg1\x00'}, 0x0, 0x200, 0x220, 0x0, {0x0, 0xffffffffa0028000}, [@common=@set={{0x40}, {{0x4, [0x4, 0x2, 0xa, 0x6, 0x8, 0x2], 0x2, 0x2}}}, @common=@inet=@hashlimit2={{0x150}, {'veth1\x00', {0x0, 0x8, 0x40, 0x0, 0x0, 0x687c, 0x93}}}]}, @unspec=@TRACE={0x20}}, {{@ip={@empty, @empty, 0x0, 0x0, 'veth0_vlan\x00', 'netpci0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x0, 0x3]}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3e8) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000000)={@empty, @local, 0x0}, &(0x7f0000000040)=0xc) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r9, 0x89f1, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000380)={'syztnl2\x00', r10, 0x700, 0x40, 0x2, 0x5, {{0x35, 0x4, 0x1, 0x1, 0xd4, 0x0, 0x0, 0x3f, 0x4, 0x0, @remote, @loopback, {[@ssrr={0x89, 0x13, 0xe2, [@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @remote]}, @noop, @ra={0x94, 0x4, 0x1}, @generic={0x82, 0x5, "058716"}, @lsrr={0x83, 0x1f, 0xa9, [@rand_addr=0x64010101, @broadcast, @remote, @multicast2, @broadcast, @private=0xa010102, @empty]}, @timestamp_addr={0x44, 0x3c, 0x6d, 0x1, 0xa, [{@local, 0x9}, {@local}, {@local, 0xfffffffd}, {@local, 0x80000000}, {@broadcast, 0x7fff}, {@broadcast, 0x7ff}, {@multicast1, 0x1}]}, @timestamp={0x44, 0xc, 0x34, 0x0, 0x0, [0x5, 0x2]}, @generic={0x83, 0xf, "1ce281af4e35b1745d312aa54b"}, @ssrr={0x89, 0x27, 0x88, [@remote, @multicast1, @empty, @multicast1, @rand_addr=0x64010101, @loopback, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1]}, @generic={0x7, 0x3, '/'}]}}}}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f0000000180)={&(0x7f0000000840)=ANY=[@ANYBLOB="780000005400010026bd7000fbdbdf2507000000", @ANYRESOCT=r8, @ANYBLOB="ed8e0100", @ANYRES32=r10, @ANYBLOB="000201006401010200000000000000000000000086dd000020000100", @ANYRES32, @ANYBLOB="01050300ac1e000100000000000000000000000086dd000020000100", @ANYRES32, @ANYBLOB="010100002001000000000000000000000000000096dd0000"], 0x78}, 0x1, 0x0, 0x0, 0x8840}, 0x4008040) sendmsg$nl_route_sched(r1, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000600)=@newtclass={0x4ac, 0x28, 0x10, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0x5, 0x1d}, {0xfff1, 0xf}, {0x2, 0xb}}, [@tclass_kind_options, @tclass_kind_options=@c_taprio={0xb}, @tclass_kind_options=@c_netem={0xa}, @tclass_kind_options=@c_mq={0x7}, @tclass_kind_options=@c_netem={0xa}, @tclass_kind_options=@c_multiq={0xb}]}, 0x4ac}, 0x1, 0x0, 0x0, 0x4008180}, 0x40010) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) [ 2531.328663][T29190] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2531.378509][T29190] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 00:42:11 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000f000000850000007500000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r6, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x41, 0x3, 0x230, 0x0, 0x19, 0x0, 0x0, 0x0, 0x2e8, 0x1f0, 0x1f0, 0x2e8, 0x1f0, 0x3, 0x0, {[{{@ip={@private, @dev, 0x0, 0x0, 'wlan1\x00', 'wg1\x00'}, 0x0, 0xa8, 0xc8, 0x0, {0x0, 0xffffffffa0028000}, [@common=@unspec=@quota={{0x38}}]}, @unspec=@TRACE={0x20}}, {{@ip={@empty, @empty, 0x0, 0x0, 'veth0_vlan\x00', 'netpci0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x290) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000000)={@empty, @local, 0x0}, &(0x7f0000000040)=0xc) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000380)=ANY=[@ANYBLOB="72797a746e6c32000000000010bd084f", @ANYRES32=r7, @ANYBLOB="070000400000000200000005450500d4006700003f049078ac1414bb7f0000018913e2e0000001ac1e0001ffffffffac1414bb01940401008205058716831fa964010101ffffffffac1414bbe0000002ffffffff0a01010200000000443c6da1ac1414aa00000009ac14141c00000000ac1414aafffffffdac1414aa80000000ffffffff00007fffffffffff000007ffe000000100000001440c34000000000500000002830f1ce281af4e35b1745d312aa54b892788ac1414bbe000000100000000e0000001640101017f00000164010100ac1e0001e000000107032f000000"]}) r9 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r9, 0x4000000000000, 0x40, &(0x7f0000000900)=@raw={'raw\x00', 0x41, 0x3, 0x388, 0x0, 0x19, 0x0, 0x0, 0x0, 0x2f0, 0x1f0, 0x1f0, 0x2f0, 0x1f0, 0x3, 0x0, {[{{@ip={@private, @dev, 0x0, 0x0, 'wlan1\x00', 'wg1\x00'}, 0x0, 0x200, 0x220, 0x0, {0x0, 0xffffffffa0028000}, [@common=@set={{0x40}, {{0x4, [0x4, 0x2, 0xa, 0x6, 0x8, 0x2], 0x2, 0x2}}}, @common=@inet=@hashlimit2={{0x150}, {'veth1\x00', {0x0, 0x8, 0x40, 0x0, 0x0, 0x687c, 0x93}}}]}, @unspec=@TRACE={0x20}}, {{@ip={@empty, @empty, 0x0, 0x0, 'veth0_vlan\x00', 'netpci0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x0, 0x3]}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3e8) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000000)={@empty, @local, 0x0}, &(0x7f0000000040)=0xc) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r9, 0x89f1, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000380)={'syztnl2\x00', r10, 0x700, 0x40, 0x2, 0x5, {{0x35, 0x4, 0x1, 0x1, 0xd4, 0x0, 0x0, 0x3f, 0x4, 0x0, @remote, @loopback, {[@ssrr={0x89, 0x13, 0xe2, [@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @remote]}, @noop, @ra={0x94, 0x4, 0x1}, @generic={0x82, 0x5, "058716"}, @lsrr={0x83, 0x1f, 0xa9, [@rand_addr=0x64010101, @broadcast, @remote, @multicast2, @broadcast, @private=0xa010102, @empty]}, @timestamp_addr={0x44, 0x3c, 0x6d, 0x1, 0xa, [{@local, 0x9}, {@local}, {@local, 0xfffffffd}, {@local, 0x80000000}, {@broadcast, 0x7fff}, {@broadcast, 0x7ff}, {@multicast1, 0x1}]}, @timestamp={0x44, 0xc, 0x34, 0x0, 0x0, [0x5, 0x2]}, @generic={0x83, 0xf, "1ce281af4e35b1745d312aa54b"}, @ssrr={0x89, 0x27, 0x88, [@remote, @multicast1, @empty, @multicast1, @rand_addr=0x64010101, @loopback, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1]}, @generic={0x7, 0x3, '/'}]}}}}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f0000000180)={&(0x7f0000000840)=ANY=[@ANYBLOB="780000005400010026bd7000fbdbdf2507000000", @ANYRESOCT=r8, @ANYBLOB="ed8e0100", @ANYRES32=r10, @ANYBLOB="000201006401010200000000000000000000000086dd000020000100", @ANYRES32, @ANYBLOB="01050300ac1e000100000000000000000000000086dd000020000100", @ANYRES32, @ANYBLOB="010100002001000000000000000000000000000096dd0000"], 0x78}, 0x1, 0x0, 0x0, 0x8840}, 0x4008040) sendmsg$nl_route_sched(r1, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000600)=@newtclass={0x4ac, 0x28, 0x10, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0x5, 0x1d}, {0xfff1, 0xf}, {0x2, 0xb}}, [@tclass_kind_options, @tclass_kind_options=@c_taprio={0xb}, @tclass_kind_options=@c_netem={0xa}, @tclass_kind_options=@c_mq={0x7}, @tclass_kind_options=@c_netem={0xa}, @tclass_kind_options=@c_multiq={0xb}]}, 0x4ac}, 0x1, 0x0, 0x0, 0x4008180}, 0x40010) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) 00:42:12 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000f000000850000007500000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r6, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x41, 0x3, 0x230, 0x0, 0x19, 0x0, 0x0, 0x0, 0x2e8, 0x1f0, 0x1f0, 0x2e8, 0x1f0, 0x3, 0x0, {[{{@ip={@private, @dev, 0x0, 0x0, 'wlan1\x00', 'wg1\x00'}, 0x0, 0xa8, 0xc8, 0x0, {0x0, 0xffffffffa0028000}, [@common=@unspec=@quota={{0x38}}]}, @unspec=@TRACE={0x20}}, {{@ip={@empty, @empty, 0x0, 0x0, 'veth0_vlan\x00', 'netpci0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x290) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000000)={@empty, @local, 0x0}, &(0x7f0000000040)=0xc) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000380)=ANY=[@ANYBLOB="72797a746e6c32000000000010bd084f", @ANYRES32=r7, @ANYBLOB="070000400000000200000005450500d4006700003f049078ac1414bb7f0000018913e2e0000001ac1e0001ffffffffac1414bb01940401008205058716831fa964010101ffffffffac1414bbe0000002ffffffff0a01010200000000443c6da1ac1414aa00000009ac14141c00000000ac1414aafffffffdac1414aa80000000ffffffff00007fffffffffff000007ffe000000100000001440c34000000000500000002830f1ce281af4e35b1745d312aa54b892788ac1414bbe000000100000000e0000001640101017f00000164010100ac1e0001e000000107032f000000"]}) r9 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r9, 0x4000000000000, 0x40, &(0x7f0000000900)=@raw={'raw\x00', 0x41, 0x3, 0x388, 0x0, 0x19, 0x0, 0x0, 0x0, 0x2f0, 0x1f0, 0x1f0, 0x2f0, 0x1f0, 0x3, 0x0, {[{{@ip={@private, @dev, 0x0, 0x0, 'wlan1\x00', 'wg1\x00'}, 0x0, 0x200, 0x220, 0x0, {0x0, 0xffffffffa0028000}, [@common=@set={{0x40}, {{0x4, [0x4, 0x2, 0xa, 0x6, 0x8, 0x2], 0x2, 0x2}}}, @common=@inet=@hashlimit2={{0x150}, {'veth1\x00', {0x0, 0x8, 0x40, 0x0, 0x0, 0x687c, 0x93}}}]}, @unspec=@TRACE={0x20}}, {{@ip={@empty, @empty, 0x0, 0x0, 'veth0_vlan\x00', 'netpci0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x0, 0x3]}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3e8) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000000)={@empty, @local, 0x0}, &(0x7f0000000040)=0xc) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r9, 0x89f1, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000380)={'syztnl2\x00', r10, 0x700, 0x40, 0x2, 0x5, {{0x35, 0x4, 0x1, 0x1, 0xd4, 0x0, 0x0, 0x3f, 0x4, 0x0, @remote, @loopback, {[@ssrr={0x89, 0x13, 0xe2, [@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @remote]}, @noop, @ra={0x94, 0x4, 0x1}, @generic={0x82, 0x5, "058716"}, @lsrr={0x83, 0x1f, 0xa9, [@rand_addr=0x64010101, @broadcast, @remote, @multicast2, @broadcast, @private=0xa010102, @empty]}, @timestamp_addr={0x44, 0x3c, 0x6d, 0x1, 0xa, [{@local, 0x9}, {@local}, {@local, 0xfffffffd}, {@local, 0x80000000}, {@broadcast, 0x7fff}, {@broadcast, 0x7ff}, {@multicast1, 0x1}]}, @timestamp={0x44, 0xc, 0x34, 0x0, 0x0, [0x5, 0x2]}, @generic={0x83, 0xf, "1ce281af4e35b1745d312aa54b"}, @ssrr={0x89, 0x27, 0x88, [@remote, @multicast1, @empty, @multicast1, @rand_addr=0x64010101, @loopback, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1]}, @generic={0x7, 0x3, '/'}]}}}}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f0000000180)={&(0x7f0000000840)=ANY=[@ANYBLOB="780000005400010026bd7000fbdbdf2507000000", @ANYRESOCT=r8, @ANYBLOB="ed8e0100", @ANYRES32=r10, @ANYBLOB="000201006401010200000000000000000000000086dd000020000100", @ANYRES32, @ANYBLOB="01050300ac1e000100000000000000000000000086dd000020000100", @ANYRES32, @ANYBLOB="010100002001000000000000000000000000000096dd0000"], 0x78}, 0x1, 0x0, 0x0, 0x8840}, 0x4008040) sendmsg$nl_route_sched(r1, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000600)=@newtclass={0x4ac, 0x28, 0x10, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0x5, 0x1d}, {0xfff1, 0xf}, {0x2, 0xb}}, [@tclass_kind_options, @tclass_kind_options=@c_taprio={0xb}, @tclass_kind_options=@c_netem={0xa}, @tclass_kind_options=@c_mq={0x7}, @tclass_kind_options=@c_netem={0xa}, @tclass_kind_options=@c_multiq={0xb}]}, 0x4ac}, 0x1, 0x0, 0x0, 0x4008180}, 0x40010) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newtfilter={0x6c, 0x2c, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x3c, 0x2, [@TCA_BASIC_EMATCHES={0x38, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x2c, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1}, @TCF_EM_META={0x18, 0x2, 0x0, 0x0, {{}, [@TCA_EM_META_HDR={0xc}]}}]}]}]}}]}, 0x6c}}, 0x0) 00:42:12 executing program 1: fcntl$lock(0xffffffffffffffff, 0xc, &(0x7f0000000080)) 00:42:13 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000f000000850000007500000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r6, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x41, 0x3, 0x230, 0x0, 0x19, 0x0, 0x0, 0x0, 0x2e8, 0x1f0, 0x1f0, 0x2e8, 0x1f0, 0x3, 0x0, {[{{@ip={@private, @dev, 0x0, 0x0, 'wlan1\x00', 'wg1\x00'}, 0x0, 0xa8, 0xc8, 0x0, {0x0, 0xffffffffa0028000}, [@common=@unspec=@quota={{0x38}}]}, @unspec=@TRACE={0x20}}, {{@ip={@empty, @empty, 0x0, 0x0, 'veth0_vlan\x00', 'netpci0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x290) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000000)={@empty, @local, 0x0}, &(0x7f0000000040)=0xc) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000380)=ANY=[@ANYBLOB="72797a746e6c32000000000010bd084f", @ANYRES32=r7, @ANYBLOB="070000400000000200000005450500d4006700003f049078ac1414bb7f0000018913e2e0000001ac1e0001ffffffffac1414bb01940401008205058716831fa964010101ffffffffac1414bbe0000002ffffffff0a01010200000000443c6da1ac1414aa00000009ac14141c00000000ac1414aafffffffdac1414aa80000000ffffffff00007fffffffffff000007ffe000000100000001440c34000000000500000002830f1ce281af4e35b1745d312aa54b892788ac1414bbe000000100000000e0000001640101017f00000164010100ac1e0001e000000107032f000000"]}) r9 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r9, 0x4000000000000, 0x40, &(0x7f0000000900)=@raw={'raw\x00', 0x41, 0x3, 0x388, 0x0, 0x19, 0x0, 0x0, 0x0, 0x2f0, 0x1f0, 0x1f0, 0x2f0, 0x1f0, 0x3, 0x0, {[{{@ip={@private, @dev, 0x0, 0x0, 'wlan1\x00', 'wg1\x00'}, 0x0, 0x200, 0x220, 0x0, {0x0, 0xffffffffa0028000}, [@common=@set={{0x40}, {{0x4, [0x4, 0x2, 0xa, 0x6, 0x8, 0x2], 0x2, 0x2}}}, @common=@inet=@hashlimit2={{0x150}, {'veth1\x00', {0x0, 0x8, 0x40, 0x0, 0x0, 0x687c, 0x93}}}]}, @unspec=@TRACE={0x20}}, {{@ip={@empty, @empty, 0x0, 0x0, 'veth0_vlan\x00', 'netpci0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x0, 0x3]}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3e8) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000000)={@empty, @local, 0x0}, &(0x7f0000000040)=0xc) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r9, 0x89f1, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000380)={'syztnl2\x00', r10, 0x700, 0x40, 0x2, 0x5, {{0x35, 0x4, 0x1, 0x1, 0xd4, 0x0, 0x0, 0x3f, 0x4, 0x0, @remote, @loopback, {[@ssrr={0x89, 0x13, 0xe2, [@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @remote]}, @noop, @ra={0x94, 0x4, 0x1}, @generic={0x82, 0x5, "058716"}, @lsrr={0x83, 0x1f, 0xa9, [@rand_addr=0x64010101, @broadcast, @remote, @multicast2, @broadcast, @private=0xa010102, @empty]}, @timestamp_addr={0x44, 0x3c, 0x6d, 0x1, 0xa, [{@local, 0x9}, {@local}, {@local, 0xfffffffd}, {@local, 0x80000000}, {@broadcast, 0x7fff}, {@broadcast, 0x7ff}, {@multicast1, 0x1}]}, @timestamp={0x44, 0xc, 0x34, 0x0, 0x0, [0x5, 0x2]}, @generic={0x83, 0xf, "1ce281af4e35b1745d312aa54b"}, @ssrr={0x89, 0x27, 0x88, [@remote, @multicast1, @empty, @multicast1, @rand_addr=0x64010101, @loopback, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1]}, @generic={0x7, 0x3, '/'}]}}}}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f0000000180)={&(0x7f0000000840)=ANY=[@ANYBLOB="780000005400010026bd7000fbdbdf2507000000", @ANYRESOCT=r8, @ANYBLOB="ed8e0100", @ANYRES32=r10, @ANYBLOB="000201006401010200000000000000000000000086dd000020000100", @ANYRES32, @ANYBLOB="01050300ac1e000100000000000000000000000086dd000020000100", @ANYRES32, @ANYBLOB="010100002001000000000000000000000000000096dd0000"], 0x78}, 0x1, 0x0, 0x0, 0x8840}, 0x4008040) sendmsg$nl_route_sched(r1, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000600)=@newtclass={0x4ac, 0x28, 0x10, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0x5, 0x1d}, {0xfff1, 0xf}, {0x2, 0xb}}, [@tclass_kind_options, @tclass_kind_options=@c_taprio={0xb}, @tclass_kind_options=@c_netem={0xa}, @tclass_kind_options=@c_mq={0x7}, @tclass_kind_options=@c_netem={0xa}, @tclass_kind_options=@c_multiq={0xb}]}, 0x4ac}, 0x1, 0x0, 0x0, 0x4008180}, 0x40010) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newtfilter={0x6c, 0x2c, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x3c, 0x2, [@TCA_BASIC_EMATCHES={0x38, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x2c, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1}, @TCF_EM_META={0x18, 0x2, 0x0, 0x0, {{}, [@TCA_EM_META_HDR={0xc}]}}]}]}]}}]}, 0x6c}}, 0x0) 00:42:13 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000f000000850000007500000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r6, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x41, 0x3, 0x230, 0x0, 0x19, 0x0, 0x0, 0x0, 0x2e8, 0x1f0, 0x1f0, 0x2e8, 0x1f0, 0x3, 0x0, {[{{@ip={@private, @dev, 0x0, 0x0, 'wlan1\x00', 'wg1\x00'}, 0x0, 0xa8, 0xc8, 0x0, {0x0, 0xffffffffa0028000}, [@common=@unspec=@quota={{0x38}}]}, @unspec=@TRACE={0x20}}, {{@ip={@empty, @empty, 0x0, 0x0, 'veth0_vlan\x00', 'netpci0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x290) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000000)={@empty, @local, 0x0}, &(0x7f0000000040)=0xc) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000380)=ANY=[@ANYBLOB="72797a746e6c32000000000010bd084f", @ANYRES32=r7, @ANYBLOB="070000400000000200000005450500d4006700003f049078ac1414bb7f0000018913e2e0000001ac1e0001ffffffffac1414bb01940401008205058716831fa964010101ffffffffac1414bbe0000002ffffffff0a01010200000000443c6da1ac1414aa00000009ac14141c00000000ac1414aafffffffdac1414aa80000000ffffffff00007fffffffffff000007ffe000000100000001440c34000000000500000002830f1ce281af4e35b1745d312aa54b892788ac1414bbe000000100000000e0000001640101017f00000164010100ac1e0001e000000107032f000000"]}) r9 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r9, 0x4000000000000, 0x40, &(0x7f0000000900)=@raw={'raw\x00', 0x41, 0x3, 0x388, 0x0, 0x19, 0x0, 0x0, 0x0, 0x2f0, 0x1f0, 0x1f0, 0x2f0, 0x1f0, 0x3, 0x0, {[{{@ip={@private, @dev, 0x0, 0x0, 'wlan1\x00', 'wg1\x00'}, 0x0, 0x200, 0x220, 0x0, {0x0, 0xffffffffa0028000}, [@common=@set={{0x40}, {{0x4, [0x4, 0x2, 0xa, 0x6, 0x8, 0x2], 0x2, 0x2}}}, @common=@inet=@hashlimit2={{0x150}, {'veth1\x00', {0x0, 0x8, 0x40, 0x0, 0x0, 0x687c, 0x93}}}]}, @unspec=@TRACE={0x20}}, {{@ip={@empty, @empty, 0x0, 0x0, 'veth0_vlan\x00', 'netpci0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x0, 0x3]}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3e8) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000000)={@empty, @local, 0x0}, &(0x7f0000000040)=0xc) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r9, 0x89f1, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000380)={'syztnl2\x00', r10, 0x700, 0x40, 0x2, 0x5, {{0x35, 0x4, 0x1, 0x1, 0xd4, 0x0, 0x0, 0x3f, 0x4, 0x0, @remote, @loopback, {[@ssrr={0x89, 0x13, 0xe2, [@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @remote]}, @noop, @ra={0x94, 0x4, 0x1}, @generic={0x82, 0x5, "058716"}, @lsrr={0x83, 0x1f, 0xa9, [@rand_addr=0x64010101, @broadcast, @remote, @multicast2, @broadcast, @private=0xa010102, @empty]}, @timestamp_addr={0x44, 0x3c, 0x6d, 0x1, 0xa, [{@local, 0x9}, {@local}, {@local, 0xfffffffd}, {@local, 0x80000000}, {@broadcast, 0x7fff}, {@broadcast, 0x7ff}, {@multicast1, 0x1}]}, @timestamp={0x44, 0xc, 0x34, 0x0, 0x0, [0x5, 0x2]}, @generic={0x83, 0xf, "1ce281af4e35b1745d312aa54b"}, @ssrr={0x89, 0x27, 0x88, [@remote, @multicast1, @empty, @multicast1, @rand_addr=0x64010101, @loopback, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1]}, @generic={0x7, 0x3, '/'}]}}}}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f0000000180)={&(0x7f0000000840)=ANY=[@ANYBLOB="780000005400010026bd7000fbdbdf2507000000", @ANYRESOCT=r8, @ANYBLOB="ed8e0100", @ANYRES32=r10, @ANYBLOB="000201006401010200000000000000000000000086dd000020000100", @ANYRES32, @ANYBLOB="01050300ac1e000100000000000000000000000086dd000020000100", @ANYRES32, @ANYBLOB="010100002001000000000000000000000000000096dd0000"], 0x78}, 0x1, 0x0, 0x0, 0x8840}, 0x4008040) sendmsg$nl_route_sched(r1, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000600)=@newtclass={0x4ac, 0x28, 0x10, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0x5, 0x1d}, {0xfff1, 0xf}, {0x2, 0xb}}, [@tclass_kind_options, @tclass_kind_options=@c_taprio={0xb}, @tclass_kind_options=@c_netem={0xa}, @tclass_kind_options=@c_mq={0x7}, @tclass_kind_options=@c_netem={0xa}, @tclass_kind_options=@c_multiq={0xb}]}, 0x4ac}, 0x1, 0x0, 0x0, 0x4008180}, 0x40010) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newtfilter={0x6c, 0x2c, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x3c, 0x2, [@TCA_BASIC_EMATCHES={0x38, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x2c, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1}, @TCF_EM_META={0x18, 0x2, 0x0, 0x0, {{}, [@TCA_EM_META_HDR={0xc}]}}]}]}]}}]}, 0x6c}}, 0x0) [ 2534.097406][T29206] __nla_validate_parse: 6 callbacks suppressed [ 2534.097522][T29206] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2534.171185][T29206] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 00:42:14 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockname$inet(r0, &(0x7f0000001600), &(0x7f0000002900)=0x10) 00:42:14 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000f000000850000007500000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r6, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x41, 0x3, 0x230, 0x0, 0x19, 0x0, 0x0, 0x0, 0x2e8, 0x1f0, 0x1f0, 0x2e8, 0x1f0, 0x3, 0x0, {[{{@ip={@private, @dev, 0x0, 0x0, 'wlan1\x00', 'wg1\x00'}, 0x0, 0xa8, 0xc8, 0x0, {0x0, 0xffffffffa0028000}, [@common=@unspec=@quota={{0x38}}]}, @unspec=@TRACE={0x20}}, {{@ip={@empty, @empty, 0x0, 0x0, 'veth0_vlan\x00', 'netpci0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x290) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000000)={@empty, @local, 0x0}, &(0x7f0000000040)=0xc) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000380)=ANY=[@ANYBLOB="72797a746e6c32000000000010bd084f", @ANYRES32=r7, @ANYBLOB="070000400000000200000005450500d4006700003f049078ac1414bb7f0000018913e2e0000001ac1e0001ffffffffac1414bb01940401008205058716831fa964010101ffffffffac1414bbe0000002ffffffff0a01010200000000443c6da1ac1414aa00000009ac14141c00000000ac1414aafffffffdac1414aa80000000ffffffff00007fffffffffff000007ffe000000100000001440c34000000000500000002830f1ce281af4e35b1745d312aa54b892788ac1414bbe000000100000000e0000001640101017f00000164010100ac1e0001e000000107032f000000"]}) r9 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r9, 0x4000000000000, 0x40, &(0x7f0000000900)=@raw={'raw\x00', 0x41, 0x3, 0x388, 0x0, 0x19, 0x0, 0x0, 0x0, 0x2f0, 0x1f0, 0x1f0, 0x2f0, 0x1f0, 0x3, 0x0, {[{{@ip={@private, @dev, 0x0, 0x0, 'wlan1\x00', 'wg1\x00'}, 0x0, 0x200, 0x220, 0x0, {0x0, 0xffffffffa0028000}, [@common=@set={{0x40}, {{0x4, [0x4, 0x2, 0xa, 0x6, 0x8, 0x2], 0x2, 0x2}}}, @common=@inet=@hashlimit2={{0x150}, {'veth1\x00', {0x0, 0x8, 0x40, 0x0, 0x0, 0x687c, 0x93}}}]}, @unspec=@TRACE={0x20}}, {{@ip={@empty, @empty, 0x0, 0x0, 'veth0_vlan\x00', 'netpci0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x0, 0x3]}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3e8) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000000)={@empty, @local, 0x0}, &(0x7f0000000040)=0xc) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r9, 0x89f1, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000380)={'syztnl2\x00', r10, 0x700, 0x40, 0x2, 0x5, {{0x35, 0x4, 0x1, 0x1, 0xd4, 0x0, 0x0, 0x3f, 0x4, 0x0, @remote, @loopback, {[@ssrr={0x89, 0x13, 0xe2, [@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @remote]}, @noop, @ra={0x94, 0x4, 0x1}, @generic={0x82, 0x5, "058716"}, @lsrr={0x83, 0x1f, 0xa9, [@rand_addr=0x64010101, @broadcast, @remote, @multicast2, @broadcast, @private=0xa010102, @empty]}, @timestamp_addr={0x44, 0x3c, 0x6d, 0x1, 0xa, [{@local, 0x9}, {@local}, {@local, 0xfffffffd}, {@local, 0x80000000}, {@broadcast, 0x7fff}, {@broadcast, 0x7ff}, {@multicast1, 0x1}]}, @timestamp={0x44, 0xc, 0x34, 0x0, 0x0, [0x5, 0x2]}, @generic={0x83, 0xf, "1ce281af4e35b1745d312aa54b"}, @ssrr={0x89, 0x27, 0x88, [@remote, @multicast1, @empty, @multicast1, @rand_addr=0x64010101, @loopback, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1]}, @generic={0x7, 0x3, '/'}]}}}}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f0000000180)={&(0x7f0000000840)=ANY=[@ANYBLOB="780000005400010026bd7000fbdbdf2507000000", @ANYRESOCT=r8, @ANYBLOB="ed8e0100", @ANYRES32=r10, @ANYBLOB="000201006401010200000000000000000000000086dd000020000100", @ANYRES32, @ANYBLOB="01050300ac1e000100000000000000000000000086dd000020000100", @ANYRES32, @ANYBLOB="010100002001000000000000000000000000000096dd0000"], 0x78}, 0x1, 0x0, 0x0, 0x8840}, 0x4008040) sendmsg$nl_route_sched(r1, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000600)=@newtclass={0x4ac, 0x28, 0x10, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0x5, 0x1d}, {0xfff1, 0xf}, {0x2, 0xb}}, [@tclass_kind_options, @tclass_kind_options=@c_taprio={0xb}, @tclass_kind_options=@c_netem={0xa}, @tclass_kind_options=@c_mq={0x7}, @tclass_kind_options=@c_netem={0xa}, @tclass_kind_options=@c_multiq={0xb}]}, 0x4ac}, 0x1, 0x0, 0x0, 0x4008180}, 0x40010) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newtfilter={0x6c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x3c, 0x2, [@TCA_BASIC_EMATCHES={0x38, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x2c, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1}, @TCF_EM_META={0x18, 0x2, 0x0, 0x0, {{}, [@TCA_EM_META_HDR={0xc}]}}]}]}]}}]}, 0x6c}}, 0x0) [ 2534.873139][T29211] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2534.902737][T29211] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 00:42:15 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000f000000850000007500000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r6, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x41, 0x3, 0x230, 0x0, 0x19, 0x0, 0x0, 0x0, 0x2e8, 0x1f0, 0x1f0, 0x2e8, 0x1f0, 0x3, 0x0, {[{{@ip={@private, @dev, 0x0, 0x0, 'wlan1\x00', 'wg1\x00'}, 0x0, 0xa8, 0xc8, 0x0, {0x0, 0xffffffffa0028000}, [@common=@unspec=@quota={{0x38}}]}, @unspec=@TRACE={0x20}}, {{@ip={@empty, @empty, 0x0, 0x0, 'veth0_vlan\x00', 'netpci0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x290) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000000)={@empty, @local, 0x0}, &(0x7f0000000040)=0xc) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000380)=ANY=[@ANYBLOB="72797a746e6c32000000000010bd084f", @ANYRES32=r7, @ANYBLOB="070000400000000200000005450500d4006700003f049078ac1414bb7f0000018913e2e0000001ac1e0001ffffffffac1414bb01940401008205058716831fa964010101ffffffffac1414bbe0000002ffffffff0a01010200000000443c6da1ac1414aa00000009ac14141c00000000ac1414aafffffffdac1414aa80000000ffffffff00007fffffffffff000007ffe000000100000001440c34000000000500000002830f1ce281af4e35b1745d312aa54b892788ac1414bbe000000100000000e0000001640101017f00000164010100ac1e0001e000000107032f000000"]}) r9 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r9, 0x4000000000000, 0x40, &(0x7f0000000900)=@raw={'raw\x00', 0x41, 0x3, 0x388, 0x0, 0x19, 0x0, 0x0, 0x0, 0x2f0, 0x1f0, 0x1f0, 0x2f0, 0x1f0, 0x3, 0x0, {[{{@ip={@private, @dev, 0x0, 0x0, 'wlan1\x00', 'wg1\x00'}, 0x0, 0x200, 0x220, 0x0, {0x0, 0xffffffffa0028000}, [@common=@set={{0x40}, {{0x4, [0x4, 0x2, 0xa, 0x6, 0x8, 0x2], 0x2, 0x2}}}, @common=@inet=@hashlimit2={{0x150}, {'veth1\x00', {0x0, 0x8, 0x40, 0x0, 0x0, 0x687c, 0x93}}}]}, @unspec=@TRACE={0x20}}, {{@ip={@empty, @empty, 0x0, 0x0, 'veth0_vlan\x00', 'netpci0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x0, 0x3]}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3e8) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000000)={@empty, @local, 0x0}, &(0x7f0000000040)=0xc) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r9, 0x89f1, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000380)={'syztnl2\x00', r10, 0x700, 0x40, 0x2, 0x5, {{0x35, 0x4, 0x1, 0x1, 0xd4, 0x0, 0x0, 0x3f, 0x4, 0x0, @remote, @loopback, {[@ssrr={0x89, 0x13, 0xe2, [@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @remote]}, @noop, @ra={0x94, 0x4, 0x1}, @generic={0x82, 0x5, "058716"}, @lsrr={0x83, 0x1f, 0xa9, [@rand_addr=0x64010101, @broadcast, @remote, @multicast2, @broadcast, @private=0xa010102, @empty]}, @timestamp_addr={0x44, 0x3c, 0x6d, 0x1, 0xa, [{@local, 0x9}, {@local}, {@local, 0xfffffffd}, {@local, 0x80000000}, {@broadcast, 0x7fff}, {@broadcast, 0x7ff}, {@multicast1, 0x1}]}, @timestamp={0x44, 0xc, 0x34, 0x0, 0x0, [0x5, 0x2]}, @generic={0x83, 0xf, "1ce281af4e35b1745d312aa54b"}, @ssrr={0x89, 0x27, 0x88, [@remote, @multicast1, @empty, @multicast1, @rand_addr=0x64010101, @loopback, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1]}, @generic={0x7, 0x3, '/'}]}}}}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f0000000180)={&(0x7f0000000840)=ANY=[@ANYBLOB="780000005400010026bd7000fbdbdf2507000000", @ANYRESOCT=r8, @ANYBLOB="ed8e0100", @ANYRES32=r10, @ANYBLOB="000201006401010200000000000000000000000086dd000020000100", @ANYRES32, @ANYBLOB="01050300ac1e000100000000000000000000000086dd000020000100", @ANYRES32, @ANYBLOB="010100002001000000000000000000000000000096dd0000"], 0x78}, 0x1, 0x0, 0x0, 0x8840}, 0x4008040) sendmsg$nl_route_sched(r1, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000600)=@newtclass={0x4ac, 0x28, 0x10, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0x5, 0x1d}, {0xfff1, 0xf}, {0x2, 0xb}}, [@tclass_kind_options, @tclass_kind_options=@c_taprio={0xb}, @tclass_kind_options=@c_netem={0xa}, @tclass_kind_options=@c_mq={0x7}, @tclass_kind_options=@c_netem={0xa}, @tclass_kind_options=@c_multiq={0xb}]}, 0x4ac}, 0x1, 0x0, 0x0, 0x4008180}, 0x40010) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newtfilter={0x6c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x3c, 0x2, [@TCA_BASIC_EMATCHES={0x38, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x2c, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1}, @TCF_EM_META={0x18, 0x2, 0x0, 0x0, {{}, [@TCA_EM_META_HDR={0xc}]}}]}]}]}}]}, 0x6c}}, 0x0) [ 2535.312638][T29215] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2535.353216][T29215] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 00:42:15 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000f000000850000007500000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r6, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x41, 0x3, 0x230, 0x0, 0x19, 0x0, 0x0, 0x0, 0x2e8, 0x1f0, 0x1f0, 0x2e8, 0x1f0, 0x3, 0x0, {[{{@ip={@private, @dev, 0x0, 0x0, 'wlan1\x00', 'wg1\x00'}, 0x0, 0xa8, 0xc8, 0x0, {0x0, 0xffffffffa0028000}, [@common=@unspec=@quota={{0x38}}]}, @unspec=@TRACE={0x20}}, {{@ip={@empty, @empty, 0x0, 0x0, 'veth0_vlan\x00', 'netpci0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x290) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000000)={@empty, @local, 0x0}, &(0x7f0000000040)=0xc) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000380)=ANY=[@ANYBLOB="72797a746e6c32000000000010bd084f", @ANYRES32=r7, @ANYBLOB="070000400000000200000005450500d4006700003f049078ac1414bb7f0000018913e2e0000001ac1e0001ffffffffac1414bb01940401008205058716831fa964010101ffffffffac1414bbe0000002ffffffff0a01010200000000443c6da1ac1414aa00000009ac14141c00000000ac1414aafffffffdac1414aa80000000ffffffff00007fffffffffff000007ffe000000100000001440c34000000000500000002830f1ce281af4e35b1745d312aa54b892788ac1414bbe000000100000000e0000001640101017f00000164010100ac1e0001e000000107032f000000"]}) r9 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r9, 0x4000000000000, 0x40, &(0x7f0000000900)=@raw={'raw\x00', 0x41, 0x3, 0x388, 0x0, 0x19, 0x0, 0x0, 0x0, 0x2f0, 0x1f0, 0x1f0, 0x2f0, 0x1f0, 0x3, 0x0, {[{{@ip={@private, @dev, 0x0, 0x0, 'wlan1\x00', 'wg1\x00'}, 0x0, 0x200, 0x220, 0x0, {0x0, 0xffffffffa0028000}, [@common=@set={{0x40}, {{0x4, [0x4, 0x2, 0xa, 0x6, 0x8, 0x2], 0x2, 0x2}}}, @common=@inet=@hashlimit2={{0x150}, {'veth1\x00', {0x0, 0x8, 0x40, 0x0, 0x0, 0x687c, 0x93}}}]}, @unspec=@TRACE={0x20}}, {{@ip={@empty, @empty, 0x0, 0x0, 'veth0_vlan\x00', 'netpci0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x0, 0x3]}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3e8) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000000)={@empty, @local, 0x0}, &(0x7f0000000040)=0xc) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r9, 0x89f1, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000380)={'syztnl2\x00', r10, 0x700, 0x40, 0x2, 0x5, {{0x35, 0x4, 0x1, 0x1, 0xd4, 0x0, 0x0, 0x3f, 0x4, 0x0, @remote, @loopback, {[@ssrr={0x89, 0x13, 0xe2, [@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @remote]}, @noop, @ra={0x94, 0x4, 0x1}, @generic={0x82, 0x5, "058716"}, @lsrr={0x83, 0x1f, 0xa9, [@rand_addr=0x64010101, @broadcast, @remote, @multicast2, @broadcast, @private=0xa010102, @empty]}, @timestamp_addr={0x44, 0x3c, 0x6d, 0x1, 0xa, [{@local, 0x9}, {@local}, {@local, 0xfffffffd}, {@local, 0x80000000}, {@broadcast, 0x7fff}, {@broadcast, 0x7ff}, {@multicast1, 0x1}]}, @timestamp={0x44, 0xc, 0x34, 0x0, 0x0, [0x5, 0x2]}, @generic={0x83, 0xf, "1ce281af4e35b1745d312aa54b"}, @ssrr={0x89, 0x27, 0x88, [@remote, @multicast1, @empty, @multicast1, @rand_addr=0x64010101, @loopback, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1]}, @generic={0x7, 0x3, '/'}]}}}}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f0000000180)={&(0x7f0000000840)=ANY=[@ANYBLOB="780000005400010026bd7000fbdbdf2507000000", @ANYRESOCT=r8, @ANYBLOB="ed8e0100", @ANYRES32=r10, @ANYBLOB="000201006401010200000000000000000000000086dd000020000100", @ANYRES32, @ANYBLOB="01050300ac1e000100000000000000000000000086dd000020000100", @ANYRES32, @ANYBLOB="010100002001000000000000000000000000000096dd0000"], 0x78}, 0x1, 0x0, 0x0, 0x8840}, 0x4008040) sendmsg$nl_route_sched(r1, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000600)=@newtclass={0x4ac, 0x28, 0x10, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0x5, 0x1d}, {0xfff1, 0xf}, {0x2, 0xb}}, [@tclass_kind_options, @tclass_kind_options=@c_taprio={0xb}, @tclass_kind_options=@c_netem={0xa}, @tclass_kind_options=@c_mq={0x7}, @tclass_kind_options=@c_netem={0xa}, @tclass_kind_options=@c_multiq={0xb}]}, 0x4ac}, 0x1, 0x0, 0x0, 0x4008180}, 0x40010) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newtfilter={0x6c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x3c, 0x2, [@TCA_BASIC_EMATCHES={0x38, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x2c, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1}, @TCF_EM_META={0x18, 0x2, 0x0, 0x0, {{}, [@TCA_EM_META_HDR={0xc}]}}]}]}]}}]}, 0x6c}}, 0x0) 00:42:15 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockname$inet(r0, &(0x7f0000001600), &(0x7f0000002900)=0x10) [ 2536.297534][T29218] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2536.402307][T29218] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 00:42:16 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000f000000850000007500000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r6, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x41, 0x3, 0x230, 0x0, 0x19, 0x0, 0x0, 0x0, 0x2e8, 0x1f0, 0x1f0, 0x2e8, 0x1f0, 0x3, 0x0, {[{{@ip={@private, @dev, 0x0, 0x0, 'wlan1\x00', 'wg1\x00'}, 0x0, 0xa8, 0xc8, 0x0, {0x0, 0xffffffffa0028000}, [@common=@unspec=@quota={{0x38}}]}, @unspec=@TRACE={0x20}}, {{@ip={@empty, @empty, 0x0, 0x0, 'veth0_vlan\x00', 'netpci0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x290) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000000)={@empty, @local, 0x0}, &(0x7f0000000040)=0xc) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000380)=ANY=[@ANYBLOB="72797a746e6c32000000000010bd084f", @ANYRES32=r7, @ANYBLOB="070000400000000200000005450500d4006700003f049078ac1414bb7f0000018913e2e0000001ac1e0001ffffffffac1414bb01940401008205058716831fa964010101ffffffffac1414bbe0000002ffffffff0a01010200000000443c6da1ac1414aa00000009ac14141c00000000ac1414aafffffffdac1414aa80000000ffffffff00007fffffffffff000007ffe000000100000001440c34000000000500000002830f1ce281af4e35b1745d312aa54b892788ac1414bbe000000100000000e0000001640101017f00000164010100ac1e0001e000000107032f000000"]}) r9 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r9, 0x4000000000000, 0x40, &(0x7f0000000900)=@raw={'raw\x00', 0x41, 0x3, 0x388, 0x0, 0x19, 0x0, 0x0, 0x0, 0x2f0, 0x1f0, 0x1f0, 0x2f0, 0x1f0, 0x3, 0x0, {[{{@ip={@private, @dev, 0x0, 0x0, 'wlan1\x00', 'wg1\x00'}, 0x0, 0x200, 0x220, 0x0, {0x0, 0xffffffffa0028000}, [@common=@set={{0x40}, {{0x4, [0x4, 0x2, 0xa, 0x6, 0x8, 0x2], 0x2, 0x2}}}, @common=@inet=@hashlimit2={{0x150}, {'veth1\x00', {0x0, 0x8, 0x40, 0x0, 0x0, 0x687c, 0x93}}}]}, @unspec=@TRACE={0x20}}, {{@ip={@empty, @empty, 0x0, 0x0, 'veth0_vlan\x00', 'netpci0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x0, 0x3]}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3e8) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000000)={@empty, @local, 0x0}, &(0x7f0000000040)=0xc) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r9, 0x89f1, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000380)={'syztnl2\x00', r10, 0x700, 0x40, 0x2, 0x5, {{0x35, 0x4, 0x1, 0x1, 0xd4, 0x0, 0x0, 0x3f, 0x4, 0x0, @remote, @loopback, {[@ssrr={0x89, 0x13, 0xe2, [@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @remote]}, @noop, @ra={0x94, 0x4, 0x1}, @generic={0x82, 0x5, "058716"}, @lsrr={0x83, 0x1f, 0xa9, [@rand_addr=0x64010101, @broadcast, @remote, @multicast2, @broadcast, @private=0xa010102, @empty]}, @timestamp_addr={0x44, 0x3c, 0x6d, 0x1, 0xa, [{@local, 0x9}, {@local}, {@local, 0xfffffffd}, {@local, 0x80000000}, {@broadcast, 0x7fff}, {@broadcast, 0x7ff}, {@multicast1, 0x1}]}, @timestamp={0x44, 0xc, 0x34, 0x0, 0x0, [0x5, 0x2]}, @generic={0x83, 0xf, "1ce281af4e35b1745d312aa54b"}, @ssrr={0x89, 0x27, 0x88, [@remote, @multicast1, @empty, @multicast1, @rand_addr=0x64010101, @loopback, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1]}, @generic={0x7, 0x3, '/'}]}}}}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f0000000180)={&(0x7f0000000840)=ANY=[@ANYBLOB="780000005400010026bd7000fbdbdf2507000000", @ANYRESOCT=r8, @ANYBLOB="ed8e0100", @ANYRES32=r10, @ANYBLOB="000201006401010200000000000000000000000086dd000020000100", @ANYRES32, @ANYBLOB="01050300ac1e000100000000000000000000000086dd000020000100", @ANYRES32, @ANYBLOB="010100002001000000000000000000000000000096dd0000"], 0x78}, 0x1, 0x0, 0x0, 0x8840}, 0x4008040) sendmsg$nl_route_sched(r1, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000600)=@newtclass={0x4ac, 0x28, 0x10, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0x5, 0x1d}, {0xfff1, 0xf}, {0x2, 0xb}}, [@tclass_kind_options, @tclass_kind_options=@c_taprio={0xb}, @tclass_kind_options=@c_netem={0xa}, @tclass_kind_options=@c_mq={0x7}, @tclass_kind_options=@c_netem={0xa}, @tclass_kind_options=@c_multiq={0xb}]}, 0x4ac}, 0x1, 0x0, 0x0, 0x4008180}, 0x40010) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newtfilter={0x6c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@filter_kind_options=@f_basic={{0xa}, {0x3c, 0x2, [@TCA_BASIC_EMATCHES={0x38, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x2c, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1}, @TCF_EM_META={0x18, 0x2, 0x0, 0x0, {{}, [@TCA_EM_META_HDR={0xc}]}}]}]}]}}]}, 0x6c}}, 0x0) [ 2537.109948][T29223] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2537.134325][T29223] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 00:42:17 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockname$inet(r0, &(0x7f0000001600), &(0x7f0000002900)=0x10) 00:42:17 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000f000000850000007500000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r6, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x41, 0x3, 0x230, 0x0, 0x19, 0x0, 0x0, 0x0, 0x2e8, 0x1f0, 0x1f0, 0x2e8, 0x1f0, 0x3, 0x0, {[{{@ip={@private, @dev, 0x0, 0x0, 'wlan1\x00', 'wg1\x00'}, 0x0, 0xa8, 0xc8, 0x0, {0x0, 0xffffffffa0028000}, [@common=@unspec=@quota={{0x38}}]}, @unspec=@TRACE={0x20}}, {{@ip={@empty, @empty, 0x0, 0x0, 'veth0_vlan\x00', 'netpci0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x290) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000000)={@empty, @local, 0x0}, &(0x7f0000000040)=0xc) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000380)=ANY=[@ANYBLOB="72797a746e6c32000000000010bd084f", @ANYRES32=r7, @ANYBLOB="070000400000000200000005450500d4006700003f049078ac1414bb7f0000018913e2e0000001ac1e0001ffffffffac1414bb01940401008205058716831fa964010101ffffffffac1414bbe0000002ffffffff0a01010200000000443c6da1ac1414aa00000009ac14141c00000000ac1414aafffffffdac1414aa80000000ffffffff00007fffffffffff000007ffe000000100000001440c34000000000500000002830f1ce281af4e35b1745d312aa54b892788ac1414bbe000000100000000e0000001640101017f00000164010100ac1e0001e000000107032f000000"]}) r9 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r9, 0x4000000000000, 0x40, &(0x7f0000000900)=@raw={'raw\x00', 0x41, 0x3, 0x388, 0x0, 0x19, 0x0, 0x0, 0x0, 0x2f0, 0x1f0, 0x1f0, 0x2f0, 0x1f0, 0x3, 0x0, {[{{@ip={@private, @dev, 0x0, 0x0, 'wlan1\x00', 'wg1\x00'}, 0x0, 0x200, 0x220, 0x0, {0x0, 0xffffffffa0028000}, [@common=@set={{0x40}, {{0x4, [0x4, 0x2, 0xa, 0x6, 0x8, 0x2], 0x2, 0x2}}}, @common=@inet=@hashlimit2={{0x150}, {'veth1\x00', {0x0, 0x8, 0x40, 0x0, 0x0, 0x687c, 0x93}}}]}, @unspec=@TRACE={0x20}}, {{@ip={@empty, @empty, 0x0, 0x0, 'veth0_vlan\x00', 'netpci0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x0, 0x3]}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3e8) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000000)={@empty, @local, 0x0}, &(0x7f0000000040)=0xc) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r9, 0x89f1, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000380)={'syztnl2\x00', r10, 0x700, 0x40, 0x2, 0x5, {{0x35, 0x4, 0x1, 0x1, 0xd4, 0x0, 0x0, 0x3f, 0x4, 0x0, @remote, @loopback, {[@ssrr={0x89, 0x13, 0xe2, [@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @remote]}, @noop, @ra={0x94, 0x4, 0x1}, @generic={0x82, 0x5, "058716"}, @lsrr={0x83, 0x1f, 0xa9, [@rand_addr=0x64010101, @broadcast, @remote, @multicast2, @broadcast, @private=0xa010102, @empty]}, @timestamp_addr={0x44, 0x3c, 0x6d, 0x1, 0xa, [{@local, 0x9}, {@local}, {@local, 0xfffffffd}, {@local, 0x80000000}, {@broadcast, 0x7fff}, {@broadcast, 0x7ff}, {@multicast1, 0x1}]}, @timestamp={0x44, 0xc, 0x34, 0x0, 0x0, [0x5, 0x2]}, @generic={0x83, 0xf, "1ce281af4e35b1745d312aa54b"}, @ssrr={0x89, 0x27, 0x88, [@remote, @multicast1, @empty, @multicast1, @rand_addr=0x64010101, @loopback, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1]}, @generic={0x7, 0x3, '/'}]}}}}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f0000000180)={&(0x7f0000000840)=ANY=[@ANYBLOB="780000005400010026bd7000fbdbdf2507000000", @ANYRESOCT=r8, @ANYBLOB="ed8e0100", @ANYRES32=r10, @ANYBLOB="000201006401010200000000000000000000000086dd000020000100", @ANYRES32, @ANYBLOB="01050300ac1e000100000000000000000000000086dd000020000100", @ANYRES32, @ANYBLOB="010100002001000000000000000000000000000096dd0000"], 0x78}, 0x1, 0x0, 0x0, 0x8840}, 0x4008040) sendmsg$nl_route_sched(r1, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000600)=@newtclass={0x4ac, 0x28, 0x10, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0x5, 0x1d}, {0xfff1, 0xf}, {0x2, 0xb}}, [@tclass_kind_options, @tclass_kind_options=@c_taprio={0xb}, @tclass_kind_options=@c_netem={0xa}, @tclass_kind_options=@c_mq={0x7}, @tclass_kind_options=@c_netem={0xa}, @tclass_kind_options=@c_multiq={0xb}]}, 0x4ac}, 0x1, 0x0, 0x0, 0x4008180}, 0x40010) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newtfilter={0x6c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@filter_kind_options=@f_basic={{0xa}, {0x3c, 0x2, [@TCA_BASIC_EMATCHES={0x38, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x2c, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1}, @TCF_EM_META={0x18, 0x2, 0x0, 0x0, {{}, [@TCA_EM_META_HDR={0xc}]}}]}]}]}}]}, 0x6c}}, 0x0) 00:42:18 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000f000000850000007500000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r6, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x41, 0x3, 0x230, 0x0, 0x19, 0x0, 0x0, 0x0, 0x2e8, 0x1f0, 0x1f0, 0x2e8, 0x1f0, 0x3, 0x0, {[{{@ip={@private, @dev, 0x0, 0x0, 'wlan1\x00', 'wg1\x00'}, 0x0, 0xa8, 0xc8, 0x0, {0x0, 0xffffffffa0028000}, [@common=@unspec=@quota={{0x38}}]}, @unspec=@TRACE={0x20}}, {{@ip={@empty, @empty, 0x0, 0x0, 'veth0_vlan\x00', 'netpci0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x290) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000000)={@empty, @local, 0x0}, &(0x7f0000000040)=0xc) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000380)=ANY=[@ANYBLOB="72797a746e6c32000000000010bd084f", @ANYRES32=r7, @ANYBLOB="070000400000000200000005450500d4006700003f049078ac1414bb7f0000018913e2e0000001ac1e0001ffffffffac1414bb01940401008205058716831fa964010101ffffffffac1414bbe0000002ffffffff0a01010200000000443c6da1ac1414aa00000009ac14141c00000000ac1414aafffffffdac1414aa80000000ffffffff00007fffffffffff000007ffe000000100000001440c34000000000500000002830f1ce281af4e35b1745d312aa54b892788ac1414bbe000000100000000e0000001640101017f00000164010100ac1e0001e000000107032f000000"]}) r9 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r9, 0x4000000000000, 0x40, &(0x7f0000000900)=@raw={'raw\x00', 0x41, 0x3, 0x388, 0x0, 0x19, 0x0, 0x0, 0x0, 0x2f0, 0x1f0, 0x1f0, 0x2f0, 0x1f0, 0x3, 0x0, {[{{@ip={@private, @dev, 0x0, 0x0, 'wlan1\x00', 'wg1\x00'}, 0x0, 0x200, 0x220, 0x0, {0x0, 0xffffffffa0028000}, [@common=@set={{0x40}, {{0x4, [0x4, 0x2, 0xa, 0x6, 0x8, 0x2], 0x2, 0x2}}}, @common=@inet=@hashlimit2={{0x150}, {'veth1\x00', {0x0, 0x8, 0x40, 0x0, 0x0, 0x687c, 0x93}}}]}, @unspec=@TRACE={0x20}}, {{@ip={@empty, @empty, 0x0, 0x0, 'veth0_vlan\x00', 'netpci0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x0, 0x3]}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3e8) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000000)={@empty, @local, 0x0}, &(0x7f0000000040)=0xc) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r9, 0x89f1, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000380)={'syztnl2\x00', r10, 0x700, 0x40, 0x2, 0x5, {{0x35, 0x4, 0x1, 0x1, 0xd4, 0x0, 0x0, 0x3f, 0x4, 0x0, @remote, @loopback, {[@ssrr={0x89, 0x13, 0xe2, [@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @remote]}, @noop, @ra={0x94, 0x4, 0x1}, @generic={0x82, 0x5, "058716"}, @lsrr={0x83, 0x1f, 0xa9, [@rand_addr=0x64010101, @broadcast, @remote, @multicast2, @broadcast, @private=0xa010102, @empty]}, @timestamp_addr={0x44, 0x3c, 0x6d, 0x1, 0xa, [{@local, 0x9}, {@local}, {@local, 0xfffffffd}, {@local, 0x80000000}, {@broadcast, 0x7fff}, {@broadcast, 0x7ff}, {@multicast1, 0x1}]}, @timestamp={0x44, 0xc, 0x34, 0x0, 0x0, [0x5, 0x2]}, @generic={0x83, 0xf, "1ce281af4e35b1745d312aa54b"}, @ssrr={0x89, 0x27, 0x88, [@remote, @multicast1, @empty, @multicast1, @rand_addr=0x64010101, @loopback, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1]}, @generic={0x7, 0x3, '/'}]}}}}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f0000000180)={&(0x7f0000000840)=ANY=[@ANYBLOB="780000005400010026bd7000fbdbdf2507000000", @ANYRESOCT=r8, @ANYBLOB="ed8e0100", @ANYRES32=r10, @ANYBLOB="000201006401010200000000000000000000000086dd000020000100", @ANYRES32, @ANYBLOB="01050300ac1e000100000000000000000000000086dd000020000100", @ANYRES32, @ANYBLOB="010100002001000000000000000000000000000096dd0000"], 0x78}, 0x1, 0x0, 0x0, 0x8840}, 0x4008040) sendmsg$nl_route_sched(r1, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000600)=@newtclass={0x4ac, 0x28, 0x10, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0x5, 0x1d}, {0xfff1, 0xf}, {0x2, 0xb}}, [@tclass_kind_options, @tclass_kind_options=@c_taprio={0xb}, @tclass_kind_options=@c_netem={0xa}, @tclass_kind_options=@c_mq={0x7}, @tclass_kind_options=@c_netem={0xa}, @tclass_kind_options=@c_multiq={0xb}]}, 0x4ac}, 0x1, 0x0, 0x0, 0x4008180}, 0x40010) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newtfilter={0x6c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@filter_kind_options=@f_basic={{0xa}, {0x3c, 0x2, [@TCA_BASIC_EMATCHES={0x38, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x2c, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1}, @TCF_EM_META={0x18, 0x2, 0x0, 0x0, {{}, [@TCA_EM_META_HDR={0xc}]}}]}]}]}}]}, 0x6c}}, 0x0) 00:42:18 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockname$inet(r0, &(0x7f0000001600), &(0x7f0000002900)=0x10) 00:42:18 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000f000000850000007500000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r6, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x41, 0x3, 0x230, 0x0, 0x19, 0x0, 0x0, 0x0, 0x2e8, 0x1f0, 0x1f0, 0x2e8, 0x1f0, 0x3, 0x0, {[{{@ip={@private, @dev, 0x0, 0x0, 'wlan1\x00', 'wg1\x00'}, 0x0, 0xa8, 0xc8, 0x0, {0x0, 0xffffffffa0028000}, [@common=@unspec=@quota={{0x38}}]}, @unspec=@TRACE={0x20}}, {{@ip={@empty, @empty, 0x0, 0x0, 'veth0_vlan\x00', 'netpci0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x290) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000000)={@empty, @local, 0x0}, &(0x7f0000000040)=0xc) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000380)=ANY=[@ANYBLOB="72797a746e6c32000000000010bd084f", @ANYRES32=r7, @ANYBLOB="070000400000000200000005450500d4006700003f049078ac1414bb7f0000018913e2e0000001ac1e0001ffffffffac1414bb01940401008205058716831fa964010101ffffffffac1414bbe0000002ffffffff0a01010200000000443c6da1ac1414aa00000009ac14141c00000000ac1414aafffffffdac1414aa80000000ffffffff00007fffffffffff000007ffe000000100000001440c34000000000500000002830f1ce281af4e35b1745d312aa54b892788ac1414bbe000000100000000e0000001640101017f00000164010100ac1e0001e000000107032f000000"]}) r9 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r9, 0x4000000000000, 0x40, &(0x7f0000000900)=@raw={'raw\x00', 0x41, 0x3, 0x388, 0x0, 0x19, 0x0, 0x0, 0x0, 0x2f0, 0x1f0, 0x1f0, 0x2f0, 0x1f0, 0x3, 0x0, {[{{@ip={@private, @dev, 0x0, 0x0, 'wlan1\x00', 'wg1\x00'}, 0x0, 0x200, 0x220, 0x0, {0x0, 0xffffffffa0028000}, [@common=@set={{0x40}, {{0x4, [0x4, 0x2, 0xa, 0x6, 0x8, 0x2], 0x2, 0x2}}}, @common=@inet=@hashlimit2={{0x150}, {'veth1\x00', {0x0, 0x8, 0x40, 0x0, 0x0, 0x687c, 0x93}}}]}, @unspec=@TRACE={0x20}}, {{@ip={@empty, @empty, 0x0, 0x0, 'veth0_vlan\x00', 'netpci0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x0, 0x3]}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3e8) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000000)={@empty, @local, 0x0}, &(0x7f0000000040)=0xc) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r9, 0x89f1, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000380)={'syztnl2\x00', r10, 0x700, 0x40, 0x2, 0x5, {{0x35, 0x4, 0x1, 0x1, 0xd4, 0x0, 0x0, 0x3f, 0x4, 0x0, @remote, @loopback, {[@ssrr={0x89, 0x13, 0xe2, [@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @remote]}, @noop, @ra={0x94, 0x4, 0x1}, @generic={0x82, 0x5, "058716"}, @lsrr={0x83, 0x1f, 0xa9, [@rand_addr=0x64010101, @broadcast, @remote, @multicast2, @broadcast, @private=0xa010102, @empty]}, @timestamp_addr={0x44, 0x3c, 0x6d, 0x1, 0xa, [{@local, 0x9}, {@local}, {@local, 0xfffffffd}, {@local, 0x80000000}, {@broadcast, 0x7fff}, {@broadcast, 0x7ff}, {@multicast1, 0x1}]}, @timestamp={0x44, 0xc, 0x34, 0x0, 0x0, [0x5, 0x2]}, @generic={0x83, 0xf, "1ce281af4e35b1745d312aa54b"}, @ssrr={0x89, 0x27, 0x88, [@remote, @multicast1, @empty, @multicast1, @rand_addr=0x64010101, @loopback, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1]}, @generic={0x7, 0x3, '/'}]}}}}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f0000000180)={&(0x7f0000000840)=ANY=[@ANYBLOB="780000005400010026bd7000fbdbdf2507000000", @ANYRESOCT=r8, @ANYBLOB="ed8e0100", @ANYRES32=r10, @ANYBLOB="000201006401010200000000000000000000000086dd000020000100", @ANYRES32, @ANYBLOB="01050300ac1e000100000000000000000000000086dd000020000100", @ANYRES32, @ANYBLOB="010100002001000000000000000000000000000096dd0000"], 0x78}, 0x1, 0x0, 0x0, 0x8840}, 0x4008040) sendmsg$nl_route_sched(r1, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000600)=@newtclass={0x4ac, 0x28, 0x10, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0x5, 0x1d}, {0xfff1, 0xf}, {0x2, 0xb}}, [@tclass_kind_options, @tclass_kind_options=@c_taprio={0xb}, @tclass_kind_options=@c_netem={0xa}, @tclass_kind_options=@c_mq={0x7}, @tclass_kind_options=@c_netem={0xa}, @tclass_kind_options=@c_multiq={0xb}]}, 0x4ac}, 0x1, 0x0, 0x0, 0x4008180}, 0x40010) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xd}}}, 0x24}}, 0x0) [ 2539.106712][T29235] __nla_validate_parse: 4 callbacks suppressed [ 2539.106832][T29235] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2539.117068][T29235] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 00:42:19 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000f000000850000007500000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r6, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x41, 0x3, 0x230, 0x0, 0x19, 0x0, 0x0, 0x0, 0x2e8, 0x1f0, 0x1f0, 0x2e8, 0x1f0, 0x3, 0x0, {[{{@ip={@private, @dev, 0x0, 0x0, 'wlan1\x00', 'wg1\x00'}, 0x0, 0xa8, 0xc8, 0x0, {0x0, 0xffffffffa0028000}, [@common=@unspec=@quota={{0x38}}]}, @unspec=@TRACE={0x20}}, {{@ip={@empty, @empty, 0x0, 0x0, 'veth0_vlan\x00', 'netpci0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x290) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000000)={@empty, @local, 0x0}, &(0x7f0000000040)=0xc) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000380)=ANY=[@ANYBLOB="72797a746e6c32000000000010bd084f", @ANYRES32=r7, @ANYBLOB="070000400000000200000005450500d4006700003f049078ac1414bb7f0000018913e2e0000001ac1e0001ffffffffac1414bb01940401008205058716831fa964010101ffffffffac1414bbe0000002ffffffff0a01010200000000443c6da1ac1414aa00000009ac14141c00000000ac1414aafffffffdac1414aa80000000ffffffff00007fffffffffff000007ffe000000100000001440c34000000000500000002830f1ce281af4e35b1745d312aa54b892788ac1414bbe000000100000000e0000001640101017f00000164010100ac1e0001e000000107032f000000"]}) r9 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r9, 0x4000000000000, 0x40, &(0x7f0000000900)=@raw={'raw\x00', 0x41, 0x3, 0x388, 0x0, 0x19, 0x0, 0x0, 0x0, 0x2f0, 0x1f0, 0x1f0, 0x2f0, 0x1f0, 0x3, 0x0, {[{{@ip={@private, @dev, 0x0, 0x0, 'wlan1\x00', 'wg1\x00'}, 0x0, 0x200, 0x220, 0x0, {0x0, 0xffffffffa0028000}, [@common=@set={{0x40}, {{0x4, [0x4, 0x2, 0xa, 0x6, 0x8, 0x2], 0x2, 0x2}}}, @common=@inet=@hashlimit2={{0x150}, {'veth1\x00', {0x0, 0x8, 0x40, 0x0, 0x0, 0x687c, 0x93}}}]}, @unspec=@TRACE={0x20}}, {{@ip={@empty, @empty, 0x0, 0x0, 'veth0_vlan\x00', 'netpci0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x0, 0x3]}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3e8) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000000)={@empty, @local, 0x0}, &(0x7f0000000040)=0xc) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r9, 0x89f1, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000380)={'syztnl2\x00', r10, 0x700, 0x40, 0x2, 0x5, {{0x35, 0x4, 0x1, 0x1, 0xd4, 0x0, 0x0, 0x3f, 0x4, 0x0, @remote, @loopback, {[@ssrr={0x89, 0x13, 0xe2, [@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @remote]}, @noop, @ra={0x94, 0x4, 0x1}, @generic={0x82, 0x5, "058716"}, @lsrr={0x83, 0x1f, 0xa9, [@rand_addr=0x64010101, @broadcast, @remote, @multicast2, @broadcast, @private=0xa010102, @empty]}, @timestamp_addr={0x44, 0x3c, 0x6d, 0x1, 0xa, [{@local, 0x9}, {@local}, {@local, 0xfffffffd}, {@local, 0x80000000}, {@broadcast, 0x7fff}, {@broadcast, 0x7ff}, {@multicast1, 0x1}]}, @timestamp={0x44, 0xc, 0x34, 0x0, 0x0, [0x5, 0x2]}, @generic={0x83, 0xf, "1ce281af4e35b1745d312aa54b"}, @ssrr={0x89, 0x27, 0x88, [@remote, @multicast1, @empty, @multicast1, @rand_addr=0x64010101, @loopback, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1]}, @generic={0x7, 0x3, '/'}]}}}}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f0000000180)={&(0x7f0000000840)=ANY=[@ANYBLOB="780000005400010026bd7000fbdbdf2507000000", @ANYRESOCT=r8, @ANYBLOB="ed8e0100", @ANYRES32=r10, @ANYBLOB="000201006401010200000000000000000000000086dd000020000100", @ANYRES32, @ANYBLOB="01050300ac1e000100000000000000000000000086dd000020000100", @ANYRES32, @ANYBLOB="010100002001000000000000000000000000000096dd0000"], 0x78}, 0x1, 0x0, 0x0, 0x8840}, 0x4008040) sendmsg$nl_route_sched(r1, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000600)=@newtclass={0x4ac, 0x28, 0x10, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0x5, 0x1d}, {0xfff1, 0xf}, {0x2, 0xb}}, [@tclass_kind_options, @tclass_kind_options=@c_taprio={0xb}, @tclass_kind_options=@c_netem={0xa}, @tclass_kind_options=@c_mq={0x7}, @tclass_kind_options=@c_netem={0xa}, @tclass_kind_options=@c_multiq={0xb}]}, 0x4ac}, 0x1, 0x0, 0x0, 0x4008180}, 0x40010) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xd}}}, 0x24}}, 0x0) [ 2539.646697][T29238] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2539.665164][T29238] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 00:42:19 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000f000000850000007500000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r6, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x41, 0x3, 0x230, 0x0, 0x19, 0x0, 0x0, 0x0, 0x2e8, 0x1f0, 0x1f0, 0x2e8, 0x1f0, 0x3, 0x0, {[{{@ip={@private, @dev, 0x0, 0x0, 'wlan1\x00', 'wg1\x00'}, 0x0, 0xa8, 0xc8, 0x0, {0x0, 0xffffffffa0028000}, [@common=@unspec=@quota={{0x38}}]}, @unspec=@TRACE={0x20}}, {{@ip={@empty, @empty, 0x0, 0x0, 'veth0_vlan\x00', 'netpci0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x290) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000000)={@empty, @local, 0x0}, &(0x7f0000000040)=0xc) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000380)=ANY=[@ANYBLOB="72797a746e6c32000000000010bd084f", @ANYRES32=r7, @ANYBLOB="070000400000000200000005450500d4006700003f049078ac1414bb7f0000018913e2e0000001ac1e0001ffffffffac1414bb01940401008205058716831fa964010101ffffffffac1414bbe0000002ffffffff0a01010200000000443c6da1ac1414aa00000009ac14141c00000000ac1414aafffffffdac1414aa80000000ffffffff00007fffffffffff000007ffe000000100000001440c34000000000500000002830f1ce281af4e35b1745d312aa54b892788ac1414bbe000000100000000e0000001640101017f00000164010100ac1e0001e000000107032f000000"]}) r9 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r9, 0x4000000000000, 0x40, &(0x7f0000000900)=@raw={'raw\x00', 0x41, 0x3, 0x388, 0x0, 0x19, 0x0, 0x0, 0x0, 0x2f0, 0x1f0, 0x1f0, 0x2f0, 0x1f0, 0x3, 0x0, {[{{@ip={@private, @dev, 0x0, 0x0, 'wlan1\x00', 'wg1\x00'}, 0x0, 0x200, 0x220, 0x0, {0x0, 0xffffffffa0028000}, [@common=@set={{0x40}, {{0x4, [0x4, 0x2, 0xa, 0x6, 0x8, 0x2], 0x2, 0x2}}}, @common=@inet=@hashlimit2={{0x150}, {'veth1\x00', {0x0, 0x8, 0x40, 0x0, 0x0, 0x687c, 0x93}}}]}, @unspec=@TRACE={0x20}}, {{@ip={@empty, @empty, 0x0, 0x0, 'veth0_vlan\x00', 'netpci0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x0, 0x3]}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3e8) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000000)={@empty, @local, 0x0}, &(0x7f0000000040)=0xc) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r9, 0x89f1, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000380)={'syztnl2\x00', r10, 0x700, 0x40, 0x2, 0x5, {{0x35, 0x4, 0x1, 0x1, 0xd4, 0x0, 0x0, 0x3f, 0x4, 0x0, @remote, @loopback, {[@ssrr={0x89, 0x13, 0xe2, [@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @remote]}, @noop, @ra={0x94, 0x4, 0x1}, @generic={0x82, 0x5, "058716"}, @lsrr={0x83, 0x1f, 0xa9, [@rand_addr=0x64010101, @broadcast, @remote, @multicast2, @broadcast, @private=0xa010102, @empty]}, @timestamp_addr={0x44, 0x3c, 0x6d, 0x1, 0xa, [{@local, 0x9}, {@local}, {@local, 0xfffffffd}, {@local, 0x80000000}, {@broadcast, 0x7fff}, {@broadcast, 0x7ff}, {@multicast1, 0x1}]}, @timestamp={0x44, 0xc, 0x34, 0x0, 0x0, [0x5, 0x2]}, @generic={0x83, 0xf, "1ce281af4e35b1745d312aa54b"}, @ssrr={0x89, 0x27, 0x88, [@remote, @multicast1, @empty, @multicast1, @rand_addr=0x64010101, @loopback, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1]}, @generic={0x7, 0x3, '/'}]}}}}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f0000000180)={&(0x7f0000000840)=ANY=[@ANYBLOB="780000005400010026bd7000fbdbdf2507000000", @ANYRESOCT=r8, @ANYBLOB="ed8e0100", @ANYRES32=r10, @ANYBLOB="000201006401010200000000000000000000000086dd000020000100", @ANYRES32, @ANYBLOB="01050300ac1e000100000000000000000000000086dd000020000100", @ANYRES32, @ANYBLOB="010100002001000000000000000000000000000096dd0000"], 0x78}, 0x1, 0x0, 0x0, 0x8840}, 0x4008040) sendmsg$nl_route_sched(r1, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000600)=@newtclass={0x4ac, 0x28, 0x10, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0x5, 0x1d}, {0xfff1, 0xf}, {0x2, 0xb}}, [@tclass_kind_options, @tclass_kind_options=@c_taprio={0xb}, @tclass_kind_options=@c_netem={0xa}, @tclass_kind_options=@c_mq={0x7}, @tclass_kind_options=@c_netem={0xa}, @tclass_kind_options=@c_multiq={0xb}]}, 0x4ac}, 0x1, 0x0, 0x0, 0x4008180}, 0x40010) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xd}}}, 0x24}}, 0x0) [ 2540.133748][T29242] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2540.153039][T29242] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 00:42:20 executing program 1: r0 = socket$inet6_tcp(0x1c, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000000)={0x1c, 0x1c, 0x1}, 0x1c) 00:42:20 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000f000000850000007500000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r6, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x41, 0x3, 0x230, 0x0, 0x19, 0x0, 0x0, 0x0, 0x2e8, 0x1f0, 0x1f0, 0x2e8, 0x1f0, 0x3, 0x0, {[{{@ip={@private, @dev, 0x0, 0x0, 'wlan1\x00', 'wg1\x00'}, 0x0, 0xa8, 0xc8, 0x0, {0x0, 0xffffffffa0028000}, [@common=@unspec=@quota={{0x38}}]}, @unspec=@TRACE={0x20}}, {{@ip={@empty, @empty, 0x0, 0x0, 'veth0_vlan\x00', 'netpci0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x290) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000000)={@empty, @local, 0x0}, &(0x7f0000000040)=0xc) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000380)=ANY=[@ANYBLOB="72797a746e6c32000000000010bd084f", @ANYRES32=r7, @ANYBLOB="070000400000000200000005450500d4006700003f049078ac1414bb7f0000018913e2e0000001ac1e0001ffffffffac1414bb01940401008205058716831fa964010101ffffffffac1414bbe0000002ffffffff0a01010200000000443c6da1ac1414aa00000009ac14141c00000000ac1414aafffffffdac1414aa80000000ffffffff00007fffffffffff000007ffe000000100000001440c34000000000500000002830f1ce281af4e35b1745d312aa54b892788ac1414bbe000000100000000e0000001640101017f00000164010100ac1e0001e000000107032f000000"]}) r9 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r9, 0x4000000000000, 0x40, &(0x7f0000000900)=@raw={'raw\x00', 0x41, 0x3, 0x388, 0x0, 0x19, 0x0, 0x0, 0x0, 0x2f0, 0x1f0, 0x1f0, 0x2f0, 0x1f0, 0x3, 0x0, {[{{@ip={@private, @dev, 0x0, 0x0, 'wlan1\x00', 'wg1\x00'}, 0x0, 0x200, 0x220, 0x0, {0x0, 0xffffffffa0028000}, [@common=@set={{0x40}, {{0x4, [0x4, 0x2, 0xa, 0x6, 0x8, 0x2], 0x2, 0x2}}}, @common=@inet=@hashlimit2={{0x150}, {'veth1\x00', {0x0, 0x8, 0x40, 0x0, 0x0, 0x687c, 0x93}}}]}, @unspec=@TRACE={0x20}}, {{@ip={@empty, @empty, 0x0, 0x0, 'veth0_vlan\x00', 'netpci0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x0, 0x3]}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3e8) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000000)={@empty, @local, 0x0}, &(0x7f0000000040)=0xc) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r9, 0x89f1, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000380)={'syztnl2\x00', r10, 0x700, 0x40, 0x2, 0x5, {{0x35, 0x4, 0x1, 0x1, 0xd4, 0x0, 0x0, 0x3f, 0x4, 0x0, @remote, @loopback, {[@ssrr={0x89, 0x13, 0xe2, [@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @remote]}, @noop, @ra={0x94, 0x4, 0x1}, @generic={0x82, 0x5, "058716"}, @lsrr={0x83, 0x1f, 0xa9, [@rand_addr=0x64010101, @broadcast, @remote, @multicast2, @broadcast, @private=0xa010102, @empty]}, @timestamp_addr={0x44, 0x3c, 0x6d, 0x1, 0xa, [{@local, 0x9}, {@local}, {@local, 0xfffffffd}, {@local, 0x80000000}, {@broadcast, 0x7fff}, {@broadcast, 0x7ff}, {@multicast1, 0x1}]}, @timestamp={0x44, 0xc, 0x34, 0x0, 0x0, [0x5, 0x2]}, @generic={0x83, 0xf, "1ce281af4e35b1745d312aa54b"}, @ssrr={0x89, 0x27, 0x88, [@remote, @multicast1, @empty, @multicast1, @rand_addr=0x64010101, @loopback, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1]}, @generic={0x7, 0x3, '/'}]}}}}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f0000000180)={&(0x7f0000000840)=ANY=[@ANYBLOB="780000005400010026bd7000fbdbdf2507000000", @ANYRESOCT=r8, @ANYBLOB="ed8e0100", @ANYRES32=r10, @ANYBLOB="000201006401010200000000000000000000000086dd000020000100", @ANYRES32, @ANYBLOB="01050300ac1e000100000000000000000000000086dd000020000100", @ANYRES32, @ANYBLOB="010100002001000000000000000000000000000096dd0000"], 0x78}, 0x1, 0x0, 0x0, 0x8840}, 0x4008040) sendmsg$nl_route_sched(r1, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000600)=@newtclass={0x4ac, 0x28, 0x10, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0x5, 0x1d}, {0xfff1, 0xf}, {0x2, 0xb}}, [@tclass_kind_options, @tclass_kind_options=@c_taprio={0xb}, @tclass_kind_options=@c_netem={0xa}, @tclass_kind_options=@c_mq={0x7}, @tclass_kind_options=@c_netem={0xa}, @tclass_kind_options=@c_multiq={0xb}]}, 0x4ac}, 0x1, 0x0, 0x0, 0x4008180}, 0x40010) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}}, 0x0) [ 2540.728039][T29246] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2540.753173][T29246] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 00:42:21 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000f000000850000007500000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r6, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x41, 0x3, 0x230, 0x0, 0x19, 0x0, 0x0, 0x0, 0x2e8, 0x1f0, 0x1f0, 0x2e8, 0x1f0, 0x3, 0x0, {[{{@ip={@private, @dev, 0x0, 0x0, 'wlan1\x00', 'wg1\x00'}, 0x0, 0xa8, 0xc8, 0x0, {0x0, 0xffffffffa0028000}, [@common=@unspec=@quota={{0x38}}]}, @unspec=@TRACE={0x20}}, {{@ip={@empty, @empty, 0x0, 0x0, 'veth0_vlan\x00', 'netpci0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x290) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000000)={@empty, @local, 0x0}, &(0x7f0000000040)=0xc) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000380)=ANY=[@ANYBLOB="72797a746e6c32000000000010bd084f", @ANYRES32=r7, @ANYBLOB="070000400000000200000005450500d4006700003f049078ac1414bb7f0000018913e2e0000001ac1e0001ffffffffac1414bb01940401008205058716831fa964010101ffffffffac1414bbe0000002ffffffff0a01010200000000443c6da1ac1414aa00000009ac14141c00000000ac1414aafffffffdac1414aa80000000ffffffff00007fffffffffff000007ffe000000100000001440c34000000000500000002830f1ce281af4e35b1745d312aa54b892788ac1414bbe000000100000000e0000001640101017f00000164010100ac1e0001e000000107032f000000"]}) r9 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r9, 0x4000000000000, 0x40, &(0x7f0000000900)=@raw={'raw\x00', 0x41, 0x3, 0x388, 0x0, 0x19, 0x0, 0x0, 0x0, 0x2f0, 0x1f0, 0x1f0, 0x2f0, 0x1f0, 0x3, 0x0, {[{{@ip={@private, @dev, 0x0, 0x0, 'wlan1\x00', 'wg1\x00'}, 0x0, 0x200, 0x220, 0x0, {0x0, 0xffffffffa0028000}, [@common=@set={{0x40}, {{0x4, [0x4, 0x2, 0xa, 0x6, 0x8, 0x2], 0x2, 0x2}}}, @common=@inet=@hashlimit2={{0x150}, {'veth1\x00', {0x0, 0x8, 0x40, 0x0, 0x0, 0x687c, 0x93}}}]}, @unspec=@TRACE={0x20}}, {{@ip={@empty, @empty, 0x0, 0x0, 'veth0_vlan\x00', 'netpci0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x0, 0x3]}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3e8) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000000)={@empty, @local, 0x0}, &(0x7f0000000040)=0xc) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r9, 0x89f1, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000380)={'syztnl2\x00', r10, 0x700, 0x40, 0x2, 0x5, {{0x35, 0x4, 0x1, 0x1, 0xd4, 0x0, 0x0, 0x3f, 0x4, 0x0, @remote, @loopback, {[@ssrr={0x89, 0x13, 0xe2, [@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @remote]}, @noop, @ra={0x94, 0x4, 0x1}, @generic={0x82, 0x5, "058716"}, @lsrr={0x83, 0x1f, 0xa9, [@rand_addr=0x64010101, @broadcast, @remote, @multicast2, @broadcast, @private=0xa010102, @empty]}, @timestamp_addr={0x44, 0x3c, 0x6d, 0x1, 0xa, [{@local, 0x9}, {@local}, {@local, 0xfffffffd}, {@local, 0x80000000}, {@broadcast, 0x7fff}, {@broadcast, 0x7ff}, {@multicast1, 0x1}]}, @timestamp={0x44, 0xc, 0x34, 0x0, 0x0, [0x5, 0x2]}, @generic={0x83, 0xf, "1ce281af4e35b1745d312aa54b"}, @ssrr={0x89, 0x27, 0x88, [@remote, @multicast1, @empty, @multicast1, @rand_addr=0x64010101, @loopback, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1]}, @generic={0x7, 0x3, '/'}]}}}}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f0000000180)={&(0x7f0000000840)=ANY=[@ANYBLOB="780000005400010026bd7000fbdbdf2507000000", @ANYRESOCT=r8, @ANYBLOB="ed8e0100", @ANYRES32=r10, @ANYBLOB="000201006401010200000000000000000000000086dd000020000100", @ANYRES32, @ANYBLOB="01050300ac1e000100000000000000000000000086dd000020000100", @ANYRES32, @ANYBLOB="010100002001000000000000000000000000000096dd0000"], 0x78}, 0x1, 0x0, 0x0, 0x8840}, 0x4008040) sendmsg$nl_route_sched(r1, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000600)=@newtclass={0x4ac, 0x28, 0x10, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0x5, 0x1d}, {0xfff1, 0xf}, {0x2, 0xb}}, [@tclass_kind_options, @tclass_kind_options=@c_taprio={0xb}, @tclass_kind_options=@c_netem={0xa}, @tclass_kind_options=@c_mq={0x7}, @tclass_kind_options=@c_netem={0xa}, @tclass_kind_options=@c_multiq={0xb}]}, 0x4ac}, 0x1, 0x0, 0x0, 0x4008180}, 0x40010) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}}, 0x0) [ 2541.321525][T29250] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2541.394171][T29250] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 00:42:21 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000f000000850000007500000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r6, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x41, 0x3, 0x230, 0x0, 0x19, 0x0, 0x0, 0x0, 0x2e8, 0x1f0, 0x1f0, 0x2e8, 0x1f0, 0x3, 0x0, {[{{@ip={@private, @dev, 0x0, 0x0, 'wlan1\x00', 'wg1\x00'}, 0x0, 0xa8, 0xc8, 0x0, {0x0, 0xffffffffa0028000}, [@common=@unspec=@quota={{0x38}}]}, @unspec=@TRACE={0x20}}, {{@ip={@empty, @empty, 0x0, 0x0, 'veth0_vlan\x00', 'netpci0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x290) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000000)={@empty, @local, 0x0}, &(0x7f0000000040)=0xc) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000380)=ANY=[@ANYBLOB="72797a746e6c32000000000010bd084f", @ANYRES32=r7, @ANYBLOB="070000400000000200000005450500d4006700003f049078ac1414bb7f0000018913e2e0000001ac1e0001ffffffffac1414bb01940401008205058716831fa964010101ffffffffac1414bbe0000002ffffffff0a01010200000000443c6da1ac1414aa00000009ac14141c00000000ac1414aafffffffdac1414aa80000000ffffffff00007fffffffffff000007ffe000000100000001440c34000000000500000002830f1ce281af4e35b1745d312aa54b892788ac1414bbe000000100000000e0000001640101017f00000164010100ac1e0001e000000107032f000000"]}) r9 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r9, 0x4000000000000, 0x40, &(0x7f0000000900)=@raw={'raw\x00', 0x41, 0x3, 0x388, 0x0, 0x19, 0x0, 0x0, 0x0, 0x2f0, 0x1f0, 0x1f0, 0x2f0, 0x1f0, 0x3, 0x0, {[{{@ip={@private, @dev, 0x0, 0x0, 'wlan1\x00', 'wg1\x00'}, 0x0, 0x200, 0x220, 0x0, {0x0, 0xffffffffa0028000}, [@common=@set={{0x40}, {{0x4, [0x4, 0x2, 0xa, 0x6, 0x8, 0x2], 0x2, 0x2}}}, @common=@inet=@hashlimit2={{0x150}, {'veth1\x00', {0x0, 0x8, 0x40, 0x0, 0x0, 0x687c, 0x93}}}]}, @unspec=@TRACE={0x20}}, {{@ip={@empty, @empty, 0x0, 0x0, 'veth0_vlan\x00', 'netpci0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x0, 0x3]}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3e8) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000000)={@empty, @local, 0x0}, &(0x7f0000000040)=0xc) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r9, 0x89f1, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000380)={'syztnl2\x00', r10, 0x700, 0x40, 0x2, 0x5, {{0x35, 0x4, 0x1, 0x1, 0xd4, 0x0, 0x0, 0x3f, 0x4, 0x0, @remote, @loopback, {[@ssrr={0x89, 0x13, 0xe2, [@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @remote]}, @noop, @ra={0x94, 0x4, 0x1}, @generic={0x82, 0x5, "058716"}, @lsrr={0x83, 0x1f, 0xa9, [@rand_addr=0x64010101, @broadcast, @remote, @multicast2, @broadcast, @private=0xa010102, @empty]}, @timestamp_addr={0x44, 0x3c, 0x6d, 0x1, 0xa, [{@local, 0x9}, {@local}, {@local, 0xfffffffd}, {@local, 0x80000000}, {@broadcast, 0x7fff}, {@broadcast, 0x7ff}, {@multicast1, 0x1}]}, @timestamp={0x44, 0xc, 0x34, 0x0, 0x0, [0x5, 0x2]}, @generic={0x83, 0xf, "1ce281af4e35b1745d312aa54b"}, @ssrr={0x89, 0x27, 0x88, [@remote, @multicast1, @empty, @multicast1, @rand_addr=0x64010101, @loopback, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1]}, @generic={0x7, 0x3, '/'}]}}}}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f0000000180)={&(0x7f0000000840)=ANY=[@ANYBLOB="780000005400010026bd7000fbdbdf2507000000", @ANYRESOCT=r8, @ANYBLOB="ed8e0100", @ANYRES32=r10, @ANYBLOB="000201006401010200000000000000000000000086dd000020000100", @ANYRES32, @ANYBLOB="01050300ac1e000100000000000000000000000086dd000020000100", @ANYRES32, @ANYBLOB="010100002001000000000000000000000000000096dd0000"], 0x78}, 0x1, 0x0, 0x0, 0x8840}, 0x4008040) sendmsg$nl_route_sched(r1, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000600)=@newtclass={0x4ac, 0x28, 0x10, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0x5, 0x1d}, {0xfff1, 0xf}, {0x2, 0xb}}, [@tclass_kind_options, @tclass_kind_options=@c_taprio={0xb}, @tclass_kind_options=@c_netem={0xa}, @tclass_kind_options=@c_mq={0x7}, @tclass_kind_options=@c_netem={0xa}, @tclass_kind_options=@c_multiq={0xb}]}, 0x4ac}, 0x1, 0x0, 0x0, 0x4008180}, 0x40010) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}}, 0x0) 00:42:21 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) fcntl$lock(r0, 0xd, &(0x7f0000000100)) 00:42:22 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000f000000850000007500000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r6, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x41, 0x3, 0x230, 0x0, 0x19, 0x0, 0x0, 0x0, 0x2e8, 0x1f0, 0x1f0, 0x2e8, 0x1f0, 0x3, 0x0, {[{{@ip={@private, @dev, 0x0, 0x0, 'wlan1\x00', 'wg1\x00'}, 0x0, 0xa8, 0xc8, 0x0, {0x0, 0xffffffffa0028000}, [@common=@unspec=@quota={{0x38}}]}, @unspec=@TRACE={0x20}}, {{@ip={@empty, @empty, 0x0, 0x0, 'veth0_vlan\x00', 'netpci0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x290) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000000)={@empty, @local, 0x0}, &(0x7f0000000040)=0xc) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000380)=ANY=[@ANYBLOB="72797a746e6c32000000000010bd084f", @ANYRES32=r7, @ANYBLOB="070000400000000200000005450500d4006700003f049078ac1414bb7f0000018913e2e0000001ac1e0001ffffffffac1414bb01940401008205058716831fa964010101ffffffffac1414bbe0000002ffffffff0a01010200000000443c6da1ac1414aa00000009ac14141c00000000ac1414aafffffffdac1414aa80000000ffffffff00007fffffffffff000007ffe000000100000001440c34000000000500000002830f1ce281af4e35b1745d312aa54b892788ac1414bbe000000100000000e0000001640101017f00000164010100ac1e0001e000000107032f000000"]}) r9 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r9, 0x4000000000000, 0x40, &(0x7f0000000900)=@raw={'raw\x00', 0x41, 0x3, 0x388, 0x0, 0x19, 0x0, 0x0, 0x0, 0x2f0, 0x1f0, 0x1f0, 0x2f0, 0x1f0, 0x3, 0x0, {[{{@ip={@private, @dev, 0x0, 0x0, 'wlan1\x00', 'wg1\x00'}, 0x0, 0x200, 0x220, 0x0, {0x0, 0xffffffffa0028000}, [@common=@set={{0x40}, {{0x4, [0x4, 0x2, 0xa, 0x6, 0x8, 0x2], 0x2, 0x2}}}, @common=@inet=@hashlimit2={{0x150}, {'veth1\x00', {0x0, 0x8, 0x40, 0x0, 0x0, 0x687c, 0x93}}}]}, @unspec=@TRACE={0x20}}, {{@ip={@empty, @empty, 0x0, 0x0, 'veth0_vlan\x00', 'netpci0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x0, 0x3]}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3e8) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000000)={@empty, @local, 0x0}, &(0x7f0000000040)=0xc) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r9, 0x89f1, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000380)={'syztnl2\x00', r10, 0x700, 0x40, 0x2, 0x5, {{0x35, 0x4, 0x1, 0x1, 0xd4, 0x0, 0x0, 0x3f, 0x4, 0x0, @remote, @loopback, {[@ssrr={0x89, 0x13, 0xe2, [@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @remote]}, @noop, @ra={0x94, 0x4, 0x1}, @generic={0x82, 0x5, "058716"}, @lsrr={0x83, 0x1f, 0xa9, [@rand_addr=0x64010101, @broadcast, @remote, @multicast2, @broadcast, @private=0xa010102, @empty]}, @timestamp_addr={0x44, 0x3c, 0x6d, 0x1, 0xa, [{@local, 0x9}, {@local}, {@local, 0xfffffffd}, {@local, 0x80000000}, {@broadcast, 0x7fff}, {@broadcast, 0x7ff}, {@multicast1, 0x1}]}, @timestamp={0x44, 0xc, 0x34, 0x0, 0x0, [0x5, 0x2]}, @generic={0x83, 0xf, "1ce281af4e35b1745d312aa54b"}, @ssrr={0x89, 0x27, 0x88, [@remote, @multicast1, @empty, @multicast1, @rand_addr=0x64010101, @loopback, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1]}, @generic={0x7, 0x3, '/'}]}}}}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f0000000180)={&(0x7f0000000840)=ANY=[@ANYBLOB="780000005400010026bd7000fbdbdf2507000000", @ANYRESOCT=r8, @ANYBLOB="ed8e0100", @ANYRES32=r10, @ANYBLOB="000201006401010200000000000000000000000086dd000020000100", @ANYRES32, @ANYBLOB="01050300ac1e000100000000000000000000000086dd000020000100", @ANYRES32, @ANYBLOB="010100002001000000000000000000000000000096dd0000"], 0x78}, 0x1, 0x0, 0x0, 0x8840}, 0x4008040) sendmsg$nl_route_sched(r1, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000600)=@newtclass={0x4ac, 0x28, 0x10, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0x5, 0x1d}, {0xfff1, 0xf}, {0x2, 0xb}}, [@tclass_kind_options, @tclass_kind_options=@c_taprio={0xb}, @tclass_kind_options=@c_netem={0xa}, @tclass_kind_options=@c_mq={0x7}, @tclass_kind_options=@c_netem={0xa}, @tclass_kind_options=@c_multiq={0xb}]}, 0x4ac}, 0x1, 0x0, 0x0, 0x4008180}, 0x40010) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x10, 0x2, [@TCA_BASIC_EMATCHES={0xc, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}]}]}}]}, 0x40}}, 0x0) 00:42:22 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000f000000850000007500000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r6, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x41, 0x3, 0x230, 0x0, 0x19, 0x0, 0x0, 0x0, 0x2e8, 0x1f0, 0x1f0, 0x2e8, 0x1f0, 0x3, 0x0, {[{{@ip={@private, @dev, 0x0, 0x0, 'wlan1\x00', 'wg1\x00'}, 0x0, 0xa8, 0xc8, 0x0, {0x0, 0xffffffffa0028000}, [@common=@unspec=@quota={{0x38}}]}, @unspec=@TRACE={0x20}}, {{@ip={@empty, @empty, 0x0, 0x0, 'veth0_vlan\x00', 'netpci0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x290) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000000)={@empty, @local, 0x0}, &(0x7f0000000040)=0xc) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000380)=ANY=[@ANYBLOB="72797a746e6c32000000000010bd084f", @ANYRES32=r7, @ANYBLOB="070000400000000200000005450500d4006700003f049078ac1414bb7f0000018913e2e0000001ac1e0001ffffffffac1414bb01940401008205058716831fa964010101ffffffffac1414bbe0000002ffffffff0a01010200000000443c6da1ac1414aa00000009ac14141c00000000ac1414aafffffffdac1414aa80000000ffffffff00007fffffffffff000007ffe000000100000001440c34000000000500000002830f1ce281af4e35b1745d312aa54b892788ac1414bbe000000100000000e0000001640101017f00000164010100ac1e0001e000000107032f000000"]}) r9 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r9, 0x4000000000000, 0x40, &(0x7f0000000900)=@raw={'raw\x00', 0x41, 0x3, 0x388, 0x0, 0x19, 0x0, 0x0, 0x0, 0x2f0, 0x1f0, 0x1f0, 0x2f0, 0x1f0, 0x3, 0x0, {[{{@ip={@private, @dev, 0x0, 0x0, 'wlan1\x00', 'wg1\x00'}, 0x0, 0x200, 0x220, 0x0, {0x0, 0xffffffffa0028000}, [@common=@set={{0x40}, {{0x4, [0x4, 0x2, 0xa, 0x6, 0x8, 0x2], 0x2, 0x2}}}, @common=@inet=@hashlimit2={{0x150}, {'veth1\x00', {0x0, 0x8, 0x40, 0x0, 0x0, 0x687c, 0x93}}}]}, @unspec=@TRACE={0x20}}, {{@ip={@empty, @empty, 0x0, 0x0, 'veth0_vlan\x00', 'netpci0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x0, 0x3]}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3e8) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000000)={@empty, @local, 0x0}, &(0x7f0000000040)=0xc) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r9, 0x89f1, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000380)={'syztnl2\x00', r10, 0x700, 0x40, 0x2, 0x5, {{0x35, 0x4, 0x1, 0x1, 0xd4, 0x0, 0x0, 0x3f, 0x4, 0x0, @remote, @loopback, {[@ssrr={0x89, 0x13, 0xe2, [@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @remote]}, @noop, @ra={0x94, 0x4, 0x1}, @generic={0x82, 0x5, "058716"}, @lsrr={0x83, 0x1f, 0xa9, [@rand_addr=0x64010101, @broadcast, @remote, @multicast2, @broadcast, @private=0xa010102, @empty]}, @timestamp_addr={0x44, 0x3c, 0x6d, 0x1, 0xa, [{@local, 0x9}, {@local}, {@local, 0xfffffffd}, {@local, 0x80000000}, {@broadcast, 0x7fff}, {@broadcast, 0x7ff}, {@multicast1, 0x1}]}, @timestamp={0x44, 0xc, 0x34, 0x0, 0x0, [0x5, 0x2]}, @generic={0x83, 0xf, "1ce281af4e35b1745d312aa54b"}, @ssrr={0x89, 0x27, 0x88, [@remote, @multicast1, @empty, @multicast1, @rand_addr=0x64010101, @loopback, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1]}, @generic={0x7, 0x3, '/'}]}}}}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f0000000180)={&(0x7f0000000840)=ANY=[@ANYBLOB="780000005400010026bd7000fbdbdf2507000000", @ANYRESOCT=r8, @ANYBLOB="ed8e0100", @ANYRES32=r10, @ANYBLOB="000201006401010200000000000000000000000086dd000020000100", @ANYRES32, @ANYBLOB="01050300ac1e000100000000000000000000000086dd000020000100", @ANYRES32, @ANYBLOB="010100002001000000000000000000000000000096dd0000"], 0x78}, 0x1, 0x0, 0x0, 0x8840}, 0x4008040) sendmsg$nl_route_sched(r1, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000600)=@newtclass={0x4ac, 0x28, 0x10, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0x5, 0x1d}, {0xfff1, 0xf}, {0x2, 0xb}}, [@tclass_kind_options, @tclass_kind_options=@c_taprio={0xb}, @tclass_kind_options=@c_netem={0xa}, @tclass_kind_options=@c_mq={0x7}, @tclass_kind_options=@c_netem={0xa}, @tclass_kind_options=@c_multiq={0xb}]}, 0x4ac}, 0x1, 0x0, 0x0, 0x4008180}, 0x40010) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x10, 0x2, [@TCA_BASIC_EMATCHES={0xc, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}]}]}}]}, 0x40}}, 0x0) [ 2543.421297][ T29] audit: type=1400 audit(2543.350:415): avc: denied { lock } for pid=29259 comm="syz-executor.1" path="socket:[69369]" dev="sockfs" ino=69369 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 00:42:23 executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x8, 0x3, &(0x7f0000001200)=ANY=[@ANYBLOB="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"], &(0x7f0000281ffc)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x185}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x0, 0xe, 0x1a0ffffffff, &(0x7f0000000200)="5c71f905cac413551b2ac06c0800", 0x0, 0x4000}, 0x28) 00:42:23 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000f000000850000007500000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r6, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x41, 0x3, 0x230, 0x0, 0x19, 0x0, 0x0, 0x0, 0x2e8, 0x1f0, 0x1f0, 0x2e8, 0x1f0, 0x3, 0x0, {[{{@ip={@private, @dev, 0x0, 0x0, 'wlan1\x00', 'wg1\x00'}, 0x0, 0xa8, 0xc8, 0x0, {0x0, 0xffffffffa0028000}, [@common=@unspec=@quota={{0x38}}]}, @unspec=@TRACE={0x20}}, {{@ip={@empty, @empty, 0x0, 0x0, 'veth0_vlan\x00', 'netpci0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x290) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000000)={@empty, @local, 0x0}, &(0x7f0000000040)=0xc) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000380)=ANY=[@ANYBLOB="72797a746e6c32000000000010bd084f", @ANYRES32=r7, @ANYBLOB="070000400000000200000005450500d4006700003f049078ac1414bb7f0000018913e2e0000001ac1e0001ffffffffac1414bb01940401008205058716831fa964010101ffffffffac1414bbe0000002ffffffff0a01010200000000443c6da1ac1414aa00000009ac14141c00000000ac1414aafffffffdac1414aa80000000ffffffff00007fffffffffff000007ffe000000100000001440c34000000000500000002830f1ce281af4e35b1745d312aa54b892788ac1414bbe000000100000000e0000001640101017f00000164010100ac1e0001e000000107032f000000"]}) r9 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r9, 0x4000000000000, 0x40, &(0x7f0000000900)=@raw={'raw\x00', 0x41, 0x3, 0x388, 0x0, 0x19, 0x0, 0x0, 0x0, 0x2f0, 0x1f0, 0x1f0, 0x2f0, 0x1f0, 0x3, 0x0, {[{{@ip={@private, @dev, 0x0, 0x0, 'wlan1\x00', 'wg1\x00'}, 0x0, 0x200, 0x220, 0x0, {0x0, 0xffffffffa0028000}, [@common=@set={{0x40}, {{0x4, [0x4, 0x2, 0xa, 0x6, 0x8, 0x2], 0x2, 0x2}}}, @common=@inet=@hashlimit2={{0x150}, {'veth1\x00', {0x0, 0x8, 0x40, 0x0, 0x0, 0x687c, 0x93}}}]}, @unspec=@TRACE={0x20}}, {{@ip={@empty, @empty, 0x0, 0x0, 'veth0_vlan\x00', 'netpci0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x0, 0x3]}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3e8) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000000)={@empty, @local, 0x0}, &(0x7f0000000040)=0xc) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r9, 0x89f1, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000380)={'syztnl2\x00', r10, 0x700, 0x40, 0x2, 0x5, {{0x35, 0x4, 0x1, 0x1, 0xd4, 0x0, 0x0, 0x3f, 0x4, 0x0, @remote, @loopback, {[@ssrr={0x89, 0x13, 0xe2, [@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @remote]}, @noop, @ra={0x94, 0x4, 0x1}, @generic={0x82, 0x5, "058716"}, @lsrr={0x83, 0x1f, 0xa9, [@rand_addr=0x64010101, @broadcast, @remote, @multicast2, @broadcast, @private=0xa010102, @empty]}, @timestamp_addr={0x44, 0x3c, 0x6d, 0x1, 0xa, [{@local, 0x9}, {@local}, {@local, 0xfffffffd}, {@local, 0x80000000}, {@broadcast, 0x7fff}, {@broadcast, 0x7ff}, {@multicast1, 0x1}]}, @timestamp={0x44, 0xc, 0x34, 0x0, 0x0, [0x5, 0x2]}, @generic={0x83, 0xf, "1ce281af4e35b1745d312aa54b"}, @ssrr={0x89, 0x27, 0x88, [@remote, @multicast1, @empty, @multicast1, @rand_addr=0x64010101, @loopback, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1]}, @generic={0x7, 0x3, '/'}]}}}}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f0000000180)={&(0x7f0000000840)=ANY=[@ANYBLOB="780000005400010026bd7000fbdbdf2507000000", @ANYRESOCT=r8, @ANYBLOB="ed8e0100", @ANYRES32=r10, @ANYBLOB="000201006401010200000000000000000000000086dd000020000100", @ANYRES32, @ANYBLOB="01050300ac1e000100000000000000000000000086dd000020000100", @ANYRES32, @ANYBLOB="010100002001000000000000000000000000000096dd0000"], 0x78}, 0x1, 0x0, 0x0, 0x8840}, 0x4008040) sendmsg$nl_route_sched(r1, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000600)=@newtclass={0x4ac, 0x28, 0x10, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0x5, 0x1d}, {0xfff1, 0xf}, {0x2, 0xb}}, [@tclass_kind_options, @tclass_kind_options=@c_taprio={0xb}, @tclass_kind_options=@c_netem={0xa}, @tclass_kind_options=@c_mq={0x7}, @tclass_kind_options=@c_netem={0xa}, @tclass_kind_options=@c_multiq={0xb}]}, 0x4ac}, 0x1, 0x0, 0x0, 0x4008180}, 0x40010) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x10, 0x2, [@TCA_BASIC_EMATCHES={0xc, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}]}]}}]}, 0x40}}, 0x0) [ 2544.193260][T29266] __nla_validate_parse: 6 callbacks suppressed [ 2544.193361][T29266] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2544.273101][T29266] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 00:42:24 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000f000000850000007500000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r6, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x41, 0x3, 0x230, 0x0, 0x19, 0x0, 0x0, 0x0, 0x2e8, 0x1f0, 0x1f0, 0x2e8, 0x1f0, 0x3, 0x0, {[{{@ip={@private, @dev, 0x0, 0x0, 'wlan1\x00', 'wg1\x00'}, 0x0, 0xa8, 0xc8, 0x0, {0x0, 0xffffffffa0028000}, [@common=@unspec=@quota={{0x38}}]}, @unspec=@TRACE={0x20}}, {{@ip={@empty, @empty, 0x0, 0x0, 'veth0_vlan\x00', 'netpci0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x290) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000000)={@empty, @local, 0x0}, &(0x7f0000000040)=0xc) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000380)=ANY=[@ANYBLOB="72797a746e6c32000000000010bd084f", @ANYRES32=r7, @ANYBLOB="070000400000000200000005450500d4006700003f049078ac1414bb7f0000018913e2e0000001ac1e0001ffffffffac1414bb01940401008205058716831fa964010101ffffffffac1414bbe0000002ffffffff0a01010200000000443c6da1ac1414aa00000009ac14141c00000000ac1414aafffffffdac1414aa80000000ffffffff00007fffffffffff000007ffe000000100000001440c34000000000500000002830f1ce281af4e35b1745d312aa54b892788ac1414bbe000000100000000e0000001640101017f00000164010100ac1e0001e000000107032f000000"]}) r9 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r9, 0x4000000000000, 0x40, &(0x7f0000000900)=@raw={'raw\x00', 0x41, 0x3, 0x388, 0x0, 0x19, 0x0, 0x0, 0x0, 0x2f0, 0x1f0, 0x1f0, 0x2f0, 0x1f0, 0x3, 0x0, {[{{@ip={@private, @dev, 0x0, 0x0, 'wlan1\x00', 'wg1\x00'}, 0x0, 0x200, 0x220, 0x0, {0x0, 0xffffffffa0028000}, [@common=@set={{0x40}, {{0x4, [0x4, 0x2, 0xa, 0x6, 0x8, 0x2], 0x2, 0x2}}}, @common=@inet=@hashlimit2={{0x150}, {'veth1\x00', {0x0, 0x8, 0x40, 0x0, 0x0, 0x687c, 0x93}}}]}, @unspec=@TRACE={0x20}}, {{@ip={@empty, @empty, 0x0, 0x0, 'veth0_vlan\x00', 'netpci0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x0, 0x3]}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3e8) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000000)={@empty, @local, 0x0}, &(0x7f0000000040)=0xc) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r9, 0x89f1, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000380)={'syztnl2\x00', r10, 0x700, 0x40, 0x2, 0x5, {{0x35, 0x4, 0x1, 0x1, 0xd4, 0x0, 0x0, 0x3f, 0x4, 0x0, @remote, @loopback, {[@ssrr={0x89, 0x13, 0xe2, [@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @remote]}, @noop, @ra={0x94, 0x4, 0x1}, @generic={0x82, 0x5, "058716"}, @lsrr={0x83, 0x1f, 0xa9, [@rand_addr=0x64010101, @broadcast, @remote, @multicast2, @broadcast, @private=0xa010102, @empty]}, @timestamp_addr={0x44, 0x3c, 0x6d, 0x1, 0xa, [{@local, 0x9}, {@local}, {@local, 0xfffffffd}, {@local, 0x80000000}, {@broadcast, 0x7fff}, {@broadcast, 0x7ff}, {@multicast1, 0x1}]}, @timestamp={0x44, 0xc, 0x34, 0x0, 0x0, [0x5, 0x2]}, @generic={0x83, 0xf, "1ce281af4e35b1745d312aa54b"}, @ssrr={0x89, 0x27, 0x88, [@remote, @multicast1, @empty, @multicast1, @rand_addr=0x64010101, @loopback, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1]}, @generic={0x7, 0x3, '/'}]}}}}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f0000000180)={&(0x7f0000000840)=ANY=[@ANYBLOB="780000005400010026bd7000fbdbdf2507000000", @ANYRESOCT=r8, @ANYBLOB="ed8e0100", @ANYRES32=r10, @ANYBLOB="000201006401010200000000000000000000000086dd000020000100", @ANYRES32, @ANYBLOB="01050300ac1e000100000000000000000000000086dd000020000100", @ANYRES32, @ANYBLOB="010100002001000000000000000000000000000096dd0000"], 0x78}, 0x1, 0x0, 0x0, 0x8840}, 0x4008040) sendmsg$nl_route_sched(r1, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000600)=@newtclass={0x4ac, 0x28, 0x10, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0x5, 0x1d}, {0xfff1, 0xf}, {0x2, 0xb}}, [@tclass_kind_options, @tclass_kind_options=@c_taprio={0xb}, @tclass_kind_options=@c_netem={0xa}, @tclass_kind_options=@c_mq={0x7}, @tclass_kind_options=@c_netem={0xa}, @tclass_kind_options=@c_multiq={0xb}]}, 0x4ac}, 0x1, 0x0, 0x0, 0x4008180}, 0x40010) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newtfilter={0x54, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1}]}]}]}}]}, 0x54}}, 0x0) [ 2545.109429][T29271] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2545.113888][T29271] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 00:42:25 executing program 1: bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000001680)='syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r0, &(0x7f00000016c0)='blkio.bfq.sectors_recursive\x00', 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x8, 0x3, &(0x7f0000001200)=ANY=[@ANYBLOB="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"], &(0x7f0000281ffc)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x185}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x0, 0x81, 0x1a0ffffffff, &(0x7f0000000200)="5c71f905cac413551b2ac06c0800", 0x0, 0x4000}, 0x28) 00:42:25 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000f000000850000007500000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r6, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x41, 0x3, 0x230, 0x0, 0x19, 0x0, 0x0, 0x0, 0x2e8, 0x1f0, 0x1f0, 0x2e8, 0x1f0, 0x3, 0x0, {[{{@ip={@private, @dev, 0x0, 0x0, 'wlan1\x00', 'wg1\x00'}, 0x0, 0xa8, 0xc8, 0x0, {0x0, 0xffffffffa0028000}, [@common=@unspec=@quota={{0x38}}]}, @unspec=@TRACE={0x20}}, {{@ip={@empty, @empty, 0x0, 0x0, 'veth0_vlan\x00', 'netpci0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x290) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000000)={@empty, @local, 0x0}, &(0x7f0000000040)=0xc) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000380)=ANY=[@ANYBLOB="72797a746e6c32000000000010bd084f", @ANYRES32=r7, @ANYBLOB="070000400000000200000005450500d4006700003f049078ac1414bb7f0000018913e2e0000001ac1e0001ffffffffac1414bb01940401008205058716831fa964010101ffffffffac1414bbe0000002ffffffff0a01010200000000443c6da1ac1414aa00000009ac14141c00000000ac1414aafffffffdac1414aa80000000ffffffff00007fffffffffff000007ffe000000100000001440c34000000000500000002830f1ce281af4e35b1745d312aa54b892788ac1414bbe000000100000000e0000001640101017f00000164010100ac1e0001e000000107032f000000"]}) r9 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r9, 0x4000000000000, 0x40, &(0x7f0000000900)=@raw={'raw\x00', 0x41, 0x3, 0x388, 0x0, 0x19, 0x0, 0x0, 0x0, 0x2f0, 0x1f0, 0x1f0, 0x2f0, 0x1f0, 0x3, 0x0, {[{{@ip={@private, @dev, 0x0, 0x0, 'wlan1\x00', 'wg1\x00'}, 0x0, 0x200, 0x220, 0x0, {0x0, 0xffffffffa0028000}, [@common=@set={{0x40}, {{0x4, [0x4, 0x2, 0xa, 0x6, 0x8, 0x2], 0x2, 0x2}}}, @common=@inet=@hashlimit2={{0x150}, {'veth1\x00', {0x0, 0x8, 0x40, 0x0, 0x0, 0x687c, 0x93}}}]}, @unspec=@TRACE={0x20}}, {{@ip={@empty, @empty, 0x0, 0x0, 'veth0_vlan\x00', 'netpci0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x0, 0x3]}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3e8) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000000)={@empty, @local, 0x0}, &(0x7f0000000040)=0xc) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r9, 0x89f1, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000380)={'syztnl2\x00', r10, 0x700, 0x40, 0x2, 0x5, {{0x35, 0x4, 0x1, 0x1, 0xd4, 0x0, 0x0, 0x3f, 0x4, 0x0, @remote, @loopback, {[@ssrr={0x89, 0x13, 0xe2, [@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @remote]}, @noop, @ra={0x94, 0x4, 0x1}, @generic={0x82, 0x5, "058716"}, @lsrr={0x83, 0x1f, 0xa9, [@rand_addr=0x64010101, @broadcast, @remote, @multicast2, @broadcast, @private=0xa010102, @empty]}, @timestamp_addr={0x44, 0x3c, 0x6d, 0x1, 0xa, [{@local, 0x9}, {@local}, {@local, 0xfffffffd}, {@local, 0x80000000}, {@broadcast, 0x7fff}, {@broadcast, 0x7ff}, {@multicast1, 0x1}]}, @timestamp={0x44, 0xc, 0x34, 0x0, 0x0, [0x5, 0x2]}, @generic={0x83, 0xf, "1ce281af4e35b1745d312aa54b"}, @ssrr={0x89, 0x27, 0x88, [@remote, @multicast1, @empty, @multicast1, @rand_addr=0x64010101, @loopback, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1]}, @generic={0x7, 0x3, '/'}]}}}}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f0000000180)={&(0x7f0000000840)=ANY=[@ANYBLOB="780000005400010026bd7000fbdbdf2507000000", @ANYRESOCT=r8, @ANYBLOB="ed8e0100", @ANYRES32=r10, @ANYBLOB="000201006401010200000000000000000000000086dd000020000100", @ANYRES32, @ANYBLOB="01050300ac1e000100000000000000000000000086dd000020000100", @ANYRES32, @ANYBLOB="010100002001000000000000000000000000000096dd0000"], 0x78}, 0x1, 0x0, 0x0, 0x8840}, 0x4008040) sendmsg$nl_route_sched(r1, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000600)=@newtclass={0x4ac, 0x28, 0x10, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0x5, 0x1d}, {0xfff1, 0xf}, {0x2, 0xb}}, [@tclass_kind_options, @tclass_kind_options=@c_taprio={0xb}, @tclass_kind_options=@c_netem={0xa}, @tclass_kind_options=@c_mq={0x7}, @tclass_kind_options=@c_netem={0xa}, @tclass_kind_options=@c_multiq={0xb}]}, 0x4ac}, 0x1, 0x0, 0x0, 0x4008180}, 0x40010) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newtfilter={0x54, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1}]}]}]}}]}, 0x54}}, 0x0) [ 2545.848658][T29275] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2545.915628][T29275] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 00:42:27 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000f000000850000007500000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r6, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x41, 0x3, 0x230, 0x0, 0x19, 0x0, 0x0, 0x0, 0x2e8, 0x1f0, 0x1f0, 0x2e8, 0x1f0, 0x3, 0x0, {[{{@ip={@private, @dev, 0x0, 0x0, 'wlan1\x00', 'wg1\x00'}, 0x0, 0xa8, 0xc8, 0x0, {0x0, 0xffffffffa0028000}, [@common=@unspec=@quota={{0x38}}]}, @unspec=@TRACE={0x20}}, {{@ip={@empty, @empty, 0x0, 0x0, 'veth0_vlan\x00', 'netpci0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x290) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000000)={@empty, @local, 0x0}, &(0x7f0000000040)=0xc) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000380)=ANY=[@ANYBLOB="72797a746e6c32000000000010bd084f", @ANYRES32=r7, @ANYBLOB="070000400000000200000005450500d4006700003f049078ac1414bb7f0000018913e2e0000001ac1e0001ffffffffac1414bb01940401008205058716831fa964010101ffffffffac1414bbe0000002ffffffff0a01010200000000443c6da1ac1414aa00000009ac14141c00000000ac1414aafffffffdac1414aa80000000ffffffff00007fffffffffff000007ffe000000100000001440c34000000000500000002830f1ce281af4e35b1745d312aa54b892788ac1414bbe000000100000000e0000001640101017f00000164010100ac1e0001e000000107032f000000"]}) r9 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r9, 0x4000000000000, 0x40, &(0x7f0000000900)=@raw={'raw\x00', 0x41, 0x3, 0x388, 0x0, 0x19, 0x0, 0x0, 0x0, 0x2f0, 0x1f0, 0x1f0, 0x2f0, 0x1f0, 0x3, 0x0, {[{{@ip={@private, @dev, 0x0, 0x0, 'wlan1\x00', 'wg1\x00'}, 0x0, 0x200, 0x220, 0x0, {0x0, 0xffffffffa0028000}, [@common=@set={{0x40}, {{0x4, [0x4, 0x2, 0xa, 0x6, 0x8, 0x2], 0x2, 0x2}}}, @common=@inet=@hashlimit2={{0x150}, {'veth1\x00', {0x0, 0x8, 0x40, 0x0, 0x0, 0x687c, 0x93}}}]}, @unspec=@TRACE={0x20}}, {{@ip={@empty, @empty, 0x0, 0x0, 'veth0_vlan\x00', 'netpci0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x0, 0x3]}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3e8) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000000)={@empty, @local, 0x0}, &(0x7f0000000040)=0xc) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r9, 0x89f1, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000380)={'syztnl2\x00', r10, 0x700, 0x40, 0x2, 0x5, {{0x35, 0x4, 0x1, 0x1, 0xd4, 0x0, 0x0, 0x3f, 0x4, 0x0, @remote, @loopback, {[@ssrr={0x89, 0x13, 0xe2, [@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @remote]}, @noop, @ra={0x94, 0x4, 0x1}, @generic={0x82, 0x5, "058716"}, @lsrr={0x83, 0x1f, 0xa9, [@rand_addr=0x64010101, @broadcast, @remote, @multicast2, @broadcast, @private=0xa010102, @empty]}, @timestamp_addr={0x44, 0x3c, 0x6d, 0x1, 0xa, [{@local, 0x9}, {@local}, {@local, 0xfffffffd}, {@local, 0x80000000}, {@broadcast, 0x7fff}, {@broadcast, 0x7ff}, {@multicast1, 0x1}]}, @timestamp={0x44, 0xc, 0x34, 0x0, 0x0, [0x5, 0x2]}, @generic={0x83, 0xf, "1ce281af4e35b1745d312aa54b"}, @ssrr={0x89, 0x27, 0x88, [@remote, @multicast1, @empty, @multicast1, @rand_addr=0x64010101, @loopback, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1]}, @generic={0x7, 0x3, '/'}]}}}}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f0000000180)={&(0x7f0000000840)=ANY=[@ANYBLOB="780000005400010026bd7000fbdbdf2507000000", @ANYRESOCT=r8, @ANYBLOB="ed8e0100", @ANYRES32=r10, @ANYBLOB="000201006401010200000000000000000000000086dd000020000100", @ANYRES32, @ANYBLOB="01050300ac1e000100000000000000000000000086dd000020000100", @ANYRES32, @ANYBLOB="010100002001000000000000000000000000000096dd0000"], 0x78}, 0x1, 0x0, 0x0, 0x8840}, 0x4008040) sendmsg$nl_route_sched(r1, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000600)=@newtclass={0x4ac, 0x28, 0x10, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0x5, 0x1d}, {0xfff1, 0xf}, {0x2, 0xb}}, [@tclass_kind_options, @tclass_kind_options=@c_taprio={0xb}, @tclass_kind_options=@c_netem={0xa}, @tclass_kind_options=@c_mq={0x7}, @tclass_kind_options=@c_netem={0xa}, @tclass_kind_options=@c_multiq={0xb}]}, 0x4ac}, 0x1, 0x0, 0x0, 0x4008180}, 0x40010) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newtfilter={0x54, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1}]}]}]}}]}, 0x54}}, 0x0) [ 2547.283986][T29280] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2547.331799][T29280] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 00:42:27 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000f000000850000007500000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r6, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x41, 0x3, 0x230, 0x0, 0x19, 0x0, 0x0, 0x0, 0x2e8, 0x1f0, 0x1f0, 0x2e8, 0x1f0, 0x3, 0x0, {[{{@ip={@private, @dev, 0x0, 0x0, 'wlan1\x00', 'wg1\x00'}, 0x0, 0xa8, 0xc8, 0x0, {0x0, 0xffffffffa0028000}, [@common=@unspec=@quota={{0x38}}]}, @unspec=@TRACE={0x20}}, {{@ip={@empty, @empty, 0x0, 0x0, 'veth0_vlan\x00', 'netpci0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x290) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000000)={@empty, @local, 0x0}, &(0x7f0000000040)=0xc) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000380)=ANY=[@ANYBLOB="72797a746e6c32000000000010bd084f", @ANYRES32=r7, @ANYBLOB="070000400000000200000005450500d4006700003f049078ac1414bb7f0000018913e2e0000001ac1e0001ffffffffac1414bb01940401008205058716831fa964010101ffffffffac1414bbe0000002ffffffff0a01010200000000443c6da1ac1414aa00000009ac14141c00000000ac1414aafffffffdac1414aa80000000ffffffff00007fffffffffff000007ffe000000100000001440c34000000000500000002830f1ce281af4e35b1745d312aa54b892788ac1414bbe000000100000000e0000001640101017f00000164010100ac1e0001e000000107032f000000"]}) r9 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r9, 0x4000000000000, 0x40, &(0x7f0000000900)=@raw={'raw\x00', 0x41, 0x3, 0x388, 0x0, 0x19, 0x0, 0x0, 0x0, 0x2f0, 0x1f0, 0x1f0, 0x2f0, 0x1f0, 0x3, 0x0, {[{{@ip={@private, @dev, 0x0, 0x0, 'wlan1\x00', 'wg1\x00'}, 0x0, 0x200, 0x220, 0x0, {0x0, 0xffffffffa0028000}, [@common=@set={{0x40}, {{0x4, [0x4, 0x2, 0xa, 0x6, 0x8, 0x2], 0x2, 0x2}}}, @common=@inet=@hashlimit2={{0x150}, {'veth1\x00', {0x0, 0x8, 0x40, 0x0, 0x0, 0x687c, 0x93}}}]}, @unspec=@TRACE={0x20}}, {{@ip={@empty, @empty, 0x0, 0x0, 'veth0_vlan\x00', 'netpci0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x0, 0x3]}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3e8) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000000)={@empty, @local, 0x0}, &(0x7f0000000040)=0xc) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r9, 0x89f1, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000380)={'syztnl2\x00', r10, 0x700, 0x40, 0x2, 0x5, {{0x35, 0x4, 0x1, 0x1, 0xd4, 0x0, 0x0, 0x3f, 0x4, 0x0, @remote, @loopback, {[@ssrr={0x89, 0x13, 0xe2, [@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @remote]}, @noop, @ra={0x94, 0x4, 0x1}, @generic={0x82, 0x5, "058716"}, @lsrr={0x83, 0x1f, 0xa9, [@rand_addr=0x64010101, @broadcast, @remote, @multicast2, @broadcast, @private=0xa010102, @empty]}, @timestamp_addr={0x44, 0x3c, 0x6d, 0x1, 0xa, [{@local, 0x9}, {@local}, {@local, 0xfffffffd}, {@local, 0x80000000}, {@broadcast, 0x7fff}, {@broadcast, 0x7ff}, {@multicast1, 0x1}]}, @timestamp={0x44, 0xc, 0x34, 0x0, 0x0, [0x5, 0x2]}, @generic={0x83, 0xf, "1ce281af4e35b1745d312aa54b"}, @ssrr={0x89, 0x27, 0x88, [@remote, @multicast1, @empty, @multicast1, @rand_addr=0x64010101, @loopback, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1]}, @generic={0x7, 0x3, '/'}]}}}}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f0000000180)={&(0x7f0000000840)=ANY=[@ANYBLOB="780000005400010026bd7000fbdbdf2507000000", @ANYRESOCT=r8, @ANYBLOB="ed8e0100", @ANYRES32=r10, @ANYBLOB="000201006401010200000000000000000000000086dd000020000100", @ANYRES32, @ANYBLOB="01050300ac1e000100000000000000000000000086dd000020000100", @ANYRES32, @ANYBLOB="010100002001000000000000000000000000000096dd0000"], 0x78}, 0x1, 0x0, 0x0, 0x8840}, 0x4008040) sendmsg$nl_route_sched(r1, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000600)=@newtclass={0x4ac, 0x28, 0x10, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0x5, 0x1d}, {0xfff1, 0xf}, {0x2, 0xb}}, [@tclass_kind_options, @tclass_kind_options=@c_taprio={0xb}, @tclass_kind_options=@c_netem={0xa}, @tclass_kind_options=@c_mq={0x7}, @tclass_kind_options=@c_netem={0xa}, @tclass_kind_options=@c_multiq={0xb}]}, 0x4ac}, 0x1, 0x0, 0x0, 0x4008180}, 0x40010) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newtfilter={0x6c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x3c, 0x2, [@TCA_BASIC_EMATCHES={0x38, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x2c, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1}, @TCF_EM_META={0x18, 0x0, 0x0, 0x0, {{}, [@TCA_EM_META_HDR={0xc}]}}]}]}]}}]}, 0x6c}}, 0x0) [ 2548.102469][T29283] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2548.124228][T29283] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 00:42:28 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000f000000850000007500000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r6, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x41, 0x3, 0x230, 0x0, 0x19, 0x0, 0x0, 0x0, 0x2e8, 0x1f0, 0x1f0, 0x2e8, 0x1f0, 0x3, 0x0, {[{{@ip={@private, @dev, 0x0, 0x0, 'wlan1\x00', 'wg1\x00'}, 0x0, 0xa8, 0xc8, 0x0, {0x0, 0xffffffffa0028000}, [@common=@unspec=@quota={{0x38}}]}, @unspec=@TRACE={0x20}}, {{@ip={@empty, @empty, 0x0, 0x0, 'veth0_vlan\x00', 'netpci0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x290) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000000)={@empty, @local, 0x0}, &(0x7f0000000040)=0xc) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000380)=ANY=[@ANYBLOB="72797a746e6c32000000000010bd084f", @ANYRES32=r7, @ANYBLOB="070000400000000200000005450500d4006700003f049078ac1414bb7f0000018913e2e0000001ac1e0001ffffffffac1414bb01940401008205058716831fa964010101ffffffffac1414bbe0000002ffffffff0a01010200000000443c6da1ac1414aa00000009ac14141c00000000ac1414aafffffffdac1414aa80000000ffffffff00007fffffffffff000007ffe000000100000001440c34000000000500000002830f1ce281af4e35b1745d312aa54b892788ac1414bbe000000100000000e0000001640101017f00000164010100ac1e0001e000000107032f000000"]}) r9 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r9, 0x4000000000000, 0x40, &(0x7f0000000900)=@raw={'raw\x00', 0x41, 0x3, 0x388, 0x0, 0x19, 0x0, 0x0, 0x0, 0x2f0, 0x1f0, 0x1f0, 0x2f0, 0x1f0, 0x3, 0x0, {[{{@ip={@private, @dev, 0x0, 0x0, 'wlan1\x00', 'wg1\x00'}, 0x0, 0x200, 0x220, 0x0, {0x0, 0xffffffffa0028000}, [@common=@set={{0x40}, {{0x4, [0x4, 0x2, 0xa, 0x6, 0x8, 0x2], 0x2, 0x2}}}, @common=@inet=@hashlimit2={{0x150}, {'veth1\x00', {0x0, 0x8, 0x40, 0x0, 0x0, 0x687c, 0x93}}}]}, @unspec=@TRACE={0x20}}, {{@ip={@empty, @empty, 0x0, 0x0, 'veth0_vlan\x00', 'netpci0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x0, 0x3]}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3e8) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000000)={@empty, @local, 0x0}, &(0x7f0000000040)=0xc) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r9, 0x89f1, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000380)={'syztnl2\x00', r10, 0x700, 0x40, 0x2, 0x5, {{0x35, 0x4, 0x1, 0x1, 0xd4, 0x0, 0x0, 0x3f, 0x4, 0x0, @remote, @loopback, {[@ssrr={0x89, 0x13, 0xe2, [@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @remote]}, @noop, @ra={0x94, 0x4, 0x1}, @generic={0x82, 0x5, "058716"}, @lsrr={0x83, 0x1f, 0xa9, [@rand_addr=0x64010101, @broadcast, @remote, @multicast2, @broadcast, @private=0xa010102, @empty]}, @timestamp_addr={0x44, 0x3c, 0x6d, 0x1, 0xa, [{@local, 0x9}, {@local}, {@local, 0xfffffffd}, {@local, 0x80000000}, {@broadcast, 0x7fff}, {@broadcast, 0x7ff}, {@multicast1, 0x1}]}, @timestamp={0x44, 0xc, 0x34, 0x0, 0x0, [0x5, 0x2]}, @generic={0x83, 0xf, "1ce281af4e35b1745d312aa54b"}, @ssrr={0x89, 0x27, 0x88, [@remote, @multicast1, @empty, @multicast1, @rand_addr=0x64010101, @loopback, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1]}, @generic={0x7, 0x3, '/'}]}}}}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f0000000180)={&(0x7f0000000840)=ANY=[@ANYBLOB="780000005400010026bd7000fbdbdf2507000000", @ANYRESOCT=r8, @ANYBLOB="ed8e0100", @ANYRES32=r10, @ANYBLOB="000201006401010200000000000000000000000086dd000020000100", @ANYRES32, @ANYBLOB="01050300ac1e000100000000000000000000000086dd000020000100", @ANYRES32, @ANYBLOB="010100002001000000000000000000000000000096dd0000"], 0x78}, 0x1, 0x0, 0x0, 0x8840}, 0x4008040) sendmsg$nl_route_sched(r1, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000600)=@newtclass={0x4ac, 0x28, 0x10, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0x5, 0x1d}, {0xfff1, 0xf}, {0x2, 0xb}}, [@tclass_kind_options, @tclass_kind_options=@c_taprio={0xb}, @tclass_kind_options=@c_netem={0xa}, @tclass_kind_options=@c_mq={0x7}, @tclass_kind_options=@c_netem={0xa}, @tclass_kind_options=@c_multiq={0xb}]}, 0x4ac}, 0x1, 0x0, 0x0, 0x4008180}, 0x40010) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newtfilter={0x6c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x3c, 0x2, [@TCA_BASIC_EMATCHES={0x38, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x2c, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1}, @TCF_EM_META={0x18, 0x0, 0x0, 0x0, {{}, [@TCA_EM_META_HDR={0xc}]}}]}]}]}}]}, 0x6c}}, 0x0) 00:42:29 executing program 1: bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000001680)='syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r0, &(0x7f00000016c0)='blkio.bfq.sectors_recursive\x00', 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x8, 0x3, &(0x7f0000001200)=ANY=[@ANYBLOB="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"], &(0x7f0000281ffc)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x185}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x0, 0x81, 0x1a0ffffffff, &(0x7f0000000200)="5c71f905cac413551b2ac06c0800", 0x0, 0x4000}, 0x28) 00:42:29 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000f000000850000007500000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r6, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x41, 0x3, 0x230, 0x0, 0x19, 0x0, 0x0, 0x0, 0x2e8, 0x1f0, 0x1f0, 0x2e8, 0x1f0, 0x3, 0x0, {[{{@ip={@private, @dev, 0x0, 0x0, 'wlan1\x00', 'wg1\x00'}, 0x0, 0xa8, 0xc8, 0x0, {0x0, 0xffffffffa0028000}, [@common=@unspec=@quota={{0x38}}]}, @unspec=@TRACE={0x20}}, {{@ip={@empty, @empty, 0x0, 0x0, 'veth0_vlan\x00', 'netpci0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x290) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000000)={@empty, @local, 0x0}, &(0x7f0000000040)=0xc) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000380)=ANY=[@ANYBLOB="72797a746e6c32000000000010bd084f", @ANYRES32=r7, @ANYBLOB="070000400000000200000005450500d4006700003f049078ac1414bb7f0000018913e2e0000001ac1e0001ffffffffac1414bb01940401008205058716831fa964010101ffffffffac1414bbe0000002ffffffff0a01010200000000443c6da1ac1414aa00000009ac14141c00000000ac1414aafffffffdac1414aa80000000ffffffff00007fffffffffff000007ffe000000100000001440c34000000000500000002830f1ce281af4e35b1745d312aa54b892788ac1414bbe000000100000000e0000001640101017f00000164010100ac1e0001e000000107032f000000"]}) r9 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r9, 0x4000000000000, 0x40, &(0x7f0000000900)=@raw={'raw\x00', 0x41, 0x3, 0x388, 0x0, 0x19, 0x0, 0x0, 0x0, 0x2f0, 0x1f0, 0x1f0, 0x2f0, 0x1f0, 0x3, 0x0, {[{{@ip={@private, @dev, 0x0, 0x0, 'wlan1\x00', 'wg1\x00'}, 0x0, 0x200, 0x220, 0x0, {0x0, 0xffffffffa0028000}, [@common=@set={{0x40}, {{0x4, [0x4, 0x2, 0xa, 0x6, 0x8, 0x2], 0x2, 0x2}}}, @common=@inet=@hashlimit2={{0x150}, {'veth1\x00', {0x0, 0x8, 0x40, 0x0, 0x0, 0x687c, 0x93}}}]}, @unspec=@TRACE={0x20}}, {{@ip={@empty, @empty, 0x0, 0x0, 'veth0_vlan\x00', 'netpci0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x0, 0x3]}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3e8) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000000)={@empty, @local, 0x0}, &(0x7f0000000040)=0xc) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r9, 0x89f1, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000380)={'syztnl2\x00', r10, 0x700, 0x40, 0x2, 0x5, {{0x35, 0x4, 0x1, 0x1, 0xd4, 0x0, 0x0, 0x3f, 0x4, 0x0, @remote, @loopback, {[@ssrr={0x89, 0x13, 0xe2, [@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @remote]}, @noop, @ra={0x94, 0x4, 0x1}, @generic={0x82, 0x5, "058716"}, @lsrr={0x83, 0x1f, 0xa9, [@rand_addr=0x64010101, @broadcast, @remote, @multicast2, @broadcast, @private=0xa010102, @empty]}, @timestamp_addr={0x44, 0x3c, 0x6d, 0x1, 0xa, [{@local, 0x9}, {@local}, {@local, 0xfffffffd}, {@local, 0x80000000}, {@broadcast, 0x7fff}, {@broadcast, 0x7ff}, {@multicast1, 0x1}]}, @timestamp={0x44, 0xc, 0x34, 0x0, 0x0, [0x5, 0x2]}, @generic={0x83, 0xf, "1ce281af4e35b1745d312aa54b"}, @ssrr={0x89, 0x27, 0x88, [@remote, @multicast1, @empty, @multicast1, @rand_addr=0x64010101, @loopback, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1]}, @generic={0x7, 0x3, '/'}]}}}}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f0000000180)={&(0x7f0000000840)=ANY=[@ANYBLOB="780000005400010026bd7000fbdbdf2507000000", @ANYRESOCT=r8, @ANYBLOB="ed8e0100", @ANYRES32=r10, @ANYBLOB="000201006401010200000000000000000000000086dd000020000100", @ANYRES32, @ANYBLOB="01050300ac1e000100000000000000000000000086dd000020000100", @ANYRES32, @ANYBLOB="010100002001000000000000000000000000000096dd0000"], 0x78}, 0x1, 0x0, 0x0, 0x8840}, 0x4008040) sendmsg$nl_route_sched(r1, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000600)=@newtclass={0x4ac, 0x28, 0x10, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0x5, 0x1d}, {0xfff1, 0xf}, {0x2, 0xb}}, [@tclass_kind_options, @tclass_kind_options=@c_taprio={0xb}, @tclass_kind_options=@c_netem={0xa}, @tclass_kind_options=@c_mq={0x7}, @tclass_kind_options=@c_netem={0xa}, @tclass_kind_options=@c_multiq={0xb}]}, 0x4ac}, 0x1, 0x0, 0x0, 0x4008180}, 0x40010) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newtfilter={0x6c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x3c, 0x2, [@TCA_BASIC_EMATCHES={0x38, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x2c, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1}, @TCF_EM_META={0x18, 0x0, 0x0, 0x0, {{}, [@TCA_EM_META_HDR={0xc}]}}]}]}]}}]}, 0x6c}}, 0x0) [ 2549.815925][T29289] __nla_validate_parse: 2 callbacks suppressed [ 2549.815979][T29289] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2549.832516][T29289] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 00:42:30 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000f000000850000007500000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r6, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x41, 0x3, 0x230, 0x0, 0x19, 0x0, 0x0, 0x0, 0x2e8, 0x1f0, 0x1f0, 0x2e8, 0x1f0, 0x3, 0x0, {[{{@ip={@private, @dev, 0x0, 0x0, 'wlan1\x00', 'wg1\x00'}, 0x0, 0xa8, 0xc8, 0x0, {0x0, 0xffffffffa0028000}, [@common=@unspec=@quota={{0x38}}]}, @unspec=@TRACE={0x20}}, {{@ip={@empty, @empty, 0x0, 0x0, 'veth0_vlan\x00', 'netpci0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x290) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000000)={@empty, @local, 0x0}, &(0x7f0000000040)=0xc) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000380)=ANY=[@ANYBLOB="72797a746e6c32000000000010bd084f", @ANYRES32=r7, @ANYBLOB="070000400000000200000005450500d4006700003f049078ac1414bb7f0000018913e2e0000001ac1e0001ffffffffac1414bb01940401008205058716831fa964010101ffffffffac1414bbe0000002ffffffff0a01010200000000443c6da1ac1414aa00000009ac14141c00000000ac1414aafffffffdac1414aa80000000ffffffff00007fffffffffff000007ffe000000100000001440c34000000000500000002830f1ce281af4e35b1745d312aa54b892788ac1414bbe000000100000000e0000001640101017f00000164010100ac1e0001e000000107032f000000"]}) r9 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r9, 0x4000000000000, 0x40, &(0x7f0000000900)=@raw={'raw\x00', 0x41, 0x3, 0x388, 0x0, 0x19, 0x0, 0x0, 0x0, 0x2f0, 0x1f0, 0x1f0, 0x2f0, 0x1f0, 0x3, 0x0, {[{{@ip={@private, @dev, 0x0, 0x0, 'wlan1\x00', 'wg1\x00'}, 0x0, 0x200, 0x220, 0x0, {0x0, 0xffffffffa0028000}, [@common=@set={{0x40}, {{0x4, [0x4, 0x2, 0xa, 0x6, 0x8, 0x2], 0x2, 0x2}}}, @common=@inet=@hashlimit2={{0x150}, {'veth1\x00', {0x0, 0x8, 0x40, 0x0, 0x0, 0x687c, 0x93}}}]}, @unspec=@TRACE={0x20}}, {{@ip={@empty, @empty, 0x0, 0x0, 'veth0_vlan\x00', 'netpci0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x0, 0x3]}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3e8) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000000)={@empty, @local, 0x0}, &(0x7f0000000040)=0xc) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r9, 0x89f1, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000380)={'syztnl2\x00', r10, 0x700, 0x40, 0x2, 0x5, {{0x35, 0x4, 0x1, 0x1, 0xd4, 0x0, 0x0, 0x3f, 0x4, 0x0, @remote, @loopback, {[@ssrr={0x89, 0x13, 0xe2, [@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @remote]}, @noop, @ra={0x94, 0x4, 0x1}, @generic={0x82, 0x5, "058716"}, @lsrr={0x83, 0x1f, 0xa9, [@rand_addr=0x64010101, @broadcast, @remote, @multicast2, @broadcast, @private=0xa010102, @empty]}, @timestamp_addr={0x44, 0x3c, 0x6d, 0x1, 0xa, [{@local, 0x9}, {@local}, {@local, 0xfffffffd}, {@local, 0x80000000}, {@broadcast, 0x7fff}, {@broadcast, 0x7ff}, {@multicast1, 0x1}]}, @timestamp={0x44, 0xc, 0x34, 0x0, 0x0, [0x5, 0x2]}, @generic={0x83, 0xf, "1ce281af4e35b1745d312aa54b"}, @ssrr={0x89, 0x27, 0x88, [@remote, @multicast1, @empty, @multicast1, @rand_addr=0x64010101, @loopback, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1]}, @generic={0x7, 0x3, '/'}]}}}}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f0000000180)={&(0x7f0000000840)=ANY=[@ANYBLOB="780000005400010026bd7000fbdbdf2507000000", @ANYRESOCT=r8, @ANYBLOB="ed8e0100", @ANYRES32=r10, @ANYBLOB="000201006401010200000000000000000000000086dd000020000100", @ANYRES32, @ANYBLOB="01050300ac1e000100000000000000000000000086dd000020000100", @ANYRES32, @ANYBLOB="010100002001000000000000000000000000000096dd0000"], 0x78}, 0x1, 0x0, 0x0, 0x8840}, 0x4008040) sendmsg$nl_route_sched(r1, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000600)=@newtclass={0x4ac, 0x28, 0x10, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0x5, 0x1d}, {0xfff1, 0xf}, {0x2, 0xb}}, [@tclass_kind_options, @tclass_kind_options=@c_taprio={0xb}, @tclass_kind_options=@c_netem={0xa}, @tclass_kind_options=@c_mq={0x7}, @tclass_kind_options=@c_netem={0xa}, @tclass_kind_options=@c_multiq={0xb}]}, 0x4ac}, 0x1, 0x0, 0x0, 0x4008180}, 0x40010) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newtfilter={0x60, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x30, 0x2, [@TCA_BASIC_EMATCHES={0x2c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x20, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1}, @TCF_EM_META={0xc, 0x2}]}]}]}}]}, 0x60}}, 0x0) [ 2550.348868][T29294] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2550.369048][T29294] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 00:42:30 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000f000000850000007500000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r6, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x41, 0x3, 0x230, 0x0, 0x19, 0x0, 0x0, 0x0, 0x2e8, 0x1f0, 0x1f0, 0x2e8, 0x1f0, 0x3, 0x0, {[{{@ip={@private, @dev, 0x0, 0x0, 'wlan1\x00', 'wg1\x00'}, 0x0, 0xa8, 0xc8, 0x0, {0x0, 0xffffffffa0028000}, [@common=@unspec=@quota={{0x38}}]}, @unspec=@TRACE={0x20}}, {{@ip={@empty, @empty, 0x0, 0x0, 'veth0_vlan\x00', 'netpci0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x290) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000000)={@empty, @local, 0x0}, &(0x7f0000000040)=0xc) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000380)=ANY=[@ANYBLOB="72797a746e6c32000000000010bd084f", @ANYRES32=r7, @ANYBLOB="070000400000000200000005450500d4006700003f049078ac1414bb7f0000018913e2e0000001ac1e0001ffffffffac1414bb01940401008205058716831fa964010101ffffffffac1414bbe0000002ffffffff0a01010200000000443c6da1ac1414aa00000009ac14141c00000000ac1414aafffffffdac1414aa80000000ffffffff00007fffffffffff000007ffe000000100000001440c34000000000500000002830f1ce281af4e35b1745d312aa54b892788ac1414bbe000000100000000e0000001640101017f00000164010100ac1e0001e000000107032f000000"]}) r9 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r9, 0x4000000000000, 0x40, &(0x7f0000000900)=@raw={'raw\x00', 0x41, 0x3, 0x388, 0x0, 0x19, 0x0, 0x0, 0x0, 0x2f0, 0x1f0, 0x1f0, 0x2f0, 0x1f0, 0x3, 0x0, {[{{@ip={@private, @dev, 0x0, 0x0, 'wlan1\x00', 'wg1\x00'}, 0x0, 0x200, 0x220, 0x0, {0x0, 0xffffffffa0028000}, [@common=@set={{0x40}, {{0x4, [0x4, 0x2, 0xa, 0x6, 0x8, 0x2], 0x2, 0x2}}}, @common=@inet=@hashlimit2={{0x150}, {'veth1\x00', {0x0, 0x8, 0x40, 0x0, 0x0, 0x687c, 0x93}}}]}, @unspec=@TRACE={0x20}}, {{@ip={@empty, @empty, 0x0, 0x0, 'veth0_vlan\x00', 'netpci0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x0, 0x3]}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3e8) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000000)={@empty, @local, 0x0}, &(0x7f0000000040)=0xc) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r9, 0x89f1, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000380)={'syztnl2\x00', r10, 0x700, 0x40, 0x2, 0x5, {{0x35, 0x4, 0x1, 0x1, 0xd4, 0x0, 0x0, 0x3f, 0x4, 0x0, @remote, @loopback, {[@ssrr={0x89, 0x13, 0xe2, [@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @remote]}, @noop, @ra={0x94, 0x4, 0x1}, @generic={0x82, 0x5, "058716"}, @lsrr={0x83, 0x1f, 0xa9, [@rand_addr=0x64010101, @broadcast, @remote, @multicast2, @broadcast, @private=0xa010102, @empty]}, @timestamp_addr={0x44, 0x3c, 0x6d, 0x1, 0xa, [{@local, 0x9}, {@local}, {@local, 0xfffffffd}, {@local, 0x80000000}, {@broadcast, 0x7fff}, {@broadcast, 0x7ff}, {@multicast1, 0x1}]}, @timestamp={0x44, 0xc, 0x34, 0x0, 0x0, [0x5, 0x2]}, @generic={0x83, 0xf, "1ce281af4e35b1745d312aa54b"}, @ssrr={0x89, 0x27, 0x88, [@remote, @multicast1, @empty, @multicast1, @rand_addr=0x64010101, @loopback, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1]}, @generic={0x7, 0x3, '/'}]}}}}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f0000000180)={&(0x7f0000000840)=ANY=[@ANYBLOB="780000005400010026bd7000fbdbdf2507000000", @ANYRESOCT=r8, @ANYBLOB="ed8e0100", @ANYRES32=r10, @ANYBLOB="000201006401010200000000000000000000000086dd000020000100", @ANYRES32, @ANYBLOB="01050300ac1e000100000000000000000000000086dd000020000100", @ANYRES32, @ANYBLOB="010100002001000000000000000000000000000096dd0000"], 0x78}, 0x1, 0x0, 0x0, 0x8840}, 0x4008040) sendmsg$nl_route_sched(r1, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000600)=@newtclass={0x4ac, 0x28, 0x10, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0x5, 0x1d}, {0xfff1, 0xf}, {0x2, 0xb}}, [@tclass_kind_options, @tclass_kind_options=@c_taprio={0xb}, @tclass_kind_options=@c_netem={0xa}, @tclass_kind_options=@c_mq={0x7}, @tclass_kind_options=@c_netem={0xa}, @tclass_kind_options=@c_multiq={0xb}]}, 0x4ac}, 0x1, 0x0, 0x0, 0x4008180}, 0x40010) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newtfilter={0x60, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x30, 0x2, [@TCA_BASIC_EMATCHES={0x2c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x20, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1}, @TCF_EM_META={0xc, 0x2}]}]}]}}]}, 0x60}}, 0x0) [ 2550.936259][T29297] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2550.949070][T29297] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 00:42:31 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000f000000850000007500000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r6, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x41, 0x3, 0x230, 0x0, 0x19, 0x0, 0x0, 0x0, 0x2e8, 0x1f0, 0x1f0, 0x2e8, 0x1f0, 0x3, 0x0, {[{{@ip={@private, @dev, 0x0, 0x0, 'wlan1\x00', 'wg1\x00'}, 0x0, 0xa8, 0xc8, 0x0, {0x0, 0xffffffffa0028000}, [@common=@unspec=@quota={{0x38}}]}, @unspec=@TRACE={0x20}}, {{@ip={@empty, @empty, 0x0, 0x0, 'veth0_vlan\x00', 'netpci0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x290) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000000)={@empty, @local, 0x0}, &(0x7f0000000040)=0xc) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000380)=ANY=[@ANYBLOB="72797a746e6c32000000000010bd084f", @ANYRES32=r7, @ANYBLOB="070000400000000200000005450500d4006700003f049078ac1414bb7f0000018913e2e0000001ac1e0001ffffffffac1414bb01940401008205058716831fa964010101ffffffffac1414bbe0000002ffffffff0a01010200000000443c6da1ac1414aa00000009ac14141c00000000ac1414aafffffffdac1414aa80000000ffffffff00007fffffffffff000007ffe000000100000001440c34000000000500000002830f1ce281af4e35b1745d312aa54b892788ac1414bbe000000100000000e0000001640101017f00000164010100ac1e0001e000000107032f000000"]}) r9 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r9, 0x4000000000000, 0x40, &(0x7f0000000900)=@raw={'raw\x00', 0x41, 0x3, 0x388, 0x0, 0x19, 0x0, 0x0, 0x0, 0x2f0, 0x1f0, 0x1f0, 0x2f0, 0x1f0, 0x3, 0x0, {[{{@ip={@private, @dev, 0x0, 0x0, 'wlan1\x00', 'wg1\x00'}, 0x0, 0x200, 0x220, 0x0, {0x0, 0xffffffffa0028000}, [@common=@set={{0x40}, {{0x4, [0x4, 0x2, 0xa, 0x6, 0x8, 0x2], 0x2, 0x2}}}, @common=@inet=@hashlimit2={{0x150}, {'veth1\x00', {0x0, 0x8, 0x40, 0x0, 0x0, 0x687c, 0x93}}}]}, @unspec=@TRACE={0x20}}, {{@ip={@empty, @empty, 0x0, 0x0, 'veth0_vlan\x00', 'netpci0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x0, 0x3]}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3e8) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000000)={@empty, @local, 0x0}, &(0x7f0000000040)=0xc) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r9, 0x89f1, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000380)={'syztnl2\x00', r10, 0x700, 0x40, 0x2, 0x5, {{0x35, 0x4, 0x1, 0x1, 0xd4, 0x0, 0x0, 0x3f, 0x4, 0x0, @remote, @loopback, {[@ssrr={0x89, 0x13, 0xe2, [@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @remote]}, @noop, @ra={0x94, 0x4, 0x1}, @generic={0x82, 0x5, "058716"}, @lsrr={0x83, 0x1f, 0xa9, [@rand_addr=0x64010101, @broadcast, @remote, @multicast2, @broadcast, @private=0xa010102, @empty]}, @timestamp_addr={0x44, 0x3c, 0x6d, 0x1, 0xa, [{@local, 0x9}, {@local}, {@local, 0xfffffffd}, {@local, 0x80000000}, {@broadcast, 0x7fff}, {@broadcast, 0x7ff}, {@multicast1, 0x1}]}, @timestamp={0x44, 0xc, 0x34, 0x0, 0x0, [0x5, 0x2]}, @generic={0x83, 0xf, "1ce281af4e35b1745d312aa54b"}, @ssrr={0x89, 0x27, 0x88, [@remote, @multicast1, @empty, @multicast1, @rand_addr=0x64010101, @loopback, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1]}, @generic={0x7, 0x3, '/'}]}}}}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f0000000180)={&(0x7f0000000840)=ANY=[@ANYBLOB="780000005400010026bd7000fbdbdf2507000000", @ANYRESOCT=r8, @ANYBLOB="ed8e0100", @ANYRES32=r10, @ANYBLOB="000201006401010200000000000000000000000086dd000020000100", @ANYRES32, @ANYBLOB="01050300ac1e000100000000000000000000000086dd000020000100", @ANYRES32, @ANYBLOB="010100002001000000000000000000000000000096dd0000"], 0x78}, 0x1, 0x0, 0x0, 0x8840}, 0x4008040) sendmsg$nl_route_sched(r1, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000600)=@newtclass={0x4ac, 0x28, 0x10, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0x5, 0x1d}, {0xfff1, 0xf}, {0x2, 0xb}}, [@tclass_kind_options, @tclass_kind_options=@c_taprio={0xb}, @tclass_kind_options=@c_netem={0xa}, @tclass_kind_options=@c_mq={0x7}, @tclass_kind_options=@c_netem={0xa}, @tclass_kind_options=@c_multiq={0xb}]}, 0x4ac}, 0x1, 0x0, 0x0, 0x4008180}, 0x40010) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newtfilter={0x60, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x30, 0x2, [@TCA_BASIC_EMATCHES={0x2c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x20, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1}, @TCF_EM_META={0xc, 0x2}]}]}]}}]}, 0x60}}, 0x0) [ 2551.591447][ T30] INFO: task kworker/0:5:8248 blocked for more than 430 seconds. [ 2551.592222][ T30] Not tainted 6.8.0-rc2-syzkaller #0 [ 2551.592624][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2551.593574][ T30] task:kworker/0:5 state:D stack:0 pid:8248 tgid:8248 ppid:2 flags:0x00000000 [ 2551.595040][ T30] Workqueue: events bpf_prog_free_deferred [ 2551.596670][ T30] Backtrace: [ 2551.597072][ T30] [<818579c4>] (__schedule) from [<818585fc>] (schedule+0x2c/0xb8) [ 2551.598693][ T30] r10:82c16005 r9:00000000 r8:8270dd78 r7:00000002 r6:eb801dac r5:84232400 [ 2551.599725][ T30] r4:84232400 [ 2551.628361][ T30] [<818585d0>] (schedule) from [<81858bc8>] (schedule_preempt_disabled+0x18/0x24) [ 2551.628907][ T30] r5:84232400 r4:8270dd74 [ 2551.629042][ T30] [<81858bb0>] (schedule_preempt_disabled) from [<8185b4b0>] (__mutex_lock.constprop.0+0x2e8/0xae0) [ 2551.641268][ T30] [<8185b1c8>] (__mutex_lock.constprop.0) from [<8185bd7c>] (__mutex_lock_slowpath+0x14/0x18) [ 2551.641634][ T30] r10:82c16005 r9:eb801e38 r8:00000000 r7:ffffffff r6:00000000 r5:84fefc00 [ 2551.642034][ T30] r4:00000000 [ 2551.642183][ T30] [<8185bd68>] (__mutex_lock_slowpath) from [<8185bdbc>] (mutex_lock+0x3c/0x40) [ 2551.642662][ T30] [<8185bd80>] (mutex_lock) from [<8048df34>] (_vm_unmap_aliases+0x60/0x2e4) [ 2551.643077][ T30] [<8048ded4>] (_vm_unmap_aliases) from [<80491ad4>] (vfree+0x170/0x1e0) [ 2551.643646][ T30] r10:82c16005 r9:00000001 r8:00000000 r7:ffffffff r6:00000000 r5:84fefc00 [ 2551.644106][ T30] r4:00000000 [ 2551.644243][ T30] [<80491964>] (vfree) from [<802ea464>] (module_memfree+0x30/0x50) [ 2551.644538][ T30] r9:84232400 r8:00000000 r7:00000000 r6:82c16000 r5:00001000 r4:7f045000 [ 2551.644774][ T30] [<802ea434>] (module_memfree) from [<80388aec>] (bpf_jit_free_exec+0x10/0x14) [ 2551.645037][ T30] r5:00001000 r4:dfecd000 [ 2551.645174][ T30] [<80388adc>] (bpf_jit_free_exec) from [<80388cac>] (bpf_jit_free+0x68/0xe4) [ 2551.645432][ T30] [<80388c44>] (bpf_jit_free) from [<80389d8c>] (bpf_prog_free_deferred+0x14c/0x164) [ 2551.645731][ T30] r5:8511bf50 r4:8511bc00 [ 2551.646115][ T30] [<80389c40>] (bpf_prog_free_deferred) from [<80267064>] (process_one_work+0x19c/0x4a4) [ 2551.646626][ T30] r7:dddd1280 r6:82c16000 r5:8511bf50 r4:850c8600 [ 2551.646912][ T30] [<80266ec8>] (process_one_work) from [<802675ac>] (worker_thread+0x240/0x48c) [ 2551.647326][ T30] r10:61c88647 r9:84232400 r8:dddd12a0 r7:82604d40 r6:dddd1280 r5:850c862c [ 2551.648088][ T30] r4:850c8600 [ 2551.648252][ T30] [<8026736c>] (worker_thread) from [<8026e888>] (kthread+0x104/0x134) [ 2551.648589][ T30] r10:00000000 r9:df839e90 r8:850f02c0 r7:850c8600 r6:8026736c r5:84232400 [ 2551.648853][ T30] r4:850ed400 [ 2551.648987][ T30] [<8026e784>] (kthread) from [<80200104>] (ret_from_fork+0x14/0x30) [ 2551.649362][ T30] Exception stack(0xeb801fb0 to 0xeb801ff8) [ 2551.649769][ T30] 1fa0: 00000000 00000000 00000000 00000000 [ 2551.650031][ T30] 1fc0: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 [ 2551.650287][ T30] 1fe0: 00000000 00000000 00000000 00000000 00000013 00000000 [ 2551.674832][ T30] r9:00000000 r8:00000000 r7:00000000 r6:00000000 r5:8026e784 r4:850ed400 [ 2551.675298][ T30] INFO: task kworker/1:1:10693 blocked for more than 430 seconds. [ 2551.675491][ T30] Not tainted 6.8.0-rc2-syzkaller #0 [ 2551.675937][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2551.676120][ T30] task:kworker/1:1 state:D stack:0 pid:10693 tgid:10693 ppid:2 flags:0x00000000 [ 2551.676395][ T30] Workqueue: events bpf_prog_free_deferred [ 2551.676613][ T30] Backtrace: [ 2551.676718][ T30] [<818579c4>] (__schedule) from [<818585fc>] (schedule+0x2c/0xb8) [ 2551.676943][ T30] r10:82c16205 r9:00000000 r8:8270dd78 r7:00000002 r6:ecdd1dac r5:83e40c00 [ 2551.677121][ T30] r4:83e40c00 [ 2551.677218][ T30] [<818585d0>] (schedule) from [<81858bc8>] (schedule_preempt_disabled+0x18/0x24) [ 2551.677405][ T30] r5:83e40c00 r4:8270dd74 [ 2551.677515][ T30] [<81858bb0>] (schedule_preempt_disabled) from [<8185b4b0>] (__mutex_lock.constprop.0+0x2e8/0xae0) [ 2551.677730][ T30] [<8185b1c8>] (__mutex_lock.constprop.0) from [<8185bd7c>] (__mutex_lock_slowpath+0x14/0x18) [ 2551.677971][ T30] r10:82c16205 r9:ecdd1e38 r8:00000000 r7:ffffffff r6:00000000 r5:8401d1c0 [ 2551.678138][ T30] r4:00000000 [ 2551.678238][ T30] [<8185bd68>] (__mutex_lock_slowpath) from [<8185bdbc>] (mutex_lock+0x3c/0x40) [ 2551.678488][ T30] [<8185bd80>] (mutex_lock) from [<8048df34>] (_vm_unmap_aliases+0x60/0x2e4) [ 2551.678690][ T30] [<8048ded4>] (_vm_unmap_aliases) from [<80491ad4>] (vfree+0x170/0x1e0) [ 2551.678898][ T30] r10:82c16205 r9:00000001 r8:00000000 r7:ffffffff r6:00000000 r5:8401d1c0 [ 2551.679080][ T30] r4:00000000 [ 2551.679167][ T30] [<80491964>] (vfree) from [<802ea464>] (module_memfree+0x30/0x50) [ 2551.679391][ T30] r9:83e40c00 r8:00000080 r7:00000000 r6:82c16200 r5:00001000 r4:7f05d000 [ 2551.679548][ T30] [<802ea434>] (module_memfree) from [<80388aec>] (bpf_jit_free_exec+0x10/0x14) [ 2551.679746][ T30] r5:00001000 r4:dfb79000 [ 2551.679856][ T30] [<80388adc>] (bpf_jit_free_exec) from [<80388cac>] (bpf_jit_free+0x68/0xe4) [ 2551.680050][ T30] [<80388c44>] (bpf_jit_free) from [<80389d8c>] (bpf_prog_free_deferred+0x14c/0x164) [ 2551.680313][ T30] r5:845c6f50 r4:845c6c00 [ 2551.694909][ T30] [<80389c40>] (bpf_prog_free_deferred) from [<80267064>] (process_one_work+0x19c/0x4a4) [ 2551.695409][ T30] r7:ddde4280 r6:82c16200 r5:845c6f50 r4:8524bf80 [ 2551.695579][ T30] [<80266ec8>] (process_one_work) from [<802675ac>] (worker_thread+0x240/0x48c) [ 2551.696105][ T30] r10:61c88647 r9:83e40c00 r8:ddde42a0 r7:82604d40 r6:ddde4280 r5:8524bfac [ 2551.697804][ T30] r4:8524bf80 [ 2551.697940][ T30] [<8026736c>] (worker_thread) from [<8026e888>] (kthread+0x104/0x134) [ 2551.698232][ T30] r10:00000000 r9:df875e90 r8:850c48c0 r7:8524bf80 r6:8026736c r5:83e40c00 [ 2551.698466][ T30] r4:850c4b80 [ 2551.698593][ T30] [<8026e784>] (kthread) from [<80200104>] (ret_from_fork+0x14/0x30) [ 2551.698904][ T30] Exception stack(0xecdd1fb0 to 0xecdd1ff8) [ 2551.699083][ T30] 1fa0: 00000000 00000000 00000000 00000000 [ 2551.699367][ T30] 1fc0: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 [ 2551.699606][ T30] 1fe0: 00000000 00000000 00000000 00000000 00000013 00000000 [ 2551.699878][ T30] r9:00000000 r8:00000000 r7:00000000 r6:00000000 r5:8026e784 r4:850c4b80 [ 2551.700189][ T30] INFO: task kworker/1:5:25184 blocked for more than 430 seconds. [ 2551.710803][ T30] Not tainted 6.8.0-rc2-syzkaller #0 [ 2551.711220][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2551.711456][ T30] task:kworker/1:5 state:D stack:0 pid:25184 tgid:25184 ppid:2 flags:0x00000000 [ 2551.711839][ T30] Workqueue: events bpf_prog_free_deferred [ 2551.712137][ T30] Backtrace: [ 2551.712500][ T30] [<818579c4>] (__schedule) from [<818585fc>] (schedule+0x2c/0xb8) [ 2551.712773][ T30] r10:82c16205 r9:00000000 r8:8270dd78 r7:00000002 r6:e0871dac r5:84245400 [ 2551.715901][ T30] r4:84245400 [ 2551.726858][ T30] [<818585d0>] (schedule) from [<81858bc8>] (schedule_preempt_disabled+0x18/0x24) [ 2551.727348][ T30] r5:84245400 r4:8270dd74 [ 2551.727491][ T30] [<81858bb0>] (schedule_preempt_disabled) from [<8185b4b0>] (__mutex_lock.constprop.0+0x2e8/0xae0) [ 2551.728260][ T30] [<8185b1c8>] (__mutex_lock.constprop.0) from [<8185bd7c>] (__mutex_lock_slowpath+0x14/0x18) [ 2551.731307][ T30] r10:82c16205 r9:e0871e38 r8:00000000 r7:ffffffff r6:00000000 r5:84eeeac0 [ 2551.731648][ T30] r4:00000000 [ 2551.731781][ T30] [<8185bd68>] (__mutex_lock_slowpath) from [<8185bdbc>] (mutex_lock+0x3c/0x40) [ 2551.732090][ T30] [<8185bd80>] (mutex_lock) from [<8048df34>] (_vm_unmap_aliases+0x60/0x2e4) [ 2551.741420][ T30] [<8048ded4>] (_vm_unmap_aliases) from [<80491ad4>] (vfree+0x170/0x1e0) [ 2551.741882][ T30] r10:82c16205 r9:00000001 r8:00000000 r7:ffffffff r6:00000000 r5:84eeeac0 [ 2551.742110][ T30] r4:00000000 [ 2551.742259][ T30] [<80491964>] (vfree) from [<802ea464>] (module_memfree+0x30/0x50) [ 2551.744885][ T30] r9:84245400 r8:00000080 r7:00000000 r6:82c16200 r5:00001000 r4:7f063000 [ 2551.745138][ T30] [<802ea434>] (module_memfree) from [<80388aec>] (bpf_jit_free_exec+0x10/0x14) [ 2551.747409][ T30] r5:00001000 r4:dfc0b000 [ 2551.747638][ T30] [<80388adc>] (bpf_jit_free_exec) from [<80388cac>] (bpf_jit_free+0x68/0xe4) [ 2551.747994][ T30] [<80388c44>] (bpf_jit_free) from [<80389d8c>] (bpf_prog_free_deferred+0x14c/0x164) [ 2551.748291][ T30] r5:84f19f50 r4:84f19c00 [ 2551.750839][ T30] [<80389c40>] (bpf_prog_free_deferred) from [<80267064>] (process_one_work+0x19c/0x4a4) [ 2551.751217][ T30] r7:ddde4280 r6:82c16200 r5:84f19f50 r4:84795d80 [ 2551.760963][ T30] [<80266ec8>] (process_one_work) from [<802675ac>] (worker_thread+0x240/0x48c) [ 2551.761545][ T30] r10:61c88647 r9:84245400 r8:ddde42a0 r7:82604d40 r6:ddde4280 r5:84795dac [ 2551.761772][ T30] r4:84795d80 [ 2551.761903][ T30] [<8026736c>] (worker_thread) from [<8026e888>] (kthread+0x104/0x134) [ 2551.762139][ T30] r10:00000000 r9:df97de90 r8:8469e380 r7:84795d80 r6:8026736c r5:84245400 [ 2551.762810][ T30] r4:8500f9c0 [ 2551.762963][ T30] [<8026e784>] (kthread) from [<80200104>] (ret_from_fork+0x14/0x30) [ 2551.763310][ T30] Exception stack(0xe0871fb0 to 0xe0871ff8) [ 2551.763523][ T30] 1fa0: 00000000 00000000 00000000 00000000 [ 2551.763774][ T30] 1fc0: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 [ 2551.764119][ T30] 1fe0: 00000000 00000000 00000000 00000000 00000013 00000000 [ 2551.765164][ T30] r9:00000000 r8:00000000 r7:00000000 r6:00000000 r5:8026e784 r4:8500f9c0 [ 2551.765715][ T30] INFO: task kworker/1:6:25503 blocked for more than 430 seconds. [ 2551.765970][ T30] Not tainted 6.8.0-rc2-syzkaller #0 [ 2551.766139][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2551.766352][ T30] task:kworker/1:6 state:D stack:0 pid:25503 tgid:25503 ppid:2 flags:0x00000000 [ 2551.766729][ T30] Workqueue: events bpf_prog_free_deferred [ 2551.766947][ T30] Backtrace: [ 2551.767087][ T30] [<818579c4>] (__schedule) from [<818585fc>] (schedule+0x2c/0xb8) [ 2551.767357][ T30] r10:82c16205 r9:00000000 r8:8270dd78 r7:00000002 r6:e06e1dac r5:84f6bc00 [ 2551.767599][ T30] r4:84f6bc00 [ 2551.767728][ T30] [<818585d0>] (schedule) from [<81858bc8>] (schedule_preempt_disabled+0x18/0x24) [ 2551.768056][ T30] r5:84f6bc00 r4:8270dd74 [ 2551.768214][ T30] [<81858bb0>] (schedule_preempt_disabled) from [<8185b4b0>] (__mutex_lock.constprop.0+0x2e8/0xae0) [ 2551.768531][ T30] [<8185b1c8>] (__mutex_lock.constprop.0) from [<8185bd7c>] (__mutex_lock_slowpath+0x14/0x18) [ 2551.768851][ T30] r10:82c16205 r9:e06e1e38 r8:00000000 r7:ffffffff r6:00000000 r5:85022f40 [ 2551.769087][ T30] r4:00000000 [ 2551.769211][ T30] [<8185bd68>] (__mutex_lock_slowpath) from [<8185bdbc>] (mutex_lock+0x3c/0x40) [ 2551.769475][ T30] [<8185bd80>] (mutex_lock) from [<8048df34>] (_vm_unmap_aliases+0x60/0x2e4) [ 2551.769735][ T30] [<8048ded4>] (_vm_unmap_aliases) from [<80491ad4>] (vfree+0x170/0x1e0) [ 2551.770022][ T30] r10:82c16205 r9:00000001 r8:00000000 r7:ffffffff r6:00000000 r5:85022f40 [ 2551.770260][ T30] r4:00000000 [ 2551.783877][ T30] [<80491964>] (vfree) from [<802ea464>] (module_memfree+0x30/0x50) [ 2551.784692][ T30] r9:84f6bc00 r8:00000080 r7:00000000 r6:82c16200 r5:00001000 r4:7f05b000 [ 2551.784967][ T30] [<802ea434>] (module_memfree) from [<80388aec>] (bpf_jit_free_exec+0x10/0x14) [ 2551.785634][ T30] r5:00001000 r4:dfb4d000 [ 2551.785953][ T30] [<80388adc>] (bpf_jit_free_exec) from [<80388cac>] (bpf_jit_free+0x68/0xe4) [ 2551.786423][ T30] [<80388c44>] (bpf_jit_free) from [<80389d8c>] (bpf_prog_free_deferred+0x14c/0x164) [ 2551.787232][ T30] r5:845c7b50 r4:845c7800 [ 2551.787471][ T30] [<80389c40>] (bpf_prog_free_deferred) from [<80267064>] (process_one_work+0x19c/0x4a4) [ 2551.787780][ T30] r7:ddde4280 r6:82c16200 r5:845c7b50 r4:84773280 [ 2551.788004][ T30] [<80266ec8>] (process_one_work) from [<802675ac>] (worker_thread+0x240/0x48c) [ 2551.789073][ T30] r10:61c88647 r9:84f6bc00 r8:ddde42a0 r7:82604d40 r6:ddde4280 r5:847732ac [ 2551.789346][ T30] r4:84773280 [ 2551.789487][ T30] [<8026736c>] (worker_thread) from [<8026e888>] (kthread+0x104/0x134) [ 2551.789935][ T30] r10:00000000 r9:ebb39e90 r8:84de8600 r7:84773280 r6:8026736c r5:84f6bc00 [ 2551.798560][ T30] r4:84de8300 [ 2551.799005][ T30] [<8026e784>] (kthread) from [<80200104>] (ret_from_fork+0x14/0x30) [ 2551.799432][ T30] Exception stack(0xe06e1fb0 to 0xe06e1ff8) [ 2551.799946][ T30] 1fa0: 00000000 00000000 00000000 00000000 [ 2551.814517][ T30] 1fc0: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 [ 2551.814853][ T30] 1fe0: 00000000 00000000 00000000 00000000 00000013 00000000 [ 2551.815055][ T30] r9:00000000 r8:00000000 r7:00000000 r6:00000000 r5:8026e784 r4:84de8300 [ 2551.815253][ T30] INFO: task kworker/1:7:25505 blocked for more than 430 seconds. [ 2551.815694][ T30] Not tainted 6.8.0-rc2-syzkaller #0 [ 2551.815868][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2551.816040][ T30] task:kworker/1:7 state:D stack:0 pid:25505 tgid:25505 ppid:2 flags:0x00000000 [ 2551.816315][ T30] Workqueue: events bpf_prog_free_deferred [ 2551.816545][ T30] Backtrace: [ 2551.816720][ T30] [<818579c4>] (__schedule) from [<818585fc>] (schedule+0x2c/0xb8) [ 2551.817201][ T30] r10:82c16205 r9:00000000 r8:8270dd78 r7:00000002 r6:dfd25dac r5:84f68000 [ 2551.817393][ T30] r4:84f68000 [ 2551.817485][ T30] [<818585d0>] (schedule) from [<81858bc8>] (schedule_preempt_disabled+0x18/0x24) [ 2551.817679][ T30] r5:84f68000 r4:8270dd74 [ 2551.817790][ T30] [<81858bb0>] (schedule_preempt_disabled) from [<8185b4b0>] (__mutex_lock.constprop.0+0x2e8/0xae0) [ 2551.818030][ T30] [<8185b1c8>] (__mutex_lock.constprop.0) from [<8185bd7c>] (__mutex_lock_slowpath+0x14/0x18) [ 2551.818505][ T30] r10:82c16205 r9:dfd25e38 r8:00000000 r7:ffffffff r6:00000000 r5:84e7d8c0 [ 2551.818689][ T30] r4:00000000 [ 2551.818781][ T30] [<8185bd68>] (__mutex_lock_slowpath) from [<8185bdbc>] (mutex_lock+0x3c/0x40) [ 2551.818962][ T30] [<8185bd80>] (mutex_lock) from [<8048df34>] (_vm_unmap_aliases+0x60/0x2e4) [ 2551.819163][ T30] [<8048ded4>] (_vm_unmap_aliases) from [<80491ad4>] (vfree+0x170/0x1e0) [ 2551.819599][ T30] r10:82c16205 r9:00000001 r8:00000000 r7:ffffffff r6:00000000 r5:84e7d8c0 [ 2551.819796][ T30] r4:00000000 [ 2551.819895][ T30] [<80491964>] (vfree) from [<802ea464>] (module_memfree+0x30/0x50) [ 2551.820090][ T30] r9:84f68000 r8:00000080 r7:00000000 r6:82c16200 r5:00001000 r4:7f04f000 [ 2551.820265][ T30] [<802ea434>] (module_memfree) from [<80388aec>] (bpf_jit_free_exec+0x10/0x14) [ 2551.821029][ T30] r5:00001000 r4:df9d7000 [ 2551.831338][ T30] [<80388adc>] (bpf_jit_free_exec) from [<80388cac>] (bpf_jit_free+0x68/0xe4) [ 2551.831743][ T30] [<80388c44>] (bpf_jit_free) from [<80389d8c>] (bpf_prog_free_deferred+0x14c/0x164) [ 2551.831996][ T30] r5:84d43f50 r4:84d43c00 [ 2551.832111][ T30] [<80389c40>] (bpf_prog_free_deferred) from [<80267064>] (process_one_work+0x19c/0x4a4) [ 2551.832743][ T30] r7:ddde4280 r6:82c16200 r5:84d43f50 r4:84773180 [ 2551.832944][ T30] [<80266ec8>] (process_one_work) from [<802675ac>] (worker_thread+0x240/0x48c) [ 2551.833212][ T30] r10:61c88647 r9:84f68000 r8:ddde42a0 r7:82604d40 r6:ddde4280 r5:847731ac [ 2551.833469][ T30] r4:84773180 [ 2551.833576][ T30] [<8026736c>] (worker_thread) from [<8026e888>] (kthread+0x104/0x134) [ 2551.833828][ T30] r10:00000000 r9:ebb39e90 r8:84de8200 r7:84773180 r6:8026736c r5:84f68000 [ 2551.834109][ T30] r4:84de86c0 [ 2551.834234][ T30] [<8026e784>] (kthread) from [<80200104>] (ret_from_fork+0x14/0x30) [ 2551.834648][ T30] Exception stack(0xdfd25fb0 to 0xdfd25ff8) [ 2551.835024][ T30] 5fa0: 00000000 00000000 00000000 00000000 [ 2551.835364][ T30] 5fc0: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 [ 2551.835612][ T30] 5fe0: 00000000 00000000 00000000 00000000 00000013 00000000 [ 2551.836046][ T30] r9:00000000 r8:00000000 r7:00000000 r6:00000000 r5:8026e784 r4:84de86c0 [ 2551.836318][ T30] INFO: task kworker/1:8:25514 blocked for more than 430 seconds. [ 2551.836558][ T30] Not tainted 6.8.0-rc2-syzkaller #0 [ 2551.836729][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2551.836967][ T30] task:kworker/1:8 state:D stack:0 pid:25514 tgid:25514 ppid:2 flags:0x00000000 [ 2551.837235][ T30] Workqueue: events bpf_prog_free_deferred [ 2551.837438][ T30] Backtrace: [ 2551.837583][ T30] [<818579c4>] (__schedule) from [<818585fc>] (schedule+0x2c/0xb8) [ 2551.837944][ T30] r10:82c16205 r9:00000000 r8:8270dd78 r7:00000002 r6:e07d5dac r5:840c2400 [ 2551.838158][ T30] r4:840c2400 [ 2551.838810][ T30] [<818585d0>] (schedule) from [<81858bc8>] (schedule_preempt_disabled+0x18/0x24) [ 2551.841245][ T30] r5:840c2400 r4:8270dd74 [ 2551.841426][ T30] [<81858bb0>] (schedule_preempt_disabled) from [<8185b4b0>] (__mutex_lock.constprop.0+0x2e8/0xae0) [ 2551.841686][ T30] [<8185b1c8>] (__mutex_lock.constprop.0) from [<8185bd7c>] (__mutex_lock_slowpath+0x14/0x18) [ 2551.841936][ T30] r10:82c16205 r9:e07d5e38 r8:00000000 r7:ffffffff r6:00000000 r5:84772940 [ 2551.842121][ T30] r4:00000000 [ 2551.842226][ T30] [<8185bd68>] (__mutex_lock_slowpath) from [<8185bdbc>] (mutex_lock+0x3c/0x40) [ 2551.844751][ T30] [<8185bd80>] (mutex_lock) from [<8048df34>] (_vm_unmap_aliases+0x60/0x2e4) [ 2551.871534][ T30] [<8048ded4>] (_vm_unmap_aliases) from [<80491ad4>] (vfree+0x170/0x1e0) [ 2551.871824][ T30] r10:82c16205 r9:00000001 r8:00000000 r7:ffffffff r6:00000000 r5:84772940 [ 2551.872009][ T30] r4:00000000 [ 2551.872132][ T30] [<80491964>] (vfree) from [<802ea464>] (module_memfree+0x30/0x50) [ 2551.873039][ T30] r9:840c2400 r8:00000080 r7:00000000 r6:82c16200 r5:00001000 r4:7f059000 [ 2551.874194][ T30] [<802ea434>] (module_memfree) from [<80388aec>] (bpf_jit_free_exec+0x10/0x14) [ 2551.874476][ T30] r5:00001000 r4:dfb19000 [ 2551.874866][ T30] [<80388adc>] (bpf_jit_free_exec) from [<80388cac>] (bpf_jit_free+0x68/0xe4) [ 2551.875193][ T30] [<80388c44>] (bpf_jit_free) from [<80389d8c>] (bpf_prog_free_deferred+0x14c/0x164) [ 2551.875490][ T30] r5:845c7750 r4:845c7400 [ 2551.875630][ T30] [<80389c40>] (bpf_prog_free_deferred) from [<80267064>] (process_one_work+0x19c/0x4a4) [ 2551.875942][ T30] r7:ddde4280 r6:82c16200 r5:845c7750 r4:84773300 [ 2551.876294][ T30] [<80266ec8>] (process_one_work) from [<802675ac>] (worker_thread+0x240/0x48c) [ 2551.876586][ T30] r10:61c88647 r9:840c2400 r8:ddde42a0 r7:82604d40 r6:ddde4280 r5:8477332c [ 2551.876801][ T30] r4:84773300 [ 2551.876926][ T30] [<8026736c>] (worker_thread) from [<8026e888>] (kthread+0x104/0x134) [ 2551.877166][ T30] r10:00000000 r9:ebb39e90 r8:84e76100 r7:84773300 r6:8026736c r5:840c2400 [ 2551.877376][ T30] r4:84de8ec0 [ 2551.877500][ T30] [<8026e784>] (kthread) from [<80200104>] (ret_from_fork+0x14/0x30) [ 2551.877722][ T30] Exception stack(0xe07d5fb0 to 0xe07d5ff8) [ 2551.877908][ T30] 5fa0: 00000000 00000000 00000000 00000000 [ 2551.878132][ T30] 5fc0: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 [ 2551.878604][ T30] 5fe0: 00000000 00000000 00000000 00000000 00000013 00000000 [ 2551.878877][ T30] r9:00000000 r8:00000000 r7:00000000 r6:00000000 r5:8026e784 r4:84de8ec0 [ 2551.879581][ T30] INFO: task kworker/1:9:25518 blocked for more than 430 seconds. [ 2551.880115][ T30] Not tainted 6.8.0-rc2-syzkaller #0 [ 2551.880284][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2551.887211][ T30] task:kworker/1:9 state:D stack:0 pid:25518 tgid:25518 ppid:2 flags:0x00000000 [ 2551.888225][ T30] Workqueue: events bpf_prog_free_deferred [ 2551.888561][ T30] Backtrace: [ 2551.888712][ T30] [<818579c4>] (__schedule) from [<818585fc>] (schedule+0x2c/0xb8) [ 2551.888979][ T30] r10:82c16205 r9:00000000 r8:8270dd78 r7:00000002 r6:e07d1dac r5:84246c00 [ 2551.889504][ T30] r4:84246c00 [ 2551.889649][ T30] [<818585d0>] (schedule) from [<81858bc8>] (schedule_preempt_disabled+0x18/0x24) [ 2551.889908][ T30] r5:84246c00 r4:8270dd74 [ 2551.890048][ T30] [<81858bb0>] (schedule_preempt_disabled) from [<8185b4b0>] (__mutex_lock.constprop.0+0x2e8/0xae0) [ 2551.890309][ T30] [<8185b1c8>] (__mutex_lock.constprop.0) from [<8185bd7c>] (__mutex_lock_slowpath+0x14/0x18) [ 2551.901688][ T30] r10:82c16205 r9:e07d1e38 r8:00000000 r7:ffffffff r6:00000000 r5:84eeef80 [ 2551.901924][ T30] r4:00000000 [ 2551.902073][ T30] [<8185bd68>] (__mutex_lock_slowpath) from [<8185bdbc>] (mutex_lock+0x3c/0x40) [ 2551.902287][ T30] [<8185bd80>] (mutex_lock) from [<8048df34>] (_vm_unmap_aliases+0x60/0x2e4) [ 2551.902470][ T30] [<8048ded4>] (_vm_unmap_aliases) from [<80491ad4>] (vfree+0x170/0x1e0) [ 2551.902658][ T30] r10:82c16205 r9:00000001 r8:00000000 r7:ffffffff r6:00000000 r5:84eeef80 [ 2551.902948][ T30] r4:00000000 [ 2551.903236][ T30] [<80491964>] (vfree) from [<802ea464>] (module_memfree+0x30/0x50) [ 2551.903500][ T30] r9:84246c00 r8:00000080 r7:00000000 r6:82c16200 r5:00001000 r4:7f055000 [ 2551.903790][ T30] [<802ea434>] (module_memfree) from [<80388aec>] (bpf_jit_free_exec+0x10/0x14) [ 2551.904086][ T30] r5:00001000 r4:dfa9f000 [ 2551.904215][ T30] [<80388adc>] (bpf_jit_free_exec) from [<80388cac>] (bpf_jit_free+0x68/0xe4) [ 2551.904731][ T30] [<80388c44>] (bpf_jit_free) from [<80389d8c>] (bpf_prog_free_deferred+0x14c/0x164) [ 2551.918049][ T30] r5:845c7f50 r4:845c7c00 [ 2551.918281][ T30] [<80389c40>] (bpf_prog_free_deferred) from [<80267064>] (process_one_work+0x19c/0x4a4) [ 2551.918616][ T30] r7:ddde4280 r6:82c16200 r5:845c7f50 r4:84773500 [ 2551.918831][ T30] [<80266ec8>] (process_one_work) from [<802675ac>] (worker_thread+0x240/0x48c) [ 2551.919486][ T30] r10:61c88647 r9:84246c00 r8:ddde42a0 r7:82604d40 r6:ddde4280 r5:8477352c [ 2551.919736][ T30] r4:84773500 [ 2551.919876][ T30] [<8026736c>] (worker_thread) from [<8026e888>] (kthread+0x104/0x134) [ 2551.920156][ T30] r10:00000000 r9:ebb39e90 r8:8478f2c0 r7:84773500 r6:8026736c r5:84246c00 [ 2551.941164][ T30] r4:8501ac80 [ 2551.941423][ T30] [<8026e784>] (kthread) from [<80200104>] (ret_from_fork+0x14/0x30) [ 2551.941702][ T30] Exception stack(0xe07d1fb0 to 0xe07d1ff8) [ 2551.941881][ T30] 1fa0: 00000000 00000000 00000000 00000000 [ 2551.942539][ T30] 1fc0: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 [ 2551.942792][ T30] 1fe0: 00000000 00000000 00000000 00000000 00000013 00000000 [ 2551.943017][ T30] r9:00000000 r8:00000000 r7:00000000 r6:00000000 r5:8026e784 r4:8501ac80 [ 2551.943279][ T30] INFO: task kworker/1:10:25523 blocked for more than 430 seconds. [ 2551.943877][ T30] Not tainted 6.8.0-rc2-syzkaller #0 [ 2551.944075][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2551.944296][ T30] task:kworker/1:10 state:D stack:0 pid:25523 tgid:25523 ppid:2 flags:0x00000000 [ 2551.944639][ T30] Workqueue: events bpf_prog_free_deferred [ 2551.944859][ T30] Backtrace: [ 2551.945015][ T30] [<818579c4>] (__schedule) from [<818585fc>] (schedule+0x2c/0xb8) [ 2551.945266][ T30] r10:82c16205 r9:00000000 r8:8270dd78 r7:00000002 r6:e07c5dac r5:84246000 [ 2551.945519][ T30] r4:84246000 [ 2551.945644][ T30] [<818585d0>] (schedule) from [<81858bc8>] (schedule_preempt_disabled+0x18/0x24) [ 2551.945926][ T30] r5:84246000 r4:8270dd74 [ 2551.946069][ T30] [<81858bb0>] (schedule_preempt_disabled) from [<8185b4b0>] (__mutex_lock.constprop.0+0x2e8/0xae0) [ 2551.946342][ T30] [<8185b1c8>] (__mutex_lock.constprop.0) from [<8185bd7c>] (__mutex_lock_slowpath+0x14/0x18) [ 2551.946609][ T30] r10:82c16205 r9:e07c5e38 r8:00000000 r7:ffffffff r6:00000000 r5:859a6700 [ 2551.961245][ T30] r4:00000000 [ 2551.961664][ T30] [<8185bd68>] (__mutex_lock_slowpath) from [<8185bdbc>] (mutex_lock+0x3c/0x40) [ 2551.962845][ T30] [<8185bd80>] (mutex_lock) from [<8048df34>] (_vm_unmap_aliases+0x60/0x2e4) [ 2551.963840][ T30] [<8048ded4>] (_vm_unmap_aliases) from [<80491ad4>] (vfree+0x170/0x1e0) [ 2551.964931][ T30] r10:82c16205 r9:00000001 r8:00000000 r7:ffffffff r6:00000000 r5:859a6700 [ 2551.965854][ T30] r4:00000000 [ 2551.966190][ T30] [<80491964>] (vfree) from [<802ea464>] (module_memfree+0x30/0x50) [ 2551.966485][ T30] r9:84246000 r8:00000080 r7:00000000 r6:82c16200 r5:00001000 r4:7f051000 [ 2551.966717][ T30] [<802ea434>] (module_memfree) from [<80388aec>] (bpf_jit_free_exec+0x10/0x14) [ 2551.967002][ T30] r5:00001000 r4:dfa1b000 [ 2551.967147][ T30] [<80388adc>] (bpf_jit_free_exec) from [<80388cac>] (bpf_jit_free+0x68/0xe4) [ 2551.967752][ T30] [<80388c44>] (bpf_jit_free) from [<80389d8c>] (bpf_prog_free_deferred+0x14c/0x164) [ 2551.968076][ T30] r5:84f19b50 r4:84f19800 [ 2551.968220][ T30] [<80389c40>] (bpf_prog_free_deferred) from [<80267064>] (process_one_work+0x19c/0x4a4) [ 2551.968805][ T30] r7:ddde4280 r6:82c16200 r5:84f19b50 r4:84773100 [ 2551.971472][ T30] [<80266ec8>] (process_one_work) from [<802675ac>] (worker_thread+0x240/0x48c) [ 2551.971789][ T30] r10:61c88647 r9:84246000 r8:ddde42a0 r7:82604d40 r6:ddde4280 r5:8477312c [ 2551.971980][ T30] r4:84773100 [ 2551.972090][ T30] [<8026736c>] (worker_thread) from [<8026e888>] (kthread+0x104/0x134) [ 2551.972334][ T30] r10:00000000 r9:ebb39e90 r8:85265700 r7:84773100 r6:8026736c r5:84246000 [ 2551.981260][ T30] r4:85265e40 [ 2551.981538][ T30] [<8026e784>] (kthread) from [<80200104>] (ret_from_fork+0x14/0x30) [ 2551.981818][ T30] Exception stack(0xe07c5fb0 to 0xe07c5ff8) [ 2551.982001][ T30] 5fa0: 00000000 00000000 00000000 00000000 [ 2551.984273][ T30] 5fc0: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 [ 2551.984625][ T30] 5fe0: 00000000 00000000 00000000 00000000 00000013 00000000 [ 2551.984871][ T30] r9:00000000 r8:00000000 r7:00000000 r6:00000000 r5:8026e784 r4:85265e40 [ 2551.985143][ T30] INFO: task kworker/1:11:25527 blocked for more than 430 seconds. [ 2551.987273][ T30] Not tainted 6.8.0-rc2-syzkaller #0 [ 2551.987529][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2551.987748][ T30] task:kworker/1:11 state:D stack:0 pid:25527 tgid:25527 ppid:2 flags:0x00000000 [ 2552.001214][ T30] Workqueue: events bpf_prog_free_deferred [ 2552.001610][ T30] Backtrace: [ 2552.001732][ T30] [<818579c4>] (__schedule) from [<818585fc>] (schedule+0x2c/0xb8) [ 2552.001988][ T30] r10:82c16205 r9:00000000 r8:8270dd78 r7:00000002 r6:e0861dac r5:84240c00 [ 2552.002430][ T30] r4:84240c00 [ 2552.002552][ T30] [<818585d0>] (schedule) from [<81858bc8>] (schedule_preempt_disabled+0x18/0x24) [ 2552.002750][ T30] r5:84240c00 r4:8270dd74 [ 2552.002870][ T30] [<81858bb0>] (schedule_preempt_disabled) from [<8185b4b0>] (__mutex_lock.constprop.0+0x2e8/0xae0) [ 2552.003115][ T30] [<8185b1c8>] (__mutex_lock.constprop.0) from [<8185bd7c>] (__mutex_lock_slowpath+0x14/0x18) [ 2552.003358][ T30] r10:82c16205 r9:e0861e38 r8:00000000 r7:ffffffff r6:00000000 r5:8476c400 [ 2552.003540][ T30] r4:00000000 [ 2552.003661][ T30] [<8185bd68>] (__mutex_lock_slowpath) from [<8185bdbc>] (mutex_lock+0x3c/0x40) [ 2552.003903][ T30] [<8185bd80>] (mutex_lock) from [<8048df34>] (_vm_unmap_aliases+0x60/0x2e4) [ 2552.004157][ T30] [<8048ded4>] (_vm_unmap_aliases) from [<80491ad4>] (vfree+0x170/0x1e0) [ 2552.004710][ T30] r10:82c16205 r9:00000001 r8:00000000 r7:ffffffff r6:00000000 r5:8476c400 [ 2552.005248][ T30] r4:00000000 [ 2552.005372][ T30] [<80491964>] (vfree) from [<802ea464>] (module_memfree+0x30/0x50) [ 2552.005777][ T30] r9:84240c00 r8:00000080 r7:00000000 r6:82c16200 r5:00001000 r4:7f061000 [ 2552.005993][ T30] [<802ea434>] (module_memfree) from [<80388aec>] (bpf_jit_free_exec+0x10/0x14) [ 2552.006244][ T30] r5:00001000 r4:dfbeb000 [ 2552.006384][ T30] [<80388adc>] (bpf_jit_free_exec) from [<80388cac>] (bpf_jit_free+0x68/0xe4) [ 2552.006869][ T30] [<80388c44>] (bpf_jit_free) from [<80389d8c>] (bpf_prog_free_deferred+0x14c/0x164) [ 2552.007188][ T30] r5:84f3fb50 r4:84f3f800 [ 2552.007322][ T30] [<80389c40>] (bpf_prog_free_deferred) from [<80267064>] (process_one_work+0x19c/0x4a4) [ 2552.007596][ T30] r7:ddde4280 r6:82c16200 r5:84f3fb50 r4:84773f80 [ 2552.007787][ T30] [<80266ec8>] (process_one_work) from [<802675ac>] (worker_thread+0x240/0x48c) [ 2552.008087][ T30] r10:61c88647 r9:84240c00 r8:ddde42a0 r7:82604d40 r6:ddde4280 r5:84773fac [ 2552.008309][ T30] r4:84773f80 [ 2552.008523][ T30] [<8026736c>] (worker_thread) from [<8026e888>] (kthread+0x104/0x134) [ 2552.008884][ T30] r10:00000000 r9:ebb39e90 r8:84ef5280 r7:84773f80 r6:8026736c r5:84240c00 [ 2552.009321][ T30] r4:84ef5a40 [ 2552.009476][ T30] [<8026e784>] (kthread) from [<80200104>] (ret_from_fork+0x14/0x30) [ 2552.009711][ T30] Exception stack(0xe0861fb0 to 0xe0861ff8) [ 2552.009905][ T30] 1fa0: 00000000 00000000 00000000 00000000 [ 2552.016199][ T30] 1fc0: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 [ 2552.016540][ T30] 1fe0: 00000000 00000000 00000000 00000000 00000013 00000000 [ 2552.017164][ T30] r9:00000000 r8:00000000 r7:00000000 r6:00000000 r5:8026e784 r4:84ef5a40 [ 2552.017440][ T30] INFO: task kworker/1:12:25536 blocked for more than 430 seconds. [ 2552.017618][ T30] Not tainted 6.8.0-rc2-syzkaller #0 [ 2552.017755][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2552.017929][ T30] task:kworker/1:12 state:D stack:0 pid:25536 tgid:25536 ppid:2 flags:0x00000000 [ 2552.018512][ T30] Workqueue: events bpf_prog_free_deferred [ 2552.018710][ T30] Backtrace: [ 2552.018827][ T30] [<818579c4>] (__schedule) from [<818585fc>] (schedule+0x2c/0xb8) [ 2552.019008][ T30] r10:82c16205 r9:00000000 r8:8270dd78 r7:00000002 r6:e08e1dac r5:84735400 [ 2552.019196][ T30] r4:84735400 [ 2552.019298][ T30] [<818585d0>] (schedule) from [<81858bc8>] (schedule_preempt_disabled+0x18/0x24) [ 2552.019483][ T30] r5:84735400 r4:8270dd74 [ 2552.019863][ T30] [<81858bb0>] (schedule_preempt_disabled) from [<8185b4b0>] (__mutex_lock.constprop.0+0x2e8/0xae0) [ 2552.020117][ T30] [<8185b1c8>] (__mutex_lock.constprop.0) from [<8185bd7c>] (__mutex_lock_slowpath+0x14/0x18) [ 2552.020390][ T30] r10:82c16205 r9:e08e1e38 r8:00000000 r7:ffffffff r6:00000000 r5:850f0b40 [ 2552.031507][ T30] r4:00000000 [ 2552.031835][ T30] [<8185bd68>] (__mutex_lock_slowpath) from [<8185bdbc>] (mutex_lock+0x3c/0x40) [ 2552.032117][ T30] [<8185bd80>] (mutex_lock) from [<8048df34>] (_vm_unmap_aliases+0x60/0x2e4) [ 2552.032351][ T30] [<8048ded4>] (_vm_unmap_aliases) from [<80491ad4>] (vfree+0x170/0x1e0) [ 2552.037701][ T30] r10:82c16205 r9:00000001 r8:00000000 r7:ffffffff r6:00000000 r5:850f0b40 [ 2552.048815][ T30] r4:00000000 [ 2552.049062][ T30] [<80491964>] (vfree) from [<802ea464>] (module_memfree+0x30/0x50) [ 2552.049337][ T30] r9:84735400 r8:00000080 r7:00000000 r6:82c16200 r5:00001000 r4:7f053000 [ 2552.049553][ T30] [<802ea434>] (module_memfree) from [<80388aec>] (bpf_jit_free_exec+0x10/0x14) [ 2552.050001][ T30] r5:00001000 r4:dfa43000 [ 2552.050129][ T30] [<80388adc>] (bpf_jit_free_exec) from [<80388cac>] (bpf_jit_free+0x68/0xe4) [ 2552.050846][ T30] [<80388c44>] (bpf_jit_free) from [<80389d8c>] (bpf_prog_free_deferred+0x14c/0x164) [ 2552.051104][ T30] r5:845c7350 r4:845c7000 [ 2552.051203][ T30] [<80389c40>] (bpf_prog_free_deferred) from [<80267064>] (process_one_work+0x19c/0x4a4) [ 2552.051471][ T30] r7:ddde4280 r6:82c16200 r5:845c7350 r4:84773400 [ 2552.051632][ T30] [<80266ec8>] (process_one_work) from [<802675ac>] (worker_thread+0x240/0x48c) [ 2552.052235][ T30] r10:61c88647 r9:84735400 r8:ddde42a0 r7:82604d40 r6:ddde4280 r5:8477342c [ 2552.052502][ T30] r4:84773400 [ 2552.052629][ T30] [<8026736c>] (worker_thread) from [<8026e888>] (kthread+0x104/0x134) [ 2552.052912][ T30] r10:00000000 r9:ebb39e90 r8:850c3f40 r7:84773400 r6:8026736c r5:84735400 [ 2552.053149][ T30] r4:850c3100 [ 2552.053682][ T30] [<8026e784>] (kthread) from [<80200104>] (ret_from_fork+0x14/0x30) [ 2552.053956][ T30] Exception stack(0xe08e1fb0 to 0xe08e1ff8) [ 2552.054121][ T30] 1fa0: 00000000 00000000 00000000 00000000 [ 2552.054362][ T30] 1fc0: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 [ 2552.054604][ T30] 1fe0: 00000000 00000000 00000000 00000000 00000013 00000000 [ 2552.061376][ T30] r9:00000000 r8:00000000 r7:00000000 r6:00000000 r5:8026e784 r4:850c3100 [ 2552.061785][ T30] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings [ 2552.064460][ T30] NMI backtrace for cpu 0 [ 2552.064927][ T30] CPU: 0 PID: 30 Comm: khungtaskd Not tainted 6.8.0-rc2-syzkaller #0 [ 2552.071316][ T30] Hardware name: ARM-Versatile Express [ 2552.071598][ T30] Backtrace: [ 2552.071846][ T30] [<8183656c>] (dump_backtrace) from [<81836668>] (show_stack+0x18/0x1c) [ 2552.072131][ T30] r7:00000000 r6:00000013 r5:60000093 r4:81fbd330 [ 2552.072311][ T30] [<81836650>] (show_stack) from [<81853b5c>] (dump_stack_lvl+0x48/0x54) [ 2552.072582][ T30] [<81853b14>] (dump_stack_lvl) from [<81853b80>] (dump_stack+0x18/0x1c) [ 2552.072839][ T30] r5:00000000 r4:00000001 [ 2552.072987][ T30] [<81853b68>] (dump_stack) from [<81823998>] (nmi_cpu_backtrace+0x160/0x17c) [ 2552.073253][ T30] [<81823838>] (nmi_cpu_backtrace) from [<81823ae4>] (nmi_trigger_cpumask_backtrace+0x130/0x1d8) [ 2552.073667][ T30] r7:00000000 r6:8260c494 r5:8261a7d8 r4:ffffffff [ 2552.073831][ T30] [<818239b4>] (nmi_trigger_cpumask_backtrace) from [<80210574>] (arch_trigger_cpumask_backtrace+0x18/0x1c) [ 2552.074137][ T30] r9:827d8cdf r8:82894eb8 r7:8260c5ec r6:00007d42 r5:8261adc8 r4:854c452c [ 2552.074342][ T30] [<8021055c>] (arch_trigger_cpumask_backtrace) from [<80347e54>] (watchdog+0x48c/0x59c) [ 2552.074821][ T30] [<803479c8>] (watchdog) from [<8026e888>] (kthread+0x104/0x134) [ 2552.075224][ T30] r10:00000000 r9:df819e58 r8:82e67400 r7:00000000 r6:803479c8 r5:82ee8c00 [ 2552.075768][ T30] r4:82f45900 [ 2552.075964][ T30] [<8026e784>] (kthread) from [<80200104>] (ret_from_fork+0x14/0x30) [ 2552.076210][ T30] Exception stack(0xdf8d9fb0 to 0xdf8d9ff8) [ 2552.076428][ T30] 9fa0: 00000000 00000000 00000000 00000000 [ 2552.076679][ T30] 9fc0: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 [ 2552.076933][ T30] 9fe0: 00000000 00000000 00000000 00000000 00000013 00000000 [ 2552.077166][ T30] r9:00000000 r8:00000000 r7:00000000 r6:00000000 r5:8026e784 r4:82f45900 [ 2552.077909][ T30] Sending NMI from CPU 0 to CPUs 1: [ 2552.078458][ C1] NMI backtrace for cpu 1 [ 2552.078565][ C1] CPU: 1 PID: 22790 Comm: syz-executor.1 Not tainted 6.8.0-rc2-syzkaller #0 [ 2552.078623][ C1] Hardware name: ARM-Versatile Express [ 2552.078655][ C1] PC is at 0x16900 [ 2552.078902][ C1] LR is at 0x16900 [ 2552.078921][ C1] pc : [<00016900>] lr : [<00016900>] psr: 20000010 [ 2552.078941][ C1] sp : 200006d0 ip : 200006d0 fp : 76bb00fc [ 2552.078972][ C1] r10: 003d0f00 r9 : 7ed3f32f r8 : 7ed3f32e [ 2552.079011][ C1] r7 : 00000000 r6 : 00000000 r5 : 00000000 r4 : 00000000 [ 2552.079032][ C1] r3 : 00000000 r2 : 000001b0 r1 : 00000004 r0 : ffffffff [ 2552.079102][ C1] Flags: nzCv IRQs on FIQs on Mode USER_32 ISA ARM Segment none [ 2552.079137][ C1] Control: 30c5387d Table: 859a6580 DAC: 00000000 [ 2552.079166][ C1] Backtrace: invalid frame pointer 0x76bb00fc [ 2552.101548][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 2552.101999][ T30] CPU: 0 PID: 30 Comm: khungtaskd Not tainted 6.8.0-rc2-syzkaller #0 [ 2552.102261][ T30] Hardware name: ARM-Versatile Express [ 2552.102418][ T30] Backtrace: [ 2552.102567][ T30] [<8183656c>] (dump_backtrace) from [<81836668>] (show_stack+0x18/0x1c) [ 2552.102869][ T30] r7:00000000 r6:82622dc4 r5:60000093 r4:81fbd330 [ 2552.103057][ T30] [<81836650>] (show_stack) from [<81853b5c>] (dump_stack_lvl+0x48/0x54) [ 2552.103316][ T30] [<81853b14>] (dump_stack_lvl) from [<81853b80>] (dump_stack+0x18/0x1c) [ 2552.103578][ T30] r5:00000000 r4:8284fd18 [ 2552.103727][ T30] [<81853b68>] (dump_stack) from [<81837110>] (panic+0x120/0x378) [ 2552.103961][ T30] [<81836ff0>] (panic) from [<80347ce0>] (watchdog+0x318/0x59c) [ 2552.104317][ T30] r3:00000000 r2:00000000 r1:00000001 r0:81fbddec [ 2552.104726][ T30] r7:8260c5ec [ 2552.104926][ T30] [<803479c8>] (watchdog) from [<8026e888>] (kthread+0x104/0x134) [ 2552.105442][ T30] r10:00000000 r9:df819e58 r8:82e67400 r7:00000000 r6:803479c8 r5:82ee8c00 [ 2552.105705][ T30] r4:82f45900 [ 2552.105857][ T30] [<8026e784>] (kthread) from [<80200104>] (ret_from_fork+0x14/0x30) [ 2552.106107][ T30] Exception stack(0xdf8d9fb0 to 0xdf8d9ff8) [ 2552.106301][ T30] 9fa0: 00000000 00000000 00000000 00000000 [ 2552.106556][ T30] 9fc0: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 [ 2552.106795][ T30] 9fe0: 00000000 00000000 00000000 00000000 00000013 00000000 [ 2552.107017][ T30] r9:00000000 r8:00000000 r7:00000000 r6:00000000 r5:8026e784 r4:82f45900 [ 2552.107667][ C1] CPU1: stopping [ 2552.107707][ C1] CPU: 1 PID: 27517 Comm: syz-executor.1 Not tainted 6.8.0-rc2-syzkaller #0 [ 2552.107739][ C1] Hardware name: ARM-Versatile Express [ 2552.107751][ C1] Backtrace: frame pointer underflow [ 2552.107807][ C1] [<8183656c>] (dump_backtrace) from [<81836668>] (show_stack+0x18/0x1c) [ 2552.107904][ C1] r7:00000014 r6:81b0f9f0 r5:600001d3 r4:81fbd330 [ 2552.107925][ C1] [<81836650>] (show_stack) from [<81853b5c>] (dump_stack_lvl+0x48/0x54) [ 2552.107962][ C1] [<81853b14>] (dump_stack_lvl) from [<81853b80>] (dump_stack+0x18/0x1c) [ 2552.107994][ C1] r5:00000001 r4:00000004 [ 2552.108006][ C1] [<81853b68>] (dump_stack) from [<8020fb78>] (do_handle_IPI+0x2ac/0x2d8) [ 2552.108059][ C1] [<8020f8cc>] (do_handle_IPI) from [<8020fbc4>] (ipi_handler+0x20/0x28) [ 2552.108099][ C1] r9:7ed3f32f r8:df805f78 r7:00000014 r6:81b0f9f0 r5:82c0cc80 r4:82c96d00 [ 2552.108110][ C1] [<8020fba4>] (ipi_handler) from [<802c5004>] (handle_percpu_devid_irq+0x9c/0x2cc) [ 2552.108136][ C1] [<802c4f68>] (handle_percpu_devid_irq) from [<802be790>] (generic_handle_domain_irq+0x30/0x40) [ 2552.108169][ C1] r10:003d0f00 r9:7ed3f32f r8:00000000 r7:df80a00c r6:824b0bc0 r5:df80a000 [ 2552.108182][ C1] r4:8260cd28 r3:00010000 [ 2552.108189][ C1] [<802be760>] (generic_handle_domain_irq) from [<802011c4>] (gic_handle_irq+0x68/0x7c) [ 2552.108211][ C1] [<8020115c>] (gic_handle_irq) from [<81854420>] (generic_handle_arch_irq+0x60/0x80) [ 2552.108240][ C1] r7:dfaf5fb0 r6:8213c804 r5:82178388 r4:824b2224 [ 2552.108248][ C1] [<818543c0>] (generic_handle_arch_irq) from [<81806640>] (call_with_stack+0x1c/0x20) [ 2552.108282][ C1] r9:7ed3f32f r8:824a8044 r7:84e29800 r6:ffffffff r5:20000010 r4:00016900 [ 2552.108293][ C1] [<81806624>] (call_with_stack) from [<80200eb4>] (__irq_usr+0x74/0x80) [ 2552.108314][ C1] Exception stack(0xdfaf5fb0 to 0xdfaf5ff8) [ 2552.108331][ C1] 5fa0: ffffffff 00000004 000001b0 00000000 [ 2552.108352][ C1] 5fc0: 00000000 00000000 00000000 00000000 7ed3f32e 7ed3f32f 003d0f00 76bb00fc [ 2552.108379][ C1] 5fe0: 20000440 20000440 00016900 00016900 20000010 ffffffff [ 2552.113956][ T30] Rebooting in 86400 seconds.. VM DIAGNOSIS: 22:11:25 Registers: info registers vcpu 0 CPU#0 R00=84271440 R01=00000031 R02=eb165000 R03=eb165018 R04=828521b1 R05=84271440 R06=8097876c R07=828521cf R08=828521ac R09=00000024 R10=60000113 R11=df8d9c88 R12=00000002 R13=df8d9c7c R14=82749388 R15=8097877c PSR=80000193 N--- A S svc32 s00=00000000 s01=00000000 d00=0000000000000000 s02=00000000 s03=00000000 d01=0000000000000000 s04=00000000 s05=00000000 d02=0000000000000000 s06=00000000 s07=00000000 d03=0000000000000000 s08=00000000 s09=00000000 d04=0000000000000000 s10=00000000 s11=00000000 d05=0000000000000000 s12=00000000 s13=00000000 d06=0000000000000000 s14=00000000 s15=00000000 d07=0000000000000000 s16=00000000 s17=00000000 d08=0000000000000000 s18=00000000 s19=00000000 d09=0000000000000000 s20=00000000 s21=00000000 d10=0000000000000000 s22=00000000 s23=00000000 d11=0000000000000000 s24=00000000 s25=00000000 d12=0000000000000000 s26=00000000 s27=00000000 d13=0000000000000000 s28=00000000 s29=00000000 d14=0000000000000000 s30=00000000 s31=00000000 d15=0000000000000000 s32=00000000 s33=00000000 d16=0000000000000000 s34=00000000 s35=00000000 d17=0000000000000000 s36=00000000 s37=00000000 d18=0000000000000000 s38=00000000 s39=00000000 d19=0000000000000000 s40=00000000 s41=00000000 d20=0000000000000000 s42=00000000 s43=00000000 d21=0000000000000000 s44=00000000 s45=00000000 d22=0000000000000000 s46=00000000 s47=00000000 d23=0000000000000000 s48=00000000 s49=00000000 d24=0000000000000000 s50=00000000 s51=00000000 d25=0000000000000000 s52=00000000 s53=00000000 d26=0000000000000000 s54=00000000 s55=00000000 d27=0000000000000000 s56=00000000 s57=00000000 d28=0000000000000000 s58=00000000 s59=00000000 d29=0000000000000000 s60=00000000 s61=00000000 d30=0000000000000000 s62=00000000 s63=00000000 d31=0000000000000000 FPSCR: 00000000 info registers vcpu 1 CPU#1 R00=827a5d80 R01=8213c804 R02=5b932000 R03=818558d4 R04=82893380 R05=0007c8da R06=0007c8da R07=ddddbf38 R08=f372e600 R09=00000251 R10=8468c800 R11=df805e24 R12=df805e28 R13=df805e18 R14=8115a9d4 R15=818558e4 PSR=60000193 -ZC- A S svc32 s00=00000000 s01=00000000 d00=0000000000000000 s02=00000000 s03=00000000 d01=0000000000000000 s04=00000000 s05=00000000 d02=0000000000000000 s06=00000000 s07=00000000 d03=0000000000000000 s08=00000000 s09=00000000 d04=0000000000000000 s10=00000000 s11=00000000 d05=0000000000000000 s12=00000000 s13=00000000 d06=0000000000000000 s14=00000000 s15=00000000 d07=0000000000000000 s16=00000000 s17=00000000 d08=0000000000000000 s18=00000000 s19=00000000 d09=0000000000000000 s20=00000000 s21=00000000 d10=0000000000000000 s22=00000000 s23=00000000 d11=0000000000000000 s24=00000000 s25=00000000 d12=0000000000000000 s26=00000000 s27=00000000 d13=0000000000000000 s28=00000000 s29=00000000 d14=0000000000000000 s30=00000000 s31=00000000 d15=0000000000000000 s32=00000000 s33=00000000 d16=0000000000000000 s34=00000000 s35=00000000 d17=0000000000000000 s36=00000000 s37=00000000 d18=0000000000000000 s38=00000000 s39=00000000 d19=0000000000000000 s40=00000000 s41=00000000 d20=0000000000000000 s42=00000000 s43=00000000 d21=0000000000000000 s44=00000000 s45=00000000 d22=0000000000000000 s46=00000000 s47=00000000 d23=0000000000000000 s48=00000000 s49=00000000 d24=0000000000000000 s50=00000000 s51=00000000 d25=0000000000000000 s52=00000000 s53=00000000 d26=0000000000000000 s54=00000000 s55=00000000 d27=0000000000000000 s56=00000000 s57=00000000 d28=0000000000000000 s58=00000000 s59=00000000 d29=0000000000000000 s60=00000000 s61=00000000 d30=0000000000000000 s62=00000000 s63=00000000 d31=0000000000000000 FPSCR: 00000000