0000002600)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000340)='`', 0x1}], 0x1}}], 0x1, 0x4000)

13:44:31 executing program 2:
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast2}, 0x10)
sendmmsg$inet(r0, &(0x7f0000000440)=[{{&(0x7f0000000000)={0x2, 0x4e24, @empty}, 0x10, 0x0}}], 0x1, 0x24040890)
ioctl$sock_SIOCOUTQ(r0, 0x5411, &(0x7f0000000180))

13:44:31 executing program 4:
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x5, [@typedef={0x3}, @int={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3}]}, {0x0, [0x0, 0x0, 0x2e]}}, 0x0, 0x39, 0x0, 0x1}, 0x20)

13:44:31 executing program 5:
r0 = syz_open_dev$loop(&(0x7f0000002fc0), 0x0, 0x0)
ioctl$BLKIOOPT(r0, 0x127e, &(0x7f0000003340))

13:44:31 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c)
setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, &(0x7f0000000280)='wg2\x00', 0x4)
sendmsg$inet6(r0, 0x0, 0x0)
sendmmsg$inet6(r0, &(0x7f0000002600)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000340)='`', 0x1}], 0x1}}], 0x1, 0x4000)

13:44:32 executing program 1:
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f000000c380)='/proc/crypto\x00', 0x0, 0x0)
read$FUSE(r3, &(0x7f0000000200)={0x2020}, 0x2020)
execve(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000280)=[0x0, 0x0], &(0x7f0000000380)=[&(0x7f00000002c0)='*$%}\xce*\x00', &(0x7f0000000300)='\x00'])

13:44:32 executing program 3:
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast2}, 0x10)
sendmmsg$inet(r0, &(0x7f0000000440)=[{{&(0x7f0000000000)={0x2, 0x4e24, @empty}, 0x10, 0x0}}], 0x1, 0x24040890)
sendto$inet(r0, 0x0, 0x0, 0x2000040, 0x0, 0x0)

13:44:32 executing program 5:
r0 = syz_open_dev$loop(&(0x7f0000002fc0), 0x0, 0x0)
ioctl$BLKIOOPT(r0, 0x127e, &(0x7f0000003340))

13:44:32 executing program 4:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x44}, 0xd}, 0x1c)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x22, &(0x7f0000000000)=0x5, 0x4)
setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000100)='scalable\x00', 0x9)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
r2 = accept4(r0, &(0x7f00000001c0)=@isdn, &(0x7f0000000140)=0x80, 0x1000)
setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000280), 0x4)
sendmsg$nl_route_sched(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=@gettaction={0x60, 0x32, 0x800, 0x70bd29, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x4c, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x80000001}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0xc, 0x11, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xffffff00}}, {0xc, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0xa, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x80000001}}, {0xc, 0xc, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x20040000}, 0x40048c1)
setsockopt$inet6_IPV6_DSTOPTS(0xffffffffffffffff, 0x29, 0x3b, &(0x7f0000000340)={0x0, 0x1, '\x00', [@jumbo={0xc2, 0x4, 0x4}, @padn={0x1, 0x1, [0x0]}, @generic]}, 0x18)
write$binfmt_script(r1, &(0x7f0000000280)=ANY=[], 0xfffffd9d)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR_DATA={0x10, 0x5, 0x0, 0x1, [{0xa}]}]}}}]}, 0x44}}, 0x0)
sendfile(r3, r1, 0x0, 0x8000002b)

13:44:32 executing program 2:
r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
socket(0x0, 0x0, 0x0)
r1 = epoll_create1(0x0)
epoll_wait(r1, &(0x7f0000000100)=[{}], 0x1, 0x10001)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000))

13:44:32 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c)
setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, &(0x7f0000000280)='wg2\x00', 0x4)
sendmsg$inet6(r0, 0x0, 0x0)
sendmmsg$inet6(r0, &(0x7f0000002600)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000340)='`', 0x1}], 0x1}}], 0x1, 0x4000)

13:44:32 executing program 5:
ioctl$BLKIOOPT(0xffffffffffffffff, 0x127e, &(0x7f0000003340))

13:44:32 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c)
setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, &(0x7f0000000280)='wg2\x00', 0x4)
sendmsg$inet6(r0, 0x0, 0x0)
sendmmsg$inet6(r0, &(0x7f0000002600)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000340)="60cb", 0x2}], 0x1}}], 0x1, 0x0)

13:44:32 executing program 3:
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast2}, 0x10)
sendmmsg$inet(r0, &(0x7f0000000440)=[{{&(0x7f0000000000)={0x2, 0x4e24, @empty}, 0x10, 0x0}}], 0x1, 0x24040890)
sendto$inet(r0, 0x0, 0x0, 0x2000040, 0x0, 0x0)

13:44:32 executing program 5:
ioctl$BLKIOOPT(0xffffffffffffffff, 0x127e, &(0x7f0000003340))

13:44:32 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c)
setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, &(0x7f0000000280)='wg2\x00', 0x4)
sendmsg$inet6(r0, 0x0, 0x0)
sendmmsg$inet6(r0, &(0x7f0000002600)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000340)="60cb", 0x2}], 0x1}}], 0x1, 0x0)

13:44:33 executing program 3:
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast2}, 0x10)
sendmmsg$inet(r0, &(0x7f0000000440)=[{{&(0x7f0000000000)={0x2, 0x4e24, @empty}, 0x10, 0x0}}], 0x1, 0x24040890)
sendto$inet(r0, 0x0, 0x0, 0x2000040, 0x0, 0x0)

13:44:34 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x8d}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f000000c380)='/proc/crypto\x00', 0x0, 0x0)
read$FUSE(r3, &(0x7f0000000200)={0x2020}, 0x2020)
execve(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000280)=[0x0, 0x0], &(0x7f0000000380)=[&(0x7f00000002c0)='*$%}\xce*\x00', &(0x7f0000000300)='\x00'])

13:44:34 executing program 5:
ioctl$BLKIOOPT(0xffffffffffffffff, 0x127e, &(0x7f0000003340))

13:44:34 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c)
setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, &(0x7f0000000280)='wg2\x00', 0x4)
sendmsg$inet6(r0, 0x0, 0x0)
sendmmsg$inet6(r0, &(0x7f0000002600)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000340)="60cb", 0x2}], 0x1}}], 0x1, 0x0)

13:44:34 executing program 3:
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast2}, 0x10)
sendmmsg$inet(r0, &(0x7f0000000440)=[{{&(0x7f0000000000)={0x2, 0x4e24, @empty}, 0x10, 0x0}}], 0x1, 0x24040890)
sendto$inet(r0, 0x0, 0x0, 0x2000040, 0x0, 0x0)

13:44:34 executing program 2:
syz_genetlink_get_family_id$nl802154(&(0x7f0000000240), 0xffffffffffffffff)
syz_genetlink_get_family_id$tipc2(&(0x7f00000009c0), 0xffffffffffffffff)

13:44:34 executing program 4:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000100), r1)
sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r2, 0x1, 0x0, 0x0, {0x2}}, 0x14}}, 0x0)

13:44:34 executing program 2:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nbd(&(0x7f00000003c0), 0xffffffffffffffff)
pipe(&(0x7f0000000580)={<r2=>0xffffffffffffffff})
sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8, 0x1, r2}]}]}, 0x2c}}, 0x0)

13:44:34 executing program 5:
r0 = syz_open_dev$loop(0x0, 0x0, 0x0)
ioctl$BLKIOOPT(r0, 0x127e, &(0x7f0000003340))

13:44:34 executing program 3:
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast2}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x2000040, 0x0, 0x0)

13:44:34 executing program 4:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000100), r1)
sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r2, 0x1, 0x0, 0x0, {0x9}}, 0x14}}, 0x0)

13:44:34 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_SET_FLAGS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x18, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x4}]}, 0x18}}, 0x0)

13:44:34 executing program 5:
r0 = syz_open_dev$loop(0x0, 0x0, 0x0)
ioctl$BLKIOOPT(r0, 0x127e, &(0x7f0000003340))

13:44:35 executing program 3:
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast2}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x2000040, 0x0, 0x0)

13:44:35 executing program 4:
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0x6, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0xe, 0x0}, 0x70)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

13:44:35 executing program 0:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f000000e840)={0x18, 0x3, &(0x7f000000e5c0)=@framed, &(0x7f000000e640)='GPL\x00', 0xb6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x90)

13:44:35 executing program 2:
socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0)
getsockname$ax25(0xffffffffffffffff, 0x0, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0x3, &(0x7f00000003c0)=@framed, &(0x7f0000000400)='syzkaller\x00', 0x5, 0x66, &(0x7f0000000440)=""/102, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000004c0), 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20}, 0x90)
getpid()

13:44:35 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x8d}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f000000c380)='/proc/crypto\x00', 0x0, 0x0)
read$FUSE(r3, &(0x7f0000000200)={0x2020}, 0x2020)
execve(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000280)=[0x0, 0x0], &(0x7f0000000380)=[&(0x7f00000002c0)='*$%}\xce*\x00', &(0x7f0000000300)='\x00'])

13:44:35 executing program 5:
r0 = syz_open_dev$loop(0x0, 0x0, 0x0)
ioctl$BLKIOOPT(r0, 0x127e, &(0x7f0000003340))

13:44:35 executing program 3:
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast2}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x2000040, 0x0, 0x0)

13:44:35 executing program 2:
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
syz_genetlink_get_family_id$tipc(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$NFT_BATCH(r1, &(0x7f00000015c0)={&(0x7f0000000300), 0xc, &(0x7f0000001580)={&(0x7f00000014c0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_PAYLOAD_CSUM_OFFSET={0x8, 0x7, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}]}, @NFT_MSG_DELSETELEM={0x1c, 0xe, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}]}], {0x14}}, 0x94}, 0x1, 0x0, 0x0, 0x1}, 0x1)
getsockname$packet(0xffffffffffffffff, &(0x7f0000001340), &(0x7f0000001380)=0x14)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r1, 0x0, 0x0)
sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, 0x0, 0x0)
getsockname(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0)
bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001400)={&(0x7f0000000140), 0xc, &(0x7f0000000340)={&(0x7f0000000f00)=@newqdisc={0x1b8, 0x24, 0x0, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0xc}, {0x10, 0xffff}, {0xf, 0xfff2}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_RATE={0x6, 0x5, {0x8}}, @qdisc_kind_options=@q_choke={{0xa}, {0x18, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x4e0, 0x2, 0x6, 0x0, 0x1e, 0x2}}]}}, @qdisc_kind_options=@q_codel={{0xa}, {0x54, 0x2, [@TCA_CODEL_TARGET={0x8}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x4}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_LIMIT={0x8, 0x2, 0x2}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x80}, @TCA_CODEL_TARGET={0x8, 0x1, 0xb9}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_INTERVAL={0x8, 0x3, 0x7}, @TCA_CODEL_LIMIT={0x8, 0x2, 0x5}]}}, @TCA_STAB={0xf8, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x8, 0xc000, 0x9, 0x1, 0x80000001, 0x4, 0xa}}, {0x18, 0x2, [0x3, 0x4, 0x3, 0xff, 0x200, 0xfe01, 0x7, 0x8, 0x0, 0x2]}}, {{0x1c, 0x1, {0x0, 0x20, 0x1, 0xfc000, 0x1}}, {0x4}}, {{0x1c, 0x1, {0x3, 0x11, 0x100, 0x5, 0x0, 0x2dd, 0x7fff, 0x4}}, {0xc, 0x2, [0x6, 0x100, 0x2, 0x71]}}, {{0x1c, 0x1, {0x0, 0x40, 0x5, 0x3, 0x2}}, {0x4}}, {{0x1c, 0x1, {0x4, 0x8, 0x1ff, 0x3ff, 0x2, 0x5, 0x9, 0x5}}, {0xe, 0x2, [0x1, 0x1, 0xb41, 0x0, 0x8]}}, {{0x1c, 0x1, {0x9, 0x3f, 0x4, 0x3, 0x0, 0x4, 0x9, 0x5}}, {0xe, 0x2, [0x0, 0x0, 0x5ca, 0xfff, 0xfffb]}}]}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x81}]}, 0x1b8}, 0x1, 0x0, 0x0, 0x20000110}, 0x800)
connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10)
writev(r2, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1)
recvmmsg(r2, &(0x7f0000003e40)=[{{0x0, 0x3, 0x0, 0x0, &(0x7f00000035c0)=""/241, 0xf1}}, {{&(0x7f00000036c0)=@un=@abs, 0x80, &(0x7f0000003780)=[{&(0x7f0000003740)=""/4, 0x7ffff}], 0x1, &(0x7f00000037c0)=""/236, 0xec}}, {{0x0, 0x0, &(0x7f0000003bc0)=[{0x0, 0xe00000000000000}, {&(0x7f0000003a00)=""/190, 0xbe}, {&(0x7f0000003ac0)=""/131, 0x83}, {0x0}], 0x4, &(0x7f0000003c00)=""/73, 0x49}}, {{&(0x7f0000003c80)=@pppol2tp={0x18, 0x1, {0x0, <r3=>0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, 0x0, 0x0, &(0x7f0000003e00)=""/48, 0x30}}], 0x4, 0x40000121, 0x0)
shutdown(r2, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f0000000400)={r0})

13:44:35 executing program 5:
syz_open_dev$loop(&(0x7f0000002fc0), 0x0, 0x0)
ioctl$BLKIOOPT(0xffffffffffffffff, 0x127e, &(0x7f0000003340))

13:44:35 executing program 4:
r0 = socket$rxrpc(0x21, 0x2, 0x2)
sendto$rxrpc(r0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x24)

13:44:35 executing program 0:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x0, 0x1, &(0x7f0000000980)=@raw=[@exit], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x90)

13:44:35 executing program 3:
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
sendmmsg$inet(r0, &(0x7f0000000440)=[{{&(0x7f0000000000)={0x2, 0x4e24, @empty}, 0x10, 0x0}}], 0x1, 0x24040890)
sendto$inet(r0, 0x0, 0x0, 0x2000040, 0x0, 0x0)

13:44:35 executing program 4:
bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=@bloom_filter, 0x48)

13:44:35 executing program 5:
syz_open_dev$loop(&(0x7f0000002fc0), 0x0, 0x0)
ioctl$BLKIOOPT(0xffffffffffffffff, 0x127e, &(0x7f0000003340))

13:44:35 executing program 0:
r0 = getpgid(0x0)
syz_clone3(&(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000380)=[r0], 0x1}, 0x58)

13:44:35 executing program 3:
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
sendmmsg$inet(r0, &(0x7f0000000440)=[{{&(0x7f0000000000)={0x2, 0x4e24, @empty}, 0x10, 0x0}}], 0x1, 0x24040890)
sendto$inet(r0, 0x0, 0x0, 0x2000040, 0x0, 0x0)

13:44:36 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x8d}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f000000c380)='/proc/crypto\x00', 0x0, 0x0)
read$FUSE(r3, &(0x7f0000000200)={0x2020}, 0x2020)
execve(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000280)=[0x0, 0x0], &(0x7f0000000380)=[&(0x7f00000002c0)='*$%}\xce*\x00', &(0x7f0000000300)='\x00'])

13:44:36 executing program 4:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000180)={{0x0, 0x2}})
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x54a3, 0x0)

13:44:36 executing program 5:
syz_open_dev$loop(&(0x7f0000002fc0), 0x0, 0x0)
ioctl$BLKIOOPT(0xffffffffffffffff, 0x127e, &(0x7f0000003340))

13:44:36 executing program 3:
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
sendmmsg$inet(r0, &(0x7f0000000440)=[{{&(0x7f0000000000)={0x2, 0x4e24, @empty}, 0x10, 0x0}}], 0x1, 0x24040890)
sendto$inet(r0, 0x0, 0x0, 0x2000040, 0x0, 0x0)

13:44:36 executing program 0:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x0)
ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0f85403, &(0x7f0000000140)={{}, 0x0, 0x0, 'id0\x00', 'timer0\x00'})

13:44:36 executing program 2:
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
syz_genetlink_get_family_id$tipc(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$NFT_BATCH(r1, &(0x7f00000015c0)={&(0x7f0000000300), 0xc, &(0x7f0000001580)={&(0x7f00000014c0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_PAYLOAD_CSUM_OFFSET={0x8, 0x7, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}]}, @NFT_MSG_DELSETELEM={0x1c, 0xe, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}]}], {0x14}}, 0x94}, 0x1, 0x0, 0x0, 0x1}, 0x1)
getsockname$packet(0xffffffffffffffff, &(0x7f0000001340), &(0x7f0000001380)=0x14)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r1, 0x0, 0x0)
sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, 0x0, 0x0)
getsockname(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0)
bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001400)={&(0x7f0000000140), 0xc, &(0x7f0000000340)={&(0x7f0000000f00)=@newqdisc={0x1b8, 0x24, 0x0, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0xc}, {0x10, 0xffff}, {0xf, 0xfff2}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_RATE={0x6, 0x5, {0x8}}, @qdisc_kind_options=@q_choke={{0xa}, {0x18, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x4e0, 0x2, 0x6, 0x0, 0x1e, 0x2}}]}}, @qdisc_kind_options=@q_codel={{0xa}, {0x54, 0x2, [@TCA_CODEL_TARGET={0x8}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x4}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_LIMIT={0x8, 0x2, 0x2}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x80}, @TCA_CODEL_TARGET={0x8, 0x1, 0xb9}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_INTERVAL={0x8, 0x3, 0x7}, @TCA_CODEL_LIMIT={0x8, 0x2, 0x5}]}}, @TCA_STAB={0xf8, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x8, 0xc000, 0x9, 0x1, 0x80000001, 0x4, 0xa}}, {0x18, 0x2, [0x3, 0x4, 0x3, 0xff, 0x200, 0xfe01, 0x7, 0x8, 0x0, 0x2]}}, {{0x1c, 0x1, {0x0, 0x20, 0x1, 0xfc000, 0x1}}, {0x4}}, {{0x1c, 0x1, {0x3, 0x11, 0x100, 0x5, 0x0, 0x2dd, 0x7fff, 0x4}}, {0xc, 0x2, [0x6, 0x100, 0x2, 0x71]}}, {{0x1c, 0x1, {0x0, 0x40, 0x5, 0x3, 0x2}}, {0x4}}, {{0x1c, 0x1, {0x4, 0x8, 0x1ff, 0x3ff, 0x2, 0x5, 0x9, 0x5}}, {0xe, 0x2, [0x1, 0x1, 0xb41, 0x0, 0x8]}}, {{0x1c, 0x1, {0x9, 0x3f, 0x4, 0x3, 0x0, 0x4, 0x9, 0x5}}, {0xe, 0x2, [0x0, 0x0, 0x5ca, 0xfff, 0xfffb]}}]}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x81}]}, 0x1b8}, 0x1, 0x0, 0x0, 0x20000110}, 0x800)
connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10)
writev(r2, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1)
recvmmsg(r2, &(0x7f0000003e40)=[{{0x0, 0x3, 0x0, 0x0, &(0x7f00000035c0)=""/241, 0xf1}}, {{&(0x7f00000036c0)=@un=@abs, 0x80, &(0x7f0000003780)=[{&(0x7f0000003740)=""/4, 0x7ffff}], 0x1, &(0x7f00000037c0)=""/236, 0xec}}, {{0x0, 0x0, &(0x7f0000003bc0)=[{0x0, 0xe00000000000000}, {&(0x7f0000003a00)=""/190, 0xbe}, {&(0x7f0000003ac0)=""/131, 0x83}, {0x0}], 0x4, &(0x7f0000003c00)=""/73, 0x49}}, {{&(0x7f0000003c80)=@pppol2tp={0x18, 0x1, {0x0, <r3=>0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, 0x0, 0x0, &(0x7f0000003e00)=""/48, 0x30}}], 0x4, 0x40000121, 0x0)
shutdown(r2, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f0000000400)={r0})

13:44:37 executing program 0:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x1}})
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x5423, 0x0)
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x5422)
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2)

13:44:37 executing program 4:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NET_DM_CMD_START(r0, &(0x7f00000003c0)={&(0x7f0000000300), 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x14}, 0x14}}, 0x0)

13:44:37 executing program 5:
r0 = syz_open_dev$loop(&(0x7f0000002fc0), 0x0, 0x0)
ioctl$BLKIOOPT(r0, 0x127e, 0x0)

13:44:37 executing program 3:
bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e24, @multicast2}, 0x10)
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000440)=[{{&(0x7f0000000000)={0x2, 0x4e24, @empty}, 0x10, 0x0}}], 0x1, 0x24040890)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x2000040, 0x0, 0x0)

13:44:37 executing program 5:
r0 = syz_open_dev$loop(&(0x7f0000002fc0), 0x0, 0x0)
ioctl$BLKIOOPT(r0, 0x127e, 0x0)

13:44:37 executing program 4:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000100), 0x0)
ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f0000000140)={0x2, 0x0, 0xfffffffc})

13:44:38 executing program 3:
bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e24, @multicast2}, 0x10)
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000440)=[{{&(0x7f0000000000)={0x2, 0x4e24, @empty}, 0x10, 0x0}}], 0x1, 0x24040890)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x2000040, 0x0, 0x0)

13:44:38 executing program 0:
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0xa, &(0x7f00000000c0), &(0x7f0000000180)=0x98)

13:44:38 executing program 5:
r0 = syz_open_dev$loop(&(0x7f0000002fc0), 0x0, 0x0)
ioctl$BLKIOOPT(r0, 0x127e, 0x0)

13:44:38 executing program 4:
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
connect$inet(r0, &(0x7f0000000080)={0x10, 0x2}, 0x10)

13:44:38 executing program 2:
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
syz_genetlink_get_family_id$tipc(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$NFT_BATCH(r1, &(0x7f00000015c0)={&(0x7f0000000300), 0xc, &(0x7f0000001580)={&(0x7f00000014c0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_PAYLOAD_CSUM_OFFSET={0x8, 0x7, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}]}, @NFT_MSG_DELSETELEM={0x1c, 0xe, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}]}], {0x14}}, 0x94}, 0x1, 0x0, 0x0, 0x1}, 0x1)
getsockname$packet(0xffffffffffffffff, &(0x7f0000001340), &(0x7f0000001380)=0x14)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r1, 0x0, 0x0)
sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, 0x0, 0x0)
getsockname(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0)
bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001400)={&(0x7f0000000140), 0xc, &(0x7f0000000340)={&(0x7f0000000f00)=@newqdisc={0x1b8, 0x24, 0x0, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0xc}, {0x10, 0xffff}, {0xf, 0xfff2}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_RATE={0x6, 0x5, {0x8}}, @qdisc_kind_options=@q_choke={{0xa}, {0x18, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x4e0, 0x2, 0x6, 0x0, 0x1e, 0x2}}]}}, @qdisc_kind_options=@q_codel={{0xa}, {0x54, 0x2, [@TCA_CODEL_TARGET={0x8}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x4}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_LIMIT={0x8, 0x2, 0x2}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x80}, @TCA_CODEL_TARGET={0x8, 0x1, 0xb9}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_INTERVAL={0x8, 0x3, 0x7}, @TCA_CODEL_LIMIT={0x8, 0x2, 0x5}]}}, @TCA_STAB={0xf8, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x8, 0xc000, 0x9, 0x1, 0x80000001, 0x4, 0xa}}, {0x18, 0x2, [0x3, 0x4, 0x3, 0xff, 0x200, 0xfe01, 0x7, 0x8, 0x0, 0x2]}}, {{0x1c, 0x1, {0x0, 0x20, 0x1, 0xfc000, 0x1}}, {0x4}}, {{0x1c, 0x1, {0x3, 0x11, 0x100, 0x5, 0x0, 0x2dd, 0x7fff, 0x4}}, {0xc, 0x2, [0x6, 0x100, 0x2, 0x71]}}, {{0x1c, 0x1, {0x0, 0x40, 0x5, 0x3, 0x2}}, {0x4}}, {{0x1c, 0x1, {0x4, 0x8, 0x1ff, 0x3ff, 0x2, 0x5, 0x9, 0x5}}, {0xe, 0x2, [0x1, 0x1, 0xb41, 0x0, 0x8]}}, {{0x1c, 0x1, {0x9, 0x3f, 0x4, 0x3, 0x0, 0x4, 0x9, 0x5}}, {0xe, 0x2, [0x0, 0x0, 0x5ca, 0xfff, 0xfffb]}}]}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x81}]}, 0x1b8}, 0x1, 0x0, 0x0, 0x20000110}, 0x800)
connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10)
writev(r2, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1)
recvmmsg(r2, &(0x7f0000003e40)=[{{0x0, 0x3, 0x0, 0x0, &(0x7f00000035c0)=""/241, 0xf1}}, {{&(0x7f00000036c0)=@un=@abs, 0x80, &(0x7f0000003780)=[{&(0x7f0000003740)=""/4, 0x7ffff}], 0x1, &(0x7f00000037c0)=""/236, 0xec}}, {{0x0, 0x0, &(0x7f0000003bc0)=[{0x0, 0xe00000000000000}, {&(0x7f0000003a00)=""/190, 0xbe}, {&(0x7f0000003ac0)=""/131, 0x83}, {0x0}], 0x4, &(0x7f0000003c00)=""/73, 0x49}}, {{&(0x7f0000003c80)=@pppol2tp={0x18, 0x1, {0x0, <r3=>0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, 0x0, 0x0, &(0x7f0000003e00)=""/48, 0x30}}], 0x4, 0x40000121, 0x0)
shutdown(r2, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f0000000400)={r0})

13:44:38 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f000000c380)='/proc/crypto\x00', 0x0, 0x0)
read$FUSE(r3, &(0x7f0000000200)={0x2020}, 0x2020)
execve(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000280)=[0x0, 0x0], &(0x7f0000000380)=[&(0x7f00000002c0)='*$%}\xce*\x00', &(0x7f0000000300)='\x00'])

13:44:38 executing program 4:
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
connect$inet(r0, &(0x7f0000000080)={0x10, 0x2}, 0x10)
setsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x1, &(0x7f0000000100)={0x0, 0x0, 0xffffff7f}, 0x10)

13:44:38 executing program 3:
bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e24, @multicast2}, 0x10)
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000440)=[{{&(0x7f0000000000)={0x2, 0x4e24, @empty}, 0x10, 0x0}}], 0x1, 0x24040890)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x2000040, 0x0, 0x0)

13:44:38 executing program 0:
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
connect$inet(r0, &(0x7f0000000080)={0x10, 0x2}, 0x10)
setsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x1, &(0x7f0000000100), 0x10)

13:44:38 executing program 5:
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
connect$inet(r0, &(0x7f0000000080)={0x10, 0x2}, 0x10)
getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0xa, &(0x7f00000000c0), &(0x7f0000000180)=0x98)

13:44:38 executing program 4:
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x23, &(0x7f00000001c0), &(0x7f0000000280)=0x8c)

13:44:38 executing program 3:
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e24, @multicast2}, 0x10)
sendmmsg$inet(r0, &(0x7f0000000440)=[{{&(0x7f0000000000)={0x2, 0x4e24, @empty}, 0x10, 0x0}}], 0x1, 0x24040890)
sendto$inet(r0, 0x0, 0x0, 0x2000040, 0x0, 0x0)

13:44:38 executing program 5:
r0 = syz_open_dev$vcsn(&(0x7f00000002c0), 0x0, 0x0)
mmap$xdp(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x5, 0x10, r0, 0x0)

13:44:38 executing program 0:
bpf$BPF_PROG_QUERY(0xe, &(0x7f00000040c0)={@cgroup, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)

13:44:38 executing program 3:
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e24, @multicast2}, 0x10)
sendmmsg$inet(r0, &(0x7f0000000440)=[{{&(0x7f0000000000)={0x2, 0x4e24, @empty}, 0x10, 0x0}}], 0x1, 0x24040890)
sendto$inet(r0, 0x0, 0x0, 0x2000040, 0x0, 0x0)

13:44:38 executing program 4:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ieee802154(&(0x7f0000001180), r0)

13:44:39 executing program 2:
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
syz_genetlink_get_family_id$tipc(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$NFT_BATCH(r1, &(0x7f00000015c0)={&(0x7f0000000300), 0xc, &(0x7f0000001580)={&(0x7f00000014c0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_PAYLOAD_CSUM_OFFSET={0x8, 0x7, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}]}, @NFT_MSG_DELSETELEM={0x1c, 0xe, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}]}], {0x14}}, 0x94}, 0x1, 0x0, 0x0, 0x1}, 0x1)
getsockname$packet(0xffffffffffffffff, &(0x7f0000001340), &(0x7f0000001380)=0x14)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r1, 0x0, 0x0)
sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, 0x0, 0x0)
getsockname(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0)
bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001400)={&(0x7f0000000140), 0xc, &(0x7f0000000340)={&(0x7f0000000f00)=@newqdisc={0x1b8, 0x24, 0x0, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0xc}, {0x10, 0xffff}, {0xf, 0xfff2}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_RATE={0x6, 0x5, {0x8}}, @qdisc_kind_options=@q_choke={{0xa}, {0x18, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x4e0, 0x2, 0x6, 0x0, 0x1e, 0x2}}]}}, @qdisc_kind_options=@q_codel={{0xa}, {0x54, 0x2, [@TCA_CODEL_TARGET={0x8}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x4}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_LIMIT={0x8, 0x2, 0x2}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x80}, @TCA_CODEL_TARGET={0x8, 0x1, 0xb9}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_INTERVAL={0x8, 0x3, 0x7}, @TCA_CODEL_LIMIT={0x8, 0x2, 0x5}]}}, @TCA_STAB={0xf8, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x8, 0xc000, 0x9, 0x1, 0x80000001, 0x4, 0xa}}, {0x18, 0x2, [0x3, 0x4, 0x3, 0xff, 0x200, 0xfe01, 0x7, 0x8, 0x0, 0x2]}}, {{0x1c, 0x1, {0x0, 0x20, 0x1, 0xfc000, 0x1}}, {0x4}}, {{0x1c, 0x1, {0x3, 0x11, 0x100, 0x5, 0x0, 0x2dd, 0x7fff, 0x4}}, {0xc, 0x2, [0x6, 0x100, 0x2, 0x71]}}, {{0x1c, 0x1, {0x0, 0x40, 0x5, 0x3, 0x2}}, {0x4}}, {{0x1c, 0x1, {0x4, 0x8, 0x1ff, 0x3ff, 0x2, 0x5, 0x9, 0x5}}, {0xe, 0x2, [0x1, 0x1, 0xb41, 0x0, 0x8]}}, {{0x1c, 0x1, {0x9, 0x3f, 0x4, 0x3, 0x0, 0x4, 0x9, 0x5}}, {0xe, 0x2, [0x0, 0x0, 0x5ca, 0xfff, 0xfffb]}}]}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x81}]}, 0x1b8}, 0x1, 0x0, 0x0, 0x20000110}, 0x800)
connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10)
writev(r2, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1)
recvmmsg(r2, &(0x7f0000003e40)=[{{0x0, 0x3, 0x0, 0x0, &(0x7f00000035c0)=""/241, 0xf1}}, {{&(0x7f00000036c0)=@un=@abs, 0x80, &(0x7f0000003780)=[{&(0x7f0000003740)=""/4, 0x7ffff}], 0x1, &(0x7f00000037c0)=""/236, 0xec}}, {{0x0, 0x0, &(0x7f0000003bc0)=[{0x0, 0xe00000000000000}, {&(0x7f0000003a00)=""/190, 0xbe}, {&(0x7f0000003ac0)=""/131, 0x83}, {0x0}], 0x4, &(0x7f0000003c00)=""/73, 0x49}}, {{&(0x7f0000003c80)=@pppol2tp={0x18, 0x1, {0x0, <r3=>0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, 0x0, 0x0, &(0x7f0000003e00)=""/48, 0x30}}], 0x4, 0x40000121, 0x0)
shutdown(r2, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f0000000400)={r0})

13:44:40 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f000000c380)='/proc/crypto\x00', 0x0, 0x0)
read$FUSE(r3, &(0x7f0000000200)={0x2020}, 0x2020)
execve(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000280)=[0x0, 0x0], &(0x7f0000000380)=[&(0x7f00000002c0)='*$%}\xce*\x00', &(0x7f0000000300)='\x00'])

13:44:40 executing program 3:
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e24, @multicast2}, 0x10)
sendmmsg$inet(r0, &(0x7f0000000440)=[{{&(0x7f0000000000)={0x2, 0x4e24, @empty}, 0x10, 0x0}}], 0x1, 0x24040890)
sendto$inet(r0, 0x0, 0x0, 0x2000040, 0x0, 0x0)

13:44:40 executing program 5:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r0)

13:44:40 executing program 0:
r0 = syz_open_dev$vcsn(&(0x7f00000002c0), 0x0, 0x0)
recvfrom$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0)

13:44:40 executing program 4:
r0 = epoll_create(0xfff)
epoll_pwait(r0, &(0x7f0000000a00)=[{}], 0x1, 0x0, 0x0, 0x0)

13:44:40 executing program 0:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000040)={0x0, 0x480, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3})

13:44:40 executing program 3:
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r0, 0x0, 0x0)
sendmmsg$inet(r0, &(0x7f0000000440)=[{{&(0x7f0000000000)={0x2, 0x4e24, @empty}, 0x10, 0x0}}], 0x1, 0x24040890)
sendto$inet(r0, 0x0, 0x0, 0x2000040, 0x0, 0x0)

13:44:40 executing program 4:
migrate_pages(0x0, 0x0, &(0x7f0000001340), 0x0)

13:44:40 executing program 5:
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x19, 0x1, 0x0, 0x0)

13:44:40 executing program 2:
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
syz_genetlink_get_family_id$tipc(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$NFT_BATCH(r1, &(0x7f00000015c0)={&(0x7f0000000300), 0xc, &(0x7f0000001580)={&(0x7f00000014c0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_PAYLOAD_CSUM_OFFSET={0x8, 0x7, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}]}, @NFT_MSG_DELSETELEM={0x1c, 0xe, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}]}], {0x14}}, 0x94}, 0x1, 0x0, 0x0, 0x1}, 0x1)
getsockname$packet(0xffffffffffffffff, &(0x7f0000001340), &(0x7f0000001380)=0x14)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r1, 0x0, 0x0)
sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, 0x0, 0x0)
getsockname(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0)
bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001400)={&(0x7f0000000140), 0xc, &(0x7f0000000340)={&(0x7f0000000f00)=@newqdisc={0x1b8, 0x24, 0x0, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0xc}, {0x10, 0xffff}, {0xf, 0xfff2}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_RATE={0x6, 0x5, {0x8}}, @qdisc_kind_options=@q_choke={{0xa}, {0x18, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x4e0, 0x2, 0x6, 0x0, 0x1e, 0x2}}]}}, @qdisc_kind_options=@q_codel={{0xa}, {0x54, 0x2, [@TCA_CODEL_TARGET={0x8}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x4}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_LIMIT={0x8, 0x2, 0x2}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x80}, @TCA_CODEL_TARGET={0x8, 0x1, 0xb9}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_INTERVAL={0x8, 0x3, 0x7}, @TCA_CODEL_LIMIT={0x8, 0x2, 0x5}]}}, @TCA_STAB={0xf8, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x8, 0xc000, 0x9, 0x1, 0x80000001, 0x4, 0xa}}, {0x18, 0x2, [0x3, 0x4, 0x3, 0xff, 0x200, 0xfe01, 0x7, 0x8, 0x0, 0x2]}}, {{0x1c, 0x1, {0x0, 0x20, 0x1, 0xfc000, 0x1}}, {0x4}}, {{0x1c, 0x1, {0x3, 0x11, 0x100, 0x5, 0x0, 0x2dd, 0x7fff, 0x4}}, {0xc, 0x2, [0x6, 0x100, 0x2, 0x71]}}, {{0x1c, 0x1, {0x0, 0x40, 0x5, 0x3, 0x2}}, {0x4}}, {{0x1c, 0x1, {0x4, 0x8, 0x1ff, 0x3ff, 0x2, 0x5, 0x9, 0x5}}, {0xe, 0x2, [0x1, 0x1, 0xb41, 0x0, 0x8]}}, {{0x1c, 0x1, {0x9, 0x3f, 0x4, 0x3, 0x0, 0x4, 0x9, 0x5}}, {0xe, 0x2, [0x0, 0x0, 0x5ca, 0xfff, 0xfffb]}}]}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x81}]}, 0x1b8}, 0x1, 0x0, 0x0, 0x20000110}, 0x800)
connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10)
writev(r2, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1)
recvmmsg(r2, &(0x7f0000003e40)=[{{0x0, 0x3, 0x0, 0x0, &(0x7f00000035c0)=""/241, 0xf1}}, {{&(0x7f00000036c0)=@un=@abs, 0x80, &(0x7f0000003780)=[{&(0x7f0000003740)=""/4, 0x7ffff}], 0x1, &(0x7f00000037c0)=""/236, 0xec}}, {{0x0, 0x0, &(0x7f0000003bc0)=[{0x0, 0xe00000000000000}, {&(0x7f0000003a00)=""/190, 0xbe}, {&(0x7f0000003ac0)=""/131, 0x83}, {0x0}], 0x4, &(0x7f0000003c00)=""/73, 0x49}}, {{&(0x7f0000003c80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, 0x0, 0x0, &(0x7f0000003e00)=""/48, 0x30}}], 0x4, 0x40000121, 0x0)
shutdown(r2, 0x0)

13:44:40 executing program 4:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000440)='/proc/sysvipc/sem\x00', 0x0, 0x0)

13:44:40 executing program 5:
r0 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0)
ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0xc0287c02, &(0x7f00000006c0)={0x80000000, &(0x7f0000000600), &(0x7f0000000640)})

13:44:41 executing program 5:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000240)={@val={0x0, 0x86dd}, @val={0x5, 0x0, 0x0, 0x0, 0x54}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "000003", 0x190, 0x3a, 0x0, @empty, @mcast2, {[@routing={0x0, 0x2, 0x0, 0x0, 0x0, [@empty]}], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x0, "ee7b615d"}, {}, {0x2b, 0x3, "6f8c008275021d683910c309293188a7c747eb2278d2794784"}, {0x0, 0x28, "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"}]}}}}}, 0x1c6)

13:44:41 executing program 4:
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x16, 0xaa, 0x0, 0xffffff80, 0x0, 0x1}, 0x48)

13:44:41 executing program 2:
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
syz_genetlink_get_family_id$tipc(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$NFT_BATCH(r1, &(0x7f00000015c0)={&(0x7f0000000300), 0xc, &(0x7f0000001580)={&(0x7f00000014c0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_PAYLOAD_CSUM_OFFSET={0x8, 0x7, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}]}, @NFT_MSG_DELSETELEM={0x1c, 0xe, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}]}], {0x14}}, 0x94}, 0x1, 0x0, 0x0, 0x1}, 0x1)
getsockname$packet(0xffffffffffffffff, &(0x7f0000001340), &(0x7f0000001380)=0x14)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r1, 0x0, 0x0)
sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, 0x0, 0x0)
getsockname(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0)
bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001400)={&(0x7f0000000140), 0xc, &(0x7f0000000340)={&(0x7f0000000f00)=@newqdisc={0x1b8, 0x24, 0x0, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0xc}, {0x10, 0xffff}, {0xf, 0xfff2}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_RATE={0x6, 0x5, {0x8}}, @qdisc_kind_options=@q_choke={{0xa}, {0x18, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x4e0, 0x2, 0x6, 0x0, 0x1e, 0x2}}]}}, @qdisc_kind_options=@q_codel={{0xa}, {0x54, 0x2, [@TCA_CODEL_TARGET={0x8}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x4}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_LIMIT={0x8, 0x2, 0x2}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x80}, @TCA_CODEL_TARGET={0x8, 0x1, 0xb9}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_INTERVAL={0x8, 0x3, 0x7}, @TCA_CODEL_LIMIT={0x8, 0x2, 0x5}]}}, @TCA_STAB={0xf8, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x8, 0xc000, 0x9, 0x1, 0x80000001, 0x4, 0xa}}, {0x18, 0x2, [0x3, 0x4, 0x3, 0xff, 0x200, 0xfe01, 0x7, 0x8, 0x0, 0x2]}}, {{0x1c, 0x1, {0x0, 0x20, 0x1, 0xfc000, 0x1}}, {0x4}}, {{0x1c, 0x1, {0x3, 0x11, 0x100, 0x5, 0x0, 0x2dd, 0x7fff, 0x4}}, {0xc, 0x2, [0x6, 0x100, 0x2, 0x71]}}, {{0x1c, 0x1, {0x0, 0x40, 0x5, 0x3, 0x2}}, {0x4}}, {{0x1c, 0x1, {0x4, 0x8, 0x1ff, 0x3ff, 0x2, 0x5, 0x9, 0x5}}, {0xe, 0x2, [0x1, 0x1, 0xb41, 0x0, 0x8]}}, {{0x1c, 0x1, {0x9, 0x3f, 0x4, 0x3, 0x0, 0x4, 0x9, 0x5}}, {0xe, 0x2, [0x0, 0x0, 0x5ca, 0xfff, 0xfffb]}}]}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x81}]}, 0x1b8}, 0x1, 0x0, 0x0, 0x20000110}, 0x800)
connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10)
writev(r2, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1)
recvmmsg(r2, &(0x7f0000003e40)=[{{0x0, 0x3, 0x0, 0x0, &(0x7f00000035c0)=""/241, 0xf1}}, {{&(0x7f00000036c0)=@un=@abs, 0x80, &(0x7f0000003780)=[{&(0x7f0000003740)=""/4, 0x7ffff}], 0x1, &(0x7f00000037c0)=""/236, 0xec}}, {{0x0, 0x0, &(0x7f0000003bc0)=[{0x0, 0xe00000000000000}, {&(0x7f0000003a00)=""/190, 0xbe}, {&(0x7f0000003ac0)=""/131, 0x83}, {0x0}], 0x4, &(0x7f0000003c00)=""/73, 0x49}}, {{&(0x7f0000003c80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, 0x0, 0x0, &(0x7f0000003e00)=""/48, 0x30}}], 0x4, 0x40000121, 0x0)

13:44:41 executing program 0:
linkat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0xffffffffffffffff, 0x0, 0x949dc832f7765e6f)

13:44:41 executing program 3:
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r0, 0x0, 0x0)
sendmmsg$inet(r0, &(0x7f0000000440)=[{{&(0x7f0000000000)={0x2, 0x4e24, @empty}, 0x10, 0x0}}], 0x1, 0x24040890)
sendto$inet(r0, 0x0, 0x0, 0x2000040, 0x0, 0x0)

13:44:41 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f000000c380)='/proc/crypto\x00', 0x0, 0x0)
read$FUSE(r3, &(0x7f0000000200)={0x2020}, 0x2020)
execve(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000280)=[0x0, 0x0], &(0x7f0000000380)=[&(0x7f00000002c0)='*$%}\xce*\x00', &(0x7f0000000300)='\x00'])

13:44:41 executing program 4:
r0 = socket(0x22, 0x2, 0x2)
bind$phonet(r0, 0x0, 0x0)

13:44:41 executing program 0:
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000700)=@bpf_lsm={0x1d, 0x5, &(0x7f0000000080)=@framed={{}, [@generic={0x40}, @func]}, &(0x7f0000000500)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x90)

13:44:41 executing program 3:
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r0, 0x0, 0x0)
sendmmsg$inet(r0, &(0x7f0000000440)=[{{&(0x7f0000000000)={0x2, 0x4e24, @empty}, 0x10, 0x0}}], 0x1, 0x24040890)
sendto$inet(r0, 0x0, 0x0, 0x2000040, 0x0, 0x0)

13:44:41 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89b0, &(0x7f00000020c0)={'gre0\x00', &(0x7f0000002000)={'gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @private, @empty}}}})

13:44:41 executing program 0:
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
sendmsg$WG_CMD_GET_DEVICE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x300}}, 0x0)

13:44:41 executing program 3:
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10)
sendmmsg$inet(r0, &(0x7f0000000440)=[{{&(0x7f0000000000)={0x2, 0x4e24, @empty}, 0x10, 0x0}}], 0x1, 0x24040890)
sendto$inet(r0, 0x0, 0x0, 0x2000040, 0x0, 0x0)

13:44:41 executing program 5:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000240)={@val={0x0, 0x86dd}, @val={0x5, 0x0, 0x0, 0x0, 0x54}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "000003", 0x190, 0x3a, 0x0, @empty, @mcast2, {[@routing={0x0, 0x2, 0x0, 0x0, 0x0, [@empty]}], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x0, "ee7b615d"}, {}, {0x2b, 0x3, "6f8c008275021d683910c309293188a7c747eb2278d2794784"}, {0x0, 0x28, "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"}]}}}}}, 0x1c6)

13:44:41 executing program 4:
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
r1 = socket$inet(0x2, 0x5, 0x0)
sendto$inet(r0, &(0x7f0000000140)="d8594bae048a4d4eb9bdb514c83b1c971346aeb2eb06da00e07b680044892605cfb198fe92db4f2f82be93b420d1344458705316d9d52f1e4d708abc86f6a56daf7725fc7f5a945c7697a2447cfd7c6acb4d4d8ee5f9a91912310ac205796312442ae3d1ea487521ad29b20077cbe0c256a63548faa706de132f955868a6120e1bdf964426ae2550b72f0d7ce2d58d3391fbc09a", 0x94, 0x0, &(0x7f0000000000)={0x10, 0x2}, 0x10)
dup2(r1, r0)

13:44:42 executing program 2:
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
syz_genetlink_get_family_id$tipc(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$NFT_BATCH(r1, &(0x7f00000015c0)={&(0x7f0000000300), 0xc, &(0x7f0000001580)={&(0x7f00000014c0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_PAYLOAD_CSUM_OFFSET={0x8, 0x7, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}]}, @NFT_MSG_DELSETELEM={0x1c, 0xe, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}]}], {0x14}}, 0x94}, 0x1, 0x0, 0x0, 0x1}, 0x1)
getsockname$packet(0xffffffffffffffff, &(0x7f0000001340), &(0x7f0000001380)=0x14)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r1, 0x0, 0x0)
sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, 0x0, 0x0)
getsockname(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0)
bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001400)={&(0x7f0000000140), 0xc, &(0x7f0000000340)={&(0x7f0000000f00)=@newqdisc={0x1b8, 0x24, 0x0, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0xc}, {0x10, 0xffff}, {0xf, 0xfff2}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_RATE={0x6, 0x5, {0x8}}, @qdisc_kind_options=@q_choke={{0xa}, {0x18, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x4e0, 0x2, 0x6, 0x0, 0x1e, 0x2}}]}}, @qdisc_kind_options=@q_codel={{0xa}, {0x54, 0x2, [@TCA_CODEL_TARGET={0x8}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x4}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_LIMIT={0x8, 0x2, 0x2}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x80}, @TCA_CODEL_TARGET={0x8, 0x1, 0xb9}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_INTERVAL={0x8, 0x3, 0x7}, @TCA_CODEL_LIMIT={0x8, 0x2, 0x5}]}}, @TCA_STAB={0xf8, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x8, 0xc000, 0x9, 0x1, 0x80000001, 0x4, 0xa}}, {0x18, 0x2, [0x3, 0x4, 0x3, 0xff, 0x200, 0xfe01, 0x7, 0x8, 0x0, 0x2]}}, {{0x1c, 0x1, {0x0, 0x20, 0x1, 0xfc000, 0x1}}, {0x4}}, {{0x1c, 0x1, {0x3, 0x11, 0x100, 0x5, 0x0, 0x2dd, 0x7fff, 0x4}}, {0xc, 0x2, [0x6, 0x100, 0x2, 0x71]}}, {{0x1c, 0x1, {0x0, 0x40, 0x5, 0x3, 0x2}}, {0x4}}, {{0x1c, 0x1, {0x4, 0x8, 0x1ff, 0x3ff, 0x2, 0x5, 0x9, 0x5}}, {0xe, 0x2, [0x1, 0x1, 0xb41, 0x0, 0x8]}}, {{0x1c, 0x1, {0x9, 0x3f, 0x4, 0x3, 0x0, 0x4, 0x9, 0x5}}, {0xe, 0x2, [0x0, 0x0, 0x5ca, 0xfff, 0xfffb]}}]}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x81}]}, 0x1b8}, 0x1, 0x0, 0x0, 0x20000110}, 0x800)
connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10)
writev(r2, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1)
recvmmsg(r2, &(0x7f0000003e40)=[{{0x0, 0x3, 0x0, 0x0, &(0x7f00000035c0)=""/241, 0xf1}}, {{&(0x7f00000036c0)=@un=@abs, 0x80, &(0x7f0000003780)=[{&(0x7f0000003740)=""/4, 0x7ffff}], 0x1, &(0x7f00000037c0)=""/236, 0xec}}, {{0x0, 0x0, &(0x7f0000003bc0)=[{0x0, 0xe00000000000000}, {&(0x7f0000003a00)=""/190, 0xbe}, {&(0x7f0000003ac0)=""/131, 0x83}, {0x0}], 0x4, &(0x7f0000003c00)=""/73, 0x49}}, {{&(0x7f0000003c80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, 0x0, 0x0, &(0x7f0000003e00)=""/48, 0x30}}], 0x4, 0x40000121, 0x0)

13:44:42 executing program 0:
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
sendmsg$inet_sctp(r0, &(0x7f00000006c0)={&(0x7f0000000000)=@in6={0x1c, 0x1c, 0x1}, 0x1c, 0x0, 0x0, &(0x7f0000000600)=[@sndinfo={0x1c}], 0x1c}, 0x0)

13:44:42 executing program 4:
r0 = socket(0x1c, 0x10000001, 0x84)
getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0x100, &(0x7f0000000540), &(0x7f0000000600)=0xb0)

13:44:43 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0)
sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f000000c380)='/proc/crypto\x00', 0x0, 0x0)
read$FUSE(r3, &(0x7f0000000200)={0x2020}, 0x2020)
execve(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000280)=[0x0, 0x0], &(0x7f0000000380)=[&(0x7f00000002c0)='*$%}\xce*\x00', &(0x7f0000000300)='\x00'])

13:44:43 executing program 3:
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10)
sendmmsg$inet(r0, &(0x7f0000000440)=[{{&(0x7f0000000000)={0x2, 0x4e24, @empty}, 0x10, 0x0}}], 0x1, 0x24040890)
sendto$inet(r0, 0x0, 0x0, 0x2000040, 0x0, 0x0)

13:44:43 executing program 5:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000240)={@val={0x0, 0x86dd}, @val={0x5, 0x0, 0x0, 0x0, 0x54}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "000003", 0x190, 0x3a, 0x0, @empty, @mcast2, {[@routing={0x0, 0x2, 0x0, 0x0, 0x0, [@empty]}], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x0, "ee7b615d"}, {}, {0x2b, 0x3, "6f8c008275021d683910c309293188a7c747eb2278d2794784"}, {0x0, 0x28, "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"}]}}}}}, 0x1c6)

13:44:43 executing program 4:
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
connect$inet(r0, &(0x7f0000000180)={0x10, 0x2}, 0x10)
getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x7, &(0x7f00000001c0), &(0x7f0000000140)=0x88)

13:44:43 executing program 0:
r0 = socket$inet6_sctp(0x1c, 0x5, 0x84)
r1 = socket$inet_sctp(0x2, 0x5, 0x84)
r2 = dup2(r1, r0)
getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x23, &(0x7f0000000240), &(0x7f00000000c0)=0x90)

13:44:43 executing program 2:
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
syz_genetlink_get_family_id$tipc(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$NFT_BATCH(r1, &(0x7f00000015c0)={&(0x7f0000000300), 0xc, &(0x7f0000001580)={&(0x7f00000014c0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_PAYLOAD_CSUM_OFFSET={0x8, 0x7, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}]}, @NFT_MSG_DELSETELEM={0x1c, 0xe, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}]}], {0x14}}, 0x94}, 0x1, 0x0, 0x0, 0x1}, 0x1)
getsockname$packet(0xffffffffffffffff, &(0x7f0000001340), &(0x7f0000001380)=0x14)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r1, 0x0, 0x0)
sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, 0x0, 0x0)
getsockname(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0)
bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001400)={&(0x7f0000000140), 0xc, &(0x7f0000000340)={&(0x7f0000000f00)=@newqdisc={0x1b8, 0x24, 0x0, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0xc}, {0x10, 0xffff}, {0xf, 0xfff2}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_RATE={0x6, 0x5, {0x8}}, @qdisc_kind_options=@q_choke={{0xa}, {0x18, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x4e0, 0x2, 0x6, 0x0, 0x1e, 0x2}}]}}, @qdisc_kind_options=@q_codel={{0xa}, {0x54, 0x2, [@TCA_CODEL_TARGET={0x8}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x4}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_LIMIT={0x8, 0x2, 0x2}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x80}, @TCA_CODEL_TARGET={0x8, 0x1, 0xb9}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_INTERVAL={0x8, 0x3, 0x7}, @TCA_CODEL_LIMIT={0x8, 0x2, 0x5}]}}, @TCA_STAB={0xf8, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x8, 0xc000, 0x9, 0x1, 0x80000001, 0x4, 0xa}}, {0x18, 0x2, [0x3, 0x4, 0x3, 0xff, 0x200, 0xfe01, 0x7, 0x8, 0x0, 0x2]}}, {{0x1c, 0x1, {0x0, 0x20, 0x1, 0xfc000, 0x1}}, {0x4}}, {{0x1c, 0x1, {0x3, 0x11, 0x100, 0x5, 0x0, 0x2dd, 0x7fff, 0x4}}, {0xc, 0x2, [0x6, 0x100, 0x2, 0x71]}}, {{0x1c, 0x1, {0x0, 0x40, 0x5, 0x3, 0x2}}, {0x4}}, {{0x1c, 0x1, {0x4, 0x8, 0x1ff, 0x3ff, 0x2, 0x5, 0x9, 0x5}}, {0xe, 0x2, [0x1, 0x1, 0xb41, 0x0, 0x8]}}, {{0x1c, 0x1, {0x9, 0x3f, 0x4, 0x3, 0x0, 0x4, 0x9, 0x5}}, {0xe, 0x2, [0x0, 0x0, 0x5ca, 0xfff, 0xfffb]}}]}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x81}]}, 0x1b8}, 0x1, 0x0, 0x0, 0x20000110}, 0x800)
connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10)
writev(r2, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1)
recvmmsg(r2, &(0x7f0000003e40)=[{{0x0, 0x3, 0x0, 0x0, &(0x7f00000035c0)=""/241, 0xf1}}, {{&(0x7f00000036c0)=@un=@abs, 0x80, &(0x7f0000003780)=[{&(0x7f0000003740)=""/4, 0x7ffff}], 0x1, &(0x7f00000037c0)=""/236, 0xec}}, {{0x0, 0x0, &(0x7f0000003bc0)=[{0x0, 0xe00000000000000}, {&(0x7f0000003a00)=""/190, 0xbe}, {&(0x7f0000003ac0)=""/131, 0x83}, {0x0}], 0x4, &(0x7f0000003c00)=""/73, 0x49}}, {{&(0x7f0000003c80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, 0x0, 0x0, &(0x7f0000003e00)=""/48, 0x30}}], 0x4, 0x40000121, 0x0)

13:44:43 executing program 4:
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x3, &(0x7f0000000240)={0x0, 0x0, 0x2}, 0x40)

13:44:43 executing program 3:
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10)
sendmmsg$inet(r0, &(0x7f0000000440)=[{{&(0x7f0000000000)={0x2, 0x4e24, @empty}, 0x10, 0x0}}], 0x1, 0x24040890)
sendto$inet(r0, 0x0, 0x0, 0x2000040, 0x0, 0x0)

13:44:44 executing program 4:
r0 = socket(0xa, 0x2, 0x0)
setsockopt$inet_icmp_ICMP_FILTER(r0, 0x29, 0x1, 0x0, 0x0)

13:44:44 executing program 0:
clock_adjtime(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xebe})

13:44:44 executing program 3:
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast2}, 0x10)
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000440)=[{{&(0x7f0000000000)={0x2, 0x4e24, @empty}, 0x10, 0x0}}], 0x1, 0x24040890)
sendto$inet(r0, 0x0, 0x0, 0x2000040, 0x0, 0x0)

13:44:44 executing program 5:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000240)={@val={0x0, 0x86dd}, @val={0x5, 0x0, 0x0, 0x0, 0x54}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "000003", 0x190, 0x3a, 0x0, @empty, @mcast2, {[@routing={0x0, 0x2, 0x0, 0x0, 0x0, [@empty]}], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x0, "ee7b615d"}, {}, {0x2b, 0x3, "6f8c008275021d683910c309293188a7c747eb2278d2794784"}, {0x0, 0x28, "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"}]}}}}}, 0x1c6)

13:44:44 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0)
sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f000000c380)='/proc/crypto\x00', 0x0, 0x0)
read$FUSE(r3, &(0x7f0000000200)={0x2020}, 0x2020)
execve(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000280)=[0x0, 0x0], &(0x7f0000000380)=[&(0x7f00000002c0)='*$%}\xce*\x00', &(0x7f0000000300)='\x00'])

13:44:44 executing program 4:
r0 = socket(0xa, 0x2, 0x0)
setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x29, 0x11, 0x0, 0x4)

13:44:44 executing program 0:
r0 = socket(0xa, 0x1, 0x0)
setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x29, 0xb, 0x0, 0x0)

13:44:44 executing program 3:
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast2}, 0x10)
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000440)=[{{&(0x7f0000000000)={0x2, 0x4e24, @empty}, 0x10, 0x0}}], 0x1, 0x24040890)
sendto$inet(r0, 0x0, 0x0, 0x2000040, 0x0, 0x0)

13:44:44 executing program 2:
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
syz_genetlink_get_family_id$tipc(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$NFT_BATCH(r1, &(0x7f00000015c0)={&(0x7f0000000300), 0xc, &(0x7f0000001580)={&(0x7f00000014c0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_PAYLOAD_CSUM_OFFSET={0x8, 0x7, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}]}, @NFT_MSG_DELSETELEM={0x1c, 0xe, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}]}], {0x14}}, 0x94}, 0x1, 0x0, 0x0, 0x1}, 0x1)
getsockname$packet(0xffffffffffffffff, &(0x7f0000001340), &(0x7f0000001380)=0x14)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r1, 0x0, 0x0)
sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, 0x0, 0x0)
getsockname(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0)
bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001400)={&(0x7f0000000140), 0xc, &(0x7f0000000340)={&(0x7f0000000f00)=@newqdisc={0x1b8, 0x24, 0x0, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0xc}, {0x10, 0xffff}, {0xf, 0xfff2}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_RATE={0x6, 0x5, {0x8}}, @qdisc_kind_options=@q_choke={{0xa}, {0x18, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x4e0, 0x2, 0x6, 0x0, 0x1e, 0x2}}]}}, @qdisc_kind_options=@q_codel={{0xa}, {0x54, 0x2, [@TCA_CODEL_TARGET={0x8}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x4}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_LIMIT={0x8, 0x2, 0x2}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x80}, @TCA_CODEL_TARGET={0x8, 0x1, 0xb9}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_INTERVAL={0x8, 0x3, 0x7}, @TCA_CODEL_LIMIT={0x8, 0x2, 0x5}]}}, @TCA_STAB={0xf8, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x8, 0xc000, 0x9, 0x1, 0x80000001, 0x4, 0xa}}, {0x18, 0x2, [0x3, 0x4, 0x3, 0xff, 0x200, 0xfe01, 0x7, 0x8, 0x0, 0x2]}}, {{0x1c, 0x1, {0x0, 0x20, 0x1, 0xfc000, 0x1}}, {0x4}}, {{0x1c, 0x1, {0x3, 0x11, 0x100, 0x5, 0x0, 0x2dd, 0x7fff, 0x4}}, {0xc, 0x2, [0x6, 0x100, 0x2, 0x71]}}, {{0x1c, 0x1, {0x0, 0x40, 0x5, 0x3, 0x2}}, {0x4}}, {{0x1c, 0x1, {0x4, 0x8, 0x1ff, 0x3ff, 0x2, 0x5, 0x9, 0x5}}, {0xe, 0x2, [0x1, 0x1, 0xb41, 0x0, 0x8]}}, {{0x1c, 0x1, {0x9, 0x3f, 0x4, 0x3, 0x0, 0x4, 0x9, 0x5}}, {0xe, 0x2, [0x0, 0x0, 0x5ca, 0xfff, 0xfffb]}}]}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x81}]}, 0x1b8}, 0x1, 0x0, 0x0, 0x20000110}, 0x800)
connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10)
recvmmsg(r2, &(0x7f0000003e40)=[{{0x0, 0x3, 0x0, 0x0, &(0x7f00000035c0)=""/241, 0xf1}}, {{&(0x7f00000036c0)=@un=@abs, 0x80, &(0x7f0000003780)=[{&(0x7f0000003740)=""/4, 0x7ffff}], 0x1, &(0x7f00000037c0)=""/236, 0xec}}, {{0x0, 0x0, &(0x7f0000003bc0)=[{0x0, 0xe00000000000000}, {&(0x7f0000003a00)=""/190, 0xbe}, {&(0x7f0000003ac0)=""/131, 0x83}, {0x0}], 0x4, &(0x7f0000003c00)=""/73, 0x49}}, {{&(0x7f0000003c80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, 0x0, 0x0, &(0x7f0000003e00)=""/48, 0x30}}], 0x4, 0x40000121, 0x0)
shutdown(r2, 0x0)

13:44:44 executing program 3:
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast2}, 0x10)
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000440)=[{{&(0x7f0000000000)={0x2, 0x4e24, @empty}, 0x10, 0x0}}], 0x1, 0x24040890)
sendto$inet(r0, 0x0, 0x0, 0x2000040, 0x0, 0x0)

13:44:44 executing program 0:
mincore(&(0x7f0000ffc000/0x4000)=nil, 0x4000, &(0x7f0000000000)=""/82)

13:44:44 executing program 4:
r0 = socket(0xa, 0x1, 0x0)
setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x29, 0x5, 0x0, 0x0)

13:44:44 executing program 5:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
socket$kcm(0x2, 0xa, 0x2)
write$tun(r0, &(0x7f0000000240)={@val={0x0, 0x86dd}, @val={0x5, 0x0, 0x0, 0x0, 0x54}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "000003", 0x190, 0x3a, 0x0, @empty, @mcast2, {[@routing={0x0, 0x2, 0x0, 0x0, 0x0, [@empty]}], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x0, "ee7b615d"}, {}, {0x2b, 0x3, "6f8c008275021d683910c309293188a7c747eb2278d2794784"}, {0x0, 0x28, "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"}]}}}}}, 0x1c6)

13:44:44 executing program 2:
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
syz_genetlink_get_family_id$tipc(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$NFT_BATCH(r1, &(0x7f00000015c0)={&(0x7f0000000300), 0xc, &(0x7f0000001580)={&(0x7f00000014c0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_PAYLOAD_CSUM_OFFSET={0x8, 0x7, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}]}, @NFT_MSG_DELSETELEM={0x1c, 0xe, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}]}], {0x14}}, 0x94}, 0x1, 0x0, 0x0, 0x1}, 0x1)
getsockname$packet(0xffffffffffffffff, &(0x7f0000001340), &(0x7f0000001380)=0x14)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r1, 0x0, 0x0)
sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, 0x0, 0x0)
getsockname(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0)
bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001400)={&(0x7f0000000140), 0xc, &(0x7f0000000340)={&(0x7f0000000f00)=@newqdisc={0x1b8, 0x24, 0x0, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0xc}, {0x10, 0xffff}, {0xf, 0xfff2}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_RATE={0x6, 0x5, {0x8}}, @qdisc_kind_options=@q_choke={{0xa}, {0x18, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x4e0, 0x2, 0x6, 0x0, 0x1e, 0x2}}]}}, @qdisc_kind_options=@q_codel={{0xa}, {0x54, 0x2, [@TCA_CODEL_TARGET={0x8}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x4}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_LIMIT={0x8, 0x2, 0x2}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x80}, @TCA_CODEL_TARGET={0x8, 0x1, 0xb9}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_INTERVAL={0x8, 0x3, 0x7}, @TCA_CODEL_LIMIT={0x8, 0x2, 0x5}]}}, @TCA_STAB={0xf8, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x8, 0xc000, 0x9, 0x1, 0x80000001, 0x4, 0xa}}, {0x18, 0x2, [0x3, 0x4, 0x3, 0xff, 0x200, 0xfe01, 0x7, 0x8, 0x0, 0x2]}}, {{0x1c, 0x1, {0x0, 0x20, 0x1, 0xfc000, 0x1}}, {0x4}}, {{0x1c, 0x1, {0x3, 0x11, 0x100, 0x5, 0x0, 0x2dd, 0x7fff, 0x4}}, {0xc, 0x2, [0x6, 0x100, 0x2, 0x71]}}, {{0x1c, 0x1, {0x0, 0x40, 0x5, 0x3, 0x2}}, {0x4}}, {{0x1c, 0x1, {0x4, 0x8, 0x1ff, 0x3ff, 0x2, 0x5, 0x9, 0x5}}, {0xe, 0x2, [0x1, 0x1, 0xb41, 0x0, 0x8]}}, {{0x1c, 0x1, {0x9, 0x3f, 0x4, 0x3, 0x0, 0x4, 0x9, 0x5}}, {0xe, 0x2, [0x0, 0x0, 0x5ca, 0xfff, 0xfffb]}}]}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x81}]}, 0x1b8}, 0x1, 0x0, 0x0, 0x20000110}, 0x800)
connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10)
recvmmsg(r2, &(0x7f0000003e40)=[{{0x0, 0x3, 0x0, 0x0, &(0x7f00000035c0)=""/241, 0xf1}}, {{&(0x7f00000036c0)=@un=@abs, 0x80, &(0x7f0000003780)=[{&(0x7f0000003740)=""/4, 0x7ffff}], 0x1, &(0x7f00000037c0)=""/236, 0xec}}, {{0x0, 0x0, &(0x7f0000003bc0)=[{0x0, 0xe00000000000000}, {&(0x7f0000003a00)=""/190, 0xbe}, {&(0x7f0000003ac0)=""/131, 0x83}, {0x0}], 0x4, &(0x7f0000003c00)=""/73, 0x49}}, {{&(0x7f0000003c80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, 0x0, 0x0, &(0x7f0000003e00)=""/48, 0x30}}], 0x4, 0x40000121, 0x0)
shutdown(r2, 0x0)

13:44:44 executing program 3:
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast2}, 0x10)
sendmmsg$inet(r0, 0x0, 0x0, 0x24040890)
sendto$inet(r0, 0x0, 0x0, 0x2000040, 0x0, 0x0)

13:44:45 executing program 0:
r0 = syz_io_uring_setup(0x66af, &(0x7f0000000080), &(0x7f0000000100), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000040)=[0xffffffffffffffff], 0x1)
io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[0xffffffffffffffff, 0xffffffffffffffff]}, 0x2)

13:44:45 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0)
sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f000000c380)='/proc/crypto\x00', 0x0, 0x0)
read$FUSE(r3, &(0x7f0000000200)={0x2020}, 0x2020)
execve(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000280)=[0x0, 0x0], &(0x7f0000000380)=[&(0x7f00000002c0)='*$%}\xce*\x00', &(0x7f0000000300)='\x00'])

13:44:45 executing program 4:
syz_mount_image$squashfs(&(0x7f0000000000), &(0x7f0000000140)='./file1\x00', 0x808343, &(0x7f0000000100)=ANY=[], 0x47, 0x221, &(0x7f0000000180)="$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")
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
getdents(r0, &(0x7f0000001480)=""/4096, 0x1000)
getdents(r0, 0x0, 0x0)

13:44:45 executing program 3:
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast2}, 0x10)
sendmmsg$inet(r0, 0x0, 0x0, 0x24040890)
sendto$inet(r0, 0x0, 0x0, 0x2000040, 0x0, 0x0)

13:44:45 executing program 2:
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
syz_genetlink_get_family_id$tipc(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$NFT_BATCH(r1, &(0x7f00000015c0)={&(0x7f0000000300), 0xc, &(0x7f0000001580)={&(0x7f00000014c0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_PAYLOAD_CSUM_OFFSET={0x8, 0x7, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}]}, @NFT_MSG_DELSETELEM={0x1c, 0xe, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}]}], {0x14}}, 0x94}, 0x1, 0x0, 0x0, 0x1}, 0x1)
getsockname$packet(0xffffffffffffffff, &(0x7f0000001340), &(0x7f0000001380)=0x14)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r1, 0x0, 0x0)
sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, 0x0, 0x0)
getsockname(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0)
bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001400)={&(0x7f0000000140), 0xc, &(0x7f0000000340)={&(0x7f0000000f00)=@newqdisc={0x1b8, 0x24, 0x0, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0xc}, {0x10, 0xffff}, {0xf, 0xfff2}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_RATE={0x6, 0x5, {0x8}}, @qdisc_kind_options=@q_choke={{0xa}, {0x18, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x4e0, 0x2, 0x6, 0x0, 0x1e, 0x2}}]}}, @qdisc_kind_options=@q_codel={{0xa}, {0x54, 0x2, [@TCA_CODEL_TARGET={0x8}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x4}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_LIMIT={0x8, 0x2, 0x2}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x80}, @TCA_CODEL_TARGET={0x8, 0x1, 0xb9}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_INTERVAL={0x8, 0x3, 0x7}, @TCA_CODEL_LIMIT={0x8, 0x2, 0x5}]}}, @TCA_STAB={0xf8, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x8, 0xc000, 0x9, 0x1, 0x80000001, 0x4, 0xa}}, {0x18, 0x2, [0x3, 0x4, 0x3, 0xff, 0x200, 0xfe01, 0x7, 0x8, 0x0, 0x2]}}, {{0x1c, 0x1, {0x0, 0x20, 0x1, 0xfc000, 0x1}}, {0x4}}, {{0x1c, 0x1, {0x3, 0x11, 0x100, 0x5, 0x0, 0x2dd, 0x7fff, 0x4}}, {0xc, 0x2, [0x6, 0x100, 0x2, 0x71]}}, {{0x1c, 0x1, {0x0, 0x40, 0x5, 0x3, 0x2}}, {0x4}}, {{0x1c, 0x1, {0x4, 0x8, 0x1ff, 0x3ff, 0x2, 0x5, 0x9, 0x5}}, {0xe, 0x2, [0x1, 0x1, 0xb41, 0x0, 0x8]}}, {{0x1c, 0x1, {0x9, 0x3f, 0x4, 0x3, 0x0, 0x4, 0x9, 0x5}}, {0xe, 0x2, [0x0, 0x0, 0x5ca, 0xfff, 0xfffb]}}]}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x81}]}, 0x1b8}, 0x1, 0x0, 0x0, 0x20000110}, 0x800)
connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10)
recvmmsg(r2, &(0x7f0000003e40)=[{{0x0, 0x3, 0x0, 0x0, &(0x7f00000035c0)=""/241, 0xf1}}, {{&(0x7f00000036c0)=@un=@abs, 0x80, &(0x7f0000003780)=[{&(0x7f0000003740)=""/4, 0x7ffff}], 0x1, &(0x7f00000037c0)=""/236, 0xec}}, {{0x0, 0x0, &(0x7f0000003bc0)=[{0x0, 0xe00000000000000}, {&(0x7f0000003a00)=""/190, 0xbe}, {&(0x7f0000003ac0)=""/131, 0x83}, {0x0}], 0x4, &(0x7f0000003c00)=""/73, 0x49}}, {{&(0x7f0000003c80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, 0x0, 0x0, &(0x7f0000003e00)=""/48, 0x30}}], 0x4, 0x40000121, 0x0)
shutdown(r2, 0x0)

13:44:45 executing program 0:
symlinkat(&(0x7f0000000100)='./file0/../file0\x00', 0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00')
mount$fuseblk(0x0, &(0x7f00000025c0)='./file0/../file0\x00', 0x0, 0x0, 0x0)

13:44:45 executing program 5:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
socket$kcm(0x2, 0xa, 0x2)
write$tun(r0, &(0x7f0000000240)={@val={0x0, 0x86dd}, @val={0x5, 0x0, 0x0, 0x0, 0x54}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "000003", 0x190, 0x3a, 0x0, @empty, @mcast2, {[@routing={0x0, 0x2, 0x0, 0x0, 0x0, [@empty]}], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x0, "ee7b615d"}, {}, {0x2b, 0x3, "6f8c008275021d683910c309293188a7c747eb2278d2794784"}, {0x0, 0x28, "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"}]}}}}}, 0x1c6)

13:44:45 executing program 0:
r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0)
readv(r0, &(0x7f0000000640)=[{&(0x7f0000000200)=""/109, 0x6d}], 0x1)

13:44:45 executing program 3:
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast2}, 0x10)
sendmmsg$inet(r0, 0x0, 0x0, 0x24040890)
sendto$inet(r0, 0x0, 0x0, 0x2000040, 0x0, 0x0)

13:44:45 executing program 4:
openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x9}, 0x0, 0x0, &(0x7f0000000300), 0x0)

13:44:46 executing program 2:
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
syz_genetlink_get_family_id$tipc(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$NFT_BATCH(r1, &(0x7f00000015c0)={&(0x7f0000000300), 0xc, &(0x7f0000001580)={&(0x7f00000014c0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_PAYLOAD_CSUM_OFFSET={0x8, 0x7, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}]}, @NFT_MSG_DELSETELEM={0x1c, 0xe, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}]}], {0x14}}, 0x94}, 0x1, 0x0, 0x0, 0x1}, 0x1)
getsockname$packet(0xffffffffffffffff, &(0x7f0000001340), &(0x7f0000001380)=0x14)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r1, 0x0, 0x0)
sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, 0x0, 0x0)
getsockname(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0)
bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001400)={&(0x7f0000000140), 0xc, &(0x7f0000000340)={&(0x7f0000000f00)=@newqdisc={0x1b8, 0x24, 0x0, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0xc}, {0x10, 0xffff}, {0xf, 0xfff2}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_RATE={0x6, 0x5, {0x8}}, @qdisc_kind_options=@q_choke={{0xa}, {0x18, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x4e0, 0x2, 0x6, 0x0, 0x1e, 0x2}}]}}, @qdisc_kind_options=@q_codel={{0xa}, {0x54, 0x2, [@TCA_CODEL_TARGET={0x8}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x4}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_LIMIT={0x8, 0x2, 0x2}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x80}, @TCA_CODEL_TARGET={0x8, 0x1, 0xb9}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_INTERVAL={0x8, 0x3, 0x7}, @TCA_CODEL_LIMIT={0x8, 0x2, 0x5}]}}, @TCA_STAB={0xf8, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x8, 0xc000, 0x9, 0x1, 0x80000001, 0x4, 0xa}}, {0x18, 0x2, [0x3, 0x4, 0x3, 0xff, 0x200, 0xfe01, 0x7, 0x8, 0x0, 0x2]}}, {{0x1c, 0x1, {0x0, 0x20, 0x1, 0xfc000, 0x1}}, {0x4}}, {{0x1c, 0x1, {0x3, 0x11, 0x100, 0x5, 0x0, 0x2dd, 0x7fff, 0x4}}, {0xc, 0x2, [0x6, 0x100, 0x2, 0x71]}}, {{0x1c, 0x1, {0x0, 0x40, 0x5, 0x3, 0x2}}, {0x4}}, {{0x1c, 0x1, {0x4, 0x8, 0x1ff, 0x3ff, 0x2, 0x5, 0x9, 0x5}}, {0xe, 0x2, [0x1, 0x1, 0xb41, 0x0, 0x8]}}, {{0x1c, 0x1, {0x9, 0x3f, 0x4, 0x3, 0x0, 0x4, 0x9, 0x5}}, {0xe, 0x2, [0x0, 0x0, 0x5ca, 0xfff, 0xfffb]}}]}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x81}]}, 0x1b8}, 0x1, 0x0, 0x0, 0x20000110}, 0x800)
writev(r2, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1)
recvmmsg(r2, &(0x7f0000003e40)=[{{0x0, 0x3, 0x0, 0x0, &(0x7f00000035c0)=""/241, 0xf1}}, {{&(0x7f00000036c0)=@un=@abs, 0x80, &(0x7f0000003780)=[{&(0x7f0000003740)=""/4, 0x7ffff}], 0x1, &(0x7f00000037c0)=""/236, 0xec}}, {{0x0, 0x0, &(0x7f0000003bc0)=[{0x0, 0xe00000000000000}, {&(0x7f0000003a00)=""/190, 0xbe}, {&(0x7f0000003ac0)=""/131, 0x83}, {0x0}], 0x4, &(0x7f0000003c00)=""/73, 0x49}}, {{&(0x7f0000003c80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, 0x0, 0x0, &(0x7f0000003e00)=""/48, 0x30}}], 0x4, 0x40000121, 0x0)
shutdown(r2, 0x0)

13:44:46 executing program 4:
openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x9}, 0x0, 0x0, &(0x7f0000000300), 0x0)

13:44:46 executing program 3:
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast2}, 0x10)
sendmmsg$inet(r0, &(0x7f0000000440), 0x0, 0x24040890)
sendto$inet(r0, 0x0, 0x0, 0x2000040, 0x0, 0x0)

13:44:46 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f000000c380)='/proc/crypto\x00', 0x0, 0x0)
read$FUSE(r3, &(0x7f0000000200)={0x2020}, 0x2020)
execve(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000280)=[0x0, 0x0], &(0x7f0000000380)=[&(0x7f00000002c0)='*$%}\xce*\x00', &(0x7f0000000300)='\x00'])

13:44:46 executing program 0:
syz_open_procfs$userns(0x0, &(0x7f0000001440))

13:44:46 executing program 4:
r0 = socket$inet6_icmp_raw(0x1c, 0x3, 0x3a)
sendto$inet6(r0, &(0x7f0000000340)="1a30136ea415da3c", 0x8, 0x0, &(0x7f0000000380)={0x1c, 0x1c}, 0x1c)

13:44:46 executing program 2:
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
syz_genetlink_get_family_id$tipc(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$NFT_BATCH(r1, &(0x7f00000015c0)={&(0x7f0000000300), 0xc, &(0x7f0000001580)={&(0x7f00000014c0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_PAYLOAD_CSUM_OFFSET={0x8, 0x7, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}]}, @NFT_MSG_DELSETELEM={0x1c, 0xe, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}]}], {0x14}}, 0x94}, 0x1, 0x0, 0x0, 0x1}, 0x1)
getsockname$packet(0xffffffffffffffff, &(0x7f0000001340), &(0x7f0000001380)=0x14)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r1, 0x0, 0x0)
sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, 0x0, 0x0)
getsockname(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0)
bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001400)={&(0x7f0000000140), 0xc, &(0x7f0000000340)={&(0x7f0000000f00)=@newqdisc={0x1b8, 0x24, 0x0, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0xc}, {0x10, 0xffff}, {0xf, 0xfff2}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_RATE={0x6, 0x5, {0x8}}, @qdisc_kind_options=@q_choke={{0xa}, {0x18, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x4e0, 0x2, 0x6, 0x0, 0x1e, 0x2}}]}}, @qdisc_kind_options=@q_codel={{0xa}, {0x54, 0x2, [@TCA_CODEL_TARGET={0x8}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x4}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_LIMIT={0x8, 0x2, 0x2}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x80}, @TCA_CODEL_TARGET={0x8, 0x1, 0xb9}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_INTERVAL={0x8, 0x3, 0x7}, @TCA_CODEL_LIMIT={0x8, 0x2, 0x5}]}}, @TCA_STAB={0xf8, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x8, 0xc000, 0x9, 0x1, 0x80000001, 0x4, 0xa}}, {0x18, 0x2, [0x3, 0x4, 0x3, 0xff, 0x200, 0xfe01, 0x7, 0x8, 0x0, 0x2]}}, {{0x1c, 0x1, {0x0, 0x20, 0x1, 0xfc000, 0x1}}, {0x4}}, {{0x1c, 0x1, {0x3, 0x11, 0x100, 0x5, 0x0, 0x2dd, 0x7fff, 0x4}}, {0xc, 0x2, [0x6, 0x100, 0x2, 0x71]}}, {{0x1c, 0x1, {0x0, 0x40, 0x5, 0x3, 0x2}}, {0x4}}, {{0x1c, 0x1, {0x4, 0x8, 0x1ff, 0x3ff, 0x2, 0x5, 0x9, 0x5}}, {0xe, 0x2, [0x1, 0x1, 0xb41, 0x0, 0x8]}}, {{0x1c, 0x1, {0x9, 0x3f, 0x4, 0x3, 0x0, 0x4, 0x9, 0x5}}, {0xe, 0x2, [0x0, 0x0, 0x5ca, 0xfff, 0xfffb]}}]}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x81}]}, 0x1b8}, 0x1, 0x0, 0x0, 0x20000110}, 0x800)
writev(r2, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1)
recvmmsg(r2, &(0x7f0000003e40)=[{{0x0, 0x3, 0x0, 0x0, &(0x7f00000035c0)=""/241, 0xf1}}, {{&(0x7f00000036c0)=@un=@abs, 0x80, &(0x7f0000003780)=[{&(0x7f0000003740)=""/4, 0x7ffff}], 0x1, &(0x7f00000037c0)=""/236, 0xec}}, {{0x0, 0x0, &(0x7f0000003bc0)=[{0x0, 0xe00000000000000}, {&(0x7f0000003a00)=""/190, 0xbe}, {&(0x7f0000003ac0)=""/131, 0x83}, {0x0}], 0x4, &(0x7f0000003c00)=""/73, 0x49}}, {{&(0x7f0000003c80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, 0x0, 0x0, &(0x7f0000003e00)=""/48, 0x30}}], 0x4, 0x40000121, 0x0)
shutdown(r2, 0x0)

13:44:46 executing program 5:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
socket$kcm(0x2, 0xa, 0x2)
write$tun(r0, &(0x7f0000000240)={@val={0x0, 0x86dd}, @val={0x5, 0x0, 0x0, 0x0, 0x54}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "000003", 0x190, 0x3a, 0x0, @empty, @mcast2, {[@routing={0x0, 0x2, 0x0, 0x0, 0x0, [@empty]}], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x0, "ee7b615d"}, {}, {0x2b, 0x3, "6f8c008275021d683910c309293188a7c747eb2278d2794784"}, {0x0, 0x28, "4429118927041312255133e4d2b8b863b5f5b4ace38952e94c581c85d2d86844f548415db4dbf1992868a2e15095b531ce55d4620ec637afdcc990a4d6bfecb289917d24b31a2ddeb64383b176b823cc203ec1927487b7a00d6a3446cf7db79e14b2206d882c28611fa4d8289337cd75b4688120c73a2710947b908fde68a05a0777a170a14e85c7849462b3f5c3152cf0f3d91c5db93dc4d8f9e6b53708650dc375e6da3650b5ff4079971f6e3ef363382a16b8ae07b7307b5619092e4669dbca480d25738314135509eda68f712b9b09bdb485ea0914590b7ae01c2e34832f16c23c82b22b6ba550acfcede288a5237a06b3f5e09b6e5a0404544efe1474664b985f070121e82070a9f4513c2031a58a3d99e99284b812c0f047061139620890416c9defce02fa49cd1dd14b22df7250314ccb3dfd9827f892656911150cd9d921a8"}]}}}}}, 0x1c6)

13:44:46 executing program 3:
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast2}, 0x10)
sendmmsg$inet(r0, &(0x7f0000000440), 0x0, 0x24040890)
sendto$inet(r0, 0x0, 0x0, 0x2000040, 0x0, 0x0)

13:44:46 executing program 3:
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast2}, 0x10)
sendmmsg$inet(r0, &(0x7f0000000440), 0x0, 0x24040890)
sendto$inet(r0, 0x0, 0x0, 0x2000040, 0x0, 0x0)

13:44:46 executing program 0:
r0 = socket(0x1c, 0x10000001, 0x84)
setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x10, &(0x7f0000000440), 0x4)

13:44:47 executing program 2:
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
syz_genetlink_get_family_id$tipc(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$NFT_BATCH(r1, &(0x7f00000015c0)={&(0x7f0000000300), 0xc, &(0x7f0000001580)={&(0x7f00000014c0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_PAYLOAD_CSUM_OFFSET={0x8, 0x7, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}]}, @NFT_MSG_DELSETELEM={0x1c, 0xe, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}]}], {0x14}}, 0x94}, 0x1, 0x0, 0x0, 0x1}, 0x1)
getsockname$packet(0xffffffffffffffff, &(0x7f0000001340), &(0x7f0000001380)=0x14)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r1, 0x0, 0x0)
sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, 0x0, 0x0)
getsockname(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0)
bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001400)={&(0x7f0000000140), 0xc, &(0x7f0000000340)={&(0x7f0000000f00)=@newqdisc={0x1b8, 0x24, 0x0, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0xc}, {0x10, 0xffff}, {0xf, 0xfff2}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_RATE={0x6, 0x5, {0x8}}, @qdisc_kind_options=@q_choke={{0xa}, {0x18, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x4e0, 0x2, 0x6, 0x0, 0x1e, 0x2}}]}}, @qdisc_kind_options=@q_codel={{0xa}, {0x54, 0x2, [@TCA_CODEL_TARGET={0x8}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x4}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_LIMIT={0x8, 0x2, 0x2}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x80}, @TCA_CODEL_TARGET={0x8, 0x1, 0xb9}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_INTERVAL={0x8, 0x3, 0x7}, @TCA_CODEL_LIMIT={0x8, 0x2, 0x5}]}}, @TCA_STAB={0xf8, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x8, 0xc000, 0x9, 0x1, 0x80000001, 0x4, 0xa}}, {0x18, 0x2, [0x3, 0x4, 0x3, 0xff, 0x200, 0xfe01, 0x7, 0x8, 0x0, 0x2]}}, {{0x1c, 0x1, {0x0, 0x20, 0x1, 0xfc000, 0x1}}, {0x4}}, {{0x1c, 0x1, {0x3, 0x11, 0x100, 0x5, 0x0, 0x2dd, 0x7fff, 0x4}}, {0xc, 0x2, [0x6, 0x100, 0x2, 0x71]}}, {{0x1c, 0x1, {0x0, 0x40, 0x5, 0x3, 0x2}}, {0x4}}, {{0x1c, 0x1, {0x4, 0x8, 0x1ff, 0x3ff, 0x2, 0x5, 0x9, 0x5}}, {0xe, 0x2, [0x1, 0x1, 0xb41, 0x0, 0x8]}}, {{0x1c, 0x1, {0x9, 0x3f, 0x4, 0x3, 0x0, 0x4, 0x9, 0x5}}, {0xe, 0x2, [0x0, 0x0, 0x5ca, 0xfff, 0xfffb]}}]}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x81}]}, 0x1b8}, 0x1, 0x0, 0x0, 0x20000110}, 0x800)
writev(r2, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1)
recvmmsg(r2, &(0x7f0000003e40)=[{{0x0, 0x3, 0x0, 0x0, &(0x7f00000035c0)=""/241, 0xf1}}, {{&(0x7f00000036c0)=@un=@abs, 0x80, &(0x7f0000003780)=[{&(0x7f0000003740)=""/4, 0x7ffff}], 0x1, &(0x7f00000037c0)=""/236, 0xec}}, {{0x0, 0x0, &(0x7f0000003bc0)=[{0x0, 0xe00000000000000}, {&(0x7f0000003a00)=""/190, 0xbe}, {&(0x7f0000003ac0)=""/131, 0x83}, {0x0}], 0x4, &(0x7f0000003c00)=""/73, 0x49}}, {{&(0x7f0000003c80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, 0x0, 0x0, &(0x7f0000003e00)=""/48, 0x30}}], 0x4, 0x40000121, 0x0)
shutdown(r2, 0x0)

13:44:47 executing program 5:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000240)={@val={0x0, 0x86dd}, @val={0x5, 0x0, 0x0, 0x0, 0x54}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "000003", 0x190, 0x3a, 0x0, @empty, @mcast2, {[@routing={0x0, 0x2, 0x0, 0x0, 0x0, [@empty]}], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x0, "ee7b615d"}, {}, {0x2b, 0x3, "6f8c008275021d683910c309293188a7c747eb2278d2794784"}, {0x0, 0x28, "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"}]}}}}}, 0x1c6)

13:44:47 executing program 3:
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast2}, 0x10)
sendmmsg$inet(r0, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}}], 0x1, 0x24040890)
sendto$inet(r0, 0x0, 0x0, 0x2000040, 0x0, 0x0)

13:44:47 executing program 4:
r0 = shmget(0x2, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil)
mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000)
shmat(r0, &(0x7f0000fff000/0x1000)=nil, 0x3000)

13:44:47 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f000000c380)='/proc/crypto\x00', 0x0, 0x0)
read$FUSE(r3, &(0x7f0000000200)={0x2020}, 0x2020)
execve(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000280)=[0x0, 0x0], &(0x7f0000000380)=[&(0x7f00000002c0)='*$%}\xce*\x00', &(0x7f0000000300)='\x00'])

13:44:47 executing program 0:
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
r2 = fcntl$dupfd(r1, 0x0, r0)
setsockopt$inet_sctp_SCTP_INITMSG(r2, 0x84, 0x3, &(0x7f0000000000)={0x0, 0x3}, 0x8)

13:44:47 executing program 3:
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast2}, 0x10)
sendmmsg$inet(r0, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}}], 0x1, 0x24040890)
sendto$inet(r0, 0x0, 0x0, 0x2000040, 0x0, 0x0)

13:44:47 executing program 2:
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
syz_genetlink_get_family_id$tipc(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$NFT_BATCH(r1, &(0x7f00000015c0)={&(0x7f0000000300), 0xc, &(0x7f0000001580)={&(0x7f00000014c0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_PAYLOAD_CSUM_OFFSET={0x8, 0x7, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}]}, @NFT_MSG_DELSETELEM={0x1c, 0xe, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}]}], {0x14}}, 0x94}, 0x1, 0x0, 0x0, 0x1}, 0x1)
getsockname$packet(0xffffffffffffffff, &(0x7f0000001340), &(0x7f0000001380)=0x14)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r1, 0x0, 0x0)
sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, 0x0, 0x0)
getsockname(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0)
bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10)
connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10)
writev(r2, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1)
recvmmsg(r2, &(0x7f0000003e40)=[{{0x0, 0x3, 0x0, 0x0, &(0x7f00000035c0)=""/241, 0xf1}}, {{&(0x7f00000036c0)=@un=@abs, 0x80, &(0x7f0000003780)=[{&(0x7f0000003740)=""/4, 0x7ffff}], 0x1, &(0x7f00000037c0)=""/236, 0xec}}, {{0x0, 0x0, &(0x7f0000003bc0)=[{0x0, 0xe00000000000000}, {&(0x7f0000003a00)=""/190, 0xbe}, {&(0x7f0000003ac0)=""/131, 0x83}, {0x0}], 0x4, &(0x7f0000003c00)=""/73, 0x49}}, {{&(0x7f0000003c80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, 0x0, 0x0, &(0x7f0000003e00)=""/48, 0x30}}], 0x4, 0x40000121, 0x0)
shutdown(r2, 0x0)

13:44:47 executing program 4:
r0 = socket(0x1c, 0x10000001, 0x84)
bind(r0, &(0x7f0000000000)=@in6={0x1c, 0x1c, 0x1}, 0x1c)

13:44:47 executing program 5:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000240)={@val={0x0, 0x86dd}, @val={0x5, 0x0, 0x0, 0x0, 0x54}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "000003", 0x190, 0x3a, 0x0, @empty, @mcast2, {[@routing={0x0, 0x2, 0x0, 0x0, 0x0, [@empty]}], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x0, "ee7b615d"}, {}, {0x2b, 0x3, "6f8c008275021d683910c309293188a7c747eb2278d2794784"}, {0x0, 0x28, "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"}]}}}}}, 0x1c6)

13:44:47 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$inet_mreq(r0, 0x0, 0xe, 0x0, 0x0)

13:44:47 executing program 3:
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast2}, 0x10)
sendmmsg$inet(r0, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}}], 0x1, 0x24040890)
sendto$inet(r0, 0x0, 0x0, 0x2000040, 0x0, 0x0)

13:44:47 executing program 0:
r0 = openat$vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
syz_genetlink_get_family_id$batadv(&(0x7f0000000440), r0)

13:44:48 executing program 3:
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast2}, 0x10)
sendmmsg$inet(r0, &(0x7f0000000440)=[{{&(0x7f0000000000)={0x2, 0x0, @empty}, 0x10, 0x0}}], 0x1, 0x24040890)
sendto$inet(r0, 0x0, 0x0, 0x2000040, 0x0, 0x0)

13:44:48 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
getsockopt$netlink(r0, 0x10e, 0x0, 0x0, &(0x7f0000000b00))

13:44:48 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = getpid()
sendmsg$netlink(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000080)=[{0x0, 0x194}], 0x1, &(0x7f0000000440)=[@cred={{0x1c, 0x1, 0x2, {r1, 0xee01}}}], 0x20}, 0x0)

13:44:48 executing program 3:
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast2}, 0x10)
sendmmsg$inet(r0, &(0x7f0000000440)=[{{&(0x7f0000000000)={0x2, 0x0, @empty}, 0x10, 0x0}}], 0x1, 0x24040890)
sendto$inet(r0, 0x0, 0x0, 0x2000040, 0x0, 0x0)

13:44:48 executing program 4:
r0 = fsopen(&(0x7f0000000140)='incremental-fs\x00', 0x0)
fsmount(r0, 0x0, 0x0)

13:44:48 executing program 5:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000240)={@val={0x0, 0x86dd}, @val={0x5, 0x0, 0x0, 0x0, 0x54}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "000003", 0x190, 0x3a, 0x0, @empty, @mcast2, {[@routing={0x0, 0x2, 0x0, 0x0, 0x0, [@empty]}], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x0, "ee7b615d"}, {}, {0x2b, 0x3, "6f8c008275021d683910c309293188a7c747eb2278d2794784"}, {0x0, 0x28, "4429118927041312255133e4d2b8b863b5f5b4ace38952e94c581c85d2d86844f548415db4dbf1992868a2e15095b531ce55d4620ec637afdcc990a4d6bfecb289917d24b31a2ddeb64383b176b823cc203ec1927487b7a00d6a3446cf7db79e14b2206d882c28611fa4d8289337cd75b4688120c73a2710947b908fde68a05a0777a170a14e85c7849462b3f5c3152cf0f3d91c5db93dc4d8f9e6b53708650dc375e6da3650b5ff4079971f6e3ef363382a16b8ae07b7307b5619092e4669dbca480d25738314135509eda68f712b9b09bdb485ea0914590b7ae01c2e34832f16c23c82b22b6ba550acfcede288a5237a06b3f5e09b6e5a0404544efe1474664b985f070121e82070a9f4513c2031a58a3d99e99284b812c0f047061139620890416c9defce02fa49cd1dd14b22df7250314ccb3dfd9827f892656911150cd9d921a8"}]}}}}}, 0x1c6)

13:44:48 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$netlink(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000500)={0xec4, 0x0, 0x0, 0x0, 0x0, "", [@nested={0xd7, 0x0, 0x0, 0x1, [@generic="629f72d89ae1e213ee30de2de2f0f5dbe373fa2d3eee8346d6ac31ef3b59624e289904d68cdca3f71ac9848ac8bdc7ce1eb4c2f80f2db9d4ea5ef76300c1bd5aadb1ed37d6ff3292c4f34987f7e88f231e621e00ba35300b84b52b7f9537b1b4755a4be0061170f62ad52c13196153032ca15453bd4ec915729c96571a89a982e75e072f0ad1da01fc65f55485fd9f591c6f5ef2274c93c7fffc8685afb35f7650f23ed09b9729a0c02ec60eebe6f84410f91861d071d5191ba9ae9ea10e5bffec62cbd744195c0b2285d81bb30a7f24b39294"]}, @generic="d1123310dd3458c3d33c4953a20471e87a2af3119301ba739d3aeb0a9149d158651d8f16d2bff4c9dd411ab5385ad97016270fe4ecc19340e6f010813ad1b181beb87caedf5e88a57ddb9f666a9126b71c03a8a54ee8cad138979381de01d4ad69336477458b5f873f5549108b10019cdf5dc5fe9c6a0b81732297bc8060ab4ccf", @nested={0xd1, 0x0, 0x0, 0x1, [@generic="30e1f5011d2005c74233a3035a8eb13d4c891228e57eb3b0dddf9cc7f2f0a0ce7aeff843562b30cdc2d0d6471705886bddadaba36aeabf792e5e770224c39405afebc9fd6b3a5f8ac42b72042bfaaaacd5df17431d859e33da1ea57848675648afca4c35ffa4ed1b093180fa9f249995a526158355a2087bd10505da2433ec3301ecb2c33ba2429853fce1283558edc9acb8eb2cd4214f0175a184c6b9b2cf0b23d87fbaaebc0447e639458092a102640e4aa18a3047b1b5eea205544c724af87e9386078a5bf7269c6f6d3ddc"]}, @nested={0xc81, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0x4}, @typed={0x8, 0x0, 0x0, 0x0, @fd}, @typed={0x8, 0x0, 0x0, 0x0, @u32}, @generic="a957160d9cf1a34581ce92a195d71faa75b8d8e75b4418e88b7a73bd0e1d16381b2fd1f6329a527ae397907c77bc5af39f", @typed={0xf, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0x8, 0x0, 0x0, 0x0, @ipv4=@dev}, @generic="70036838b00571ff9a910b1c6909524261984063f70170c7b332fd733872ef01b9e8453ab1c3cc828d8adb7ef917bb1a94116eb9e5962b88e926cc861e5bbc17043449041cc4abfe0d879323bd3e", @generic="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"]}]}, 0xec4}], 0x1}, 0x4040800)

13:44:48 executing program 2:
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
syz_genetlink_get_family_id$tipc(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$NFT_BATCH(r1, &(0x7f00000015c0)={&(0x7f0000000300), 0xc, &(0x7f0000001580)={&(0x7f00000014c0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_PAYLOAD_CSUM_OFFSET={0x8, 0x7, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}]}, @NFT_MSG_DELSETELEM={0x1c, 0xe, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}]}], {0x14}}, 0x94}, 0x1, 0x0, 0x0, 0x1}, 0x1)
getsockname$packet(0xffffffffffffffff, &(0x7f0000001340), &(0x7f0000001380)=0x14)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r1, 0x0, 0x0)
sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, 0x0, 0x0)
getsockname(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0)
bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10)
connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10)
writev(r2, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1)
recvmmsg(r2, &(0x7f0000003e40)=[{{0x0, 0x3, 0x0, 0x0, &(0x7f00000035c0)=""/241, 0xf1}}, {{&(0x7f00000036c0)=@un=@abs, 0x80, &(0x7f0000003780)=[{&(0x7f0000003740)=""/4, 0x7ffff}], 0x1, &(0x7f00000037c0)=""/236, 0xec}}, {{0x0, 0x0, &(0x7f0000003bc0)=[{0x0, 0xe00000000000000}, {&(0x7f0000003a00)=""/190, 0xbe}, {&(0x7f0000003ac0)=""/131, 0x83}, {0x0}], 0x4, &(0x7f0000003c00)=""/73, 0x49}}, {{&(0x7f0000003c80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, 0x0, 0x0, &(0x7f0000003e00)=""/48, 0x30}}], 0x4, 0x40000121, 0x0)
shutdown(r2, 0x0)

13:44:48 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f000000c380)='/proc/crypto\x00', 0x0, 0x0)
read$FUSE(r3, &(0x7f0000000200)={0x2020}, 0x2020)
execve(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000280)=[0x0, 0x0], &(0x7f0000000380)=[&(0x7f00000002c0)='*$%}\xce*\x00', &(0x7f0000000300)='\x00'])

13:44:48 executing program 0:
r0 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x5, &(0x7f0000000440)=@raw={'raw\x00', 0x9, 0x3, 0x288, 0x150, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x218, 0xffffffff, 0xffffffff, 0x218, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private2, @private0, [], [], 'syzkaller1\x00', 'veth1_to_hsr\x00'}, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz1\x00'}}}, {{@ipv6={@mcast1, @mcast2, [], [], 'team0\x00', 'ip6gretap0\x00'}, 0x0, 0xa8, 0xc8}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2e8)

13:44:48 executing program 3:
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast2}, 0x10)
sendmmsg$inet(r0, &(0x7f0000000440)=[{{&(0x7f0000000000)={0x2, 0x0, @empty}, 0x10, 0x0}}], 0x1, 0x24040890)
sendto$inet(r0, 0x0, 0x0, 0x2000040, 0x0, 0x0)

13:44:49 executing program 4:
r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/class/net', 0x0, 0x0)
ioctl$INCFS_IOC_CREATE_FILE(r0, 0xc058671e, 0x0)

13:44:49 executing program 5:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000240)={@val={0x0, 0x86dd}, @val={0x5, 0x0, 0x0, 0x0, 0x54}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "000003", 0x190, 0x3a, 0x0, @empty, @mcast2, {[@routing={0x0, 0x2, 0x0, 0x0, 0x0, [@empty]}], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x0, "ee7b615d"}, {}, {0x2b, 0x3, "6f8c008275021d683910c309293188a7c747eb2278d2794784"}, {0x0, 0x28, "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"}]}}}}}, 0x1c6)

13:44:49 executing program 0:
r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, 0x0)

13:44:49 executing program 3:
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast2}, 0x10)
sendmmsg$inet(r0, &(0x7f0000000440)=[{{&(0x7f0000000000)={0x2, 0x4e24, @empty}, 0x10, 0x0}}], 0x1, 0x0)
sendto$inet(r0, 0x0, 0x0, 0x2000040, 0x0, 0x0)

13:44:49 executing program 4:
r0 = memfd_create(&(0x7f0000000040)='(^!}\x00', 0x0)
fsetxattr$trusted_overlay_redirect(r0, &(0x7f0000000080), 0x0, 0x0, 0x0)

13:44:49 executing program 0:
timerfd_create(0x0, 0xc0400)

13:44:49 executing program 4:
r0 = msgget$private(0x0, 0x0)
msgctl$IPC_INFO(r0, 0x3, &(0x7f0000000240)=""/105)

13:44:49 executing program 0:
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0)

13:44:50 executing program 2:
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
syz_genetlink_get_family_id$tipc(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$NFT_BATCH(r1, &(0x7f00000015c0)={&(0x7f0000000300), 0xc, &(0x7f0000001580)={&(0x7f00000014c0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_PAYLOAD_CSUM_OFFSET={0x8, 0x7, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}]}, @NFT_MSG_DELSETELEM={0x1c, 0xe, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}]}], {0x14}}, 0x94}, 0x1, 0x0, 0x0, 0x1}, 0x1)
getsockname$packet(0xffffffffffffffff, &(0x7f0000001340), &(0x7f0000001380)=0x14)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r1, 0x0, 0x0)
sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, 0x0, 0x0)
getsockname(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0)
bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10)
connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10)
writev(r2, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1)
recvmmsg(r2, &(0x7f0000003e40)=[{{0x0, 0x3, 0x0, 0x0, &(0x7f00000035c0)=""/241, 0xf1}}, {{&(0x7f00000036c0)=@un=@abs, 0x80, &(0x7f0000003780)=[{&(0x7f0000003740)=""/4, 0x7ffff}], 0x1, &(0x7f00000037c0)=""/236, 0xec}}, {{0x0, 0x0, &(0x7f0000003bc0)=[{0x0, 0xe00000000000000}, {&(0x7f0000003a00)=""/190, 0xbe}, {&(0x7f0000003ac0)=""/131, 0x83}, {0x0}], 0x4, &(0x7f0000003c00)=""/73, 0x49}}, {{&(0x7f0000003c80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, 0x0, 0x0, &(0x7f0000003e00)=""/48, 0x30}}], 0x4, 0x40000121, 0x0)
shutdown(r2, 0x0)

13:44:50 executing program 3:
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast2}, 0x10)
sendmmsg$inet(r0, &(0x7f0000000440)=[{{&(0x7f0000000000)={0x2, 0x4e24, @empty}, 0x10, 0x0}}], 0x1, 0x0)
sendto$inet(r0, 0x0, 0x0, 0x2000040, 0x0, 0x0)

13:44:50 executing program 5:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000240)={@val={0x0, 0x86dd}, @val={0x5, 0x0, 0x0, 0x0, 0x54}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "000003", 0x190, 0x3a, 0x0, @empty, @mcast2, {[@routing={0x0, 0x2, 0x0, 0x0, 0x0, [@empty]}], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x0, "ee7b615d"}, {}, {0x2b, 0x3, "6f8c008275021d683910c309293188a7c747eb2278d2794784"}, {0x0, 0x28, "4429118927041312255133e4d2b8b863b5f5b4ace38952e94c581c85d2d86844f548415db4dbf1992868a2e15095b531ce55d4620ec637afdcc990a4d6bfecb289917d24b31a2ddeb64383b176b823cc203ec1927487b7a00d6a3446cf7db79e14b2206d882c28611fa4d8289337cd75b4688120c73a2710947b908fde68a05a0777a170a14e85c7849462b3f5c3152cf0f3d91c5db93dc4d8f9e6b53708650dc375e6da3650b5ff4079971f6e3ef363382a16b8ae07b7307b5619092e4669dbca480d25738314135509eda68f712b9b09bdb485ea0914590b7ae01c2e34832f16c23c82b22b6ba550acfcede288a5237a06b3f5e09b6e5a0404544efe1474664b985f070121e82070a9f4513c2031a58a3d99e99284b812c0f047061139620890416c9defce02fa49cd1dd14b22df7250314ccb3dfd9827f892656911150cd9d921a8"}]}}}}}, 0x1c6)

13:44:50 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080))
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f000000c380)='/proc/crypto\x00', 0x0, 0x0)
read$FUSE(r3, &(0x7f0000000200)={0x2020}, 0x2020)
execve(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000280)=[0x0, 0x0], &(0x7f0000000380)=[&(0x7f00000002c0)='*$%}\xce*\x00', &(0x7f0000000300)='\x00'])

13:44:50 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x60}}, 0x0)
getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000580)=ANY=[@ANYBLOB="38000000240005f700"/20, @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000b0001006d756c746971"], 0x38}}, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0)

13:44:50 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000600)={0x1c, 0x8, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0)

13:44:50 executing program 3:
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast2}, 0x10)
sendmmsg$inet(r0, &(0x7f0000000440)=[{{&(0x7f0000000000)={0x2, 0x4e24, @empty}, 0x10, 0x0}}], 0x1, 0x0)
sendto$inet(r0, 0x0, 0x0, 0x2000040, 0x0, 0x0)

[ 2205.174169][T21430] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'.
13:44:50 executing program 0:
sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_GET_DAEMON(0xffffffffffffffff, 0x0, 0x40000)
sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000600), 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x24, 0x0, 0x0, 0x0, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_DAEMON={0x4}]}, 0x24}}, 0x0)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001b00), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000001b80)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000001b40), 0x13f, 0x9}}, 0x20)

13:44:50 executing program 3:
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast2}, 0x10)
sendmmsg$inet(r0, &(0x7f0000000440)=[{{&(0x7f0000000000)={0x2, 0x4e24, @empty}, 0x10, 0x0}}], 0x1, 0x24040890)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x2000040, 0x0, 0x0)

[ 2205.505664][T21439] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'.
13:44:50 executing program 0:
mkdir(&(0x7f0000000400)='./file1\x00', 0x0)
mkdir(&(0x7f0000000040)='./bus\x00', 0x0)
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='workdir=./file1,lowerdir=./file0,upperdir=./bus,index=on'])
chdir(&(0x7f0000000380)='./bus\x00')
creat(&(0x7f0000000000)='./file1\x00', 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0)
unlinkat(r0, &(0x7f0000000280)='./file1\x00', 0x0)

13:44:50 executing program 5:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000240)={@val={0x0, 0x86dd}, @val={0x5, 0x0, 0x0, 0x0, 0x54}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "000003", 0x190, 0x3a, 0x0, @empty, @mcast2, {[@routing={0x0, 0x2, 0x0, 0x0, 0x0, [@empty]}], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x0, "ee7b615d"}, {}, {0x2b, 0x3, "6f8c008275021d683910c309293188a7c747eb2278d2794784"}, {0x0, 0x28, "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"}]}}}}}, 0x1c6)

13:44:50 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000780), r0)

13:44:51 executing program 2:
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
syz_genetlink_get_family_id$tipc(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$NFT_BATCH(r1, &(0x7f00000015c0)={&(0x7f0000000300), 0xc, &(0x7f0000001580)={&(0x7f00000014c0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_PAYLOAD_CSUM_OFFSET={0x8, 0x7, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}]}, @NFT_MSG_DELSETELEM={0x1c, 0xe, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}]}], {0x14}}, 0x94}, 0x1, 0x0, 0x0, 0x1}, 0x1)
getsockname$packet(0xffffffffffffffff, &(0x7f0000001340), &(0x7f0000001380)=0x14)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r1, 0x0, 0x0)
sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, 0x0, 0x0)
getsockname(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001400)={&(0x7f0000000140), 0xc, &(0x7f0000000340)={&(0x7f0000000f00)=@newqdisc={0x1b8, 0x24, 0x0, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0xc}, {0x10, 0xffff}, {0xf, 0xfff2}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_RATE={0x6, 0x5, {0x8}}, @qdisc_kind_options=@q_choke={{0xa}, {0x18, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x4e0, 0x2, 0x6, 0x0, 0x1e, 0x2}}]}}, @qdisc_kind_options=@q_codel={{0xa}, {0x54, 0x2, [@TCA_CODEL_TARGET={0x8}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x4}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_LIMIT={0x8, 0x2, 0x2}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x80}, @TCA_CODEL_TARGET={0x8, 0x1, 0xb9}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_INTERVAL={0x8, 0x3, 0x7}, @TCA_CODEL_LIMIT={0x8, 0x2, 0x5}]}}, @TCA_STAB={0xf8, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x8, 0xc000, 0x9, 0x1, 0x80000001, 0x4, 0xa}}, {0x18, 0x2, [0x3, 0x4, 0x3, 0xff, 0x200, 0xfe01, 0x7, 0x8, 0x0, 0x2]}}, {{0x1c, 0x1, {0x0, 0x20, 0x1, 0xfc000, 0x1}}, {0x4}}, {{0x1c, 0x1, {0x3, 0x11, 0x100, 0x5, 0x0, 0x2dd, 0x7fff, 0x4}}, {0xc, 0x2, [0x6, 0x100, 0x2, 0x71]}}, {{0x1c, 0x1, {0x0, 0x40, 0x5, 0x3, 0x2}}, {0x4}}, {{0x1c, 0x1, {0x4, 0x8, 0x1ff, 0x3ff, 0x2, 0x5, 0x9, 0x5}}, {0xe, 0x2, [0x1, 0x1, 0xb41, 0x0, 0x8]}}, {{0x1c, 0x1, {0x9, 0x3f, 0x4, 0x3, 0x0, 0x4, 0x9, 0x5}}, {0xe, 0x2, [0x0, 0x0, 0x5ca, 0xfff, 0xfffb]}}]}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x81}]}, 0x1b8}, 0x1, 0x0, 0x0, 0x20000110}, 0x800)
connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10)
writev(r2, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1)
recvmmsg(r2, &(0x7f0000003e40)=[{{0x0, 0x3, 0x0, 0x0, &(0x7f00000035c0)=""/241, 0xf1}}, {{&(0x7f00000036c0)=@un=@abs, 0x80, &(0x7f0000003780)=[{&(0x7f0000003740)=""/4, 0x7ffff}], 0x1, &(0x7f00000037c0)=""/236, 0xec}}, {{0x0, 0x0, &(0x7f0000003bc0)=[{0x0, 0xe00000000000000}, {&(0x7f0000003a00)=""/190, 0xbe}, {&(0x7f0000003ac0)=""/131, 0x83}, {0x0}], 0x4, &(0x7f0000003c00)=""/73, 0x49}}, {{&(0x7f0000003c80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, 0x0, 0x0, &(0x7f0000003e00)=""/48, 0x30}}], 0x4, 0x40000121, 0x0)
shutdown(r2, 0x0)

13:44:51 executing program 3:
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast2}, 0x10)
sendmmsg$inet(r0, &(0x7f0000000440)=[{{&(0x7f0000000000)={0x2, 0x4e24, @empty}, 0x10, 0x0}}], 0x1, 0x24040890)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x2000040, 0x0, 0x0)

13:44:51 executing program 4:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c)
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0)
setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='vegas\x00', 0x6)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000002480)=[{&(0x7f0000000100)="7255d49bcade97f8d839960c", 0xc}], 0x1}, 0x1)
write$binfmt_script(r1, &(0x7f0000000100)=ANY=[], 0xfffffd9d)
sendfile(r0, r1, 0x0, 0x8000002b)

13:44:51 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_DISASSOCIATE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x90, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_IE={0x61, 0x2a, [@gcr_ga={0xbd, 0x6}, @ht={0x2d, 0x70}, @ibss={0x6, 0x2}, @sec_chan_ofs={0x3e, 0x1}, @preq={0x82, 0x30, @not_ext={{}, 0x0, 0x0, 0x0, @device_a, 0x0, "", 0x0, 0x0, 0x2, [{}, {{}, @broadcast}]}}]}]}, 0x90}}, 0x0)

13:44:51 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080))
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f000000c380)='/proc/crypto\x00', 0x0, 0x0)
read$FUSE(r3, &(0x7f0000000200)={0x2020}, 0x2020)
execve(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000280)=[0x0, 0x0], &(0x7f0000000380)=[&(0x7f00000002c0)='*$%}\xce*\x00', &(0x7f0000000300)='\x00'])

13:44:51 executing program 5:
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r0 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(0xffffffffffffffff, &(0x7f0000000240)={@val={0x0, 0x86dd}, @val={0x5, 0x0, 0x0, 0x0, 0x54}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "000003", 0x190, 0x3a, 0x0, @empty, @mcast2, {[@routing={0x0, 0x2, 0x0, 0x0, 0x0, [@empty]}], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x0, "ee7b615d"}, {}, {0x2b, 0x3, "6f8c008275021d683910c309293188a7c747eb2278d2794784"}, {0x0, 0x28, "4429118927041312255133e4d2b8b863b5f5b4ace38952e94c581c85d2d86844f548415db4dbf1992868a2e15095b531ce55d4620ec637afdcc990a4d6bfecb289917d24b31a2ddeb64383b176b823cc203ec1927487b7a00d6a3446cf7db79e14b2206d882c28611fa4d8289337cd75b4688120c73a2710947b908fde68a05a0777a170a14e85c7849462b3f5c3152cf0f3d91c5db93dc4d8f9e6b53708650dc375e6da3650b5ff4079971f6e3ef363382a16b8ae07b7307b5619092e4669dbca480d25738314135509eda68f712b9b09bdb485ea0914590b7ae01c2e34832f16c23c82b22b6ba550acfcede288a5237a06b3f5e09b6e5a0404544efe1474664b985f070121e82070a9f4513c2031a58a3d99e99284b812c0f047061139620890416c9defce02fa49cd1dd14b22df7250314ccb3dfd9827f892656911150cd9d921a8"}]}}}}}, 0x1c6)

13:44:51 executing program 3:
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast2}, 0x10)
sendmmsg$inet(r0, &(0x7f0000000440)=[{{&(0x7f0000000000)={0x2, 0x4e24, @empty}, 0x10, 0x0}}], 0x1, 0x24040890)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x2000040, 0x0, 0x0)

13:44:51 executing program 2:
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
syz_genetlink_get_family_id$tipc(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$NFT_BATCH(r1, &(0x7f00000015c0)={&(0x7f0000000300), 0xc, &(0x7f0000001580)={&(0x7f00000014c0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_PAYLOAD_CSUM_OFFSET={0x8, 0x7, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}]}, @NFT_MSG_DELSETELEM={0x1c, 0xe, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}]}], {0x14}}, 0x94}, 0x1, 0x0, 0x0, 0x1}, 0x1)
getsockname$packet(0xffffffffffffffff, &(0x7f0000001340), &(0x7f0000001380)=0x14)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r1, 0x0, 0x0)
sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, 0x0, 0x0)
getsockname(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001400)={&(0x7f0000000140), 0xc, &(0x7f0000000340)={&(0x7f0000000f00)=@newqdisc={0x1b8, 0x24, 0x0, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0xc}, {0x10, 0xffff}, {0xf, 0xfff2}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_RATE={0x6, 0x5, {0x8}}, @qdisc_kind_options=@q_choke={{0xa}, {0x18, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x4e0, 0x2, 0x6, 0x0, 0x1e, 0x2}}]}}, @qdisc_kind_options=@q_codel={{0xa}, {0x54, 0x2, [@TCA_CODEL_TARGET={0x8}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x4}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_LIMIT={0x8, 0x2, 0x2}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x80}, @TCA_CODEL_TARGET={0x8, 0x1, 0xb9}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_INTERVAL={0x8, 0x3, 0x7}, @TCA_CODEL_LIMIT={0x8, 0x2, 0x5}]}}, @TCA_STAB={0xf8, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x8, 0xc000, 0x9, 0x1, 0x80000001, 0x4, 0xa}}, {0x18, 0x2, [0x3, 0x4, 0x3, 0xff, 0x200, 0xfe01, 0x7, 0x8, 0x0, 0x2]}}, {{0x1c, 0x1, {0x0, 0x20, 0x1, 0xfc000, 0x1}}, {0x4}}, {{0x1c, 0x1, {0x3, 0x11, 0x100, 0x5, 0x0, 0x2dd, 0x7fff, 0x4}}, {0xc, 0x2, [0x6, 0x100, 0x2, 0x71]}}, {{0x1c, 0x1, {0x0, 0x40, 0x5, 0x3, 0x2}}, {0x4}}, {{0x1c, 0x1, {0x4, 0x8, 0x1ff, 0x3ff, 0x2, 0x5, 0x9, 0x5}}, {0xe, 0x2, [0x1, 0x1, 0xb41, 0x0, 0x8]}}, {{0x1c, 0x1, {0x9, 0x3f, 0x4, 0x3, 0x0, 0x4, 0x9, 0x5}}, {0xe, 0x2, [0x0, 0x0, 0x5ca, 0xfff, 0xfffb]}}]}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x81}]}, 0x1b8}, 0x1, 0x0, 0x0, 0x20000110}, 0x800)
connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10)
writev(r2, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1)
recvmmsg(r2, &(0x7f0000003e40)=[{{0x0, 0x3, 0x0, 0x0, &(0x7f00000035c0)=""/241, 0xf1}}, {{&(0x7f00000036c0)=@un=@abs, 0x80, &(0x7f0000003780)=[{&(0x7f0000003740)=""/4, 0x7ffff}], 0x1, &(0x7f00000037c0)=""/236, 0xec}}, {{0x0, 0x0, &(0x7f0000003bc0)=[{0x0, 0xe00000000000000}, {&(0x7f0000003a00)=""/190, 0xbe}, {&(0x7f0000003ac0)=""/131, 0x83}, {0x0}], 0x4, &(0x7f0000003c00)=""/73, 0x49}}, {{&(0x7f0000003c80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, 0x0, 0x0, &(0x7f0000003e00)=""/48, 0x30}}], 0x4, 0x40000121, 0x0)
shutdown(r2, 0x0)

13:44:51 executing program 4:
syz_usb_connect$cdc_ecm(0x0, 0x52, &(0x7f0000000180)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x40, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, [@call_mgmt={0x5}]}}}]}}]}}, 0x0)

13:44:51 executing program 0:
r0 = epoll_create(0xec)
epoll_pwait(r0, &(0x7f0000000400)=[{}], 0x1, 0x8, &(0x7f0000000480), 0x8)

13:44:51 executing program 3:
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast2}, 0x10)
sendmmsg$inet(r0, &(0x7f0000000440)=[{{&(0x7f0000000000)={0x2, 0x4e24, @empty}, 0x10, 0x0}}], 0x1, 0x24040890)
sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0)

13:44:52 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_DISASSOCIATE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x34, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_MAC={0xa, 0x5, @from_mac=@broadcast}]}, 0x34}}, 0x0)

13:44:52 executing program 5:
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r0 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(0xffffffffffffffff, &(0x7f0000000240)={@val={0x0, 0x86dd}, @val={0x5, 0x0, 0x0, 0x0, 0x54}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "000003", 0x190, 0x3a, 0x0, @empty, @mcast2, {[@routing={0x0, 0x2, 0x0, 0x0, 0x0, [@empty]}], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x0, "ee7b615d"}, {}, {0x2b, 0x3, "6f8c008275021d683910c309293188a7c747eb2278d2794784"}, {0x0, 0x28, "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"}]}}}}}, 0x1c6)

13:44:52 executing program 2:
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
syz_genetlink_get_family_id$tipc(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$NFT_BATCH(r1, &(0x7f00000015c0)={&(0x7f0000000300), 0xc, &(0x7f0000001580)={&(0x7f00000014c0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_PAYLOAD_CSUM_OFFSET={0x8, 0x7, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}]}, @NFT_MSG_DELSETELEM={0x1c, 0xe, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}]}], {0x14}}, 0x94}, 0x1, 0x0, 0x0, 0x1}, 0x1)
getsockname$packet(0xffffffffffffffff, &(0x7f0000001340), &(0x7f0000001380)=0x14)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r1, 0x0, 0x0)
sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, 0x0, 0x0)
getsockname(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001400)={&(0x7f0000000140), 0xc, &(0x7f0000000340)={&(0x7f0000000f00)=@newqdisc={0x1b8, 0x24, 0x0, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0xc}, {0x10, 0xffff}, {0xf, 0xfff2}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_RATE={0x6, 0x5, {0x8}}, @qdisc_kind_options=@q_choke={{0xa}, {0x18, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x4e0, 0x2, 0x6, 0x0, 0x1e, 0x2}}]}}, @qdisc_kind_options=@q_codel={{0xa}, {0x54, 0x2, [@TCA_CODEL_TARGET={0x8}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x4}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_LIMIT={0x8, 0x2, 0x2}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x80}, @TCA_CODEL_TARGET={0x8, 0x1, 0xb9}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_INTERVAL={0x8, 0x3, 0x7}, @TCA_CODEL_LIMIT={0x8, 0x2, 0x5}]}}, @TCA_STAB={0xf8, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x8, 0xc000, 0x9, 0x1, 0x80000001, 0x4, 0xa}}, {0x18, 0x2, [0x3, 0x4, 0x3, 0xff, 0x200, 0xfe01, 0x7, 0x8, 0x0, 0x2]}}, {{0x1c, 0x1, {0x0, 0x20, 0x1, 0xfc000, 0x1}}, {0x4}}, {{0x1c, 0x1, {0x3, 0x11, 0x100, 0x5, 0x0, 0x2dd, 0x7fff, 0x4}}, {0xc, 0x2, [0x6, 0x100, 0x2, 0x71]}}, {{0x1c, 0x1, {0x0, 0x40, 0x5, 0x3, 0x2}}, {0x4}}, {{0x1c, 0x1, {0x4, 0x8, 0x1ff, 0x3ff, 0x2, 0x5, 0x9, 0x5}}, {0xe, 0x2, [0x1, 0x1, 0xb41, 0x0, 0x8]}}, {{0x1c, 0x1, {0x9, 0x3f, 0x4, 0x3, 0x0, 0x4, 0x9, 0x5}}, {0xe, 0x2, [0x0, 0x0, 0x5ca, 0xfff, 0xfffb]}}]}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x81}]}, 0x1b8}, 0x1, 0x0, 0x0, 0x20000110}, 0x800)
connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10)
writev(r2, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1)
recvmmsg(r2, &(0x7f0000003e40)=[{{0x0, 0x3, 0x0, 0x0, &(0x7f00000035c0)=""/241, 0xf1}}, {{&(0x7f00000036c0)=@un=@abs, 0x80, &(0x7f0000003780)=[{&(0x7f0000003740)=""/4, 0x7ffff}], 0x1, &(0x7f00000037c0)=""/236, 0xec}}, {{0x0, 0x0, &(0x7f0000003bc0)=[{0x0, 0xe00000000000000}, {&(0x7f0000003a00)=""/190, 0xbe}, {&(0x7f0000003ac0)=""/131, 0x83}, {0x0}], 0x4, &(0x7f0000003c00)=""/73, 0x49}}, {{&(0x7f0000003c80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, 0x0, 0x0, &(0x7f0000003e00)=""/48, 0x30}}], 0x4, 0x40000121, 0x0)
shutdown(r2, 0x0)

13:44:52 executing program 3:
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast2}, 0x10)
sendmmsg$inet(r0, &(0x7f0000000440)=[{{&(0x7f0000000000)={0x2, 0x4e24, @empty}, 0x10, 0x0}}], 0x1, 0x24040890)
sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0)

[ 2207.109753][T21485] netlink: 'syz-executor.0': attribute type 5 has an invalid length.
13:44:52 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000003880)={0x20, 0x1c, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @ipv4=@local}, @typed={0x8, 0x0, 0x0, 0x0, @u32}]}, 0x20}], 0x1}, 0x0)

[ 2207.316243][T21496] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
13:44:52 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080))
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f000000c380)='/proc/crypto\x00', 0x0, 0x0)
read$FUSE(r3, &(0x7f0000000200)={0x2020}, 0x2020)
execve(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000280)=[0x0, 0x0], &(0x7f0000000380)=[&(0x7f00000002c0)='*$%}\xce*\x00', &(0x7f0000000300)='\x00'])

13:44:52 executing program 3:
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast2}, 0x10)
sendmmsg$inet(r0, &(0x7f0000000440)=[{{&(0x7f0000000000)={0x2, 0x4e24, @empty}, 0x10, 0x0}}], 0x1, 0x24040890)
sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0)

13:44:52 executing program 2:
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
syz_genetlink_get_family_id$tipc(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$NFT_BATCH(r1, &(0x7f00000015c0)={&(0x7f0000000300), 0xc, &(0x7f0000001580)={&(0x7f00000014c0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_PAYLOAD_CSUM_OFFSET={0x8, 0x7, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}]}, @NFT_MSG_DELSETELEM={0x1c, 0xe, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}]}], {0x14}}, 0x94}, 0x1, 0x0, 0x0, 0x1}, 0x1)
getsockname$packet(0xffffffffffffffff, &(0x7f0000001340), &(0x7f0000001380)=0x14)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r1, 0x0, 0x0)
sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, 0x0, 0x0)
getsockname(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001400)={&(0x7f0000000140), 0xc, &(0x7f0000000340)={&(0x7f0000000f00)=@newqdisc={0x1b8, 0x24, 0x0, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0xc}, {0x10, 0xffff}, {0xf, 0xfff2}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_RATE={0x6, 0x5, {0x8}}, @qdisc_kind_options=@q_choke={{0xa}, {0x18, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x4e0, 0x2, 0x6, 0x0, 0x1e, 0x2}}]}}, @qdisc_kind_options=@q_codel={{0xa}, {0x54, 0x2, [@TCA_CODEL_TARGET={0x8}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x4}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_LIMIT={0x8, 0x2, 0x2}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x80}, @TCA_CODEL_TARGET={0x8, 0x1, 0xb9}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_INTERVAL={0x8, 0x3, 0x7}, @TCA_CODEL_LIMIT={0x8, 0x2, 0x5}]}}, @TCA_STAB={0xf8, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x8, 0xc000, 0x9, 0x1, 0x80000001, 0x4, 0xa}}, {0x18, 0x2, [0x3, 0x4, 0x3, 0xff, 0x200, 0xfe01, 0x7, 0x8, 0x0, 0x2]}}, {{0x1c, 0x1, {0x0, 0x20, 0x1, 0xfc000, 0x1}}, {0x4}}, {{0x1c, 0x1, {0x3, 0x11, 0x100, 0x5, 0x0, 0x2dd, 0x7fff, 0x4}}, {0xc, 0x2, [0x6, 0x100, 0x2, 0x71]}}, {{0x1c, 0x1, {0x0, 0x40, 0x5, 0x3, 0x2}}, {0x4}}, {{0x1c, 0x1, {0x4, 0x8, 0x1ff, 0x3ff, 0x2, 0x5, 0x9, 0x5}}, {0xe, 0x2, [0x1, 0x1, 0xb41, 0x0, 0x8]}}, {{0x1c, 0x1, {0x9, 0x3f, 0x4, 0x3, 0x0, 0x4, 0x9, 0x5}}, {0xe, 0x2, [0x0, 0x0, 0x5ca, 0xfff, 0xfffb]}}]}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x81}]}, 0x1b8}, 0x1, 0x0, 0x0, 0x20000110}, 0x800)
connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10)
writev(r2, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1)
recvmmsg(r2, &(0x7f0000003e40)=[{{0x0, 0x3, 0x0, 0x0, &(0x7f00000035c0)=""/241, 0xf1}}, {{&(0x7f00000036c0)=@un=@abs, 0x80, &(0x7f0000003780)=[{&(0x7f0000003740)=""/4, 0x7ffff}], 0x1, &(0x7f00000037c0)=""/236, 0xec}}, {{0x0, 0x0, &(0x7f0000003bc0)=[{0x0, 0xe00000000000000}, {&(0x7f0000003a00)=""/190, 0xbe}, {&(0x7f0000003ac0)=""/131, 0x83}, {0x0}], 0x4, &(0x7f0000003c00)=""/73, 0x49}}, {{&(0x7f0000003c80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, 0x0, 0x0, &(0x7f0000003e00)=""/48, 0x30}}], 0x4, 0x40000121, 0x0)
shutdown(r2, 0x0)

13:44:52 executing program 0:
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/zoneinfo\x00', 0x0, 0x0)
read$FUSE(r0, 0x0, 0x0)

13:44:52 executing program 4:
syz_mount_image$fuse(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
utime(&(0x7f0000000140)='./file0\x00', 0x0)

13:44:52 executing program 3:
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200202, 0x88)

13:44:52 executing program 0:
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/devices/virtual', 0x100000, 0x10)

13:44:53 executing program 5:
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r0 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(0xffffffffffffffff, &(0x7f0000000240)={@val={0x0, 0x86dd}, @val={0x5, 0x0, 0x0, 0x0, 0x54}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "000003", 0x190, 0x3a, 0x0, @empty, @mcast2, {[@routing={0x0, 0x2, 0x0, 0x0, 0x0, [@empty]}], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x0, "ee7b615d"}, {}, {0x2b, 0x3, "6f8c008275021d683910c309293188a7c747eb2278d2794784"}, {0x0, 0x28, "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"}]}}}}}, 0x1c6)

13:44:53 executing program 4:
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x40, 0x0)
fsetxattr$trusted_overlay_redirect(r0, &(0x7f00000010c0), 0x0, 0x0, 0x3)

13:44:53 executing program 3:
r0 = syz_open_procfs(0x0, &(0x7f0000000280)='gid_map\x00')
write$FUSE_LSEEK(r0, 0x0, 0x0)

13:44:53 executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0xde06aab3d8cb78d5)

13:44:53 executing program 4:
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x24000044)
r0 = socket$rxrpc(0x21, 0x2, 0xa)
bind$rxrpc(r0, &(0x7f0000000080)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x0, @multicast1}}, 0x24)
listen(r0, 0x0)
close(r0)

13:44:53 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
getpid()
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f000000c380)='/proc/crypto\x00', 0x0, 0x0)
read$FUSE(r2, &(0x7f0000000200)={0x2020}, 0x2020)
execve(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000280)=[0x0, 0x0], &(0x7f0000000380)=[&(0x7f00000002c0)='*$%}\xce*\x00', &(0x7f0000000300)='\x00'])

13:44:53 executing program 3:
r0 = socket$inet6_dccp(0xa, 0x6, 0x0)
setsockopt$inet6_group_source_req(r0, 0x29, 0x21, 0x0, 0x0)

13:44:53 executing program 2:
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
syz_genetlink_get_family_id$tipc(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$NFT_BATCH(r1, &(0x7f00000015c0)={&(0x7f0000000300), 0xc, &(0x7f0000001580)={&(0x7f00000014c0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_PAYLOAD_CSUM_OFFSET={0x8, 0x7, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}]}, @NFT_MSG_DELSETELEM={0x1c, 0xe, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}]}], {0x14}}, 0x94}, 0x1, 0x0, 0x0, 0x1}, 0x1)
getsockname$packet(0xffffffffffffffff, &(0x7f0000001340), &(0x7f0000001380)=0x14)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r1, 0x0, 0x0)
sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, 0x0, 0x0)
getsockname(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001400)={&(0x7f0000000140), 0xc, &(0x7f0000000340)={&(0x7f0000000f00)=@newqdisc={0x1b8, 0x24, 0x0, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0xc}, {0x10, 0xffff}, {0xf, 0xfff2}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_RATE={0x6, 0x5, {0x8}}, @qdisc_kind_options=@q_choke={{0xa}, {0x18, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x4e0, 0x2, 0x6, 0x0, 0x1e, 0x2}}]}}, @qdisc_kind_options=@q_codel={{0xa}, {0x54, 0x2, [@TCA_CODEL_TARGET={0x8}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x4}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_LIMIT={0x8, 0x2, 0x2}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x80}, @TCA_CODEL_TARGET={0x8, 0x1, 0xb9}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_INTERVAL={0x8, 0x3, 0x7}, @TCA_CODEL_LIMIT={0x8, 0x2, 0x5}]}}, @TCA_STAB={0xf8, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x8, 0xc000, 0x9, 0x1, 0x80000001, 0x4, 0xa}}, {0x18, 0x2, [0x3, 0x4, 0x3, 0xff, 0x200, 0xfe01, 0x7, 0x8, 0x0, 0x2]}}, {{0x1c, 0x1, {0x0, 0x20, 0x1, 0xfc000, 0x1}}, {0x4}}, {{0x1c, 0x1, {0x3, 0x11, 0x100, 0x5, 0x0, 0x2dd, 0x7fff, 0x4}}, {0xc, 0x2, [0x6, 0x100, 0x2, 0x71]}}, {{0x1c, 0x1, {0x0, 0x40, 0x5, 0x3, 0x2}}, {0x4}}, {{0x1c, 0x1, {0x4, 0x8, 0x1ff, 0x3ff, 0x2, 0x5, 0x9, 0x5}}, {0xe, 0x2, [0x1, 0x1, 0xb41, 0x0, 0x8]}}, {{0x1c, 0x1, {0x9, 0x3f, 0x4, 0x3, 0x0, 0x4, 0x9, 0x5}}, {0xe, 0x2, [0x0, 0x0, 0x5ca, 0xfff, 0xfffb]}}]}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x81}]}, 0x1b8}, 0x1, 0x0, 0x0, 0x20000110}, 0x800)
connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10)
writev(r2, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1)
recvmmsg(r2, &(0x7f0000003e40)=[{{0x0, 0x3, 0x0, 0x0, &(0x7f00000035c0)=""/241, 0xf1}}, {{&(0x7f00000036c0)=@un=@abs, 0x80, &(0x7f0000003780)=[{&(0x7f0000003740)=""/4, 0x7ffff}], 0x1, &(0x7f00000037c0)=""/236, 0xec}}, {{0x0, 0x0, &(0x7f0000003bc0)=[{0x0, 0xe00000000000000}, {&(0x7f0000003a00)=""/190, 0xbe}, {&(0x7f0000003ac0)=""/131, 0x83}, {0x0}], 0x4, &(0x7f0000003c00)=""/73, 0x49}}, {{&(0x7f0000003c80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, 0x0, 0x0, &(0x7f0000003e00)=""/48, 0x30}}], 0x4, 0x40000121, 0x0)
shutdown(r2, 0x0)

13:44:53 executing program 0:
pipe(&(0x7f0000000640)={<r0=>0xffffffffffffffff})
getsockopt$SO_TIMESTAMP(r0, 0x1, 0x0, 0x0, 0x0)

13:44:53 executing program 5:
r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000240)={@val={0x0, 0x86dd}, @val={0x5, 0x0, 0x0, 0x0, 0x54}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "000003", 0x190, 0x3a, 0x0, @empty, @mcast2, {[@routing={0x0, 0x2, 0x0, 0x0, 0x0, [@empty]}], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x0, "ee7b615d"}, {}, {0x2b, 0x3, "6f8c008275021d683910c309293188a7c747eb2278d2794784"}, {0x0, 0x28, "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"}]}}}}}, 0x1c6)

13:44:53 executing program 4:
bpf$BPF_PROG_QUERY(0x2, &(0x7f0000000180)={@map, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)

13:44:53 executing program 3:
r0 = socket$phonet_pipe(0x23, 0x5, 0x2)
ioctl$sock_SIOCETHTOOL(r0, 0x891e, &(0x7f0000000100)={'veth1_to_hsr\x00', 0x0})

13:44:53 executing program 4:
r0 = socket$inet6_dccp(0xa, 0x6, 0x0)
setsockopt$inet6_group_source_req(r0, 0x29, 0x4c, 0x0, 0x0)

13:44:53 executing program 0:
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$inet(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000080)="cc636b028faa55e2f5f64bd948ff517e06f10035a775be115206607cad685193d7cd566dbb8a50b95aa93d4d405f6364ed44b0445aa9b99352f12553b4b29ce37f", 0x41}], 0x1}, 0x0)
recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000200)=""/56, 0x38}], 0x1, &(0x7f0000000280)=""/157, 0x9d}, 0x0)

13:44:54 executing program 3:
socketpair(0x22, 0x0, 0xd0, &(0x7f0000000080))

13:44:54 executing program 4:
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x3f00000}, 0x48)

13:44:54 executing program 3:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d00)={0x18, 0x3, &(0x7f0000000b40)=@framed, &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x90)

13:44:55 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
getpid()
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f000000c380)='/proc/crypto\x00', 0x0, 0x0)
read$FUSE(r2, &(0x7f0000000200)={0x2020}, 0x2020)
execve(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000280)=[0x0, 0x0], &(0x7f0000000380)=[&(0x7f00000002c0)='*$%}\xce*\x00', &(0x7f0000000300)='\x00'])

13:44:55 executing program 0:
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$tipc(r0, &(0x7f0000000500)={&(0x7f0000000040), 0xfffffc8e, &(0x7f0000000380)=[{&(0x7f00000005c0)="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", 0x1000}, {&(0x7f0000000080)="80feee4fedb2f41a9f6ea688e91b46e48ecda46be4e9e6ba777a02c47130843df4ae565dfd219eb689a2771b00ce69de072d192eb9b61da787bc8ae9c9939a40b8282904ce46ca7db4a2325a21d28a9aff893bdf23", 0x55}, {&(0x7f0000000100)="1516fc340290c9459dd0e9951b5c7ae7a4f2aba3a3842ee3d2ff7b0d94d79aefa0b13a1e86ae7a90785f35fc8eb78ac0e4a6226524a9c72f0c451fad0f32a64866fe8ec0ea029f25fd15c8", 0x4b}, {&(0x7f0000000180)="0e827edb93498f14ebf4", 0xa}, {&(0x7f00000001c0)="2a14749848a2c0114f163c8abad9b444ee351f9178672775171ebfda0f43276efea9351b3966b20850390f04cb02bf98d9717db6373c9f2e387b4427d7c4dd9d8616998e166636381df4ec411c9e05a0e576129d0f6917af5b649ea9107e13c04c0236ee025f56540e0d441e6d6122414a9327459ca5b1f7ac53665b170e9150e306efbf21d942aa2f5957a61543923d853526ff750645451655f91822cef05597ff1db523559dfa2b3651340383c9482e79ba10d54116e6c6b1fe924843cc8c17", 0xc1}, {&(0x7f00000002c0)="31456f6167211c06899e3137b7ae9b23c98d412eb028b9a4943f8736ada0aa380a5461ea4d7c1e2361952b1410a254b685c4460712e3381b1da5f68e20716a843b3cdd87045ba0e5a4061d593d72dee6621a31", 0x53}, {&(0x7f0000000340)="ca49ef715151567abe651ecc5d8c26392368b5e43647300fbdeb735864d2e600ea2c59cd6e95", 0x26}], 0x7, &(0x7f0000000440)="b29a5d59d9f2310744e37313414180ad826a9f907fab1503160d88458005823944b06253f3385f32f17456882e187eb800f99bb3f2b446d2fe7556310612624b66956f2cf0703b4414755fb6ae339c88b1a179665b4263756f5c28b9016a9060b14e0be9f4b71f4e9820bd404349f4375491fb25e3467c36c2d127352c186075875043da57f6363c87f79a2989384993ddd3bc8a62358afb0d", 0x99, 0x4008084}, 0x240000c0)

13:44:55 executing program 5:
r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000240)={@val={0x0, 0x86dd}, @val={0x5, 0x0, 0x0, 0x0, 0x54}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "000003", 0x190, 0x3a, 0x0, @empty, @mcast2, {[@routing={0x0, 0x2, 0x0, 0x0, 0x0, [@empty]}], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x0, "ee7b615d"}, {}, {0x2b, 0x3, "6f8c008275021d683910c309293188a7c747eb2278d2794784"}, {0x0, 0x28, "4429118927041312255133e4d2b8b863b5f5b4ace38952e94c581c85d2d86844f548415db4dbf1992868a2e15095b531ce55d4620ec637afdcc990a4d6bfecb289917d24b31a2ddeb64383b176b823cc203ec1927487b7a00d6a3446cf7db79e14b2206d882c28611fa4d8289337cd75b4688120c73a2710947b908fde68a05a0777a170a14e85c7849462b3f5c3152cf0f3d91c5db93dc4d8f9e6b53708650dc375e6da3650b5ff4079971f6e3ef363382a16b8ae07b7307b5619092e4669dbca480d25738314135509eda68f712b9b09bdb485ea0914590b7ae01c2e34832f16c23c82b22b6ba550acfcede288a5237a06b3f5e09b6e5a0404544efe1474664b985f070121e82070a9f4513c2031a58a3d99e99284b812c0f047061139620890416c9defce02fa49cd1dd14b22df7250314ccb3dfd9827f892656911150cd9d921a8"}]}}}}}, 0x1c6)

13:44:55 executing program 4:
syz_clone(0xa020400, 0x0, 0x0, 0x0, 0x0, 0x0)

13:44:55 executing program 3:
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8942, &(0x7f00000000c0)={'wg2\x00'})

13:44:55 executing program 2:
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
syz_genetlink_get_family_id$tipc(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$NFT_BATCH(r1, &(0x7f00000015c0)={&(0x7f0000000300), 0xc, &(0x7f0000001580)={&(0x7f00000014c0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_PAYLOAD_CSUM_OFFSET={0x8, 0x7, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}]}, @NFT_MSG_DELSETELEM={0x1c, 0xe, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}]}], {0x14}}, 0x94}, 0x1, 0x0, 0x0, 0x1}, 0x1)
getsockname$packet(0xffffffffffffffff, &(0x7f0000001340), &(0x7f0000001380)=0x14)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r1, 0x0, 0x0)
sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, 0x0, 0x0)
getsockname(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001400)={&(0x7f0000000140), 0xc, &(0x7f0000000340)={&(0x7f0000000f00)=@newqdisc={0x1b8, 0x24, 0x0, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0xc}, {0x10, 0xffff}, {0xf, 0xfff2}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_RATE={0x6, 0x5, {0x8}}, @qdisc_kind_options=@q_choke={{0xa}, {0x18, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x4e0, 0x2, 0x6, 0x0, 0x1e, 0x2}}]}}, @qdisc_kind_options=@q_codel={{0xa}, {0x54, 0x2, [@TCA_CODEL_TARGET={0x8}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x4}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_LIMIT={0x8, 0x2, 0x2}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x80}, @TCA_CODEL_TARGET={0x8, 0x1, 0xb9}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_INTERVAL={0x8, 0x3, 0x7}, @TCA_CODEL_LIMIT={0x8, 0x2, 0x5}]}}, @TCA_STAB={0xf8, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x8, 0xc000, 0x9, 0x1, 0x80000001, 0x4, 0xa}}, {0x18, 0x2, [0x3, 0x4, 0x3, 0xff, 0x200, 0xfe01, 0x7, 0x8, 0x0, 0x2]}}, {{0x1c, 0x1, {0x0, 0x20, 0x1, 0xfc000, 0x1}}, {0x4}}, {{0x1c, 0x1, {0x3, 0x11, 0x100, 0x5, 0x0, 0x2dd, 0x7fff, 0x4}}, {0xc, 0x2, [0x6, 0x100, 0x2, 0x71]}}, {{0x1c, 0x1, {0x0, 0x40, 0x5, 0x3, 0x2}}, {0x4}}, {{0x1c, 0x1, {0x4, 0x8, 0x1ff, 0x3ff, 0x2, 0x5, 0x9, 0x5}}, {0xe, 0x2, [0x1, 0x1, 0xb41, 0x0, 0x8]}}, {{0x1c, 0x1, {0x9, 0x3f, 0x4, 0x3, 0x0, 0x4, 0x9, 0x5}}, {0xe, 0x2, [0x0, 0x0, 0x5ca, 0xfff, 0xfffb]}}]}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x81}]}, 0x1b8}, 0x1, 0x0, 0x0, 0x20000110}, 0x800)
connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10)
writev(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1)
recvmmsg(0xffffffffffffffff, &(0x7f0000003e40)=[{{0x0, 0x3, 0x0, 0x0, &(0x7f00000035c0)=""/241, 0xf1}}, {{&(0x7f00000036c0)=@un=@abs, 0x80, &(0x7f0000003780)=[{&(0x7f0000003740)=""/4, 0x7ffff}], 0x1, &(0x7f00000037c0)=""/236, 0xec}}, {{0x0, 0x0, &(0x7f0000003bc0)=[{0x0, 0xe00000000000000}, {&(0x7f0000003a00)=""/190, 0xbe}, {&(0x7f0000003ac0)=""/131, 0x83}, {0x0}], 0x4, &(0x7f0000003c00)=""/73, 0x49}}, {{&(0x7f0000003c80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, 0x0, 0x0, &(0x7f0000003e00)=""/48, 0x30}}], 0x4, 0x40000121, 0x0)
shutdown(0xffffffffffffffff, 0x0)

13:44:55 executing program 3:
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x0, [{0x0, 0x2, 0x5c84}]}]}}, 0x0, 0x32, 0x0, 0x1}, 0x20)

13:44:55 executing program 0:
symlinkat(&(0x7f0000000140)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00')
socket$igmp(0x2, 0x3, 0x2)
pipe(&(0x7f0000000100)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
setsockopt$MRT_ASSERT(r0, 0x0, 0xcf, 0x0, 0x0)
pipe(0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20)

13:44:55 executing program 2:
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
syz_genetlink_get_family_id$tipc(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$NFT_BATCH(r1, &(0x7f00000015c0)={&(0x7f0000000300), 0xc, &(0x7f0000001580)={&(0x7f00000014c0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_PAYLOAD_CSUM_OFFSET={0x8, 0x7, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}]}, @NFT_MSG_DELSETELEM={0x1c, 0xe, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}]}], {0x14}}, 0x94}, 0x1, 0x0, 0x0, 0x1}, 0x1)
getsockname$packet(0xffffffffffffffff, &(0x7f0000001340), &(0x7f0000001380)=0x14)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r1, 0x0, 0x0)
sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, 0x0, 0x0)
getsockname(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001400)={&(0x7f0000000140), 0xc, &(0x7f0000000340)={&(0x7f0000000f00)=@newqdisc={0x1b8, 0x24, 0x0, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0xc}, {0x10, 0xffff}, {0xf, 0xfff2}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_RATE={0x6, 0x5, {0x8}}, @qdisc_kind_options=@q_choke={{0xa}, {0x18, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x4e0, 0x2, 0x6, 0x0, 0x1e, 0x2}}]}}, @qdisc_kind_options=@q_codel={{0xa}, {0x54, 0x2, [@TCA_CODEL_TARGET={0x8}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x4}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_LIMIT={0x8, 0x2, 0x2}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x80}, @TCA_CODEL_TARGET={0x8, 0x1, 0xb9}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_INTERVAL={0x8, 0x3, 0x7}, @TCA_CODEL_LIMIT={0x8, 0x2, 0x5}]}}, @TCA_STAB={0xf8, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x8, 0xc000, 0x9, 0x1, 0x80000001, 0x4, 0xa}}, {0x18, 0x2, [0x3, 0x4, 0x3, 0xff, 0x200, 0xfe01, 0x7, 0x8, 0x0, 0x2]}}, {{0x1c, 0x1, {0x0, 0x20, 0x1, 0xfc000, 0x1}}, {0x4}}, {{0x1c, 0x1, {0x3, 0x11, 0x100, 0x5, 0x0, 0x2dd, 0x7fff, 0x4}}, {0xc, 0x2, [0x6, 0x100, 0x2, 0x71]}}, {{0x1c, 0x1, {0x0, 0x40, 0x5, 0x3, 0x2}}, {0x4}}, {{0x1c, 0x1, {0x4, 0x8, 0x1ff, 0x3ff, 0x2, 0x5, 0x9, 0x5}}, {0xe, 0x2, [0x1, 0x1, 0xb41, 0x0, 0x8]}}, {{0x1c, 0x1, {0x9, 0x3f, 0x4, 0x3, 0x0, 0x4, 0x9, 0x5}}, {0xe, 0x2, [0x0, 0x0, 0x5ca, 0xfff, 0xfffb]}}]}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x81}]}, 0x1b8}, 0x1, 0x0, 0x0, 0x20000110}, 0x800)
connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10)
writev(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1)
recvmmsg(0xffffffffffffffff, &(0x7f0000003e40)=[{{0x0, 0x3, 0x0, 0x0, &(0x7f00000035c0)=""/241, 0xf1}}, {{&(0x7f00000036c0)=@un=@abs, 0x80, &(0x7f0000003780)=[{&(0x7f0000003740)=""/4, 0x7ffff}], 0x1, &(0x7f00000037c0)=""/236, 0xec}}, {{0x0, 0x0, &(0x7f0000003bc0)=[{0x0, 0xe00000000000000}, {&(0x7f0000003a00)=""/190, 0xbe}, {&(0x7f0000003ac0)=""/131, 0x83}, {0x0}], 0x4, &(0x7f0000003c00)=""/73, 0x49}}, {{&(0x7f0000003c80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, 0x0, 0x0, &(0x7f0000003e00)=""/48, 0x30}}], 0x4, 0x40000121, 0x0)
shutdown(0xffffffffffffffff, 0x0)

13:44:55 executing program 4:
r0 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000000000), 0x4)
setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000080)={0x0, 0x8, 0x0, 0x0, @vifc_lcl_ifindex, @broadcast}, 0x10)

13:44:55 executing program 0:
mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2000, 0x1)
execveat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0)

13:44:55 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_RELOAD_REGDB(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x14, r1, 0x1, 0x0, 0x0, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40080}, 0x10)

[ 2210.665154][T21593] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[ 2210.693250][T21593] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
13:44:56 executing program 4:
r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464ce, &(0x7f0000000500))

13:44:56 executing program 2:
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
syz_genetlink_get_family_id$tipc(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$NFT_BATCH(r1, &(0x7f00000015c0)={&(0x7f0000000300), 0xc, &(0x7f0000001580)={&(0x7f00000014c0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_PAYLOAD_CSUM_OFFSET={0x8, 0x7, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}]}, @NFT_MSG_DELSETELEM={0x1c, 0xe, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}]}], {0x14}}, 0x94}, 0x1, 0x0, 0x0, 0x1}, 0x1)
getsockname$packet(0xffffffffffffffff, &(0x7f0000001340), &(0x7f0000001380)=0x14)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r1, 0x0, 0x0)
sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, 0x0, 0x0)
getsockname(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001400)={&(0x7f0000000140), 0xc, &(0x7f0000000340)={&(0x7f0000000f00)=@newqdisc={0x1b8, 0x24, 0x0, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0xc}, {0x10, 0xffff}, {0xf, 0xfff2}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_RATE={0x6, 0x5, {0x8}}, @qdisc_kind_options=@q_choke={{0xa}, {0x18, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x4e0, 0x2, 0x6, 0x0, 0x1e, 0x2}}]}}, @qdisc_kind_options=@q_codel={{0xa}, {0x54, 0x2, [@TCA_CODEL_TARGET={0x8}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x4}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_LIMIT={0x8, 0x2, 0x2}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x80}, @TCA_CODEL_TARGET={0x8, 0x1, 0xb9}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_INTERVAL={0x8, 0x3, 0x7}, @TCA_CODEL_LIMIT={0x8, 0x2, 0x5}]}}, @TCA_STAB={0xf8, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x8, 0xc000, 0x9, 0x1, 0x80000001, 0x4, 0xa}}, {0x18, 0x2, [0x3, 0x4, 0x3, 0xff, 0x200, 0xfe01, 0x7, 0x8, 0x0, 0x2]}}, {{0x1c, 0x1, {0x0, 0x20, 0x1, 0xfc000, 0x1}}, {0x4}}, {{0x1c, 0x1, {0x3, 0x11, 0x100, 0x5, 0x0, 0x2dd, 0x7fff, 0x4}}, {0xc, 0x2, [0x6, 0x100, 0x2, 0x71]}}, {{0x1c, 0x1, {0x0, 0x40, 0x5, 0x3, 0x2}}, {0x4}}, {{0x1c, 0x1, {0x4, 0x8, 0x1ff, 0x3ff, 0x2, 0x5, 0x9, 0x5}}, {0xe, 0x2, [0x1, 0x1, 0xb41, 0x0, 0x8]}}, {{0x1c, 0x1, {0x9, 0x3f, 0x4, 0x3, 0x0, 0x4, 0x9, 0x5}}, {0xe, 0x2, [0x0, 0x0, 0x5ca, 0xfff, 0xfffb]}}]}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x81}]}, 0x1b8}, 0x1, 0x0, 0x0, 0x20000110}, 0x800)
connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10)
writev(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1)
recvmmsg(0xffffffffffffffff, &(0x7f0000003e40)=[{{0x0, 0x3, 0x0, 0x0, &(0x7f00000035c0)=""/241, 0xf1}}, {{&(0x7f00000036c0)=@un=@abs, 0x80, &(0x7f0000003780)=[{&(0x7f0000003740)=""/4, 0x7ffff}], 0x1, &(0x7f00000037c0)=""/236, 0xec}}, {{0x0, 0x0, &(0x7f0000003bc0)=[{0x0, 0xe00000000000000}, {&(0x7f0000003a00)=""/190, 0xbe}, {&(0x7f0000003ac0)=""/131, 0x83}, {0x0}], 0x4, &(0x7f0000003c00)=""/73, 0x49}}, {{&(0x7f0000003c80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, 0x0, 0x0, &(0x7f0000003e00)=""/48, 0x30}}], 0x4, 0x40000121, 0x0)
shutdown(0xffffffffffffffff, 0x0)

13:44:56 executing program 0:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000640)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)

13:44:56 executing program 5:
r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000240)={@val={0x0, 0x86dd}, @val={0x5, 0x0, 0x0, 0x0, 0x54}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "000003", 0x190, 0x3a, 0x0, @empty, @mcast2, {[@routing={0x0, 0x2, 0x0, 0x0, 0x0, [@empty]}], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x0, "ee7b615d"}, {}, {0x2b, 0x3, "6f8c008275021d683910c309293188a7c747eb2278d2794784"}, {0x0, 0x28, "4429118927041312255133e4d2b8b863b5f5b4ace38952e94c581c85d2d86844f548415db4dbf1992868a2e15095b531ce55d4620ec637afdcc990a4d6bfecb289917d24b31a2ddeb64383b176b823cc203ec1927487b7a00d6a3446cf7db79e14b2206d882c28611fa4d8289337cd75b4688120c73a2710947b908fde68a05a0777a170a14e85c7849462b3f5c3152cf0f3d91c5db93dc4d8f9e6b53708650dc375e6da3650b5ff4079971f6e3ef363382a16b8ae07b7307b5619092e4669dbca480d25738314135509eda68f712b9b09bdb485ea0914590b7ae01c2e34832f16c23c82b22b6ba550acfcede288a5237a06b3f5e09b6e5a0404544efe1474664b985f070121e82070a9f4513c2031a58a3d99e99284b812c0f047061139620890416c9defce02fa49cd1dd14b22df7250314ccb3dfd9827f892656911150cd9d921a8"}]}}}}}, 0x1c6)

13:44:56 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
getpid()
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f000000c380)='/proc/crypto\x00', 0x0, 0x0)
read$FUSE(r2, &(0x7f0000000200)={0x2020}, 0x2020)
execve(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000280)=[0x0, 0x0], &(0x7f0000000380)=[&(0x7f00000002c0)='*$%}\xce*\x00', &(0x7f0000000300)='\x00'])

13:44:56 executing program 3:
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000480)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETPROPERTY(r0, 0xc04064aa, 0x0)

13:44:56 executing program 4:
setsockopt$bt_rfcomm_RFCOMM_LM(0xffffffffffffffff, 0x12, 0x3, 0x0, 0x0)

13:44:56 executing program 0:
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/seq/timer\x00', 0x0, 0x0)
readv(r0, &(0x7f0000000040)=[{&(0x7f0000000380)=""/230, 0xe6}], 0x1)

13:44:56 executing program 2:
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
syz_genetlink_get_family_id$tipc(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$NFT_BATCH(r1, &(0x7f00000015c0)={&(0x7f0000000300), 0xc, &(0x7f0000001580)={&(0x7f00000014c0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_PAYLOAD_CSUM_OFFSET={0x8, 0x7, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}]}, @NFT_MSG_DELSETELEM={0x1c, 0xe, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}]}], {0x14}}, 0x94}, 0x1, 0x0, 0x0, 0x1}, 0x1)
getsockname$packet(0xffffffffffffffff, &(0x7f0000001340), &(0x7f0000001380)=0x14)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r1, 0x0, 0x0)
sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, 0x0, 0x0)
getsockname(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001400)={&(0x7f0000000140), 0xc, &(0x7f0000000340)={&(0x7f0000000f00)=@newqdisc={0x1b8, 0x24, 0x0, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0xc}, {0x10, 0xffff}, {0xf, 0xfff2}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_RATE={0x6, 0x5, {0x8}}, @qdisc_kind_options=@q_choke={{0xa}, {0x18, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x4e0, 0x2, 0x6, 0x0, 0x1e, 0x2}}]}}, @qdisc_kind_options=@q_codel={{0xa}, {0x54, 0x2, [@TCA_CODEL_TARGET={0x8}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x4}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_LIMIT={0x8, 0x2, 0x2}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x80}, @TCA_CODEL_TARGET={0x8, 0x1, 0xb9}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_INTERVAL={0x8, 0x3, 0x7}, @TCA_CODEL_LIMIT={0x8, 0x2, 0x5}]}}, @TCA_STAB={0xf8, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x8, 0xc000, 0x9, 0x1, 0x80000001, 0x4, 0xa}}, {0x18, 0x2, [0x3, 0x4, 0x3, 0xff, 0x200, 0xfe01, 0x7, 0x8, 0x0, 0x2]}}, {{0x1c, 0x1, {0x0, 0x20, 0x1, 0xfc000, 0x1}}, {0x4}}, {{0x1c, 0x1, {0x3, 0x11, 0x100, 0x5, 0x0, 0x2dd, 0x7fff, 0x4}}, {0xc, 0x2, [0x6, 0x100, 0x2, 0x71]}}, {{0x1c, 0x1, {0x0, 0x40, 0x5, 0x3, 0x2}}, {0x4}}, {{0x1c, 0x1, {0x4, 0x8, 0x1ff, 0x3ff, 0x2, 0x5, 0x9, 0x5}}, {0xe, 0x2, [0x1, 0x1, 0xb41, 0x0, 0x8]}}, {{0x1c, 0x1, {0x9, 0x3f, 0x4, 0x3, 0x0, 0x4, 0x9, 0x5}}, {0xe, 0x2, [0x0, 0x0, 0x5ca, 0xfff, 0xfffb]}}]}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x81}]}, 0x1b8}, 0x1, 0x0, 0x0, 0x20000110}, 0x800)
connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10)
writev(r2, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1)
recvmmsg(r2, &(0x7f0000003e40)=[{{0x0, 0x3, 0x0, 0x0, &(0x7f00000035c0)=""/241, 0xf1}}, {{&(0x7f00000036c0)=@un=@abs, 0x80, &(0x7f0000003780)=[{&(0x7f0000003740)=""/4, 0x7ffff}], 0x1, &(0x7f00000037c0)=""/236, 0xec}}, {{0x0, 0x0, &(0x7f0000003bc0)=[{0x0, 0xe00000000000000}, {&(0x7f0000003a00)=""/190, 0xbe}, {&(0x7f0000003ac0)=""/131, 0x83}, {0x0}], 0x4, &(0x7f0000003c00)=""/73, 0x49}}, {{&(0x7f0000003c80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, 0x0, 0x0, &(0x7f0000003e00)=""/48, 0x30}}], 0x4, 0x40000121, 0x0)
shutdown(r2, 0x0)

13:44:56 executing program 3:
r0 = syz_open_dev$loop(&(0x7f00000002c0), 0x0, 0x0)
ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x1269, 0x20000000)

13:44:56 executing program 4:
clock_gettime(0x0, &(0x7f0000000000))
clock_gettime(0x5, &(0x7f00000000c0))

13:44:56 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000400), 0xffffffffffffffff)
sendmsg$SMC_PNETID_DEL(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_IBPORT={0x5}]}, 0x1c}}, 0x0)

13:44:57 executing program 2:
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
syz_genetlink_get_family_id$tipc(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$NFT_BATCH(r1, &(0x7f00000015c0)={&(0x7f0000000300), 0xc, &(0x7f0000001580)={&(0x7f00000014c0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_PAYLOAD_CSUM_OFFSET={0x8, 0x7, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}]}, @NFT_MSG_DELSETELEM={0x1c, 0xe, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}]}], {0x14}}, 0x94}, 0x1, 0x0, 0x0, 0x1}, 0x1)
getsockname$packet(0xffffffffffffffff, &(0x7f0000001340), &(0x7f0000001380)=0x14)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r1, 0x0, 0x0)
sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, 0x0, 0x0)
getsockname(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001400)={&(0x7f0000000140), 0xc, &(0x7f0000000340)={&(0x7f0000000f00)=@newqdisc={0x1b8, 0x24, 0x0, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0xc}, {0x10, 0xffff}, {0xf, 0xfff2}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_RATE={0x6, 0x5, {0x8}}, @qdisc_kind_options=@q_choke={{0xa}, {0x18, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x4e0, 0x2, 0x6, 0x0, 0x1e, 0x2}}]}}, @qdisc_kind_options=@q_codel={{0xa}, {0x54, 0x2, [@TCA_CODEL_TARGET={0x8}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x4}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_LIMIT={0x8, 0x2, 0x2}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x80}, @TCA_CODEL_TARGET={0x8, 0x1, 0xb9}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_INTERVAL={0x8, 0x3, 0x7}, @TCA_CODEL_LIMIT={0x8, 0x2, 0x5}]}}, @TCA_STAB={0xf8, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x8, 0xc000, 0x9, 0x1, 0x80000001, 0x4, 0xa}}, {0x18, 0x2, [0x3, 0x4, 0x3, 0xff, 0x200, 0xfe01, 0x7, 0x8, 0x0, 0x2]}}, {{0x1c, 0x1, {0x0, 0x20, 0x1, 0xfc000, 0x1}}, {0x4}}, {{0x1c, 0x1, {0x3, 0x11, 0x100, 0x5, 0x0, 0x2dd, 0x7fff, 0x4}}, {0xc, 0x2, [0x6, 0x100, 0x2, 0x71]}}, {{0x1c, 0x1, {0x0, 0x40, 0x5, 0x3, 0x2}}, {0x4}}, {{0x1c, 0x1, {0x4, 0x8, 0x1ff, 0x3ff, 0x2, 0x5, 0x9, 0x5}}, {0xe, 0x2, [0x1, 0x1, 0xb41, 0x0, 0x8]}}, {{0x1c, 0x1, {0x9, 0x3f, 0x4, 0x3, 0x0, 0x4, 0x9, 0x5}}, {0xe, 0x2, [0x0, 0x0, 0x5ca, 0xfff, 0xfffb]}}]}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x81}]}, 0x1b8}, 0x1, 0x0, 0x0, 0x20000110}, 0x800)
connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10)
writev(r2, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1)
recvmmsg(r2, &(0x7f0000003e40)=[{{0x0, 0x3, 0x0, 0x0, &(0x7f00000035c0)=""/241, 0xf1}}, {{&(0x7f00000036c0)=@un=@abs, 0x80, &(0x7f0000003780)=[{&(0x7f0000003740)=""/4, 0x7ffff}], 0x1, &(0x7f00000037c0)=""/236, 0xec}}, {{0x0, 0x0, &(0x7f0000003bc0)=[{0x0, 0xe00000000000000}, {&(0x7f0000003a00)=""/190, 0xbe}, {&(0x7f0000003ac0)=""/131, 0x83}, {0x0}], 0x4, &(0x7f0000003c00)=""/73, 0x49}}, {{&(0x7f0000003c80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, 0x0, 0x0, &(0x7f0000003e00)=""/48, 0x30}}], 0x4, 0x40000121, 0x0)
shutdown(r2, 0x0)

13:44:57 executing program 4:
syz_mount_image$fuse(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x8cffffff, &(0x7f0000000140)=ANY=[], 0x0, 0x0, 0x0)

13:44:57 executing program 3:
r0 = syz_open_dev$ttys(0xc, 0x2, 0x0)
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, "37583eadf33e9bd5905189a60b6e56540906fa"})

13:44:57 executing program 5:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000240)={@val={0x0, 0x86dd}, @val={0x5, 0x0, 0x0, 0x0, 0x54}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "000003", 0x190, 0x3a, 0x0, @empty, @mcast2, {[@routing={0x0, 0x2, 0x0, 0x0, 0x0, [@empty]}], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x0, "ee7b615d"}, {}, {0x2b, 0x3, "6f8c008275021d683910c309293188a7c747eb2278d2794784"}, {0x0, 0x28, "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"}]}}}}}, 0x1c6)

13:44:58 executing program 2:
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
syz_genetlink_get_family_id$tipc(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$NFT_BATCH(r1, &(0x7f00000015c0)={&(0x7f0000000300), 0xc, &(0x7f0000001580)={&(0x7f00000014c0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_PAYLOAD_CSUM_OFFSET={0x8, 0x7, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}]}, @NFT_MSG_DELSETELEM={0x1c, 0xe, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}]}], {0x14}}, 0x94}, 0x1, 0x0, 0x0, 0x1}, 0x1)
getsockname$packet(0xffffffffffffffff, &(0x7f0000001340), &(0x7f0000001380)=0x14)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r1, 0x0, 0x0)
sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, 0x0, 0x0)
getsockname(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001400)={&(0x7f0000000140), 0xc, &(0x7f0000000340)={&(0x7f0000000f00)=@newqdisc={0x1b8, 0x24, 0x0, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0xc}, {0x10, 0xffff}, {0xf, 0xfff2}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_RATE={0x6, 0x5, {0x8}}, @qdisc_kind_options=@q_choke={{0xa}, {0x18, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x4e0, 0x2, 0x6, 0x0, 0x1e, 0x2}}]}}, @qdisc_kind_options=@q_codel={{0xa}, {0x54, 0x2, [@TCA_CODEL_TARGET={0x8}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x4}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_LIMIT={0x8, 0x2, 0x2}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x80}, @TCA_CODEL_TARGET={0x8, 0x1, 0xb9}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_INTERVAL={0x8, 0x3, 0x7}, @TCA_CODEL_LIMIT={0x8, 0x2, 0x5}]}}, @TCA_STAB={0xf8, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x8, 0xc000, 0x9, 0x1, 0x80000001, 0x4, 0xa}}, {0x18, 0x2, [0x3, 0x4, 0x3, 0xff, 0x200, 0xfe01, 0x7, 0x8, 0x0, 0x2]}}, {{0x1c, 0x1, {0x0, 0x20, 0x1, 0xfc000, 0x1}}, {0x4}}, {{0x1c, 0x1, {0x3, 0x11, 0x100, 0x5, 0x0, 0x2dd, 0x7fff, 0x4}}, {0xc, 0x2, [0x6, 0x100, 0x2, 0x71]}}, {{0x1c, 0x1, {0x0, 0x40, 0x5, 0x3, 0x2}}, {0x4}}, {{0x1c, 0x1, {0x4, 0x8, 0x1ff, 0x3ff, 0x2, 0x5, 0x9, 0x5}}, {0xe, 0x2, [0x1, 0x1, 0xb41, 0x0, 0x8]}}, {{0x1c, 0x1, {0x9, 0x3f, 0x4, 0x3, 0x0, 0x4, 0x9, 0x5}}, {0xe, 0x2, [0x0, 0x0, 0x5ca, 0xfff, 0xfffb]}}]}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x81}]}, 0x1b8}, 0x1, 0x0, 0x0, 0x20000110}, 0x800)
connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10)
writev(r2, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1)
recvmmsg(r2, &(0x7f0000003e40)=[{{0x0, 0x3, 0x0, 0x0, &(0x7f00000035c0)=""/241, 0xf1}}, {{&(0x7f00000036c0)=@un=@abs, 0x80, &(0x7f0000003780)=[{&(0x7f0000003740)=""/4, 0x7ffff}], 0x1, &(0x7f00000037c0)=""/236, 0xec}}, {{0x0, 0x0, &(0x7f0000003bc0)=[{0x0, 0xe00000000000000}, {&(0x7f0000003a00)=""/190, 0xbe}, {&(0x7f0000003ac0)=""/131, 0x83}, {0x0}], 0x4, &(0x7f0000003c00)=""/73, 0x49}}, {{&(0x7f0000003c80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, 0x0, 0x0, &(0x7f0000003e00)=""/48, 0x30}}], 0x4, 0x40000121, 0x0)
shutdown(r2, 0x0)

13:44:58 executing program 0:
socketpair(0x1, 0x0, 0x0, &(0x7f0000000100))

13:44:58 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000003c0)={&(0x7f0000000180)={0x14}, 0x14}}, 0x0)

13:44:58 executing program 4:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f00000000c0)={0x0, @nfc, @can, @nl})

13:44:58 executing program 5:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000240)={@val={0x0, 0x86dd}, @val={0x5, 0x0, 0x0, 0x0, 0x54}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "000003", 0x190, 0x3a, 0x0, @empty, @mcast2, {[@routing={0x0, 0x2, 0x0, 0x0, 0x0, [@empty]}], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x0, "ee7b615d"}, {}, {0x2b, 0x3, "6f8c008275021d683910c309293188a7c747eb2278d2794784"}, {0x0, 0x28, "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"}]}}}}}, 0x1c6)

13:44:58 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x0, &(0x7f0000000200)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f000000c380)='/proc/crypto\x00', 0x0, 0x0)
read$FUSE(r3, &(0x7f0000000200)={0x2020}, 0x2020)
execve(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000280)=[0x0, 0x0], &(0x7f0000000380)=[&(0x7f00000002c0)='*$%}\xce*\x00', &(0x7f0000000300)='\x00'])

13:44:58 executing program 3:
pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000980), &(0x7f0000000a00)={&(0x7f00000009c0), 0x8})

13:44:58 executing program 0:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
sendto(r0, 0x0, 0x0, 0xffff61970080ffff, 0x0, 0x0)

13:44:58 executing program 2:
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
syz_genetlink_get_family_id$tipc(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$NFT_BATCH(r1, &(0x7f00000015c0)={&(0x7f0000000300), 0xc, &(0x7f0000001580)={&(0x7f00000014c0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_PAYLOAD_CSUM_OFFSET={0x8, 0x7, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}]}, @NFT_MSG_DELSETELEM={0x1c, 0xe, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}]}], {0x14}}, 0x94}, 0x1, 0x0, 0x0, 0x1}, 0x1)
getsockname$packet(0xffffffffffffffff, &(0x7f0000001340), &(0x7f0000001380)=0x14)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r1, 0x0, 0x0)
sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, 0x0, 0x0)
getsockname(0xffffffffffffffff, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001400)={&(0x7f0000000140), 0xc, &(0x7f0000000340)={&(0x7f0000000f00)=@newqdisc={0x1b8, 0x24, 0x0, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0xc}, {0x10, 0xffff}, {0xf, 0xfff2}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_RATE={0x6, 0x5, {0x8}}, @qdisc_kind_options=@q_choke={{0xa}, {0x18, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x4e0, 0x2, 0x6, 0x0, 0x1e, 0x2}}]}}, @qdisc_kind_options=@q_codel={{0xa}, {0x54, 0x2, [@TCA_CODEL_TARGET={0x8}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x4}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_LIMIT={0x8, 0x2, 0x2}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x80}, @TCA_CODEL_TARGET={0x8, 0x1, 0xb9}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_INTERVAL={0x8, 0x3, 0x7}, @TCA_CODEL_LIMIT={0x8, 0x2, 0x5}]}}, @TCA_STAB={0xf8, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x8, 0xc000, 0x9, 0x1, 0x80000001, 0x4, 0xa}}, {0x18, 0x2, [0x3, 0x4, 0x3, 0xff, 0x200, 0xfe01, 0x7, 0x8, 0x0, 0x2]}}, {{0x1c, 0x1, {0x0, 0x20, 0x1, 0xfc000, 0x1}}, {0x4}}, {{0x1c, 0x1, {0x3, 0x11, 0x100, 0x5, 0x0, 0x2dd, 0x7fff, 0x4}}, {0xc, 0x2, [0x6, 0x100, 0x2, 0x71]}}, {{0x1c, 0x1, {0x0, 0x40, 0x5, 0x3, 0x2}}, {0x4}}, {{0x1c, 0x1, {0x4, 0x8, 0x1ff, 0x3ff, 0x2, 0x5, 0x9, 0x5}}, {0xe, 0x2, [0x1, 0x1, 0xb41, 0x0, 0x8]}}, {{0x1c, 0x1, {0x9, 0x3f, 0x4, 0x3, 0x0, 0x4, 0x9, 0x5}}, {0xe, 0x2, [0x0, 0x0, 0x5ca, 0xfff, 0xfffb]}}]}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x81}]}, 0x1b8}, 0x1, 0x0, 0x0, 0x20000110}, 0x800)
connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10)
writev(r2, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1)
recvmmsg(r2, &(0x7f0000003e40)=[{{0x0, 0x3, 0x0, 0x0, &(0x7f00000035c0)=""/241, 0xf1}}, {{&(0x7f00000036c0)=@un=@abs, 0x80, &(0x7f0000003780)=[{&(0x7f0000003740)=""/4, 0x7ffff}], 0x1, &(0x7f00000037c0)=""/236, 0xec}}, {{0x0, 0x0, &(0x7f0000003bc0)=[{0x0, 0xe00000000000000}, {&(0x7f0000003a00)=""/190, 0xbe}, {&(0x7f0000003ac0)=""/131, 0x83}, {0x0}], 0x4, &(0x7f0000003c00)=""/73, 0x49}}, {{&(0x7f0000003c80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, 0x0, 0x0, &(0x7f0000003e00)=""/48, 0x30}}], 0x4, 0x40000121, 0x0)
shutdown(r2, 0x0)

13:44:58 executing program 4:
syz_clone3(&(0x7f0000000700)={0x200009e80, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

13:44:58 executing program 0:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x3, &(0x7f0000000000)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x90)

13:44:58 executing program 4:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_l2cap_L2CAP_LM(r0, 0x112, 0x8, 0x0, 0x0)

13:44:58 executing program 3:
sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff)
syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)

13:44:58 executing program 2:
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
syz_genetlink_get_family_id$tipc(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$NFT_BATCH(r1, &(0x7f00000015c0)={&(0x7f0000000300), 0xc, &(0x7f0000001580)={&(0x7f00000014c0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_PAYLOAD_CSUM_OFFSET={0x8, 0x7, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}]}, @NFT_MSG_DELSETELEM={0x1c, 0xe, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}]}], {0x14}}, 0x94}, 0x1, 0x0, 0x0, 0x1}, 0x1)
getsockname$packet(0xffffffffffffffff, &(0x7f0000001340), &(0x7f0000001380)=0x14)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r1, 0x0, 0x0)
sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, 0x0, 0x0)
getsockname(0xffffffffffffffff, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001400)={&(0x7f0000000140), 0xc, &(0x7f0000000340)={&(0x7f0000000f00)=@newqdisc={0x1b8, 0x24, 0x0, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0xc}, {0x10, 0xffff}, {0xf, 0xfff2}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_RATE={0x6, 0x5, {0x8}}, @qdisc_kind_options=@q_choke={{0xa}, {0x18, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x4e0, 0x2, 0x6, 0x0, 0x1e, 0x2}}]}}, @qdisc_kind_options=@q_codel={{0xa}, {0x54, 0x2, [@TCA_CODEL_TARGET={0x8}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x4}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_LIMIT={0x8, 0x2, 0x2}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x80}, @TCA_CODEL_TARGET={0x8, 0x1, 0xb9}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_INTERVAL={0x8, 0x3, 0x7}, @TCA_CODEL_LIMIT={0x8, 0x2, 0x5}]}}, @TCA_STAB={0xf8, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x8, 0xc000, 0x9, 0x1, 0x80000001, 0x4, 0xa}}, {0x18, 0x2, [0x3, 0x4, 0x3, 0xff, 0x200, 0xfe01, 0x7, 0x8, 0x0, 0x2]}}, {{0x1c, 0x1, {0x0, 0x20, 0x1, 0xfc000, 0x1}}, {0x4}}, {{0x1c, 0x1, {0x3, 0x11, 0x100, 0x5, 0x0, 0x2dd, 0x7fff, 0x4}}, {0xc, 0x2, [0x6, 0x100, 0x2, 0x71]}}, {{0x1c, 0x1, {0x0, 0x40, 0x5, 0x3, 0x2}}, {0x4}}, {{0x1c, 0x1, {0x4, 0x8, 0x1ff, 0x3ff, 0x2, 0x5, 0x9, 0x5}}, {0xe, 0x2, [0x1, 0x1, 0xb41, 0x0, 0x8]}}, {{0x1c, 0x1, {0x9, 0x3f, 0x4, 0x3, 0x0, 0x4, 0x9, 0x5}}, {0xe, 0x2, [0x0, 0x0, 0x5ca, 0xfff, 0xfffb]}}]}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x81}]}, 0x1b8}, 0x1, 0x0, 0x0, 0x20000110}, 0x800)
connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10)
writev(r2, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1)
recvmmsg(r2, &(0x7f0000003e40)=[{{0x0, 0x3, 0x0, 0x0, &(0x7f00000035c0)=""/241, 0xf1}}, {{&(0x7f00000036c0)=@un=@abs, 0x80, &(0x7f0000003780)=[{&(0x7f0000003740)=""/4, 0x7ffff}], 0x1, &(0x7f00000037c0)=""/236, 0xec}}, {{0x0, 0x0, &(0x7f0000003bc0)=[{0x0, 0xe00000000000000}, {&(0x7f0000003a00)=""/190, 0xbe}, {&(0x7f0000003ac0)=""/131, 0x83}, {0x0}], 0x4, &(0x7f0000003c00)=""/73, 0x49}}, {{&(0x7f0000003c80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, 0x0, 0x0, &(0x7f0000003e00)=""/48, 0x30}}], 0x4, 0x40000121, 0x0)
shutdown(r2, 0x0)

13:44:58 executing program 5:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000240)={@val={0x0, 0x86dd}, @val={0x5, 0x0, 0x0, 0x0, 0x54}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "000003", 0x190, 0x3a, 0x0, @empty, @mcast2, {[@routing={0x0, 0x2, 0x0, 0x0, 0x0, [@empty]}], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x0, "ee7b615d"}, {}, {0x2b, 0x3, "6f8c008275021d683910c309293188a7c747eb2278d2794784"}, {0x0, 0x28, "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"}]}}}}}, 0x1c6)

13:44:58 executing program 0:
semctl$IPC_INFO(0x0, 0x0, 0x3, &(0x7f0000000380)=""/88)

13:44:58 executing program 4:
syz_io_uring_setup(0x72fa, &(0x7f0000000040)={0x0, 0xfc5, 0x8}, 0x0, 0x0)

13:44:59 executing program 4:
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000980), 0x8002, 0x0)

13:44:59 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$GIO_UNISCRNMAP(r0, 0x4b69, 0x0)

13:44:59 executing program 2:
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
syz_genetlink_get_family_id$tipc(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$NFT_BATCH(r1, &(0x7f00000015c0)={&(0x7f0000000300), 0xc, &(0x7f0000001580)={&(0x7f00000014c0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_PAYLOAD_CSUM_OFFSET={0x8, 0x7, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}]}, @NFT_MSG_DELSETELEM={0x1c, 0xe, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}]}], {0x14}}, 0x94}, 0x1, 0x0, 0x0, 0x1}, 0x1)
getsockname$packet(0xffffffffffffffff, &(0x7f0000001340), &(0x7f0000001380)=0x14)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r1, 0x0, 0x0)
sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, 0x0, 0x0)
getsockname(0xffffffffffffffff, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001400)={&(0x7f0000000140), 0xc, &(0x7f0000000340)={&(0x7f0000000f00)=@newqdisc={0x1b8, 0x24, 0x0, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0xc}, {0x10, 0xffff}, {0xf, 0xfff2}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_RATE={0x6, 0x5, {0x8}}, @qdisc_kind_options=@q_choke={{0xa}, {0x18, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x4e0, 0x2, 0x6, 0x0, 0x1e, 0x2}}]}}, @qdisc_kind_options=@q_codel={{0xa}, {0x54, 0x2, [@TCA_CODEL_TARGET={0x8}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x4}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_LIMIT={0x8, 0x2, 0x2}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x80}, @TCA_CODEL_TARGET={0x8, 0x1, 0xb9}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_INTERVAL={0x8, 0x3, 0x7}, @TCA_CODEL_LIMIT={0x8, 0x2, 0x5}]}}, @TCA_STAB={0xf8, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x8, 0xc000, 0x9, 0x1, 0x80000001, 0x4, 0xa}}, {0x18, 0x2, [0x3, 0x4, 0x3, 0xff, 0x200, 0xfe01, 0x7, 0x8, 0x0, 0x2]}}, {{0x1c, 0x1, {0x0, 0x20, 0x1, 0xfc000, 0x1}}, {0x4}}, {{0x1c, 0x1, {0x3, 0x11, 0x100, 0x5, 0x0, 0x2dd, 0x7fff, 0x4}}, {0xc, 0x2, [0x6, 0x100, 0x2, 0x71]}}, {{0x1c, 0x1, {0x0, 0x40, 0x5, 0x3, 0x2}}, {0x4}}, {{0x1c, 0x1, {0x4, 0x8, 0x1ff, 0x3ff, 0x2, 0x5, 0x9, 0x5}}, {0xe, 0x2, [0x1, 0x1, 0xb41, 0x0, 0x8]}}, {{0x1c, 0x1, {0x9, 0x3f, 0x4, 0x3, 0x0, 0x4, 0x9, 0x5}}, {0xe, 0x2, [0x0, 0x0, 0x5ca, 0xfff, 0xfffb]}}]}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x81}]}, 0x1b8}, 0x1, 0x0, 0x0, 0x20000110}, 0x800)
connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10)
writev(r2, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1)
recvmmsg(r2, &(0x7f0000003e40)=[{{0x0, 0x3, 0x0, 0x0, &(0x7f00000035c0)=""/241, 0xf1}}, {{&(0x7f00000036c0)=@un=@abs, 0x80, &(0x7f0000003780)=[{&(0x7f0000003740)=""/4, 0x7ffff}], 0x1, &(0x7f00000037c0)=""/236, 0xec}}, {{0x0, 0x0, &(0x7f0000003bc0)=[{0x0, 0xe00000000000000}, {&(0x7f0000003a00)=""/190, 0xbe}, {&(0x7f0000003ac0)=""/131, 0x83}, {0x0}], 0x4, &(0x7f0000003c00)=""/73, 0x49}}, {{&(0x7f0000003c80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, 0x0, 0x0, &(0x7f0000003e00)=""/48, 0x30}}], 0x4, 0x40000121, 0x0)
shutdown(r2, 0x0)

13:44:59 executing program 0:
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000000000)={'veth1_virt_wifi\x00', 0x10001})
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)

13:44:59 executing program 5:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000240)={@val={0x0, 0x86dd}, @val={0x5, 0x0, 0x0, 0x0, 0x54}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "000003", 0x190, 0x3a, 0x0, @empty, @mcast2, {[@routing={0x0, 0x2, 0x0, 0x0, 0x0, [@empty]}], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x0, "ee7b615d"}, {}, {0x2b, 0x3, "6f8c008275021d683910c309293188a7c747eb2278d2794784"}, {0x0, 0x28, "4429118927041312255133e4d2b8b863b5f5b4ace38952e94c581c85d2d86844f548415db4dbf1992868a2e15095b531ce55d4620ec637afdcc990a4d6bfecb289917d24b31a2ddeb64383b176b823cc203ec1927487b7a00d6a3446cf7db79e14b2206d882c28611fa4d8289337cd75b4688120c73a2710947b908fde68a05a0777a170a14e85c7849462b3f5c3152cf0f3d91c5db93dc4d8f9e6b53708650dc375e6da3650b5ff4079971f6e3ef363382a16b8ae07b7307b5619092e4669dbca480d25738314135509eda68f712b9b09bdb485ea0914590b7ae01c2e34832f16c23c82b22b6ba550acfcede288a5237a06b3f5e09b6e5a0404544efe1474664b985f070121e82070a9f4513c2031a58a3d99e99284b812c0f047061139620890416c9defce02fa49cd1dd14b22df7250314ccb3dfd9827f892656911150cd9d921a8"}]}}}}}, 0x1c6)

13:44:59 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x0, &(0x7f0000000200)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f000000c380)='/proc/crypto\x00', 0x0, 0x0)
read$FUSE(r3, &(0x7f0000000200)={0x2020}, 0x2020)
execve(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000280)=[0x0, 0x0], &(0x7f0000000380)=[&(0x7f00000002c0)='*$%}\xce*\x00', &(0x7f0000000300)='\x00'])

13:44:59 executing program 0:
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000000), 0x4)
ioctl$sock_inet_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f00000000c0))

[ 2214.502319][T21670] veth1_virt_wifi: mtu greater than device maximum
13:44:59 executing program 4:
syz_io_uring_setup(0x1c73, &(0x7f0000000040)={0x0, 0x0, 0x8}, 0x0, 0x0)

13:44:59 executing program 3:
r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
syz_clone3(&(0x7f00000002c0)={0x250060000, &(0x7f0000000000), &(0x7f0000000080), 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, {r0}}, 0x58)

13:44:59 executing program 2:
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
syz_genetlink_get_family_id$tipc(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$NFT_BATCH(r1, &(0x7f00000015c0)={&(0x7f0000000300), 0xc, &(0x7f0000001580)={&(0x7f00000014c0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_PAYLOAD_CSUM_OFFSET={0x8, 0x7, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}]}, @NFT_MSG_DELSETELEM={0x1c, 0xe, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}]}], {0x14}}, 0x94}, 0x1, 0x0, 0x0, 0x1}, 0x1)
getsockname$packet(0xffffffffffffffff, &(0x7f0000001340), &(0x7f0000001380)=0x14)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r1, 0x0, 0x0)
sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001400)={&(0x7f0000000140), 0xc, &(0x7f0000000340)={&(0x7f0000000f00)=@newqdisc={0x1b8, 0x24, 0x0, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0xc}, {0x10, 0xffff}, {0xf, 0xfff2}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_RATE={0x6, 0x5, {0x8}}, @qdisc_kind_options=@q_choke={{0xa}, {0x18, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x4e0, 0x2, 0x6, 0x0, 0x1e, 0x2}}]}}, @qdisc_kind_options=@q_codel={{0xa}, {0x54, 0x2, [@TCA_CODEL_TARGET={0x8}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x4}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_LIMIT={0x8, 0x2, 0x2}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x80}, @TCA_CODEL_TARGET={0x8, 0x1, 0xb9}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_INTERVAL={0x8, 0x3, 0x7}, @TCA_CODEL_LIMIT={0x8, 0x2, 0x5}]}}, @TCA_STAB={0xf8, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x8, 0xc000, 0x9, 0x1, 0x80000001, 0x4, 0xa}}, {0x18, 0x2, [0x3, 0x4, 0x3, 0xff, 0x200, 0xfe01, 0x7, 0x8, 0x0, 0x2]}}, {{0x1c, 0x1, {0x0, 0x20, 0x1, 0xfc000, 0x1}}, {0x4}}, {{0x1c, 0x1, {0x3, 0x11, 0x100, 0x5, 0x0, 0x2dd, 0x7fff, 0x4}}, {0xc, 0x2, [0x6, 0x100, 0x2, 0x71]}}, {{0x1c, 0x1, {0x0, 0x40, 0x5, 0x3, 0x2}}, {0x4}}, {{0x1c, 0x1, {0x4, 0x8, 0x1ff, 0x3ff, 0x2, 0x5, 0x9, 0x5}}, {0xe, 0x2, [0x1, 0x1, 0xb41, 0x0, 0x8]}}, {{0x1c, 0x1, {0x9, 0x3f, 0x4, 0x3, 0x0, 0x4, 0x9, 0x5}}, {0xe, 0x2, [0x0, 0x0, 0x5ca, 0xfff, 0xfffb]}}]}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x81}]}, 0x1b8}, 0x1, 0x0, 0x0, 0x20000110}, 0x800)
connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10)
writev(r2, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1)
recvmmsg(r2, &(0x7f0000003e40)=[{{0x0, 0x3, 0x0, 0x0, &(0x7f00000035c0)=""/241, 0xf1}}, {{&(0x7f00000036c0)=@un=@abs, 0x80, &(0x7f0000003780)=[{&(0x7f0000003740)=""/4, 0x7ffff}], 0x1, &(0x7f00000037c0)=""/236, 0xec}}, {{0x0, 0x0, &(0x7f0000003bc0)=[{0x0, 0xe00000000000000}, {&(0x7f0000003a00)=""/190, 0xbe}, {&(0x7f0000003ac0)=""/131, 0x83}, {0x0}], 0x4, &(0x7f0000003c00)=""/73, 0x49}}, {{&(0x7f0000003c80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, 0x0, 0x0, &(0x7f0000003e00)=""/48, 0x30}}], 0x4, 0x40000121, 0x0)
shutdown(r2, 0x0)

13:44:59 executing program 0:
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r0, 0x28, 0x0, &(0x7f0000000880), 0x8)

13:44:59 executing program 4:
r0 = socket(0x11, 0xa, 0x0)
sendmsg$SMC_PNETID_GET(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={0x0}}, 0x0)

13:45:00 executing program 3:
write$evdev(0xffffffffffffffff, 0x0, 0x0)

13:45:00 executing program 2:
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
syz_genetlink_get_family_id$tipc(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$NFT_BATCH(r1, &(0x7f00000015c0)={&(0x7f0000000300), 0xc, &(0x7f0000001580)={&(0x7f00000014c0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_PAYLOAD_CSUM_OFFSET={0x8, 0x7, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}]}, @NFT_MSG_DELSETELEM={0x1c, 0xe, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}]}], {0x14}}, 0x94}, 0x1, 0x0, 0x0, 0x1}, 0x1)
getsockname$packet(0xffffffffffffffff, &(0x7f0000001340), &(0x7f0000001380)=0x14)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r1, 0x0, 0x0)
sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001400)={&(0x7f0000000140), 0xc, &(0x7f0000000340)={&(0x7f0000000f00)=@newqdisc={0x1b8, 0x24, 0x0, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0xc}, {0x10, 0xffff}, {0xf, 0xfff2}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_RATE={0x6, 0x5, {0x8}}, @qdisc_kind_options=@q_choke={{0xa}, {0x18, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x4e0, 0x2, 0x6, 0x0, 0x1e, 0x2}}]}}, @qdisc_kind_options=@q_codel={{0xa}, {0x54, 0x2, [@TCA_CODEL_TARGET={0x8}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x4}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_LIMIT={0x8, 0x2, 0x2}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x80}, @TCA_CODEL_TARGET={0x8, 0x1, 0xb9}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_INTERVAL={0x8, 0x3, 0x7}, @TCA_CODEL_LIMIT={0x8, 0x2, 0x5}]}}, @TCA_STAB={0xf8, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x8, 0xc000, 0x9, 0x1, 0x80000001, 0x4, 0xa}}, {0x18, 0x2, [0x3, 0x4, 0x3, 0xff, 0x200, 0xfe01, 0x7, 0x8, 0x0, 0x2]}}, {{0x1c, 0x1, {0x0, 0x20, 0x1, 0xfc000, 0x1}}, {0x4}}, {{0x1c, 0x1, {0x3, 0x11, 0x100, 0x5, 0x0, 0x2dd, 0x7fff, 0x4}}, {0xc, 0x2, [0x6, 0x100, 0x2, 0x71]}}, {{0x1c, 0x1, {0x0, 0x40, 0x5, 0x3, 0x2}}, {0x4}}, {{0x1c, 0x1, {0x4, 0x8, 0x1ff, 0x3ff, 0x2, 0x5, 0x9, 0x5}}, {0xe, 0x2, [0x1, 0x1, 0xb41, 0x0, 0x8]}}, {{0x1c, 0x1, {0x9, 0x3f, 0x4, 0x3, 0x0, 0x4, 0x9, 0x5}}, {0xe, 0x2, [0x0, 0x0, 0x5ca, 0xfff, 0xfffb]}}]}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x81}]}, 0x1b8}, 0x1, 0x0, 0x0, 0x20000110}, 0x800)
connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10)
writev(r2, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1)
recvmmsg(r2, &(0x7f0000003e40)=[{{0x0, 0x3, 0x0, 0x0, &(0x7f00000035c0)=""/241, 0xf1}}, {{&(0x7f00000036c0)=@un=@abs, 0x80, &(0x7f0000003780)=[{&(0x7f0000003740)=""/4, 0x7ffff}], 0x1, &(0x7f00000037c0)=""/236, 0xec}}, {{0x0, 0x0, &(0x7f0000003bc0)=[{0x0, 0xe00000000000000}, {&(0x7f0000003a00)=""/190, 0xbe}, {&(0x7f0000003ac0)=""/131, 0x83}, {0x0}], 0x4, &(0x7f0000003c00)=""/73, 0x49}}, {{&(0x7f0000003c80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, 0x0, 0x0, &(0x7f0000003e00)=""/48, 0x30}}], 0x4, 0x40000121, 0x0)
shutdown(r2, 0x0)

13:45:00 executing program 5:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000240)={@val={0x0, 0x86dd}, @val={0x5, 0x0, 0x0, 0x0, 0x54}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "000003", 0x190, 0x3a, 0x0, @empty, @mcast2, {[@routing={0x0, 0x2, 0x0, 0x0, 0x0, [@empty]}], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x0, "ee7b615d"}, {}, {0x2b, 0x3, "6f8c008275021d683910c309293188a7c747eb2278d2794784"}, {0x0, 0x28, "4429118927041312255133e4d2b8b863b5f5b4ace38952e94c581c85d2d86844f548415db4dbf1992868a2e15095b531ce55d4620ec637afdcc990a4d6bfecb289917d24b31a2ddeb64383b176b823cc203ec1927487b7a00d6a3446cf7db79e14b2206d882c28611fa4d8289337cd75b4688120c73a2710947b908fde68a05a0777a170a14e85c7849462b3f5c3152cf0f3d91c5db93dc4d8f9e6b53708650dc375e6da3650b5ff4079971f6e3ef363382a16b8ae07b7307b5619092e4669dbca480d25738314135509eda68f712b9b09bdb485ea0914590b7ae01c2e34832f16c23c82b22b6ba550acfcede288a5237a06b3f5e09b6e5a0404544efe1474664b985f070121e82070a9f4513c2031a58a3d99e99284b812c0f047061139620890416c9defce02fa49cd1dd14b22df7250314ccb3dfd9827f892656911150cd9d921a8"}]}}}}}, 0x1c6)

13:45:00 executing program 0:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
ioctl$UI_BEGIN_FF_ERASE(r0, 0xc00c55ca, &(0x7f0000000340))

13:45:00 executing program 4:
syz_open_dev$audion(&(0x7f0000000d00), 0x0, 0x640000)

13:45:01 executing program 0:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_l2cap_L2CAP_LM(r0, 0x112, 0xc, 0x0, 0x0)

13:45:01 executing program 3:
syz_init_net_socket$bt_l2cap(0xffffffffffffffff, 0x0, 0x0)

13:45:01 executing program 2:
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
syz_genetlink_get_family_id$tipc(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$NFT_BATCH(r1, &(0x7f00000015c0)={&(0x7f0000000300), 0xc, &(0x7f0000001580)={&(0x7f00000014c0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_PAYLOAD_CSUM_OFFSET={0x8, 0x7, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}]}, @NFT_MSG_DELSETELEM={0x1c, 0xe, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}]}], {0x14}}, 0x94}, 0x1, 0x0, 0x0, 0x1}, 0x1)
getsockname$packet(0xffffffffffffffff, &(0x7f0000001340), &(0x7f0000001380)=0x14)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r1, 0x0, 0x0)
sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001400)={&(0x7f0000000140), 0xc, &(0x7f0000000340)={&(0x7f0000000f00)=@newqdisc={0x1b8, 0x24, 0x0, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0xc}, {0x10, 0xffff}, {0xf, 0xfff2}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_RATE={0x6, 0x5, {0x8}}, @qdisc_kind_options=@q_choke={{0xa}, {0x18, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x4e0, 0x2, 0x6, 0x0, 0x1e, 0x2}}]}}, @qdisc_kind_options=@q_codel={{0xa}, {0x54, 0x2, [@TCA_CODEL_TARGET={0x8}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x4}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_LIMIT={0x8, 0x2, 0x2}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x80}, @TCA_CODEL_TARGET={0x8, 0x1, 0xb9}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_INTERVAL={0x8, 0x3, 0x7}, @TCA_CODEL_LIMIT={0x8, 0x2, 0x5}]}}, @TCA_STAB={0xf8, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x8, 0xc000, 0x9, 0x1, 0x80000001, 0x4, 0xa}}, {0x18, 0x2, [0x3, 0x4, 0x3, 0xff, 0x200, 0xfe01, 0x7, 0x8, 0x0, 0x2]}}, {{0x1c, 0x1, {0x0, 0x20, 0x1, 0xfc000, 0x1}}, {0x4}}, {{0x1c, 0x1, {0x3, 0x11, 0x100, 0x5, 0x0, 0x2dd, 0x7fff, 0x4}}, {0xc, 0x2, [0x6, 0x100, 0x2, 0x71]}}, {{0x1c, 0x1, {0x0, 0x40, 0x5, 0x3, 0x2}}, {0x4}}, {{0x1c, 0x1, {0x4, 0x8, 0x1ff, 0x3ff, 0x2, 0x5, 0x9, 0x5}}, {0xe, 0x2, [0x1, 0x1, 0xb41, 0x0, 0x8]}}, {{0x1c, 0x1, {0x9, 0x3f, 0x4, 0x3, 0x0, 0x4, 0x9, 0x5}}, {0xe, 0x2, [0x0, 0x0, 0x5ca, 0xfff, 0xfffb]}}]}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x81}]}, 0x1b8}, 0x1, 0x0, 0x0, 0x20000110}, 0x800)
connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10)
writev(r2, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1)
recvmmsg(r2, &(0x7f0000003e40)=[{{0x0, 0x3, 0x0, 0x0, &(0x7f00000035c0)=""/241, 0xf1}}, {{&(0x7f00000036c0)=@un=@abs, 0x80, &(0x7f0000003780)=[{&(0x7f0000003740)=""/4, 0x7ffff}], 0x1, &(0x7f00000037c0)=""/236, 0xec}}, {{0x0, 0x0, &(0x7f0000003bc0)=[{0x0, 0xe00000000000000}, {&(0x7f0000003a00)=""/190, 0xbe}, {&(0x7f0000003ac0)=""/131, 0x83}, {0x0}], 0x4, &(0x7f0000003c00)=""/73, 0x49}}, {{&(0x7f0000003c80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, 0x0, 0x0, &(0x7f0000003e00)=""/48, 0x30}}], 0x4, 0x40000121, 0x0)
shutdown(r2, 0x0)

13:45:01 executing program 4:
syz_io_uring_setup(0x6133, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0))

13:45:01 executing program 5:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000240)={@val={0x0, 0x86dd}, @val={0x5, 0x0, 0x0, 0x0, 0x54}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "000003", 0x190, 0x3a, 0x0, @empty, @mcast2, {[@routing={0x0, 0x2, 0x0, 0x0, 0x0, [@empty]}], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x0, "ee7b615d"}, {}, {0x2b, 0x3, "6f8c008275021d683910c309293188a7c747eb2278d2794784"}, {0x0, 0x28, "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"}]}}}}}, 0x1c6)

13:45:01 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x0, &(0x7f0000000200)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f000000c380)='/proc/crypto\x00', 0x0, 0x0)
read$FUSE(r3, &(0x7f0000000200)={0x2020}, 0x2020)
execve(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000280)=[0x0, 0x0], &(0x7f0000000380)=[&(0x7f00000002c0)='*$%}\xce*\x00', &(0x7f0000000300)='\x00'])

13:45:01 executing program 0:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NFC_CMD_SE_IO(r0, &(0x7f0000000ec0)={&(0x7f0000000d80), 0xc, &(0x7f0000000e80)={&(0x7f0000000e00)={0x14}, 0x14}}, 0x0)

13:45:01 executing program 3:
syz_io_uring_setup(0x5fa3, &(0x7f0000000000), 0x0, 0x0)
syz_io_uring_setup(0x29cf, &(0x7f0000000100), &(0x7f0000000180), &(0x7f00000001c0))

13:45:01 executing program 4:
syz_mount_image$fuse(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x68, &(0x7f0000000140)=ANY=[], 0x0, 0x0, 0x0)

13:45:01 executing program 2:
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
syz_genetlink_get_family_id$tipc(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$NFT_BATCH(r1, &(0x7f00000015c0)={&(0x7f0000000300), 0xc, &(0x7f0000001580)={&(0x7f00000014c0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_PAYLOAD_CSUM_OFFSET={0x8, 0x7, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}]}, @NFT_MSG_DELSETELEM={0x1c, 0xe, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}]}], {0x14}}, 0x94}, 0x1, 0x0, 0x0, 0x1}, 0x1)
getsockname$packet(0xffffffffffffffff, &(0x7f0000001340), &(0x7f0000001380)=0x14)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r1, 0x0, 0x0)
getsockname(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001400)={&(0x7f0000000140), 0xc, &(0x7f0000000340)={&(0x7f0000000f00)=@newqdisc={0x1b8, 0x24, 0x0, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0xc}, {0x10, 0xffff}, {0xf, 0xfff2}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_RATE={0x6, 0x5, {0x8}}, @qdisc_kind_options=@q_choke={{0xa}, {0x18, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x4e0, 0x2, 0x6, 0x0, 0x1e, 0x2}}]}}, @qdisc_kind_options=@q_codel={{0xa}, {0x54, 0x2, [@TCA_CODEL_TARGET={0x8}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x4}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_LIMIT={0x8, 0x2, 0x2}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x80}, @TCA_CODEL_TARGET={0x8, 0x1, 0xb9}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_INTERVAL={0x8, 0x3, 0x7}, @TCA_CODEL_LIMIT={0x8, 0x2, 0x5}]}}, @TCA_STAB={0xf8, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x8, 0xc000, 0x9, 0x1, 0x80000001, 0x4, 0xa}}, {0x18, 0x2, [0x3, 0x4, 0x3, 0xff, 0x200, 0xfe01, 0x7, 0x8, 0x0, 0x2]}}, {{0x1c, 0x1, {0x0, 0x20, 0x1, 0xfc000, 0x1}}, {0x4}}, {{0x1c, 0x1, {0x3, 0x11, 0x100, 0x5, 0x0, 0x2dd, 0x7fff, 0x4}}, {0xc, 0x2, [0x6, 0x100, 0x2, 0x71]}}, {{0x1c, 0x1, {0x0, 0x40, 0x5, 0x3, 0x2}}, {0x4}}, {{0x1c, 0x1, {0x4, 0x8, 0x1ff, 0x3ff, 0x2, 0x5, 0x9, 0x5}}, {0xe, 0x2, [0x1, 0x1, 0xb41, 0x0, 0x8]}}, {{0x1c, 0x1, {0x9, 0x3f, 0x4, 0x3, 0x0, 0x4, 0x9, 0x5}}, {0xe, 0x2, [0x0, 0x0, 0x5ca, 0xfff, 0xfffb]}}]}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x81}]}, 0x1b8}, 0x1, 0x0, 0x0, 0x20000110}, 0x800)
connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10)
writev(r2, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1)
recvmmsg(r2, &(0x7f0000003e40)=[{{0x0, 0x3, 0x0, 0x0, &(0x7f00000035c0)=""/241, 0xf1}}, {{&(0x7f00000036c0)=@un=@abs, 0x80, &(0x7f0000003780)=[{&(0x7f0000003740)=""/4, 0x7ffff}], 0x1, &(0x7f00000037c0)=""/236, 0xec}}, {{0x0, 0x0, &(0x7f0000003bc0)=[{0x0, 0xe00000000000000}, {&(0x7f0000003a00)=""/190, 0xbe}, {&(0x7f0000003ac0)=""/131, 0x83}, {0x0}], 0x4, &(0x7f0000003c00)=""/73, 0x49}}, {{&(0x7f0000003c80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, 0x0, 0x0, &(0x7f0000003e00)=""/48, 0x30}}], 0x4, 0x40000121, 0x0)
shutdown(r2, 0x0)

13:45:01 executing program 0:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000280), 0x802, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000300)={'syz0\x00'}, 0x45c)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000007c0)={{}, 'syz0\x00'})

13:45:01 executing program 4:
r0 = socket$rds(0x15, 0x5, 0x0)
sendto(r0, 0x0, 0x0, 0x64008008, 0x0, 0x0)

13:45:01 executing program 2:
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
syz_genetlink_get_family_id$tipc(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$NFT_BATCH(r1, &(0x7f00000015c0)={&(0x7f0000000300), 0xc, &(0x7f0000001580)={&(0x7f00000014c0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_PAYLOAD_CSUM_OFFSET={0x8, 0x7, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}]}, @NFT_MSG_DELSETELEM={0x1c, 0xe, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}]}], {0x14}}, 0x94}, 0x1, 0x0, 0x0, 0x1}, 0x1)
getsockname$packet(0xffffffffffffffff, &(0x7f0000001340), &(0x7f0000001380)=0x14)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r1, 0x0, 0x0)
getsockname(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001400)={&(0x7f0000000140), 0xc, &(0x7f0000000340)={&(0x7f0000000f00)=@newqdisc={0x1b8, 0x24, 0x0, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0xc}, {0x10, 0xffff}, {0xf, 0xfff2}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_RATE={0x6, 0x5, {0x8}}, @qdisc_kind_options=@q_choke={{0xa}, {0x18, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x4e0, 0x2, 0x6, 0x0, 0x1e, 0x2}}]}}, @qdisc_kind_options=@q_codel={{0xa}, {0x54, 0x2, [@TCA_CODEL_TARGET={0x8}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x4}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_LIMIT={0x8, 0x2, 0x2}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x80}, @TCA_CODEL_TARGET={0x8, 0x1, 0xb9}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_INTERVAL={0x8, 0x3, 0x7}, @TCA_CODEL_LIMIT={0x8, 0x2, 0x5}]}}, @TCA_STAB={0xf8, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x8, 0xc000, 0x9, 0x1, 0x80000001, 0x4, 0xa}}, {0x18, 0x2, [0x3, 0x4, 0x3, 0xff, 0x200, 0xfe01, 0x7, 0x8, 0x0, 0x2]}}, {{0x1c, 0x1, {0x0, 0x20, 0x1, 0xfc000, 0x1}}, {0x4}}, {{0x1c, 0x1, {0x3, 0x11, 0x100, 0x5, 0x0, 0x2dd, 0x7fff, 0x4}}, {0xc, 0x2, [0x6, 0x100, 0x2, 0x71]}}, {{0x1c, 0x1, {0x0, 0x40, 0x5, 0x3, 0x2}}, {0x4}}, {{0x1c, 0x1, {0x4, 0x8, 0x1ff, 0x3ff, 0x2, 0x5, 0x9, 0x5}}, {0xe, 0x2, [0x1, 0x1, 0xb41, 0x0, 0x8]}}, {{0x1c, 0x1, {0x9, 0x3f, 0x4, 0x3, 0x0, 0x4, 0x9, 0x5}}, {0xe, 0x2, [0x0, 0x0, 0x5ca, 0xfff, 0xfffb]}}]}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x81}]}, 0x1b8}, 0x1, 0x0, 0x0, 0x20000110}, 0x800)
connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10)
writev(r2, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1)
recvmmsg(r2, &(0x7f0000003e40)=[{{0x0, 0x3, 0x0, 0x0, &(0x7f00000035c0)=""/241, 0xf1}}, {{&(0x7f00000036c0)=@un=@abs, 0x80, &(0x7f0000003780)=[{&(0x7f0000003740)=""/4, 0x7ffff}], 0x1, &(0x7f00000037c0)=""/236, 0xec}}, {{0x0, 0x0, &(0x7f0000003bc0)=[{0x0, 0xe00000000000000}, {&(0x7f0000003a00)=""/190, 0xbe}, {&(0x7f0000003ac0)=""/131, 0x83}, {0x0}], 0x4, &(0x7f0000003c00)=""/73, 0x49}}, {{&(0x7f0000003c80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, 0x0, 0x0, &(0x7f0000003e00)=""/48, 0x30}}], 0x4, 0x40000121, 0x0)
shutdown(r2, 0x0)

13:45:01 executing program 3:
openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x8202, 0x0)

13:45:01 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg(r0, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000001140)=[{&(0x7f0000000080)="2835507302cff03f7bd913bd69bfa516e54c5440a20158a21078cde05eccbdccf4b86c5cdafe244e5ceaa89ef48eeed7bf341b7a1814d5373d028010652ca1e7cbc8676a1355acaa36df7cfec167703356bc7e91d21be1443becf0f5e3aa415eb485ddb5415d859a0de0da41a589f9af0b983f832452a80fadd96d458ac2359cea1b45c093b308fca151bb1c6fa5d2ca1b59c3d20f6996b44398244185ecf9ad7d9f2eb98672e9", 0xa7}, {&(0x7f0000001840)="d5e716f802e2f4d10ae3cd88ce7a290095f429284850e210621dacf803b127b06f8188d5a34c19590f5e7c3d3f80a280c55eab34644ed921547fab6a4c648c96700897af33e651d535cb3110cce49922c52d88f0b896dd7ba24dd90c65bfefdaf95f5287f0d1ebf95dd505cd2306abfd4b450ecd6b21961bb6f378d1c03a125383b023f46eef4e7cbbaca0ff34c0132816dea5c369c1e45bfd0349d222bb962157f522ded7f457835ac4b60248325131c3c9d3fff209d857aab5e0ee8c7894a7f27c5c9a887038f28251fca04114cb155d8c207bc22aae453eca5dc9118f1ee9d5b28dcb82e088b5677f15f1b462d8ef5dd9364ee4f7caa83b5f9ff7eca2b055083027e84ab3177521ae4de55befe45a947b3807a6b735f100b61fc7da2f9e7ea76ee5e9dfa45a0b4ab474a6b7a85fe67b957389c2f904e8164addb771d2d280e66acb662acd0244740c3d3732cda56aa33f9fe845606ca704ca13367d4f0b21b451e8beb726c492c0fd6baf5fedfd17ee4bb21c80f82e155b48a889fc547547e03165471e4f0461789cfff586b7f7c837cc93070975394058099804e0e7e618159b1ae2fcccb25c97c416bea8c768aac9facec1850029a8f65c94a642c40b64ee2d897816d8552d974cb738909cf16287514919667d29a54e5c4f20ef9efe73b4521b0e52815fc9c056de33014e919ef93bdf2eb34ea8ef207ad5c19ceb4154ed1f40a6813bb3493a0d7a813c278fa14becdb6846fe39f42a620cd27f68d0bf9b390532b7b24f74752409c8d688080cc432301b85c9bfa0cbdd687ca258fa1b02ea3b4654de53c8bb26b4746cb56bf7c26c57c513a86c30fdfa7f2607e8a07a52b937a1cb3931778ad252e1b1a74fa016de79300e993627b06cf56e60879e6d98772055689a513e73d885e70a9fd43aa68c65c996f77158e124064b5a124e67d0ce7bc7ee5b4b6f0b8a1a64e87909ac469d8cd279d94855aa70d07b7d98a2620a1c82be9371fa867dfc2ab8adeec157a9fdfbf59aacf30b20101e7873a3ef7412ab45b708b5fae551ef5c84e102c614525a1584cf36dd5ccd0a2801ee986fe9941c19b7220bd102b4d77d1ef4ed1c051ec11e33b059925eff1afc06f9d0cf821da78664d97ef0bc4526034ee74b7e2e4cbbb4c75c65f78e3fd2ed1a57f571debf51feb2fb0e7f2720e1cf1cde7b4858f439381f3d1f878e275b1da0171d0b7327e954a1792a1d8edf4bdfda16ec4234f68ac1de58002b312daa9a2d115025f70efcc759d569a480db2413ac17c06d19020c01e34f6d8368885190f7b9dd1fbaa572f29096983ce5651e5b3919007cf2a770b7c0285a0250391ec097b4f49bbefd2f5c43f83e6b0852152030697aaf90adbc3903b6c18655ce2586260c2336a2880e4519449e0e6ca82006a42f6b6b2740a6b24e2d42f553efeaf33d6bc71bdbb06c3d115182937421e3c8d1c8564239e463dd9fb74cb3c85f487ec0e200510b32a739340b05872aabb7538ca3ea3356d366c1ede103243f199547f3ece6bf338067ca0649bc2eb8e41e05ee69e9936b199f7fb100a4fd9fa1f5a36b0820d0357734dfba5af168c19ca2dc59c8a6be565f02529aa0b31f47f1ec1d5f43e7acdd6dfbbd7890a874a056367271b51a5de9293e174d229509705e43a0b50511db70033d5255c2a2363e8e3dc6fcac25d4e126fd38053803c93ae0e5456322b97acfabdf1182f95ad18d228b00713f0395b19c775f6add2e651c75478481b707e74808ce12a19d0800fa2d540d90c5e05edc2eeed8db11b5f6f090af6c60b77ed33cf6bc6ea1a979b101dd094fdcb6747361793c3eb6eb99d73de5f25f45696bb84d5667217110b1d331c48a002baea357fa082e9cd4e1fe11a83ac92fc730935f4601181ec9a2dce8762e761a28f5b3fb128d96ec9a3c2618fcc20d20f386d9d228873256a2bcd2a7b1771f1398582425eff696688f14ec4f67dc98a9d52a9728dbfde6672b199170656ef53a05abc115f89922c21add8837b4724351ca6627f81c3b27f1135ba2bc2a522d607f304d69d0a93c5d8f7449305e99abdddd19b798fccb7a9eb1305591a985c0c05c4f64ed705a6dbe6a82248bff38bdb811c264fba3ae64d035d381af414088f49b422421ea5409b2610f2070894bbe4cc76de59b034f217e6f744d9b5c0febe9856034707aacad7c96fcacc9ea209ea103d051337191d58037f557a229520522c8c019fb660a8f6ad8329707a1574ab10d4fe546e0094e47e172f06bb9c8406e5e329cba9fedb4674b0b982fd86021b385f0118fab7fcaa83d1ccf9b3adf8adee84ac913b78b65d10eee709a07faf5dff698aa30589630cb74959b17fb1e30254dc05deefb42bfd3482f3dd08afbb5e827eb6bf5966063280cd60c401cd27832bab3fa9211bcbbd9f2b759425e1ff598689f0182e10588f6b780dc0bcd007604a683d80ef8ff1d153f654f9d8295a3200343fb415b6b17e54f13f7c4e135ab2e6e2b1f4e24e2c5b1f3cbddf20d84e13ef9ad1d942528a75e7404455fffc611baf9ec41c7c2018727b7723e877b41544e0b3fdb031c59bd3076f0ce3aec75200fe0076503d0e9f1405d665a731771d787d9d0a86104341d3107e1339135f664da76eeadc175cfe129589769e0fb6834a126dd05d8b15b5b5611c4bd990de1affd69fa647309e8be8193d7f40d802c3fd048530317691eadd6e2c0c1a15f91fb218e9af0a539863304ad73a64351c54df755e01fa4f0146089762517b4ff0015dededae67d822d4cfd6533ee080329f26cb89486221944125d95c55f0ab97d338df18dc4f079776d180aa4d044e765aa4b2f3eacb30bde66492fd0d5b50c78cfa8cbc559f4da7d2e31c3d74aac372587759495233b894cd4d90d958707443ae5606f4617ee3d618536d3be34a3f9aaa4efd4b1853d923da038570d04e70d3b01b19e6f2c4b5d891728b39a7ccd72a92e32d1450209b134b92613df159bb4a06573c9fef192b60de77e402852bcddf3422b475c89b110964e519ea632c5f0e651b9025a4e80845ed8f252bd8ea7baab83b2cdbb2dd504de68f576eb791e60864e0891614f6922f98885097ac763f8a942087073e0d1af87ce15779dde5f0c9133ac2af19bbf91a57cac950e55f01420b49aceef6992fc4dd5891a35ce29e88e08dbb682a73dad7f16214c06606605ae5c29269cbd1d87aa42e1ada6bbcb62178af70c8d2ca8f6cbb2af786da15fb0c260f79437baef543ea63b07d018667eaf5741298e2735f74425c79066d7e6273ad34d0070c9f8f3c6583cb7afc902a36faf4b73acbf7d3caf53df9ea7ab867db15c04f49ab088b7746f663bab5f5e031dd79c5df19326ec77e6adf1f1d2232095de5e20e79317ba5d6c5b8285875183eeae3b1889234cb297bd05c3dc2eae0644355cf8dd5e6ad9428f4ee321f87a1ddabb63ba33befebef51fc65bd15e918f370e28d839c3539e3f2a90663c0bfd5a5d84b9f61d3555a090b027ace07ed9c841325a8a30ca4c1aedfb8d7152a862d1c41e1d953262727abacf69600e434f55275e512fb99a115b5a55f9e10ea7bff700cfebc31641f6a3bbafef5454ea0c90af0fe0d82b311dbd575428d49021a060c5a03ed17bb53c1ca03c0c6ef6d81c8f711b10d5afb0407a0aa2bb8cef7191635ac7c5dbc560436f60df63e188f3b0674dbbde891f60cb5ca3f882af735cb7fe4d5928c94d8f8b05e6a6323e855797848b936b31812c1d72c050f34379f8175e05f64da538d5d17940943f1ab72880fb27de82ec9dc7b58952d01513c7c43ce908f6d4cb2529bbf4f16a42e960ef6a244b0d8da9bc3c6f32781b32a6716c1231f4aad727cacc796185be6ab9b8f9e8f09c88cc1680ce46ebeee14fcddea66ec01afb35b4d8b04eabf3e04e4bfff9620d5477ecd9c2086651e3b04554da2ca3d6a42ff0b37f23bc0ae4e05e73a971a0693a093f5ea3e7f07e71d0268c33b4f69ec45c39d273eac2c23904e936298036c1145f6f2d3b0db18af22a56413d1fc1aa984cd2937ded5ec0912beec1ec56763fc083ed6199e2e8edb2428d0a9c5456c8f245c76bb6c857960e5271ef51d30c795f44ee5f843de3caac21ad0257ebd546dbccbcfa58b724629887e1591a5f1f513153f6be6e30c897d17d4cefe3baccefab72512fab1a0465dc316ebcbe4e41ed460cea6f7caee0306358a5ed48bff388fbe86b7e3ce228e718260d2478948da81053cbbebae187d7cde141f0400a7cd79ed8a05539cc80dea9f4a52cfc8cacb3f676f41213428a903a41c370437a163dc8b8311f97c1c75c70a90c17b36bbbdae4cd082976d3c1fb3575479b7fa6cbfdedf4005d94f987812e987c070b0c7c37d11ee6699cc005b0bec7753bde8c52fadf32f4a190ae886c595c8b64848c75e909e97c8b2d8e48b9158b0cfc68ac4d770fab4704a39085a39da197e1f4a9e506d7d31df29dd385aeea37270110f134d21a9d156a14c05a8406b88fa4db737b4762eca26cab99322f045314d1cbabc37a18f72ebb1eb2a02977355ed4e394211aaa8afc71907677a75e5ee1e219764d8e476ed638fe08b3c7d695962a45df437e1c6719ecab5a55e9370c69861c8ff3929e5ef803948b5ac76c0dfbf819c105a4b521c53e1def56d3afbe076df13876b4a9ca42193cce377cfb7d2a245fae9e624a5562ed5c07f33f77a34f7d84c69db084bcf4d2f6f03447ba9f2e009567976886ba0a812bdae476637e665bad79cc963206d3be1aea6bf8900c1275344099a771cb0bb7a9f6ff6b1d9fb1659128631918f99cfbafe9992d9974feb66e081588814f0aebec940ef773c42eca95eb47a96211a590dd6095beb3d36d508246b2493189cb5178c64b4dae5cfaccc49c1d1394347f20590959c35af314002741eb83fe0659c89d06a0526c0440fb293a5d145f72f5b239e80c86f9cf4d32b626f0acd335cd5b76e2d360e88497ed161b261f4bd96172a4cfbcee70186584e63ce025e6941c67345d232c44b8fddfb3e5b1b01707517159215433041e7bc5bb3225bcc1943abfc71dff9ad4a16b73e352369a4ab5d39fd084ee0c6685c7c812116eae044f", 0xe1a}], 0x2, &(0x7f0000000140)=[{0x18, 0x0, 0x0, "f5"}, {0x10, 0x0, 0x40}], 0x28}, 0x80)

13:45:01 executing program 5:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, 0x0)
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000240)={@val={0x0, 0x86dd}, @val={0x5, 0x0, 0x0, 0x0, 0x54}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "000003", 0x190, 0x3a, 0x0, @empty, @mcast2, {[@routing={0x0, 0x2, 0x0, 0x0, 0x0, [@empty]}], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x0, "ee7b615d"}, {}, {0x2b, 0x3, "6f8c008275021d683910c309293188a7c747eb2278d2794784"}, {0x0, 0x28, "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"}]}}}}}, 0x1c6)

13:45:01 executing program 4:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_l2cap_L2CAP_LM(r0, 0x112, 0xa, 0x0, 0x0)

13:45:03 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f000000c380)='/proc/crypto\x00', 0x0, 0x0)
read$FUSE(r3, &(0x7f0000000200)={0x2020}, 0x2020)
execve(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000280)=[0x0, 0x0], &(0x7f0000000380)=[&(0x7f00000002c0)='*$%}\xce*\x00', &(0x7f0000000300)='\x00'])

13:45:03 executing program 0:
syz_io_uring_setup(0x5fa3, &(0x7f0000000000)={0x0, 0x0, 0x800}, &(0x7f0000000080), &(0x7f00000000c0))
syz_io_uring_setup(0x29cf, &(0x7f0000000100), &(0x7f0000000180), &(0x7f00000001c0))

13:45:03 executing program 3:
syz_mount_image$fuse(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x20100000, &(0x7f0000000140)=ANY=[], 0x0, 0x0, 0x0)

13:45:03 executing program 2:
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
syz_genetlink_get_family_id$tipc(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$NFT_BATCH(r1, &(0x7f00000015c0)={&(0x7f0000000300), 0xc, &(0x7f0000001580)={&(0x7f00000014c0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_PAYLOAD_CSUM_OFFSET={0x8, 0x7, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}]}, @NFT_MSG_DELSETELEM={0x1c, 0xe, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}]}], {0x14}}, 0x94}, 0x1, 0x0, 0x0, 0x1}, 0x1)
getsockname$packet(0xffffffffffffffff, &(0x7f0000001340), &(0x7f0000001380)=0x14)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r1, 0x0, 0x0)
getsockname(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001400)={&(0x7f0000000140), 0xc, &(0x7f0000000340)={&(0x7f0000000f00)=@newqdisc={0x1b8, 0x24, 0x0, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0xc}, {0x10, 0xffff}, {0xf, 0xfff2}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_RATE={0x6, 0x5, {0x8}}, @qdisc_kind_options=@q_choke={{0xa}, {0x18, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x4e0, 0x2, 0x6, 0x0, 0x1e, 0x2}}]}}, @qdisc_kind_options=@q_codel={{0xa}, {0x54, 0x2, [@TCA_CODEL_TARGET={0x8}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x4}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_LIMIT={0x8, 0x2, 0x2}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x80}, @TCA_CODEL_TARGET={0x8, 0x1, 0xb9}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_INTERVAL={0x8, 0x3, 0x7}, @TCA_CODEL_LIMIT={0x8, 0x2, 0x5}]}}, @TCA_STAB={0xf8, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x8, 0xc000, 0x9, 0x1, 0x80000001, 0x4, 0xa}}, {0x18, 0x2, [0x3, 0x4, 0x3, 0xff, 0x200, 0xfe01, 0x7, 0x8, 0x0, 0x2]}}, {{0x1c, 0x1, {0x0, 0x20, 0x1, 0xfc000, 0x1}}, {0x4}}, {{0x1c, 0x1, {0x3, 0x11, 0x100, 0x5, 0x0, 0x2dd, 0x7fff, 0x4}}, {0xc, 0x2, [0x6, 0x100, 0x2, 0x71]}}, {{0x1c, 0x1, {0x0, 0x40, 0x5, 0x3, 0x2}}, {0x4}}, {{0x1c, 0x1, {0x4, 0x8, 0x1ff, 0x3ff, 0x2, 0x5, 0x9, 0x5}}, {0xe, 0x2, [0x1, 0x1, 0xb41, 0x0, 0x8]}}, {{0x1c, 0x1, {0x9, 0x3f, 0x4, 0x3, 0x0, 0x4, 0x9, 0x5}}, {0xe, 0x2, [0x0, 0x0, 0x5ca, 0xfff, 0xfffb]}}]}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x81}]}, 0x1b8}, 0x1, 0x0, 0x0, 0x20000110}, 0x800)
connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10)
writev(r2, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1)
recvmmsg(r2, &(0x7f0000003e40)=[{{0x0, 0x3, 0x0, 0x0, &(0x7f00000035c0)=""/241, 0xf1}}, {{&(0x7f00000036c0)=@un=@abs, 0x80, &(0x7f0000003780)=[{&(0x7f0000003740)=""/4, 0x7ffff}], 0x1, &(0x7f00000037c0)=""/236, 0xec}}, {{0x0, 0x0, &(0x7f0000003bc0)=[{0x0, 0xe00000000000000}, {&(0x7f0000003a00)=""/190, 0xbe}, {&(0x7f0000003ac0)=""/131, 0x83}, {0x0}], 0x4, &(0x7f0000003c00)=""/73, 0x49}}, {{&(0x7f0000003c80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, 0x0, 0x0, &(0x7f0000003e00)=""/48, 0x30}}], 0x4, 0x40000121, 0x0)
shutdown(r2, 0x0)

13:45:03 executing program 4:
bpf$MAP_CREATE(0x0, 0xffffffffffffffff, 0x0)

13:45:03 executing program 5:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, 0x0)
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000240)={@val={0x0, 0x86dd}, @val={0x5, 0x0, 0x0, 0x0, 0x54}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "000003", 0x190, 0x3a, 0x0, @empty, @mcast2, {[@routing={0x0, 0x2, 0x0, 0x0, 0x0, [@empty]}], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x0, "ee7b615d"}, {}, {0x2b, 0x3, "6f8c008275021d683910c309293188a7c747eb2278d2794784"}, {0x0, 0x28, "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"}]}}}}}, 0x1c6)

13:45:03 executing program 3:
syz_mount_image$fuse(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x2844000, &(0x7f0000000140)=ANY=[], 0x0, 0x0, 0x0)

13:45:03 executing program 2:
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
syz_genetlink_get_family_id$tipc(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$NFT_BATCH(r1, &(0x7f00000015c0)={&(0x7f0000000300), 0xc, &(0x7f0000001580)={&(0x7f00000014c0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_PAYLOAD_CSUM_OFFSET={0x8, 0x7, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}]}, @NFT_MSG_DELSETELEM={0x1c, 0xe, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}]}], {0x14}}, 0x94}, 0x1, 0x0, 0x0, 0x1}, 0x1)
getsockname$packet(0xffffffffffffffff, &(0x7f0000001340), &(0x7f0000001380)=0x14)
sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, 0x0, 0x0)
getsockname(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001400)={&(0x7f0000000140), 0xc, &(0x7f0000000340)={&(0x7f0000000f00)=@newqdisc={0x1b8, 0x24, 0x0, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0xc}, {0x10, 0xffff}, {0xf, 0xfff2}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_RATE={0x6, 0x5, {0x8}}, @qdisc_kind_options=@q_choke={{0xa}, {0x18, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x4e0, 0x2, 0x6, 0x0, 0x1e, 0x2}}]}}, @qdisc_kind_options=@q_codel={{0xa}, {0x54, 0x2, [@TCA_CODEL_TARGET={0x8}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x4}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_LIMIT={0x8, 0x2, 0x2}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x80}, @TCA_CODEL_TARGET={0x8, 0x1, 0xb9}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_INTERVAL={0x8, 0x3, 0x7}, @TCA_CODEL_LIMIT={0x8, 0x2, 0x5}]}}, @TCA_STAB={0xf8, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x8, 0xc000, 0x9, 0x1, 0x80000001, 0x4, 0xa}}, {0x18, 0x2, [0x3, 0x4, 0x3, 0xff, 0x200, 0xfe01, 0x7, 0x8, 0x0, 0x2]}}, {{0x1c, 0x1, {0x0, 0x20, 0x1, 0xfc000, 0x1}}, {0x4}}, {{0x1c, 0x1, {0x3, 0x11, 0x100, 0x5, 0x0, 0x2dd, 0x7fff, 0x4}}, {0xc, 0x2, [0x6, 0x100, 0x2, 0x71]}}, {{0x1c, 0x1, {0x0, 0x40, 0x5, 0x3, 0x2}}, {0x4}}, {{0x1c, 0x1, {0x4, 0x8, 0x1ff, 0x3ff, 0x2, 0x5, 0x9, 0x5}}, {0xe, 0x2, [0x1, 0x1, 0xb41, 0x0, 0x8]}}, {{0x1c, 0x1, {0x9, 0x3f, 0x4, 0x3, 0x0, 0x4, 0x9, 0x5}}, {0xe, 0x2, [0x0, 0x0, 0x5ca, 0xfff, 0xfffb]}}]}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x81}]}, 0x1b8}, 0x1, 0x0, 0x0, 0x20000110}, 0x800)
connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10)
writev(r2, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1)
recvmmsg(r2, &(0x7f0000003e40)=[{{0x0, 0x3, 0x0, 0x0, &(0x7f00000035c0)=""/241, 0xf1}}, {{&(0x7f00000036c0)=@un=@abs, 0x80, &(0x7f0000003780)=[{&(0x7f0000003740)=""/4, 0x7ffff}], 0x1, &(0x7f00000037c0)=""/236, 0xec}}, {{0x0, 0x0, &(0x7f0000003bc0)=[{0x0, 0xe00000000000000}, {&(0x7f0000003a00)=""/190, 0xbe}, {&(0x7f0000003ac0)=""/131, 0x83}, {0x0}], 0x4, &(0x7f0000003c00)=""/73, 0x49}}, {{&(0x7f0000003c80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, 0x0, 0x0, &(0x7f0000003e00)=""/48, 0x30}}], 0x4, 0x40000121, 0x0)
shutdown(r2, 0x0)

13:45:03 executing program 4:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x826f}, 0xc)

13:45:03 executing program 0:
r0 = socket$rds(0x15, 0x5, 0x0)
sendmsg$rds(r0, &(0x7f0000009240)={&(0x7f00000055c0)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000007ac0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0)

13:45:03 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r1)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400ee5c99f8435ecde50a0412", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x1, 0x803, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="50000000100001040000ff0f0000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e00000000180002800c0002001c0000001b000000060001000100000008000500", @ANYRES32=r5], 0x50}}, 0x0)
r6 = socket(0x1, 0x803, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080))
r8 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x1e}}]}}}, @IFLA_LINK={0x8, 0x5, r7}]}, 0x50}}, 0x0)
r9 = socket$nl_route(0x10, 0x3, 0x0)
r10 = socket(0x1, 0x803, 0x0)
getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, <r11=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r9, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000540)=ANY=[@ANYBLOB="20000000110003040000007bb000000000000000", @ANYRES32=r11], 0x20}}, 0x0)

13:45:03 executing program 0:
openat$ptp0(0xffffffffffffff9c, &(0x7f0000000280), 0x10000, 0x0)

[ 2218.391766][T21777] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'.
13:45:04 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, 0x0)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f000000c380)='/proc/crypto\x00', 0x0, 0x0)
read$FUSE(r3, &(0x7f0000000200)={0x2020}, 0x2020)
execve(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000280)=[0x0, 0x0], &(0x7f0000000380)=[&(0x7f00000002c0)='*$%}\xce*\x00', &(0x7f0000000300)='\x00'])

13:45:04 executing program 2:
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
syz_genetlink_get_family_id$tipc(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$NFT_BATCH(r1, &(0x7f00000015c0)={&(0x7f0000000300), 0xc, &(0x7f0000001580)={&(0x7f00000014c0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_PAYLOAD_CSUM_OFFSET={0x8, 0x7, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}]}, @NFT_MSG_DELSETELEM={0x1c, 0xe, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}]}], {0x14}}, 0x94}, 0x1, 0x0, 0x0, 0x1}, 0x1)
getsockname$packet(0xffffffffffffffff, &(0x7f0000001340), &(0x7f0000001380)=0x14)
sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, 0x0, 0x0)
getsockname(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001400)={&(0x7f0000000140), 0xc, &(0x7f0000000340)={&(0x7f0000000f00)=@newqdisc={0x1b8, 0x24, 0x0, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0xc}, {0x10, 0xffff}, {0xf, 0xfff2}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_RATE={0x6, 0x5, {0x8}}, @qdisc_kind_options=@q_choke={{0xa}, {0x18, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x4e0, 0x2, 0x6, 0x0, 0x1e, 0x2}}]}}, @qdisc_kind_options=@q_codel={{0xa}, {0x54, 0x2, [@TCA_CODEL_TARGET={0x8}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x4}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_LIMIT={0x8, 0x2, 0x2}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x80}, @TCA_CODEL_TARGET={0x8, 0x1, 0xb9}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_INTERVAL={0x8, 0x3, 0x7}, @TCA_CODEL_LIMIT={0x8, 0x2, 0x5}]}}, @TCA_STAB={0xf8, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x8, 0xc000, 0x9, 0x1, 0x80000001, 0x4, 0xa}}, {0x18, 0x2, [0x3, 0x4, 0x3, 0xff, 0x200, 0xfe01, 0x7, 0x8, 0x0, 0x2]}}, {{0x1c, 0x1, {0x0, 0x20, 0x1, 0xfc000, 0x1}}, {0x4}}, {{0x1c, 0x1, {0x3, 0x11, 0x100, 0x5, 0x0, 0x2dd, 0x7fff, 0x4}}, {0xc, 0x2, [0x6, 0x100, 0x2, 0x71]}}, {{0x1c, 0x1, {0x0, 0x40, 0x5, 0x3, 0x2}}, {0x4}}, {{0x1c, 0x1, {0x4, 0x8, 0x1ff, 0x3ff, 0x2, 0x5, 0x9, 0x5}}, {0xe, 0x2, [0x1, 0x1, 0xb41, 0x0, 0x8]}}, {{0x1c, 0x1, {0x9, 0x3f, 0x4, 0x3, 0x0, 0x4, 0x9, 0x5}}, {0xe, 0x2, [0x0, 0x0, 0x5ca, 0xfff, 0xfffb]}}]}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x81}]}, 0x1b8}, 0x1, 0x0, 0x0, 0x20000110}, 0x800)
connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10)
writev(r2, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1)
recvmmsg(r2, &(0x7f0000003e40)=[{{0x0, 0x3, 0x0, 0x0, &(0x7f00000035c0)=""/241, 0xf1}}, {{&(0x7f00000036c0)=@un=@abs, 0x80, &(0x7f0000003780)=[{&(0x7f0000003740)=""/4, 0x7ffff}], 0x1, &(0x7f00000037c0)=""/236, 0xec}}, {{0x0, 0x0, &(0x7f0000003bc0)=[{0x0, 0xe00000000000000}, {&(0x7f0000003a00)=""/190, 0xbe}, {&(0x7f0000003ac0)=""/131, 0x83}, {0x0}], 0x4, &(0x7f0000003c00)=""/73, 0x49}}, {{&(0x7f0000003c80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, 0x0, 0x0, &(0x7f0000003e00)=""/48, 0x30}}], 0x4, 0x40000121, 0x0)
shutdown(r2, 0x0)

13:45:04 executing program 4:
epoll_pwait2(0xffffffffffffffff, &(0x7f0000000bc0)=[{}], 0x1, 0x0, 0x0, 0x0)

13:45:04 executing program 0:
openat$drirender128(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000900)={0x10}, 0x10}}, 0x0)

13:45:04 executing program 5:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, 0x0)
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000240)={@val={0x0, 0x86dd}, @val={0x5, 0x0, 0x0, 0x0, 0x54}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "000003", 0x190, 0x3a, 0x0, @empty, @mcast2, {[@routing={0x0, 0x2, 0x0, 0x0, 0x0, [@empty]}], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x0, "ee7b615d"}, {}, {0x2b, 0x3, "6f8c008275021d683910c309293188a7c747eb2278d2794784"}, {0x0, 0x28, "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"}]}}}}}, 0x1c6)

13:45:04 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r1)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400ee5c99f8435ecde50a0412", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x1, 0x803, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="50000000100001040000ff0f0000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e00000000180002800c0002001c0000001b000000060001000100000008000500", @ANYRES32=r5], 0x50}}, 0x0)
r6 = socket(0x1, 0x803, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080))
r8 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x1e}}]}}}, @IFLA_LINK={0x8, 0x5, r7}]}, 0x50}}, 0x0)
r9 = socket$nl_route(0x10, 0x3, 0x0)
r10 = socket(0x1, 0x803, 0x0)
getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, <r11=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r9, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000540)=ANY=[@ANYBLOB="20000000110003040000007bb000000000000000", @ANYRES32=r11], 0x20}}, 0x0)

13:45:04 executing program 2:
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
syz_genetlink_get_family_id$tipc(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$NFT_BATCH(r1, &(0x7f00000015c0)={&(0x7f0000000300), 0xc, &(0x7f0000001580)={&(0x7f00000014c0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_PAYLOAD_CSUM_OFFSET={0x8, 0x7, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}]}, @NFT_MSG_DELSETELEM={0x1c, 0xe, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}]}], {0x14}}, 0x94}, 0x1, 0x0, 0x0, 0x1}, 0x1)
getsockname$packet(0xffffffffffffffff, &(0x7f0000001340), &(0x7f0000001380)=0x14)
sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, 0x0, 0x0)
getsockname(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001400)={&(0x7f0000000140), 0xc, &(0x7f0000000340)={&(0x7f0000000f00)=@newqdisc={0x1b8, 0x24, 0x0, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0xc}, {0x10, 0xffff}, {0xf, 0xfff2}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_RATE={0x6, 0x5, {0x8}}, @qdisc_kind_options=@q_choke={{0xa}, {0x18, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x4e0, 0x2, 0x6, 0x0, 0x1e, 0x2}}]}}, @qdisc_kind_options=@q_codel={{0xa}, {0x54, 0x2, [@TCA_CODEL_TARGET={0x8}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x4}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_LIMIT={0x8, 0x2, 0x2}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x80}, @TCA_CODEL_TARGET={0x8, 0x1, 0xb9}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_INTERVAL={0x8, 0x3, 0x7}, @TCA_CODEL_LIMIT={0x8, 0x2, 0x5}]}}, @TCA_STAB={0xf8, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x8, 0xc000, 0x9, 0x1, 0x80000001, 0x4, 0xa}}, {0x18, 0x2, [0x3, 0x4, 0x3, 0xff, 0x200, 0xfe01, 0x7, 0x8, 0x0, 0x2]}}, {{0x1c, 0x1, {0x0, 0x20, 0x1, 0xfc000, 0x1}}, {0x4}}, {{0x1c, 0x1, {0x3, 0x11, 0x100, 0x5, 0x0, 0x2dd, 0x7fff, 0x4}}, {0xc, 0x2, [0x6, 0x100, 0x2, 0x71]}}, {{0x1c, 0x1, {0x0, 0x40, 0x5, 0x3, 0x2}}, {0x4}}, {{0x1c, 0x1, {0x4, 0x8, 0x1ff, 0x3ff, 0x2, 0x5, 0x9, 0x5}}, {0xe, 0x2, [0x1, 0x1, 0xb41, 0x0, 0x8]}}, {{0x1c, 0x1, {0x9, 0x3f, 0x4, 0x3, 0x0, 0x4, 0x9, 0x5}}, {0xe, 0x2, [0x0, 0x0, 0x5ca, 0xfff, 0xfffb]}}]}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x81}]}, 0x1b8}, 0x1, 0x0, 0x0, 0x20000110}, 0x800)
connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10)
writev(r2, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1)
recvmmsg(r2, &(0x7f0000003e40)=[{{0x0, 0x3, 0x0, 0x0, &(0x7f00000035c0)=""/241, 0xf1}}, {{&(0x7f00000036c0)=@un=@abs, 0x80, &(0x7f0000003780)=[{&(0x7f0000003740)=""/4, 0x7ffff}], 0x1, &(0x7f00000037c0)=""/236, 0xec}}, {{0x0, 0x0, &(0x7f0000003bc0)=[{0x0, 0xe00000000000000}, {&(0x7f0000003a00)=""/190, 0xbe}, {&(0x7f0000003ac0)=""/131, 0x83}, {0x0}], 0x4, &(0x7f0000003c00)=""/73, 0x49}}, {{&(0x7f0000003c80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, 0x0, 0x0, &(0x7f0000003e00)=""/48, 0x30}}], 0x4, 0x40000121, 0x0)
shutdown(r2, 0x0)

13:45:04 executing program 0:
getresuid(0x0, 0x0, 0x0)
add_key$keyring(&(0x7f0000000c00), &(0x7f0000000c40)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb)

13:45:04 executing program 4:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_SIOCADDRT(r0, 0x8940, &(0x7f00000000c0)={0x0, @nfc, @can, @nl})

[ 2219.492017][T21789] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'.
13:45:04 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, 0x0)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f000000c380)='/proc/crypto\x00', 0x0, 0x0)
read$FUSE(r3, &(0x7f0000000200)={0x2020}, 0x2020)
execve(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000280)=[0x0, 0x0], &(0x7f0000000380)=[&(0x7f00000002c0)='*$%}\xce*\x00', &(0x7f0000000300)='\x00'])

13:45:04 executing program 2:
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
syz_genetlink_get_family_id$tipc(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$NFT_BATCH(r1, &(0x7f00000015c0)={&(0x7f0000000300), 0xc, &(0x7f0000001580)={&(0x7f00000014c0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_PAYLOAD_CSUM_OFFSET={0x8, 0x7, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}]}, @NFT_MSG_DELSETELEM={0x1c, 0xe, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}]}], {0x14}}, 0x94}, 0x1, 0x0, 0x0, 0x1}, 0x1)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r1, 0x0, 0x0)
sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, 0x0, 0x0)
getsockname(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001400)={&(0x7f0000000140), 0xc, &(0x7f0000000340)={&(0x7f0000000f00)=@newqdisc={0x1b8, 0x24, 0x0, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0xc}, {0x10, 0xffff}, {0xf, 0xfff2}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_RATE={0x6, 0x5, {0x8}}, @qdisc_kind_options=@q_choke={{0xa}, {0x18, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x4e0, 0x2, 0x6, 0x0, 0x1e, 0x2}}]}}, @qdisc_kind_options=@q_codel={{0xa}, {0x54, 0x2, [@TCA_CODEL_TARGET={0x8}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x4}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_LIMIT={0x8, 0x2, 0x2}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x80}, @TCA_CODEL_TARGET={0x8, 0x1, 0xb9}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_INTERVAL={0x8, 0x3, 0x7}, @TCA_CODEL_LIMIT={0x8, 0x2, 0x5}]}}, @TCA_STAB={0xf8, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x8, 0xc000, 0x9, 0x1, 0x80000001, 0x4, 0xa}}, {0x18, 0x2, [0x3, 0x4, 0x3, 0xff, 0x200, 0xfe01, 0x7, 0x8, 0x0, 0x2]}}, {{0x1c, 0x1, {0x0, 0x20, 0x1, 0xfc000, 0x1}}, {0x4}}, {{0x1c, 0x1, {0x3, 0x11, 0x100, 0x5, 0x0, 0x2dd, 0x7fff, 0x4}}, {0xc, 0x2, [0x6, 0x100, 0x2, 0x71]}}, {{0x1c, 0x1, {0x0, 0x40, 0x5, 0x3, 0x2}}, {0x4}}, {{0x1c, 0x1, {0x4, 0x8, 0x1ff, 0x3ff, 0x2, 0x5, 0x9, 0x5}}, {0xe, 0x2, [0x1, 0x1, 0xb41, 0x0, 0x8]}}, {{0x1c, 0x1, {0x9, 0x3f, 0x4, 0x3, 0x0, 0x4, 0x9, 0x5}}, {0xe, 0x2, [0x0, 0x0, 0x5ca, 0xfff, 0xfffb]}}]}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x81}]}, 0x1b8}, 0x1, 0x0, 0x0, 0x20000110}, 0x800)
connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10)
writev(r2, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1)
recvmmsg(r2, &(0x7f0000003e40)=[{{0x0, 0x3, 0x0, 0x0, &(0x7f00000035c0)=""/241, 0xf1}}, {{&(0x7f00000036c0)=@un=@abs, 0x80, &(0x7f0000003780)=[{&(0x7f0000003740)=""/4, 0x7ffff}], 0x1, &(0x7f00000037c0)=""/236, 0xec}}, {{0x0, 0x0, &(0x7f0000003bc0)=[{0x0, 0xe00000000000000}, {&(0x7f0000003a00)=""/190, 0xbe}, {&(0x7f0000003ac0)=""/131, 0x83}, {0x0}], 0x4, &(0x7f0000003c00)=""/73, 0x49}}, {{&(0x7f0000003c80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, 0x0, 0x0, &(0x7f0000003e00)=""/48, 0x30}}], 0x4, 0x40000121, 0x0)
shutdown(r2, 0x0)

13:45:04 executing program 0:
mq_open(&(0x7f00000002c0)='][,\x00', 0x8c0, 0x0, &(0x7f0000000300)={0x9, 0x7fffffffffffffff, 0x5, 0x7f})

13:45:04 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, 0x0)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f000000c380)='/proc/crypto\x00', 0x0, 0x0)
read$FUSE(r3, &(0x7f0000000200)={0x2020}, 0x2020)
execve(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000280)=[0x0, 0x0], &(0x7f0000000380)=[&(0x7f00000002c0)='*$%}\xce*\x00', &(0x7f0000000300)='\x00'])

13:45:04 executing program 4:
mq_open(&(0x7f0000000100)='A{\x92X\xbc-U\x02(\xa7N\xab\x00\xb0\x1f\xdc\x90\xef\ah\xd3\x94 \xba@Z\x00\x00\x00\x00\x00\x00t\xa4\xe6\xab\x88oC\xf8\\:\x95\x8b\x9c\xaf\xb1\xff\x9d\xb1@\xbe\xe0Xp\t\x1a\vO\xee\x064Fz\a\"\xd1\xa0\x1cg0\xfdu\x82\x04\r\xfd\xfdIV\x015\x92\xac\xfaE\xb1\x9f\x8ak^\ba\x01\x9b\x01\xf5\xff\xff\xff\x00\x00\x00\xe8\x87\x19\xab\xd1\xfcg\xfd\x8ac\ve\xf2o\x02\xcc\x8c@\xc7\x95\xcfGYV3w\xb0\xc8\xcb\"v\x16\xd0\xe0Z\xf1N9\xb2W\x9c\x83\xf3-1y\x84\xb4\x9a2\x92\x82\x00\x00\x00\x00\x00\x00\x00\x00', 0x40, 0xa8, &(0x7f0000000200))

13:45:05 executing program 2:
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
syz_genetlink_get_family_id$tipc(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$NFT_BATCH(r1, &(0x7f00000015c0)={&(0x7f0000000300), 0xc, &(0x7f0000001580)={&(0x7f00000014c0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_PAYLOAD_CSUM_OFFSET={0x8, 0x7, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}]}, @NFT_MSG_DELSETELEM={0x1c, 0xe, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}]}], {0x14}}, 0x94}, 0x1, 0x0, 0x0, 0x1}, 0x1)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r1, 0x0, 0x0)
sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, 0x0, 0x0)
getsockname(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001400)={&(0x7f0000000140), 0xc, &(0x7f0000000340)={&(0x7f0000000f00)=@newqdisc={0x1b8, 0x24, 0x0, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0xc}, {0x10, 0xffff}, {0xf, 0xfff2}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_RATE={0x6, 0x5, {0x8}}, @qdisc_kind_options=@q_choke={{0xa}, {0x18, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x4e0, 0x2, 0x6, 0x0, 0x1e, 0x2}}]}}, @qdisc_kind_options=@q_codel={{0xa}, {0x54, 0x2, [@TCA_CODEL_TARGET={0x8}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x4}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_LIMIT={0x8, 0x2, 0x2}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x80}, @TCA_CODEL_TARGET={0x8, 0x1, 0xb9}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_INTERVAL={0x8, 0x3, 0x7}, @TCA_CODEL_LIMIT={0x8, 0x2, 0x5}]}}, @TCA_STAB={0xf8, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x8, 0xc000, 0x9, 0x1, 0x80000001, 0x4, 0xa}}, {0x18, 0x2, [0x3, 0x4, 0x3, 0xff, 0x200, 0xfe01, 0x7, 0x8, 0x0, 0x2]}}, {{0x1c, 0x1, {0x0, 0x20, 0x1, 0xfc000, 0x1}}, {0x4}}, {{0x1c, 0x1, {0x3, 0x11, 0x100, 0x5, 0x0, 0x2dd, 0x7fff, 0x4}}, {0xc, 0x2, [0x6, 0x100, 0x2, 0x71]}}, {{0x1c, 0x1, {0x0, 0x40, 0x5, 0x3, 0x2}}, {0x4}}, {{0x1c, 0x1, {0x4, 0x8, 0x1ff, 0x3ff, 0x2, 0x5, 0x9, 0x5}}, {0xe, 0x2, [0x1, 0x1, 0xb41, 0x0, 0x8]}}, {{0x1c, 0x1, {0x9, 0x3f, 0x4, 0x3, 0x0, 0x4, 0x9, 0x5}}, {0xe, 0x2, [0x0, 0x0, 0x5ca, 0xfff, 0xfffb]}}]}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x81}]}, 0x1b8}, 0x1, 0x0, 0x0, 0x20000110}, 0x800)
connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10)
writev(r2, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1)
recvmmsg(r2, &(0x7f0000003e40)=[{{0x0, 0x3, 0x0, 0x0, &(0x7f00000035c0)=""/241, 0xf1}}, {{&(0x7f00000036c0)=@un=@abs, 0x80, &(0x7f0000003780)=[{&(0x7f0000003740)=""/4, 0x7ffff}], 0x1, &(0x7f00000037c0)=""/236, 0xec}}, {{0x0, 0x0, &(0x7f0000003bc0)=[{0x0, 0xe00000000000000}, {&(0x7f0000003a00)=""/190, 0xbe}, {&(0x7f0000003ac0)=""/131, 0x83}, {0x0}], 0x4, &(0x7f0000003c00)=""/73, 0x49}}, {{&(0x7f0000003c80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, 0x0, 0x0, &(0x7f0000003e00)=""/48, 0x30}}], 0x4, 0x40000121, 0x0)
shutdown(r2, 0x0)

13:45:05 executing program 0:
r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0), 0x8c0242, 0x0)
write$cgroup_devices(r0, 0x0, 0x0)

13:45:05 executing program 5:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00'})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000240)={@val={0x0, 0x86dd}, @val={0x5, 0x0, 0x0, 0x0, 0x54}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "000003", 0x190, 0x3a, 0x0, @empty, @mcast2, {[@routing={0x0, 0x2, 0x0, 0x0, 0x0, [@empty]}], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x0, "ee7b615d"}, {}, {0x2b, 0x3, "6f8c008275021d683910c309293188a7c747eb2278d2794784"}, {0x0, 0x28, "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"}]}}}}}, 0x1c6)

13:45:05 executing program 2:
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
syz_genetlink_get_family_id$tipc(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$NFT_BATCH(r1, &(0x7f00000015c0)={&(0x7f0000000300), 0xc, &(0x7f0000001580)={&(0x7f00000014c0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_PAYLOAD_CSUM_OFFSET={0x8, 0x7, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}]}, @NFT_MSG_DELSETELEM={0x1c, 0xe, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}]}], {0x14}}, 0x94}, 0x1, 0x0, 0x0, 0x1}, 0x1)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r1, 0x0, 0x0)
sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, 0x0, 0x0)
getsockname(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001400)={&(0x7f0000000140), 0xc, &(0x7f0000000340)={&(0x7f0000000f00)=@newqdisc={0x1b8, 0x24, 0x0, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0xc}, {0x10, 0xffff}, {0xf, 0xfff2}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_RATE={0x6, 0x5, {0x8}}, @qdisc_kind_options=@q_choke={{0xa}, {0x18, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x4e0, 0x2, 0x6, 0x0, 0x1e, 0x2}}]}}, @qdisc_kind_options=@q_codel={{0xa}, {0x54, 0x2, [@TCA_CODEL_TARGET={0x8}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x4}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_LIMIT={0x8, 0x2, 0x2}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x80}, @TCA_CODEL_TARGET={0x8, 0x1, 0xb9}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_INTERVAL={0x8, 0x3, 0x7}, @TCA_CODEL_LIMIT={0x8, 0x2, 0x5}]}}, @TCA_STAB={0xf8, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x8, 0xc000, 0x9, 0x1, 0x80000001, 0x4, 0xa}}, {0x18, 0x2, [0x3, 0x4, 0x3, 0xff, 0x200, 0xfe01, 0x7, 0x8, 0x0, 0x2]}}, {{0x1c, 0x1, {0x0, 0x20, 0x1, 0xfc000, 0x1}}, {0x4}}, {{0x1c, 0x1, {0x3, 0x11, 0x100, 0x5, 0x0, 0x2dd, 0x7fff, 0x4}}, {0xc, 0x2, [0x6, 0x100, 0x2, 0x71]}}, {{0x1c, 0x1, {0x0, 0x40, 0x5, 0x3, 0x2}}, {0x4}}, {{0x1c, 0x1, {0x4, 0x8, 0x1ff, 0x3ff, 0x2, 0x5, 0x9, 0x5}}, {0xe, 0x2, [0x1, 0x1, 0xb41, 0x0, 0x8]}}, {{0x1c, 0x1, {0x9, 0x3f, 0x4, 0x3, 0x0, 0x4, 0x9, 0x5}}, {0xe, 0x2, [0x0, 0x0, 0x5ca, 0xfff, 0xfffb]}}]}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x81}]}, 0x1b8}, 0x1, 0x0, 0x0, 0x20000110}, 0x800)
connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10)
writev(r2, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1)
recvmmsg(r2, &(0x7f0000003e40)=[{{0x0, 0x3, 0x0, 0x0, &(0x7f00000035c0)=""/241, 0xf1}}, {{&(0x7f00000036c0)=@un=@abs, 0x80, &(0x7f0000003780)=[{&(0x7f0000003740)=""/4, 0x7ffff}], 0x1, &(0x7f00000037c0)=""/236, 0xec}}, {{0x0, 0x0, &(0x7f0000003bc0)=[{0x0, 0xe00000000000000}, {&(0x7f0000003a00)=""/190, 0xbe}, {&(0x7f0000003ac0)=""/131, 0x83}, {0x0}], 0x4, &(0x7f0000003c00)=""/73, 0x49}}, {{&(0x7f0000003c80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, 0x0, 0x0, &(0x7f0000003e00)=""/48, 0x30}}], 0x4, 0x40000121, 0x0)
shutdown(r2, 0x0)

13:45:05 executing program 4:
r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/devices/virtual', 0x0, 0x0)
write$P9_RSETATTR(r0, &(0x7f0000000000)={0xfffffffffffffe66}, 0xffffffffffffff54)

13:45:05 executing program 0:
open$dir(&(0x7f0000000000)='./file0\x00', 0x1011c2, 0x0)
open$dir(&(0x7f0000000040)='./file0\x00', 0x4a482, 0x63)

13:45:05 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f000000c380)='/proc/crypto\x00', 0x0, 0x0)
read$FUSE(r1, &(0x7f0000000200)={0x2020}, 0x2020)
execve(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000280)=[0x0, 0x0], &(0x7f0000000380)=[&(0x7f00000002c0)='*$%}\xce*\x00', &(0x7f0000000300)='\x00'])

13:45:05 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r1)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400ee5c99f8435ecde50a0412", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x1, 0x803, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="50000000100001040000ff0f0000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e00000000180002800c0002001c0000001b000000060001000100000008000500", @ANYRES32=r5], 0x50}}, 0x0)
r6 = socket(0x1, 0x803, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080))
r8 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x1e}}]}}}, @IFLA_LINK={0x8, 0x5, r7}]}, 0x50}}, 0x0)
r9 = socket$nl_route(0x10, 0x3, 0x0)
r10 = socket(0x1, 0x803, 0x0)
getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, <r11=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r9, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000540)=ANY=[@ANYBLOB="20000000110003040000007bb000000000000000", @ANYRES32=r11], 0x20}}, 0x0)

13:45:05 executing program 0:
open$dir(&(0x7f0000000080)='./file0\x00', 0x1011c0, 0x170)

13:45:05 executing program 4:
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x8c1c0, 0x80)

13:45:05 executing program 2:
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
syz_genetlink_get_family_id$tipc(&(0x7f0000000100), 0xffffffffffffffff)
getsockname$packet(0xffffffffffffffff, &(0x7f0000001340), &(0x7f0000001380)=0x14)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r1, 0x0, 0x0)
sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, 0x0, 0x0)
getsockname(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001400)={&(0x7f0000000140), 0xc, &(0x7f0000000340)={&(0x7f0000000f00)=@newqdisc={0x1b8, 0x24, 0x0, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0xc}, {0x10, 0xffff}, {0xf, 0xfff2}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_RATE={0x6, 0x5, {0x8}}, @qdisc_kind_options=@q_choke={{0xa}, {0x18, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x4e0, 0x2, 0x6, 0x0, 0x1e, 0x2}}]}}, @qdisc_kind_options=@q_codel={{0xa}, {0x54, 0x2, [@TCA_CODEL_TARGET={0x8}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x4}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_LIMIT={0x8, 0x2, 0x2}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x80}, @TCA_CODEL_TARGET={0x8, 0x1, 0xb9}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_INTERVAL={0x8, 0x3, 0x7}, @TCA_CODEL_LIMIT={0x8, 0x2, 0x5}]}}, @TCA_STAB={0xf8, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x8, 0xc000, 0x9, 0x1, 0x80000001, 0x4, 0xa}}, {0x18, 0x2, [0x3, 0x4, 0x3, 0xff, 0x200, 0xfe01, 0x7, 0x8, 0x0, 0x2]}}, {{0x1c, 0x1, {0x0, 0x20, 0x1, 0xfc000, 0x1}}, {0x4}}, {{0x1c, 0x1, {0x3, 0x11, 0x100, 0x5, 0x0, 0x2dd, 0x7fff, 0x4}}, {0xc, 0x2, [0x6, 0x100, 0x2, 0x71]}}, {{0x1c, 0x1, {0x0, 0x40, 0x5, 0x3, 0x2}}, {0x4}}, {{0x1c, 0x1, {0x4, 0x8, 0x1ff, 0x3ff, 0x2, 0x5, 0x9, 0x5}}, {0xe, 0x2, [0x1, 0x1, 0xb41, 0x0, 0x8]}}, {{0x1c, 0x1, {0x9, 0x3f, 0x4, 0x3, 0x0, 0x4, 0x9, 0x5}}, {0xe, 0x2, [0x0, 0x0, 0x5ca, 0xfff, 0xfffb]}}]}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x81}]}, 0x1b8}, 0x1, 0x0, 0x0, 0x20000110}, 0x800)
connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10)
writev(r2, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1)
recvmmsg(r2, &(0x7f0000003e40)=[{{0x0, 0x3, 0x0, 0x0, &(0x7f00000035c0)=""/241, 0xf1}}, {{&(0x7f00000036c0)=@un=@abs, 0x80, &(0x7f0000003780)=[{&(0x7f0000003740)=""/4, 0x7ffff}], 0x1, &(0x7f00000037c0)=""/236, 0xec}}, {{0x0, 0x0, &(0x7f0000003bc0)=[{0x0, 0xe00000000000000}, {&(0x7f0000003a00)=""/190, 0xbe}, {&(0x7f0000003ac0)=""/131, 0x83}, {0x0}], 0x4, &(0x7f0000003c00)=""/73, 0x49}}, {{&(0x7f0000003c80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, 0x0, 0x0, &(0x7f0000003e00)=""/48, 0x30}}], 0x4, 0x40000121, 0x0)
shutdown(r2, 0x0)

13:45:05 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f000000c380)='/proc/crypto\x00', 0x0, 0x0)
read$FUSE(r1, &(0x7f0000000200)={0x2020}, 0x2020)
execve(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000280)=[0x0, 0x0], &(0x7f0000000380)=[&(0x7f00000002c0)='*$%}\xce*\x00', &(0x7f0000000300)='\x00'])

[ 2220.503483][T21833] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'.
13:45:05 executing program 0:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$sock_TIOCOUTQ(r0, 0x5411, &(0x7f00000002c0))

[ 2220.629845][   T28] audit: type=1800 audit(1695131105.690:3997): pid=21840 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=2013 res=0 errno=0
13:45:05 executing program 2:
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
syz_genetlink_get_family_id$tipc(&(0x7f0000000100), 0xffffffffffffffff)
getsockname$packet(0xffffffffffffffff, &(0x7f0000001340), &(0x7f0000001380)=0x14)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r1, 0x0, 0x0)
sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, 0x0, 0x0)
getsockname(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001400)={&(0x7f0000000140), 0xc, &(0x7f0000000340)={&(0x7f0000000f00)=@newqdisc={0x1b8, 0x24, 0x0, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0xc}, {0x10, 0xffff}, {0xf, 0xfff2}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_RATE={0x6, 0x5, {0x8}}, @qdisc_kind_options=@q_choke={{0xa}, {0x18, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x4e0, 0x2, 0x6, 0x0, 0x1e, 0x2}}]}}, @qdisc_kind_options=@q_codel={{0xa}, {0x54, 0x2, [@TCA_CODEL_TARGET={0x8}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x4}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_LIMIT={0x8, 0x2, 0x2}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x80}, @TCA_CODEL_TARGET={0x8, 0x1, 0xb9}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_INTERVAL={0x8, 0x3, 0x7}, @TCA_CODEL_LIMIT={0x8, 0x2, 0x5}]}}, @TCA_STAB={0xf8, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x8, 0xc000, 0x9, 0x1, 0x80000001, 0x4, 0xa}}, {0x18, 0x2, [0x3, 0x4, 0x3, 0xff, 0x200, 0xfe01, 0x7, 0x8, 0x0, 0x2]}}, {{0x1c, 0x1, {0x0, 0x20, 0x1, 0xfc000, 0x1}}, {0x4}}, {{0x1c, 0x1, {0x3, 0x11, 0x100, 0x5, 0x0, 0x2dd, 0x7fff, 0x4}}, {0xc, 0x2, [0x6, 0x100, 0x2, 0x71]}}, {{0x1c, 0x1, {0x0, 0x40, 0x5, 0x3, 0x2}}, {0x4}}, {{0x1c, 0x1, {0x4, 0x8, 0x1ff, 0x3ff, 0x2, 0x5, 0x9, 0x5}}, {0xe, 0x2, [0x1, 0x1, 0xb41, 0x0, 0x8]}}, {{0x1c, 0x1, {0x9, 0x3f, 0x4, 0x3, 0x0, 0x4, 0x9, 0x5}}, {0xe, 0x2, [0x0, 0x0, 0x5ca, 0xfff, 0xfffb]}}]}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x81}]}, 0x1b8}, 0x1, 0x0, 0x0, 0x20000110}, 0x800)
connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10)
writev(r2, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1)
recvmmsg(r2, &(0x7f0000003e40)=[{{0x0, 0x3, 0x0, 0x0, &(0x7f00000035c0)=""/241, 0xf1}}, {{&(0x7f00000036c0)=@un=@abs, 0x80, &(0x7f0000003780)=[{&(0x7f0000003740)=""/4, 0x7ffff}], 0x1, &(0x7f00000037c0)=""/236, 0xec}}, {{0x0, 0x0, &(0x7f0000003bc0)=[{0x0, 0xe00000000000000}, {&(0x7f0000003a00)=""/190, 0xbe}, {&(0x7f0000003ac0)=""/131, 0x83}, {0x0}], 0x4, &(0x7f0000003c00)=""/73, 0x49}}, {{&(0x7f0000003c80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, 0x0, 0x0, &(0x7f0000003e00)=""/48, 0x30}}], 0x4, 0x40000121, 0x0)
shutdown(r2, 0x0)

13:45:05 executing program 5:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00'})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000240)={@val={0x0, 0x86dd}, @val={0x5, 0x0, 0x0, 0x0, 0x54}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "000003", 0x190, 0x3a, 0x0, @empty, @mcast2, {[@routing={0x0, 0x2, 0x0, 0x0, 0x0, [@empty]}], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x0, "ee7b615d"}, {}, {0x2b, 0x3, "6f8c008275021d683910c309293188a7c747eb2278d2794784"}, {0x0, 0x28, "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"}]}}}}}, 0x1c6)

13:45:05 executing program 4:
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x8c1c0, 0x0)
open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x10)

13:45:05 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f000000c380)='/proc/crypto\x00', 0x0, 0x0)
read$FUSE(r1, &(0x7f0000000200)={0x2020}, 0x2020)
execve(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000280)=[0x0, 0x0], &(0x7f0000000380)=[&(0x7f00000002c0)='*$%}\xce*\x00', &(0x7f0000000300)='\x00'])

13:45:05 executing program 0:
semget(0x2, 0x3, 0x204)

13:45:06 executing program 2:
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
syz_genetlink_get_family_id$tipc(&(0x7f0000000100), 0xffffffffffffffff)
getsockname$packet(0xffffffffffffffff, &(0x7f0000001340), &(0x7f0000001380)=0x14)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r1, 0x0, 0x0)
sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, 0x0, 0x0)
getsockname(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001400)={&(0x7f0000000140), 0xc, &(0x7f0000000340)={&(0x7f0000000f00)=@newqdisc={0x1b8, 0x24, 0x0, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0xc}, {0x10, 0xffff}, {0xf, 0xfff2}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_RATE={0x6, 0x5, {0x8}}, @qdisc_kind_options=@q_choke={{0xa}, {0x18, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x4e0, 0x2, 0x6, 0x0, 0x1e, 0x2}}]}}, @qdisc_kind_options=@q_codel={{0xa}, {0x54, 0x2, [@TCA_CODEL_TARGET={0x8}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x4}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_LIMIT={0x8, 0x2, 0x2}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x80}, @TCA_CODEL_TARGET={0x8, 0x1, 0xb9}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_INTERVAL={0x8, 0x3, 0x7}, @TCA_CODEL_LIMIT={0x8, 0x2, 0x5}]}}, @TCA_STAB={0xf8, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x8, 0xc000, 0x9, 0x1, 0x80000001, 0x4, 0xa}}, {0x18, 0x2, [0x3, 0x4, 0x3, 0xff, 0x200, 0xfe01, 0x7, 0x8, 0x0, 0x2]}}, {{0x1c, 0x1, {0x0, 0x20, 0x1, 0xfc000, 0x1}}, {0x4}}, {{0x1c, 0x1, {0x3, 0x11, 0x100, 0x5, 0x0, 0x2dd, 0x7fff, 0x4}}, {0xc, 0x2, [0x6, 0x100, 0x2, 0x71]}}, {{0x1c, 0x1, {0x0, 0x40, 0x5, 0x3, 0x2}}, {0x4}}, {{0x1c, 0x1, {0x4, 0x8, 0x1ff, 0x3ff, 0x2, 0x5, 0x9, 0x5}}, {0xe, 0x2, [0x1, 0x1, 0xb41, 0x0, 0x8]}}, {{0x1c, 0x1, {0x9, 0x3f, 0x4, 0x3, 0x0, 0x4, 0x9, 0x5}}, {0xe, 0x2, [0x0, 0x0, 0x5ca, 0xfff, 0xfffb]}}]}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x81}]}, 0x1b8}, 0x1, 0x0, 0x0, 0x20000110}, 0x800)
connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10)
writev(r2, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1)
recvmmsg(r2, &(0x7f0000003e40)=[{{0x0, 0x3, 0x0, 0x0, &(0x7f00000035c0)=""/241, 0xf1}}, {{&(0x7f00000036c0)=@un=@abs, 0x80, &(0x7f0000003780)=[{&(0x7f0000003740)=""/4, 0x7ffff}], 0x1, &(0x7f00000037c0)=""/236, 0xec}}, {{0x0, 0x0, &(0x7f0000003bc0)=[{0x0, 0xe00000000000000}, {&(0x7f0000003a00)=""/190, 0xbe}, {&(0x7f0000003ac0)=""/131, 0x83}, {0x0}], 0x4, &(0x7f0000003c00)=""/73, 0x49}}, {{&(0x7f0000003c80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, 0x0, 0x0, &(0x7f0000003e00)=""/48, 0x30}}], 0x4, 0x40000121, 0x0)
shutdown(r2, 0x0)

[ 2220.980847][   T28] audit: type=1800 audit(1695131106.060:3998): pid=21851 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=2007 res=0 errno=0
13:45:06 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r1)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400ee5c99f8435ecde50a0412", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x1, 0x803, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="50000000100001040000ff0f0000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e00000000180002800c0002001c0000001b000000060001000100000008000500", @ANYRES32=r5], 0x50}}, 0x0)
r6 = socket(0x1, 0x803, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080))
r8 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x1e}}]}}}, @IFLA_LINK={0x8, 0x5, r7}]}, 0x50}}, 0x0)
r9 = socket$nl_route(0x10, 0x3, 0x0)
r10 = socket(0x1, 0x803, 0x0)
getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, <r11=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r9, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000540)=ANY=[@ANYBLOB="20000000110003040000007bb000000000000000", @ANYRES32=r11], 0x20}}, 0x0)

13:45:06 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f000000c380)='/proc/crypto\x00', 0x0, 0x0)
read$FUSE(r3, &(0x7f0000000200)={0x2020}, 0x2020)
execve(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000280)=[0x0, 0x0], &(0x7f0000000380)=[&(0x7f00000002c0)='*$%}\xce*\x00', &(0x7f0000000300)='\x00'])

13:45:06 executing program 4:
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x18d3c0, 0x0)

13:45:06 executing program 0:
pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
write$P9_RLERROR(r0, &(0x7f0000000040)=ANY=[], 0xa)

13:45:06 executing program 2:
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000015c0)={&(0x7f0000000300), 0xc, &(0x7f0000001580)={&(0x7f00000014c0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_PAYLOAD_CSUM_OFFSET={0x8, 0x7, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}]}, @NFT_MSG_DELSETELEM={0x1c, 0xe, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}]}], {0x14}}, 0x94}, 0x1, 0x0, 0x0, 0x1}, 0x1)
getsockname$packet(0xffffffffffffffff, &(0x7f0000001340), &(0x7f0000001380)=0x14)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r1, 0x0, 0x0)
sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, 0x0, 0x0)
getsockname(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001400)={&(0x7f0000000140), 0xc, &(0x7f0000000340)={&(0x7f0000000f00)=@newqdisc={0x1b8, 0x24, 0x0, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0xc}, {0x10, 0xffff}, {0xf, 0xfff2}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_RATE={0x6, 0x5, {0x8}}, @qdisc_kind_options=@q_choke={{0xa}, {0x18, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x4e0, 0x2, 0x6, 0x0, 0x1e, 0x2}}]}}, @qdisc_kind_options=@q_codel={{0xa}, {0x54, 0x2, [@TCA_CODEL_TARGET={0x8}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x4}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_LIMIT={0x8, 0x2, 0x2}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x80}, @TCA_CODEL_TARGET={0x8, 0x1, 0xb9}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_INTERVAL={0x8, 0x3, 0x7}, @TCA_CODEL_LIMIT={0x8, 0x2, 0x5}]}}, @TCA_STAB={0xf8, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x8, 0xc000, 0x9, 0x1, 0x80000001, 0x4, 0xa}}, {0x18, 0x2, [0x3, 0x4, 0x3, 0xff, 0x200, 0xfe01, 0x7, 0x8, 0x0, 0x2]}}, {{0x1c, 0x1, {0x0, 0x20, 0x1, 0xfc000, 0x1}}, {0x4}}, {{0x1c, 0x1, {0x3, 0x11, 0x100, 0x5, 0x0, 0x2dd, 0x7fff, 0x4}}, {0xc, 0x2, [0x6, 0x100, 0x2, 0x71]}}, {{0x1c, 0x1, {0x0, 0x40, 0x5, 0x3, 0x2}}, {0x4}}, {{0x1c, 0x1, {0x4, 0x8, 0x1ff, 0x3ff, 0x2, 0x5, 0x9, 0x5}}, {0xe, 0x2, [0x1, 0x1, 0xb41, 0x0, 0x8]}}, {{0x1c, 0x1, {0x9, 0x3f, 0x4, 0x3, 0x0, 0x4, 0x9, 0x5}}, {0xe, 0x2, [0x0, 0x0, 0x5ca, 0xfff, 0xfffb]}}]}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x81}]}, 0x1b8}, 0x1, 0x0, 0x0, 0x20000110}, 0x800)
connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10)
writev(r2, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1)
recvmmsg(r2, &(0x7f0000003e40)=[{{0x0, 0x3, 0x0, 0x0, &(0x7f00000035c0)=""/241, 0xf1}}, {{&(0x7f00000036c0)=@un=@abs, 0x80, &(0x7f0000003780)=[{&(0x7f0000003740)=""/4, 0x7ffff}], 0x1, &(0x7f00000037c0)=""/236, 0xec}}, {{0x0, 0x0, &(0x7f0000003bc0)=[{0x0, 0xe00000000000000}, {&(0x7f0000003a00)=""/190, 0xbe}, {&(0x7f0000003ac0)=""/131, 0x83}, {0x0}], 0x4, &(0x7f0000003c00)=""/73, 0x49}}, {{&(0x7f0000003c80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, 0x0, 0x0, &(0x7f0000003e00)=""/48, 0x30}}], 0x4, 0x40000121, 0x0)
shutdown(r2, 0x0)

13:45:06 executing program 5:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00'})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000240)={@val={0x0, 0x86dd}, @val={0x5, 0x0, 0x0, 0x0, 0x54}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "000003", 0x190, 0x3a, 0x0, @empty, @mcast2, {[@routing={0x0, 0x2, 0x0, 0x0, 0x0, [@empty]}], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x0, "ee7b615d"}, {}, {0x2b, 0x3, "6f8c008275021d683910c309293188a7c747eb2278d2794784"}, {0x0, 0x28, "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"}]}}}}}, 0x1c6)

13:45:06 executing program 0:
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x204c2, 0xa0)

[ 2221.437704][   T28] audit: type=1800 audit(1695131106.510:3999): pid=21870 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=2014 res=0 errno=0
13:45:06 executing program 4:
openat$random(0xffffffffffffff9c, &(0x7f0000000100), 0x2e000, 0x0)

13:45:06 executing program 2:
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000015c0)={&(0x7f0000000300), 0xc, &(0x7f0000001580)={&(0x7f00000014c0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_PAYLOAD_CSUM_OFFSET={0x8, 0x7, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}]}, @NFT_MSG_DELSETELEM={0x1c, 0xe, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}]}], {0x14}}, 0x94}, 0x1, 0x0, 0x0, 0x1}, 0x1)
getsockname$packet(0xffffffffffffffff, &(0x7f0000001340), &(0x7f0000001380)=0x14)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r1, 0x0, 0x0)
sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, 0x0, 0x0)
getsockname(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001400)={&(0x7f0000000140), 0xc, &(0x7f0000000340)={&(0x7f0000000f00)=@newqdisc={0x1b8, 0x24, 0x0, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0xc}, {0x10, 0xffff}, {0xf, 0xfff2}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_RATE={0x6, 0x5, {0x8}}, @qdisc_kind_options=@q_choke={{0xa}, {0x18, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x4e0, 0x2, 0x6, 0x0, 0x1e, 0x2}}]}}, @qdisc_kind_options=@q_codel={{0xa}, {0x54, 0x2, [@TCA_CODEL_TARGET={0x8}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x4}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_LIMIT={0x8, 0x2, 0x2}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x80}, @TCA_CODEL_TARGET={0x8, 0x1, 0xb9}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_INTERVAL={0x8, 0x3, 0x7}, @TCA_CODEL_LIMIT={0x8, 0x2, 0x5}]}}, @TCA_STAB={0xf8, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x8, 0xc000, 0x9, 0x1, 0x80000001, 0x4, 0xa}}, {0x18, 0x2, [0x3, 0x4, 0x3, 0xff, 0x200, 0xfe01, 0x7, 0x8, 0x0, 0x2]}}, {{0x1c, 0x1, {0x0, 0x20, 0x1, 0xfc000, 0x1}}, {0x4}}, {{0x1c, 0x1, {0x3, 0x11, 0x100, 0x5, 0x0, 0x2dd, 0x7fff, 0x4}}, {0xc, 0x2, [0x6, 0x100, 0x2, 0x71]}}, {{0x1c, 0x1, {0x0, 0x40, 0x5, 0x3, 0x2}}, {0x4}}, {{0x1c, 0x1, {0x4, 0x8, 0x1ff, 0x3ff, 0x2, 0x5, 0x9, 0x5}}, {0xe, 0x2, [0x1, 0x1, 0xb41, 0x0, 0x8]}}, {{0x1c, 0x1, {0x9, 0x3f, 0x4, 0x3, 0x0, 0x4, 0x9, 0x5}}, {0xe, 0x2, [0x0, 0x0, 0x5ca, 0xfff, 0xfffb]}}]}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x81}]}, 0x1b8}, 0x1, 0x0, 0x0, 0x20000110}, 0x800)
connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10)
writev(r2, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1)
recvmmsg(r2, &(0x7f0000003e40)=[{{0x0, 0x3, 0x0, 0x0, &(0x7f00000035c0)=""/241, 0xf1}}, {{&(0x7f00000036c0)=@un=@abs, 0x80, &(0x7f0000003780)=[{&(0x7f0000003740)=""/4, 0x7ffff}], 0x1, &(0x7f00000037c0)=""/236, 0xec}}, {{0x0, 0x0, &(0x7f0000003bc0)=[{0x0, 0xe00000000000000}, {&(0x7f0000003a00)=""/190, 0xbe}, {&(0x7f0000003ac0)=""/131, 0x83}, {0x0}], 0x4, &(0x7f0000003c00)=""/73, 0x49}}, {{&(0x7f0000003c80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, 0x0, 0x0, &(0x7f0000003e00)=""/48, 0x30}}], 0x4, 0x40000121, 0x0)
shutdown(r2, 0x0)

[ 2221.593849][T21873] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'.
13:45:06 executing program 0:
openat$zero(0xffffffffffffff9c, &(0x7f0000000240), 0x59b003, 0x0)

13:45:06 executing program 4:
open$dir(&(0x7f0000000000)='./file0\x00', 0x1011c2, 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x3, 0x63)

13:45:06 executing program 2:
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000015c0)={&(0x7f0000000300), 0xc, &(0x7f0000001580)={&(0x7f00000014c0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_PAYLOAD_CSUM_OFFSET={0x8, 0x7, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}]}, @NFT_MSG_DELSETELEM={0x1c, 0xe, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}]}], {0x14}}, 0x94}, 0x1, 0x0, 0x0, 0x1}, 0x1)
getsockname$packet(0xffffffffffffffff, &(0x7f0000001340), &(0x7f0000001380)=0x14)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r1, 0x0, 0x0)
sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, 0x0, 0x0)
getsockname(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001400)={&(0x7f0000000140), 0xc, &(0x7f0000000340)={&(0x7f0000000f00)=@newqdisc={0x1b8, 0x24, 0x0, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0xc}, {0x10, 0xffff}, {0xf, 0xfff2}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_RATE={0x6, 0x5, {0x8}}, @qdisc_kind_options=@q_choke={{0xa}, {0x18, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x4e0, 0x2, 0x6, 0x0, 0x1e, 0x2}}]}}, @qdisc_kind_options=@q_codel={{0xa}, {0x54, 0x2, [@TCA_CODEL_TARGET={0x8}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x4}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_LIMIT={0x8, 0x2, 0x2}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x80}, @TCA_CODEL_TARGET={0x8, 0x1, 0xb9}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_INTERVAL={0x8, 0x3, 0x7}, @TCA_CODEL_LIMIT={0x8, 0x2, 0x5}]}}, @TCA_STAB={0xf8, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x8, 0xc000, 0x9, 0x1, 0x80000001, 0x4, 0xa}}, {0x18, 0x2, [0x3, 0x4, 0x3, 0xff, 0x200, 0xfe01, 0x7, 0x8, 0x0, 0x2]}}, {{0x1c, 0x1, {0x0, 0x20, 0x1, 0xfc000, 0x1}}, {0x4}}, {{0x1c, 0x1, {0x3, 0x11, 0x100, 0x5, 0x0, 0x2dd, 0x7fff, 0x4}}, {0xc, 0x2, [0x6, 0x100, 0x2, 0x71]}}, {{0x1c, 0x1, {0x0, 0x40, 0x5, 0x3, 0x2}}, {0x4}}, {{0x1c, 0x1, {0x4, 0x8, 0x1ff, 0x3ff, 0x2, 0x5, 0x9, 0x5}}, {0xe, 0x2, [0x1, 0x1, 0xb41, 0x0, 0x8]}}, {{0x1c, 0x1, {0x9, 0x3f, 0x4, 0x3, 0x0, 0x4, 0x9, 0x5}}, {0xe, 0x2, [0x0, 0x0, 0x5ca, 0xfff, 0xfffb]}}]}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x81}]}, 0x1b8}, 0x1, 0x0, 0x0, 0x20000110}, 0x800)
connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10)
writev(r2, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1)
recvmmsg(r2, &(0x7f0000003e40)=[{{0x0, 0x3, 0x0, 0x0, &(0x7f00000035c0)=""/241, 0xf1}}, {{&(0x7f00000036c0)=@un=@abs, 0x80, &(0x7f0000003780)=[{&(0x7f0000003740)=""/4, 0x7ffff}], 0x1, &(0x7f00000037c0)=""/236, 0xec}}, {{0x0, 0x0, &(0x7f0000003bc0)=[{0x0, 0xe00000000000000}, {&(0x7f0000003a00)=""/190, 0xbe}, {&(0x7f0000003ac0)=""/131, 0x83}, {0x0}], 0x4, &(0x7f0000003c00)=""/73, 0x49}}, {{&(0x7f0000003c80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, 0x0, 0x0, &(0x7f0000003e00)=""/48, 0x30}}], 0x4, 0x40000121, 0x0)
shutdown(r2, 0x0)

[ 2221.953118][   T28] audit: type=1804 audit(1695131107.010:4000): pid=21887 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir3224091480/syzkaller.kjLSR2/965/file0" dev="sda1" ino=1992 res=1 errno=0
13:45:07 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r1)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400ee5c99f8435ecde50a0412", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x1, 0x803, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="50000000100001040000ff0f0000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e00000000180002800c0002001c0000001b000000060001000100000008000500", @ANYRES32=r5], 0x50}}, 0x0)
r6 = socket(0x1, 0x803, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080))
r8 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x1e}}]}}}, @IFLA_LINK={0x8, 0x5, r7}]}, 0x50}}, 0x0)
r9 = socket$nl_route(0x10, 0x3, 0x0)
socket(0x1, 0x803, 0x0)
sendmsg$nl_route(r9, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000540)=ANY=[@ANYBLOB="20000000110003040000007bb000000000000000", @ANYRES32], 0x20}}, 0x0)

[ 2222.326496][T21891] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'.
13:45:07 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f000000c380)='/proc/crypto\x00', 0x0, 0x0)
read$FUSE(r3, &(0x7f0000000200)={0x2020}, 0x2020)
execve(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000280)=[0x0, 0x0], &(0x7f0000000380)=[&(0x7f00000002c0)='*$%}\xce*\x00', &(0x7f0000000300)='\x00'])

13:45:07 executing program 5:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0x0, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000240)={@val={0x0, 0x86dd}, @val={0x5, 0x0, 0x0, 0x0, 0x54}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "000003", 0x190, 0x3a, 0x0, @empty, @mcast2, {[@routing={0x0, 0x2, 0x0, 0x0, 0x0, [@empty]}], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x0, "ee7b615d"}, {}, {0x2b, 0x3, "6f8c008275021d683910c309293188a7c747eb2278d2794784"}, {0x0, 0x28, "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"}]}}}}}, 0x1c6)

13:45:07 executing program 0:
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100), 0xaaa02, 0x0)
write$P9_RLERROR(r0, 0x0, 0x0)

13:45:07 executing program 2:
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000015c0)={&(0x7f0000000300), 0xc, &(0x7f0000001580)={&(0x7f00000014c0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_PAYLOAD_CSUM_OFFSET={0x8, 0x7, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}]}, @NFT_MSG_DELSETELEM={0x1c, 0xe, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}]}], {0x14}}, 0x94}, 0x1, 0x0, 0x0, 0x1}, 0x1)
getsockname$packet(0xffffffffffffffff, &(0x7f0000001340), &(0x7f0000001380)=0x14)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, 0x0, 0x0)
sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, 0x0, 0x0)
getsockname(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001400)={&(0x7f0000000140), 0xc, &(0x7f0000000340)={&(0x7f0000000f00)=@newqdisc={0x1b8, 0x24, 0x0, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0xc}, {0x10, 0xffff}, {0xf, 0xfff2}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_RATE={0x6, 0x5, {0x8}}, @qdisc_kind_options=@q_choke={{0xa}, {0x18, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x4e0, 0x2, 0x6, 0x0, 0x1e, 0x2}}]}}, @qdisc_kind_options=@q_codel={{0xa}, {0x54, 0x2, [@TCA_CODEL_TARGET={0x8}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x4}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_LIMIT={0x8, 0x2, 0x2}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x80}, @TCA_CODEL_TARGET={0x8, 0x1, 0xb9}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_INTERVAL={0x8, 0x3, 0x7}, @TCA_CODEL_LIMIT={0x8, 0x2, 0x5}]}}, @TCA_STAB={0xf8, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x8, 0xc000, 0x9, 0x1, 0x80000001, 0x4, 0xa}}, {0x18, 0x2, [0x3, 0x4, 0x3, 0xff, 0x200, 0xfe01, 0x7, 0x8, 0x0, 0x2]}}, {{0x1c, 0x1, {0x0, 0x20, 0x1, 0xfc000, 0x1}}, {0x4}}, {{0x1c, 0x1, {0x3, 0x11, 0x100, 0x5, 0x0, 0x2dd, 0x7fff, 0x4}}, {0xc, 0x2, [0x6, 0x100, 0x2, 0x71]}}, {{0x1c, 0x1, {0x0, 0x40, 0x5, 0x3, 0x2}}, {0x4}}, {{0x1c, 0x1, {0x4, 0x8, 0x1ff, 0x3ff, 0x2, 0x5, 0x9, 0x5}}, {0xe, 0x2, [0x1, 0x1, 0xb41, 0x0, 0x8]}}, {{0x1c, 0x1, {0x9, 0x3f, 0x4, 0x3, 0x0, 0x4, 0x9, 0x5}}, {0xe, 0x2, [0x0, 0x0, 0x5ca, 0xfff, 0xfffb]}}]}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x81}]}, 0x1b8}, 0x1, 0x0, 0x0, 0x20000110}, 0x800)
connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10)
writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1)
recvmmsg(r1, &(0x7f0000003e40)=[{{0x0, 0x3, 0x0, 0x0, &(0x7f00000035c0)=""/241, 0xf1}}, {{&(0x7f00000036c0)=@un=@abs, 0x80, &(0x7f0000003780)=[{&(0x7f0000003740)=""/4, 0x7ffff}], 0x1, &(0x7f00000037c0)=""/236, 0xec}}, {{0x0, 0x0, &(0x7f0000003bc0)=[{0x0, 0xe00000000000000}, {&(0x7f0000003a00)=""/190, 0xbe}, {&(0x7f0000003ac0)=""/131, 0x83}, {0x0}], 0x4, &(0x7f0000003c00)=""/73, 0x49}}, {{&(0x7f0000003c80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, 0x0, 0x0, &(0x7f0000003e00)=""/48, 0x30}}], 0x4, 0x40000121, 0x0)
shutdown(r1, 0x0)

13:45:07 executing program 4:
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0xe0281, 0x0)
ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, 0x0)

13:45:07 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r1)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400ee5c99f8435ecde50a0412", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x1, 0x803, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="50000000100001040000ff0f0000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e00000000180002800c0002001c0000001b000000060001000100000008000500", @ANYRES32=r5], 0x50}}, 0x0)
r6 = socket(0x1, 0x803, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080))
r8 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x1e}}]}}}, @IFLA_LINK={0x8, 0x5, r7}]}, 0x50}}, 0x0)
r9 = socket$nl_route(0x10, 0x3, 0x0)
socket(0x1, 0x803, 0x0)
sendmsg$nl_route(r9, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000540)=ANY=[@ANYBLOB="20000000110003040000007bb000000000000000", @ANYRES32], 0x20}}, 0x0)

13:45:07 executing program 0:
r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x10f841, 0x0)
write$FUSE_ENTRY(r0, 0x0, 0x0)

[ 2222.777415][T21899] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'.
13:45:07 executing program 2:
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000015c0)={&(0x7f0000000300), 0xc, &(0x7f0000001580)={&(0x7f00000014c0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_PAYLOAD_CSUM_OFFSET={0x8, 0x7, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}]}, @NFT_MSG_DELSETELEM={0x1c, 0xe, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}]}], {0x14}}, 0x94}, 0x1, 0x0, 0x0, 0x1}, 0x1)
getsockname$packet(0xffffffffffffffff, &(0x7f0000001340), &(0x7f0000001380)=0x14)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, 0x0, 0x0)
sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, 0x0, 0x0)
getsockname(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001400)={&(0x7f0000000140), 0xc, &(0x7f0000000340)={&(0x7f0000000f00)=@newqdisc={0x1b8, 0x24, 0x0, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0xc}, {0x10, 0xffff}, {0xf, 0xfff2}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_RATE={0x6, 0x5, {0x8}}, @qdisc_kind_options=@q_choke={{0xa}, {0x18, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x4e0, 0x2, 0x6, 0x0, 0x1e, 0x2}}]}}, @qdisc_kind_options=@q_codel={{0xa}, {0x54, 0x2, [@TCA_CODEL_TARGET={0x8}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x4}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_LIMIT={0x8, 0x2, 0x2}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x80}, @TCA_CODEL_TARGET={0x8, 0x1, 0xb9}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_INTERVAL={0x8, 0x3, 0x7}, @TCA_CODEL_LIMIT={0x8, 0x2, 0x5}]}}, @TCA_STAB={0xf8, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x8, 0xc000, 0x9, 0x1, 0x80000001, 0x4, 0xa}}, {0x18, 0x2, [0x3, 0x4, 0x3, 0xff, 0x200, 0xfe01, 0x7, 0x8, 0x0, 0x2]}}, {{0x1c, 0x1, {0x0, 0x20, 0x1, 0xfc000, 0x1}}, {0x4}}, {{0x1c, 0x1, {0x3, 0x11, 0x100, 0x5, 0x0, 0x2dd, 0x7fff, 0x4}}, {0xc, 0x2, [0x6, 0x100, 0x2, 0x71]}}, {{0x1c, 0x1, {0x0, 0x40, 0x5, 0x3, 0x2}}, {0x4}}, {{0x1c, 0x1, {0x4, 0x8, 0x1ff, 0x3ff, 0x2, 0x5, 0x9, 0x5}}, {0xe, 0x2, [0x1, 0x1, 0xb41, 0x0, 0x8]}}, {{0x1c, 0x1, {0x9, 0x3f, 0x4, 0x3, 0x0, 0x4, 0x9, 0x5}}, {0xe, 0x2, [0x0, 0x0, 0x5ca, 0xfff, 0xfffb]}}]}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x81}]}, 0x1b8}, 0x1, 0x0, 0x0, 0x20000110}, 0x800)
connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10)
writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1)
recvmmsg(r1, &(0x7f0000003e40)=[{{0x0, 0x3, 0x0, 0x0, &(0x7f00000035c0)=""/241, 0xf1}}, {{&(0x7f00000036c0)=@un=@abs, 0x80, &(0x7f0000003780)=[{&(0x7f0000003740)=""/4, 0x7ffff}], 0x1, &(0x7f00000037c0)=""/236, 0xec}}, {{0x0, 0x0, &(0x7f0000003bc0)=[{0x0, 0xe00000000000000}, {&(0x7f0000003a00)=""/190, 0xbe}, {&(0x7f0000003ac0)=""/131, 0x83}, {0x0}], 0x4, &(0x7f0000003c00)=""/73, 0x49}}, {{&(0x7f0000003c80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, 0x0, 0x0, &(0x7f0000003e00)=""/48, 0x30}}], 0x4, 0x40000121, 0x0)
shutdown(r1, 0x0)

13:45:07 executing program 4:
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/crypto\x00', 0x0, 0x0)
preadv2(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)=""/177, 0xb1}, {&(0x7f0000000080)=""/83, 0x53}], 0x2, 0x0, 0x0, 0x0)

13:45:08 executing program 2:
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000015c0)={&(0x7f0000000300), 0xc, &(0x7f0000001580)={&(0x7f00000014c0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_PAYLOAD_CSUM_OFFSET={0x8, 0x7, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}]}, @NFT_MSG_DELSETELEM={0x1c, 0xe, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}]}], {0x14}}, 0x94}, 0x1, 0x0, 0x0, 0x1}, 0x1)
getsockname$packet(0xffffffffffffffff, &(0x7f0000001340), &(0x7f0000001380)=0x14)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, 0x0, 0x0)
sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, 0x0, 0x0)
getsockname(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001400)={&(0x7f0000000140), 0xc, &(0x7f0000000340)={&(0x7f0000000f00)=@newqdisc={0x1b8, 0x24, 0x0, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0xc}, {0x10, 0xffff}, {0xf, 0xfff2}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_RATE={0x6, 0x5, {0x8}}, @qdisc_kind_options=@q_choke={{0xa}, {0x18, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x4e0, 0x2, 0x6, 0x0, 0x1e, 0x2}}]}}, @qdisc_kind_options=@q_codel={{0xa}, {0x54, 0x2, [@TCA_CODEL_TARGET={0x8}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x4}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_LIMIT={0x8, 0x2, 0x2}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x80}, @TCA_CODEL_TARGET={0x8, 0x1, 0xb9}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_INTERVAL={0x8, 0x3, 0x7}, @TCA_CODEL_LIMIT={0x8, 0x2, 0x5}]}}, @TCA_STAB={0xf8, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x8, 0xc000, 0x9, 0x1, 0x80000001, 0x4, 0xa}}, {0x18, 0x2, [0x3, 0x4, 0x3, 0xff, 0x200, 0xfe01, 0x7, 0x8, 0x0, 0x2]}}, {{0x1c, 0x1, {0x0, 0x20, 0x1, 0xfc000, 0x1}}, {0x4}}, {{0x1c, 0x1, {0x3, 0x11, 0x100, 0x5, 0x0, 0x2dd, 0x7fff, 0x4}}, {0xc, 0x2, [0x6, 0x100, 0x2, 0x71]}}, {{0x1c, 0x1, {0x0, 0x40, 0x5, 0x3, 0x2}}, {0x4}}, {{0x1c, 0x1, {0x4, 0x8, 0x1ff, 0x3ff, 0x2, 0x5, 0x9, 0x5}}, {0xe, 0x2, [0x1, 0x1, 0xb41, 0x0, 0x8]}}, {{0x1c, 0x1, {0x9, 0x3f, 0x4, 0x3, 0x0, 0x4, 0x9, 0x5}}, {0xe, 0x2, [0x0, 0x0, 0x5ca, 0xfff, 0xfffb]}}]}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x81}]}, 0x1b8}, 0x1, 0x0, 0x0, 0x20000110}, 0x800)
connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10)
writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1)
recvmmsg(r1, &(0x7f0000003e40)=[{{0x0, 0x3, 0x0, 0x0, &(0x7f00000035c0)=""/241, 0xf1}}, {{&(0x7f00000036c0)=@un=@abs, 0x80, &(0x7f0000003780)=[{&(0x7f0000003740)=""/4, 0x7ffff}], 0x1, &(0x7f00000037c0)=""/236, 0xec}}, {{0x0, 0x0, &(0x7f0000003bc0)=[{0x0, 0xe00000000000000}, {&(0x7f0000003a00)=""/190, 0xbe}, {&(0x7f0000003ac0)=""/131, 0x83}, {0x0}], 0x4, &(0x7f0000003c00)=""/73, 0x49}}, {{&(0x7f0000003c80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, 0x0, 0x0, &(0x7f0000003e00)=""/48, 0x30}}], 0x4, 0x40000121, 0x0)
shutdown(r1, 0x0)

13:45:08 executing program 0:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
preadv2(r0, &(0x7f0000000180)=[{&(0x7f0000000000)=""/186, 0xba}], 0x1, 0x0, 0x0, 0x0)

13:45:08 executing program 4:
r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ppoll(&(0x7f00000000c0)=[{r0}], 0x1, &(0x7f0000000100)={0x0, 0x989680}, 0x0, 0x0)

13:45:08 executing program 0:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
write$RDMA_USER_CM_CMD_JOIN_MCAST(r0, &(0x7f0000000040)={0x16, 0x98, 0xfa00, {0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, @in={0x2, 0x0, @empty}}}, 0xa0)

13:45:08 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r1)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400ee5c99f8435ecde50a0412", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x1, 0x803, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="50000000100001040000ff0f0000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e00000000180002800c0002001c0000001b000000060001000100000008000500", @ANYRES32=r5], 0x50}}, 0x0)
r6 = socket(0x1, 0x803, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080))
r8 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x1e}}]}}}, @IFLA_LINK={0x8, 0x5, r7}]}, 0x50}}, 0x0)
r9 = socket$nl_route(0x10, 0x3, 0x0)
socket(0x1, 0x803, 0x0)
sendmsg$nl_route(r9, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000540)=ANY=[@ANYBLOB="20000000110003040000007bb000000000000000", @ANYRES32], 0x20}}, 0x0)

13:45:08 executing program 4:
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/seq/clients\x00', 0x0, 0x0)
preadv2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)=""/186, 0xba}], 0x1, 0x9, 0x0, 0x0)

13:45:08 executing program 5:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0x0, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000240)={@val={0x0, 0x86dd}, @val={0x5, 0x0, 0x0, 0x0, 0x54}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "000003", 0x190, 0x3a, 0x0, @empty, @mcast2, {[@routing={0x0, 0x2, 0x0, 0x0, 0x0, [@empty]}], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x0, "ee7b615d"}, {}, {0x2b, 0x3, "6f8c008275021d683910c309293188a7c747eb2278d2794784"}, {0x0, 0x28, "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"}]}}}}}, 0x1c6)

13:45:08 executing program 2:
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
syz_genetlink_get_family_id$tipc(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$NFT_BATCH(r0, &(0x7f00000015c0)={&(0x7f0000000300), 0xc, &(0x7f0000001580)={&(0x7f00000014c0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_PAYLOAD_CSUM_OFFSET={0x8, 0x7, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}]}, @NFT_MSG_DELSETELEM={0x1c, 0xe, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}]}], {0x14}}, 0x94}, 0x1, 0x0, 0x0, 0x1}, 0x1)
getsockname$packet(0xffffffffffffffff, &(0x7f0000001340), &(0x7f0000001380)=0x14)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, 0x0, 0x0)
sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, 0x0, 0x0)
getsockname(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001400)={&(0x7f0000000140), 0xc, &(0x7f0000000340)={&(0x7f0000000f00)=@newqdisc={0x1b8, 0x24, 0x0, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0xc}, {0x10, 0xffff}, {0xf, 0xfff2}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_RATE={0x6, 0x5, {0x8}}, @qdisc_kind_options=@q_choke={{0xa}, {0x18, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x4e0, 0x2, 0x6, 0x0, 0x1e, 0x2}}]}}, @qdisc_kind_options=@q_codel={{0xa}, {0x54, 0x2, [@TCA_CODEL_TARGET={0x8}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x4}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_LIMIT={0x8, 0x2, 0x2}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x80}, @TCA_CODEL_TARGET={0x8, 0x1, 0xb9}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_INTERVAL={0x8, 0x3, 0x7}, @TCA_CODEL_LIMIT={0x8, 0x2, 0x5}]}}, @TCA_STAB={0xf8, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x8, 0xc000, 0x9, 0x1, 0x80000001, 0x4, 0xa}}, {0x18, 0x2, [0x3, 0x4, 0x3, 0xff, 0x200, 0xfe01, 0x7, 0x8, 0x0, 0x2]}}, {{0x1c, 0x1, {0x0, 0x20, 0x1, 0xfc000, 0x1}}, {0x4}}, {{0x1c, 0x1, {0x3, 0x11, 0x100, 0x5, 0x0, 0x2dd, 0x7fff, 0x4}}, {0xc, 0x2, [0x6, 0x100, 0x2, 0x71]}}, {{0x1c, 0x1, {0x0, 0x40, 0x5, 0x3, 0x2}}, {0x4}}, {{0x1c, 0x1, {0x4, 0x8, 0x1ff, 0x3ff, 0x2, 0x5, 0x9, 0x5}}, {0xe, 0x2, [0x1, 0x1, 0xb41, 0x0, 0x8]}}, {{0x1c, 0x1, {0x9, 0x3f, 0x4, 0x3, 0x0, 0x4, 0x9, 0x5}}, {0xe, 0x2, [0x0, 0x0, 0x5ca, 0xfff, 0xfffb]}}]}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x81}]}, 0x1b8}, 0x1, 0x0, 0x0, 0x20000110}, 0x800)
connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10)
writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1)
recvmmsg(r1, &(0x7f0000003e40)=[{{0x0, 0x3, 0x0, 0x0, &(0x7f00000035c0)=""/241, 0xf1}}, {{&(0x7f00000036c0)=@un=@abs, 0x80, &(0x7f0000003780)=[{&(0x7f0000003740)=""/4, 0x7ffff}], 0x1, &(0x7f00000037c0)=""/236, 0xec}}, {{0x0, 0x0, &(0x7f0000003bc0)=[{0x0, 0xe00000000000000}, {&(0x7f0000003a00)=""/190, 0xbe}, {&(0x7f0000003ac0)=""/131, 0x83}, {0x0}], 0x4, &(0x7f0000003c00)=""/73, 0x49}}, {{&(0x7f0000003c80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, 0x0, 0x0, &(0x7f0000003e00)=""/48, 0x30}}], 0x4, 0x40000121, 0x0)
shutdown(r1, 0x0)

13:45:08 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f000000c380)='/proc/crypto\x00', 0x0, 0x0)
read$FUSE(r3, &(0x7f0000000200)={0x2020}, 0x2020)
execve(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000280)=[0x0, 0x0], &(0x7f0000000380)=[&(0x7f00000002c0)='*$%}\xce*\x00', &(0x7f0000000300)='\x00'])

13:45:09 executing program 0:
r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
read$sequencer(r0, &(0x7f0000000080)=""/33, 0x21)

13:45:09 executing program 4:
r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000040)='.pending_reads\x00', 0x8040, 0x0)
ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r0, 0x6628, 0x0)

[ 2223.978241][T21932] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'.
13:45:09 executing program 2:
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
syz_genetlink_get_family_id$tipc(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$NFT_BATCH(r0, &(0x7f00000015c0)={&(0x7f0000000300), 0xc, &(0x7f0000001580)={&(0x7f00000014c0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_PAYLOAD_CSUM_OFFSET={0x8, 0x7, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}]}, @NFT_MSG_DELSETELEM={0x1c, 0xe, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}]}], {0x14}}, 0x94}, 0x1, 0x0, 0x0, 0x1}, 0x1)
getsockname$packet(0xffffffffffffffff, &(0x7f0000001340), &(0x7f0000001380)=0x14)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, 0x0, 0x0)
sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, 0x0, 0x0)
getsockname(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001400)={&(0x7f0000000140), 0xc, &(0x7f0000000340)={&(0x7f0000000f00)=@newqdisc={0x1b8, 0x24, 0x0, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0xc}, {0x10, 0xffff}, {0xf, 0xfff2}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_RATE={0x6, 0x5, {0x8}}, @qdisc_kind_options=@q_choke={{0xa}, {0x18, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x4e0, 0x2, 0x6, 0x0, 0x1e, 0x2}}]}}, @qdisc_kind_options=@q_codel={{0xa}, {0x54, 0x2, [@TCA_CODEL_TARGET={0x8}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x4}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_LIMIT={0x8, 0x2, 0x2}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x80}, @TCA_CODEL_TARGET={0x8, 0x1, 0xb9}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_INTERVAL={0x8, 0x3, 0x7}, @TCA_CODEL_LIMIT={0x8, 0x2, 0x5}]}}, @TCA_STAB={0xf8, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x8, 0xc000, 0x9, 0x1, 0x80000001, 0x4, 0xa}}, {0x18, 0x2, [0x3, 0x4, 0x3, 0xff, 0x200, 0xfe01, 0x7, 0x8, 0x0, 0x2]}}, {{0x1c, 0x1, {0x0, 0x20, 0x1, 0xfc000, 0x1}}, {0x4}}, {{0x1c, 0x1, {0x3, 0x11, 0x100, 0x5, 0x0, 0x2dd, 0x7fff, 0x4}}, {0xc, 0x2, [0x6, 0x100, 0x2, 0x71]}}, {{0x1c, 0x1, {0x0, 0x40, 0x5, 0x3, 0x2}}, {0x4}}, {{0x1c, 0x1, {0x4, 0x8, 0x1ff, 0x3ff, 0x2, 0x5, 0x9, 0x5}}, {0xe, 0x2, [0x1, 0x1, 0xb41, 0x0, 0x8]}}, {{0x1c, 0x1, {0x9, 0x3f, 0x4, 0x3, 0x0, 0x4, 0x9, 0x5}}, {0xe, 0x2, [0x0, 0x0, 0x5ca, 0xfff, 0xfffb]}}]}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x81}]}, 0x1b8}, 0x1, 0x0, 0x0, 0x20000110}, 0x800)
connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10)
writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1)
recvmmsg(r1, &(0x7f0000003e40)=[{{0x0, 0x3, 0x0, 0x0, &(0x7f00000035c0)=""/241, 0xf1}}, {{&(0x7f00000036c0)=@un=@abs, 0x80, &(0x7f0000003780)=[{&(0x7f0000003740)=""/4, 0x7ffff}], 0x1, &(0x7f00000037c0)=""/236, 0xec}}, {{0x0, 0x0, &(0x7f0000003bc0)=[{0x0, 0xe00000000000000}, {&(0x7f0000003a00)=""/190, 0xbe}, {&(0x7f0000003ac0)=""/131, 0x83}, {0x0}], 0x4, &(0x7f0000003c00)=""/73, 0x49}}, {{&(0x7f0000003c80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, 0x0, 0x0, &(0x7f0000003e00)=""/48, 0x30}}], 0x4, 0x40000121, 0x0)
shutdown(r1, 0x0)

13:45:09 executing program 0:
quotactl$Q_QUOTAOFF(0x0, &(0x7f0000000000)=@filename='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0)

13:45:09 executing program 4:
r0 = epoll_create(0x7)
ioctl$BTRFS_IOC_START_SYNC(r0, 0x801c581f, 0x0)

13:45:09 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r1)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400ee5c99f8435ecde50a0412", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x1, 0x803, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="50000000100001040000ff0f0000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e00000000180002800c0002001c0000001b000000060001000100000008000500", @ANYRES32=r5], 0x50}}, 0x0)
r6 = socket(0x1, 0x803, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080))
r8 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x1e}}]}}}, @IFLA_LINK={0x8, 0x5, r7}]}, 0x50}}, 0x0)
r9 = socket$nl_route(0x10, 0x3, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r9, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000540)=ANY=[@ANYBLOB="20000000110003040000007bb000000000000000", @ANYRES32=r10], 0x20}}, 0x0)

13:45:09 executing program 0:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$vhost_msg(r0, &(0x7f0000000140)={0x1, {0x0, 0x0, 0x0, 0x0, 0x3}}, 0x48)

13:45:09 executing program 2:
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
syz_genetlink_get_family_id$tipc(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$NFT_BATCH(r0, &(0x7f00000015c0)={&(0x7f0000000300), 0xc, &(0x7f0000001580)={&(0x7f00000014c0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_PAYLOAD_CSUM_OFFSET={0x8, 0x7, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}]}, @NFT_MSG_DELSETELEM={0x1c, 0xe, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}]}], {0x14}}, 0x94}, 0x1, 0x0, 0x0, 0x1}, 0x1)
getsockname$packet(0xffffffffffffffff, &(0x7f0000001340), &(0x7f0000001380)=0x14)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, 0x0, 0x0)
sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, 0x0, 0x0)
getsockname(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001400)={&(0x7f0000000140), 0xc, &(0x7f0000000340)={&(0x7f0000000f00)=@newqdisc={0x1b8, 0x24, 0x0, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0xc}, {0x10, 0xffff}, {0xf, 0xfff2}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_RATE={0x6, 0x5, {0x8}}, @qdisc_kind_options=@q_choke={{0xa}, {0x18, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x4e0, 0x2, 0x6, 0x0, 0x1e, 0x2}}]}}, @qdisc_kind_options=@q_codel={{0xa}, {0x54, 0x2, [@TCA_CODEL_TARGET={0x8}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x4}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_LIMIT={0x8, 0x2, 0x2}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x80}, @TCA_CODEL_TARGET={0x8, 0x1, 0xb9}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_INTERVAL={0x8, 0x3, 0x7}, @TCA_CODEL_LIMIT={0x8, 0x2, 0x5}]}}, @TCA_STAB={0xf8, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x8, 0xc000, 0x9, 0x1, 0x80000001, 0x4, 0xa}}, {0x18, 0x2, [0x3, 0x4, 0x3, 0xff, 0x200, 0xfe01, 0x7, 0x8, 0x0, 0x2]}}, {{0x1c, 0x1, {0x0, 0x20, 0x1, 0xfc000, 0x1}}, {0x4}}, {{0x1c, 0x1, {0x3, 0x11, 0x100, 0x5, 0x0, 0x2dd, 0x7fff, 0x4}}, {0xc, 0x2, [0x6, 0x100, 0x2, 0x71]}}, {{0x1c, 0x1, {0x0, 0x40, 0x5, 0x3, 0x2}}, {0x4}}, {{0x1c, 0x1, {0x4, 0x8, 0x1ff, 0x3ff, 0x2, 0x5, 0x9, 0x5}}, {0xe, 0x2, [0x1, 0x1, 0xb41, 0x0, 0x8]}}, {{0x1c, 0x1, {0x9, 0x3f, 0x4, 0x3, 0x0, 0x4, 0x9, 0x5}}, {0xe, 0x2, [0x0, 0x0, 0x5ca, 0xfff, 0xfffb]}}]}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x81}]}, 0x1b8}, 0x1, 0x0, 0x0, 0x20000110}, 0x800)
connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10)
writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1)
recvmmsg(r1, &(0x7f0000003e40)=[{{0x0, 0x3, 0x0, 0x0, &(0x7f00000035c0)=""/241, 0xf1}}, {{&(0x7f00000036c0)=@un=@abs, 0x80, &(0x7f0000003780)=[{&(0x7f0000003740)=""/4, 0x7ffff}], 0x1, &(0x7f00000037c0)=""/236, 0xec}}, {{0x0, 0x0, &(0x7f0000003bc0)=[{0x0, 0xe00000000000000}, {&(0x7f0000003a00)=""/190, 0xbe}, {&(0x7f0000003ac0)=""/131, 0x83}, {0x0}], 0x4, &(0x7f0000003c00)=""/73, 0x49}}, {{&(0x7f0000003c80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, 0x0, 0x0, &(0x7f0000003e00)=""/48, 0x30}}], 0x4, 0x40000121, 0x0)
shutdown(r1, 0x0)

13:45:09 executing program 4:
bpf$PROG_LOAD(0x12, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x90)

[ 2224.469463][T21953] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'.
13:45:09 executing program 5:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0x0, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000240)={@val={0x0, 0x86dd}, @val={0x5, 0x0, 0x0, 0x0, 0x54}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "000003", 0x190, 0x3a, 0x0, @empty, @mcast2, {[@routing={0x0, 0x2, 0x0, 0x0, 0x0, [@empty]}], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x0, "ee7b615d"}, {}, {0x2b, 0x3, "6f8c008275021d683910c309293188a7c747eb2278d2794784"}, {0x0, 0x28, "4429118927041312255133e4d2b8b863b5f5b4ace38952e94c581c85d2d86844f548415db4dbf1992868a2e15095b531ce55d4620ec637afdcc990a4d6bfecb289917d24b31a2ddeb64383b176b823cc203ec1927487b7a00d6a3446cf7db79e14b2206d882c28611fa4d8289337cd75b4688120c73a2710947b908fde68a05a0777a170a14e85c7849462b3f5c3152cf0f3d91c5db93dc4d8f9e6b53708650dc375e6da3650b5ff4079971f6e3ef363382a16b8ae07b7307b5619092e4669dbca480d25738314135509eda68f712b9b09bdb485ea0914590b7ae01c2e34832f16c23c82b22b6ba550acfcede288a5237a06b3f5e09b6e5a0404544efe1474664b985f070121e82070a9f4513c2031a58a3d99e99284b812c0f047061139620890416c9defce02fa49cd1dd14b22df7250314ccb3dfd9827f892656911150cd9d921a8"}]}}}}}, 0x1c6)

13:45:09 executing program 0:
r0 = socket$l2tp6(0xa, 0x2, 0x73)
ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, 0x0)

13:45:10 executing program 2:
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
syz_genetlink_get_family_id$tipc(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$NFT_BATCH(r0, &(0x7f00000015c0)={&(0x7f0000000300), 0xc, &(0x7f0000001580)={&(0x7f00000014c0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_PAYLOAD_CSUM_OFFSET={0x8, 0x7, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}]}, @NFT_MSG_DELSETELEM={0x1c, 0xe, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}]}], {0x14}}, 0x94}, 0x1, 0x0, 0x0, 0x1}, 0x1)
getsockname$packet(0xffffffffffffffff, &(0x7f0000001340), &(0x7f0000001380)=0x14)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, 0x0, 0x0)
sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, 0x0, 0x0)
getsockname(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001400)={&(0x7f0000000140), 0xc, &(0x7f0000000340)={&(0x7f0000000f00)=@newqdisc={0x1b8, 0x24, 0x0, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0xc}, {0x10, 0xffff}, {0xf, 0xfff2}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_RATE={0x6, 0x5, {0x8}}, @qdisc_kind_options=@q_choke={{0xa}, {0x18, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x4e0, 0x2, 0x6, 0x0, 0x1e, 0x2}}]}}, @qdisc_kind_options=@q_codel={{0xa}, {0x54, 0x2, [@TCA_CODEL_TARGET={0x8}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x4}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_LIMIT={0x8, 0x2, 0x2}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x80}, @TCA_CODEL_TARGET={0x8, 0x1, 0xb9}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_INTERVAL={0x8, 0x3, 0x7}, @TCA_CODEL_LIMIT={0x8, 0x2, 0x5}]}}, @TCA_STAB={0xf8, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x8, 0xc000, 0x9, 0x1, 0x80000001, 0x4, 0xa}}, {0x18, 0x2, [0x3, 0x4, 0x3, 0xff, 0x200, 0xfe01, 0x7, 0x8, 0x0, 0x2]}}, {{0x1c, 0x1, {0x0, 0x20, 0x1, 0xfc000, 0x1}}, {0x4}}, {{0x1c, 0x1, {0x3, 0x11, 0x100, 0x5, 0x0, 0x2dd, 0x7fff, 0x4}}, {0xc, 0x2, [0x6, 0x100, 0x2, 0x71]}}, {{0x1c, 0x1, {0x0, 0x40, 0x5, 0x3, 0x2}}, {0x4}}, {{0x1c, 0x1, {0x4, 0x8, 0x1ff, 0x3ff, 0x2, 0x5, 0x9, 0x5}}, {0xe, 0x2, [0x1, 0x1, 0xb41, 0x0, 0x8]}}, {{0x1c, 0x1, {0x9, 0x3f, 0x4, 0x3, 0x0, 0x4, 0x9, 0x5}}, {0xe, 0x2, [0x0, 0x0, 0x5ca, 0xfff, 0xfffb]}}]}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x81}]}, 0x1b8}, 0x1, 0x0, 0x0, 0x20000110}, 0x800)
connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10)
writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1)
recvmmsg(r1, &(0x7f0000003e40)=[{{0x0, 0x3, 0x0, 0x0, &(0x7f00000035c0)=""/241, 0xf1}}, {{&(0x7f00000036c0)=@un=@abs, 0x80, &(0x7f0000003780)=[{&(0x7f0000003740)=""/4, 0x7ffff}], 0x1, &(0x7f00000037c0)=""/236, 0xec}}, {{0x0, 0x0, &(0x7f0000003bc0)=[{0x0, 0xe00000000000000}, {&(0x7f0000003a00)=""/190, 0xbe}, {&(0x7f0000003ac0)=""/131, 0x83}, {0x0}], 0x4, &(0x7f0000003c00)=""/73, 0x49}}, {{&(0x7f0000003c80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, 0x0, 0x0, &(0x7f0000003e00)=""/48, 0x30}}], 0x4, 0x40000121, 0x0)
shutdown(r1, 0x0)

13:45:10 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, 0x0, 0x0)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f000000c380)='/proc/crypto\x00', 0x0, 0x0)
read$FUSE(r3, &(0x7f0000000200)={0x2020}, 0x2020)
execve(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000280)=[0x0, 0x0], &(0x7f0000000380)=[&(0x7f00000002c0)='*$%}\xce*\x00', &(0x7f0000000300)='\x00'])

13:45:10 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{}, {}]}, 0x10)

13:45:10 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r1)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400ee5c99f8435ecde50a0412", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x1, 0x803, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="50000000100001040000ff0f0000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e00000000180002800c0002001c0000001b000000060001000100000008000500", @ANYRES32=r5], 0x50}}, 0x0)
r6 = socket(0x1, 0x803, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080))
r8 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x1e}}]}}}, @IFLA_LINK={0x8, 0x5, r7}]}, 0x50}}, 0x0)
r9 = socket$nl_route(0x10, 0x3, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r9, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000540)=ANY=[@ANYBLOB="20000000110003040000007bb000000000000000", @ANYRES32=r10], 0x20}}, 0x0)

13:45:10 executing program 5:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000240)={@val={0x0, 0x86dd}, @val={0x5, 0x0, 0x0, 0x0, 0x54}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "000003", 0x190, 0x3a, 0x0, @empty, @mcast2, {[@routing={0x0, 0x2, 0x0, 0x0, 0x0, [@empty]}], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x0, "ee7b615d"}, {}, {0x2b, 0x3, "6f8c008275021d683910c309293188a7c747eb2278d2794784"}, {0x0, 0x28, "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"}]}}}}}, 0x1c6)

13:45:10 executing program 4:
r0 = socket$inet6_dccp(0xa, 0x6, 0x0)
ioctl$sock_SIOCETHTOOL(r0, 0x8993, &(0x7f0000001240)={'team_slave_1\x00', 0x0})

[ 2225.503645][T21977] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'.
13:45:10 executing program 0:
r0 = socket$inet6_dccp(0xa, 0x6, 0x0)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000001240)={'team_slave_1\x00', &(0x7f0000000000)=@ethtool_per_queue_op={0x3c}})

13:45:10 executing program 4:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000002c0)={0x14, 0x1, 0x6, 0x401}, 0x14}}, 0x0)

13:45:10 executing program 2:
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
syz_genetlink_get_family_id$tipc(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$NFT_BATCH(r0, &(0x7f00000015c0)={&(0x7f0000000300), 0xc, &(0x7f0000001580)={&(0x7f00000014c0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_PAYLOAD_CSUM_OFFSET={0x8, 0x7, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}]}, @NFT_MSG_DELSETELEM={0x1c, 0xe, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}]}], {0x14}}, 0x94}, 0x1, 0x0, 0x0, 0x1}, 0x1)
getsockname$packet(0xffffffffffffffff, &(0x7f0000001340), &(0x7f0000001380)=0x14)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, 0x0, 0x0)
sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, 0x0, 0x0)
getsockname(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001400)={&(0x7f0000000140), 0xc, &(0x7f0000000340)={&(0x7f0000000f00)=@newqdisc={0x1b8, 0x24, 0x0, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0xc}, {0x10, 0xffff}, {0xf, 0xfff2}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_RATE={0x6, 0x5, {0x8}}, @qdisc_kind_options=@q_choke={{0xa}, {0x18, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x4e0, 0x2, 0x6, 0x0, 0x1e, 0x2}}]}}, @qdisc_kind_options=@q_codel={{0xa}, {0x54, 0x2, [@TCA_CODEL_TARGET={0x8}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x4}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_LIMIT={0x8, 0x2, 0x2}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x80}, @TCA_CODEL_TARGET={0x8, 0x1, 0xb9}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_INTERVAL={0x8, 0x3, 0x7}, @TCA_CODEL_LIMIT={0x8, 0x2, 0x5}]}}, @TCA_STAB={0xf8, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x8, 0xc000, 0x9, 0x1, 0x80000001, 0x4, 0xa}}, {0x18, 0x2, [0x3, 0x4, 0x3, 0xff, 0x200, 0xfe01, 0x7, 0x8, 0x0, 0x2]}}, {{0x1c, 0x1, {0x0, 0x20, 0x1, 0xfc000, 0x1}}, {0x4}}, {{0x1c, 0x1, {0x3, 0x11, 0x100, 0x5, 0x0, 0x2dd, 0x7fff, 0x4}}, {0xc, 0x2, [0x6, 0x100, 0x2, 0x71]}}, {{0x1c, 0x1, {0x0, 0x40, 0x5, 0x3, 0x2}}, {0x4}}, {{0x1c, 0x1, {0x4, 0x8, 0x1ff, 0x3ff, 0x2, 0x5, 0x9, 0x5}}, {0xe, 0x2, [0x1, 0x1, 0xb41, 0x0, 0x8]}}, {{0x1c, 0x1, {0x9, 0x3f, 0x4, 0x3, 0x0, 0x4, 0x9, 0x5}}, {0xe, 0x2, [0x0, 0x0, 0x5ca, 0xfff, 0xfffb]}}]}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x81}]}, 0x1b8}, 0x1, 0x0, 0x0, 0x20000110}, 0x800)
connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10)
writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1)
recvmmsg(r1, &(0x7f0000003e40)=[{{0x0, 0x3, 0x0, 0x0, &(0x7f00000035c0)=""/241, 0xf1}}, {{&(0x7f00000036c0)=@un=@abs, 0x80, &(0x7f0000003780)=[{&(0x7f0000003740)=""/4, 0x7ffff}], 0x1, &(0x7f00000037c0)=""/236, 0xec}}, {{0x0, 0x0, &(0x7f0000003bc0)=[{0x0, 0xe00000000000000}, {&(0x7f0000003a00)=""/190, 0xbe}, {&(0x7f0000003ac0)=""/131, 0x83}, {0x0}], 0x4, &(0x7f0000003c00)=""/73, 0x49}}, {{&(0x7f0000003c80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, 0x0, 0x0, &(0x7f0000003e00)=""/48, 0x30}}], 0x4, 0x40000121, 0x0)
shutdown(r1, 0x0)

13:45:10 executing program 0:
r0 = socket$unix(0x1, 0x1, 0x0)
r1 = getpid()
r2 = getpid()
sendmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@cred={{0x1c, 0x1, 0x2, {r1, 0xee01}}}, @cred={{0x1c, 0x1, 0x2, {r2, 0xee00, 0xee00}}}], 0x40}, 0x0)

13:45:10 executing program 2:
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
syz_genetlink_get_family_id$tipc(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$NFT_BATCH(r0, &(0x7f00000015c0)={&(0x7f0000000300), 0xc, &(0x7f0000001580)={&(0x7f00000014c0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_PAYLOAD_CSUM_OFFSET={0x8, 0x7, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}]}, @NFT_MSG_DELSETELEM={0x1c, 0xe, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}]}], {0x14}}, 0x94}, 0x1, 0x0, 0x0, 0x1}, 0x1)
getsockname$packet(0xffffffffffffffff, &(0x7f0000001340), &(0x7f0000001380)=0x14)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, 0x0, 0x0)
sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, 0x0, 0x0)
getsockname(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001400)={&(0x7f0000000140), 0xc, &(0x7f0000000340)={&(0x7f0000000f00)=@newqdisc={0x1b8, 0x24, 0x0, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0xc}, {0x10, 0xffff}, {0xf, 0xfff2}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_RATE={0x6, 0x5, {0x8}}, @qdisc_kind_options=@q_choke={{0xa}, {0x18, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x4e0, 0x2, 0x6, 0x0, 0x1e, 0x2}}]}}, @qdisc_kind_options=@q_codel={{0xa}, {0x54, 0x2, [@TCA_CODEL_TARGET={0x8}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x4}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_LIMIT={0x8, 0x2, 0x2}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x80}, @TCA_CODEL_TARGET={0x8, 0x1, 0xb9}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_INTERVAL={0x8, 0x3, 0x7}, @TCA_CODEL_LIMIT={0x8, 0x2, 0x5}]}}, @TCA_STAB={0xf8, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x8, 0xc000, 0x9, 0x1, 0x80000001, 0x4, 0xa}}, {0x18, 0x2, [0x3, 0x4, 0x3, 0xff, 0x200, 0xfe01, 0x7, 0x8, 0x0, 0x2]}}, {{0x1c, 0x1, {0x0, 0x20, 0x1, 0xfc000, 0x1}}, {0x4}}, {{0x1c, 0x1, {0x3, 0x11, 0x100, 0x5, 0x0, 0x2dd, 0x7fff, 0x4}}, {0xc, 0x2, [0x6, 0x100, 0x2, 0x71]}}, {{0x1c, 0x1, {0x0, 0x40, 0x5, 0x3, 0x2}}, {0x4}}, {{0x1c, 0x1, {0x4, 0x8, 0x1ff, 0x3ff, 0x2, 0x5, 0x9, 0x5}}, {0xe, 0x2, [0x1, 0x1, 0xb41, 0x0, 0x8]}}, {{0x1c, 0x1, {0x9, 0x3f, 0x4, 0x3, 0x0, 0x4, 0x9, 0x5}}, {0xe, 0x2, [0x0, 0x0, 0x5ca, 0xfff, 0xfffb]}}]}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x81}]}, 0x1b8}, 0x1, 0x0, 0x0, 0x20000110}, 0x800)
connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10)
writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1)
recvmmsg(r1, &(0x7f0000003e40)=[{{0x0, 0x3, 0x0, 0x0, &(0x7f00000035c0)=""/241, 0xf1}}, {{&(0x7f00000036c0)=@un=@abs, 0x80, &(0x7f0000003780)=[{&(0x7f0000003740)=""/4, 0x7ffff}], 0x1, &(0x7f00000037c0)=""/236, 0xec}}, {{0x0, 0x0, &(0x7f0000003bc0)=[{0x0, 0xe00000000000000}, {&(0x7f0000003a00)=""/190, 0xbe}, {&(0x7f0000003ac0)=""/131, 0x83}, {0x0}], 0x4, &(0x7f0000003c00)=""/73, 0x49}}, {{&(0x7f0000003c80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, 0x0, 0x0, &(0x7f0000003e00)=""/48, 0x30}}], 0x4, 0x40000121, 0x0)
shutdown(r1, 0x0)

13:45:10 executing program 5:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000240)={@val={0x0, 0x86dd}, @val={0x5, 0x0, 0x0, 0x0, 0x54}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "000003", 0x190, 0x3a, 0x0, @empty, @mcast2, {[@routing={0x0, 0x2, 0x0, 0x0, 0x0, [@empty]}], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x0, "ee7b615d"}, {}, {0x2b, 0x3, "6f8c008275021d683910c309293188a7c747eb2278d2794784"}, {0x0, 0x28, "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"}]}}}}}, 0x1c6)

13:45:10 executing program 4:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
getsockopt$netlink(r0, 0x10e, 0x5, &(0x7f0000000240)=""/252, &(0x7f0000000340)=0xfc)

13:45:11 executing program 4:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x14, 0x0, 0x7, 0x5}, 0x14}}, 0x0)

13:45:11 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, 0x0, 0x0)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f000000c380)='/proc/crypto\x00', 0x0, 0x0)
read$FUSE(r3, &(0x7f0000000200)={0x2020}, 0x2020)
execve(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000280)=[0x0, 0x0], &(0x7f0000000380)=[&(0x7f00000002c0)='*$%}\xce*\x00', &(0x7f0000000300)='\x00'])

13:45:11 executing program 2:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
syz_genetlink_get_family_id$tipc(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$NFT_BATCH(r1, &(0x7f00000015c0)={&(0x7f0000000300), 0xc, &(0x7f0000001580)={&(0x7f00000014c0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_PAYLOAD_CSUM_OFFSET={0x8, 0x7, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}]}, @NFT_MSG_DELSETELEM={0x1c, 0xe, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}]}], {0x14}}, 0x94}, 0x1, 0x0, 0x0, 0x1}, 0x1)
getsockname$packet(0xffffffffffffffff, &(0x7f0000001340), &(0x7f0000001380)=0x14)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r1, 0x0, 0x0)
sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, 0x0, 0x0)
getsockname(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001400)={&(0x7f0000000140), 0xc, &(0x7f0000000340)={&(0x7f0000000f00)=@newqdisc={0x1b8, 0x24, 0x0, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0xc}, {0x10, 0xffff}, {0xf, 0xfff2}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_RATE={0x6, 0x5, {0x8}}, @qdisc_kind_options=@q_choke={{0xa}, {0x18, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x4e0, 0x2, 0x6, 0x0, 0x1e, 0x2}}]}}, @qdisc_kind_options=@q_codel={{0xa}, {0x54, 0x2, [@TCA_CODEL_TARGET={0x8}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x4}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_LIMIT={0x8, 0x2, 0x2}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x80}, @TCA_CODEL_TARGET={0x8, 0x1, 0xb9}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_INTERVAL={0x8, 0x3, 0x7}, @TCA_CODEL_LIMIT={0x8, 0x2, 0x5}]}}, @TCA_STAB={0xf8, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x8, 0xc000, 0x9, 0x1, 0x80000001, 0x4, 0xa}}, {0x18, 0x2, [0x3, 0x4, 0x3, 0xff, 0x200, 0xfe01, 0x7, 0x8, 0x0, 0x2]}}, {{0x1c, 0x1, {0x0, 0x20, 0x1, 0xfc000, 0x1}}, {0x4}}, {{0x1c, 0x1, {0x3, 0x11, 0x100, 0x5, 0x0, 0x2dd, 0x7fff, 0x4}}, {0xc, 0x2, [0x6, 0x100, 0x2, 0x71]}}, {{0x1c, 0x1, {0x0, 0x40, 0x5, 0x3, 0x2}}, {0x4}}, {{0x1c, 0x1, {0x4, 0x8, 0x1ff, 0x3ff, 0x2, 0x5, 0x9, 0x5}}, {0xe, 0x2, [0x1, 0x1, 0xb41, 0x0, 0x8]}}, {{0x1c, 0x1, {0x9, 0x3f, 0x4, 0x3, 0x0, 0x4, 0x9, 0x5}}, {0xe, 0x2, [0x0, 0x0, 0x5ca, 0xfff, 0xfffb]}}]}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x81}]}, 0x1b8}, 0x1, 0x0, 0x0, 0x20000110}, 0x800)
connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10)
writev(r2, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1)
recvmmsg(r2, &(0x7f0000003e40)=[{{0x0, 0x3, 0x0, 0x0, &(0x7f00000035c0)=""/241, 0xf1}}, {{&(0x7f00000036c0)=@un=@abs, 0x80, &(0x7f0000003780)=[{&(0x7f0000003740)=""/4, 0x7ffff}], 0x1, &(0x7f00000037c0)=""/236, 0xec}}, {{0x0, 0x0, &(0x7f0000003bc0)=[{0x0, 0xe00000000000000}, {&(0x7f0000003a00)=""/190, 0xbe}, {&(0x7f0000003ac0)=""/131, 0x83}, {0x0}], 0x4, &(0x7f0000003c00)=""/73, 0x49}}, {{&(0x7f0000003c80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, 0x0, 0x0, &(0x7f0000003e00)=""/48, 0x30}}], 0x4, 0x40000121, 0x0)
shutdown(r2, 0x0)

13:45:11 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r1)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400ee5c99f8435ecde50a0412", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x1, 0x803, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="50000000100001040000ff0f0000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e00000000180002800c0002001c0000001b000000060001000100000008000500", @ANYRES32=r5], 0x50}}, 0x0)
r6 = socket(0x1, 0x803, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080))
r8 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x1e}}]}}}, @IFLA_LINK={0x8, 0x5, r7}]}, 0x50}}, 0x0)
r9 = socket$nl_route(0x10, 0x3, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r9, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000540)=ANY=[@ANYBLOB="20000000110003040000007bb000000000000000", @ANYRES32=r10], 0x20}}, 0x0)

13:45:11 executing program 0:
syz_emit_ethernet(0x62, &(0x7f0000000280)={@remote, @multicast, @val={@void}, {@ipv6={0x86dd, @tipc_packet={0x0, 0x6, 'R2Y', 0x28, 0x6, 0x0, @private1, @private1, {[], @name_distributor={{0x28, 0x0, 0x0, 0x0, 0x0, 0xa}}}}}}}, 0x0)

13:45:11 executing program 5:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000240)={@val={0x0, 0x86dd}, @val={0x5, 0x0, 0x0, 0x0, 0x54}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "000003", 0x190, 0x3a, 0x0, @empty, @mcast2, {[@routing={0x0, 0x2, 0x0, 0x0, 0x0, [@empty]}], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x0, "ee7b615d"}, {}, {0x2b, 0x3, "6f8c008275021d683910c309293188a7c747eb2278d2794784"}, {0x0, 0x28, "4429118927041312255133e4d2b8b863b5f5b4ace38952e94c581c85d2d86844f548415db4dbf1992868a2e15095b531ce55d4620ec637afdcc990a4d6bfecb289917d24b31a2ddeb64383b176b823cc203ec1927487b7a00d6a3446cf7db79e14b2206d882c28611fa4d8289337cd75b4688120c73a2710947b908fde68a05a0777a170a14e85c7849462b3f5c3152cf0f3d91c5db93dc4d8f9e6b53708650dc375e6da3650b5ff4079971f6e3ef363382a16b8ae07b7307b5619092e4669dbca480d25738314135509eda68f712b9b09bdb485ea0914590b7ae01c2e34832f16c23c82b22b6ba550acfcede288a5237a06b3f5e09b6e5a0404544efe1474664b985f070121e82070a9f4513c2031a58a3d99e99284b812c0f047061139620890416c9defce02fa49cd1dd14b22df7250314ccb3dfd9827f892656911150cd9d921a8"}]}}}}}, 0x1c6)

13:45:11 executing program 4:
r0 = socket$inet6_dccp(0xa, 0x6, 0x0)
getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f0000000000), &(0x7f0000000040)=0xfffffffffffffe60)

13:45:11 executing program 2:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
syz_genetlink_get_family_id$tipc(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$NFT_BATCH(r1, &(0x7f00000015c0)={&(0x7f0000000300), 0xc, &(0x7f0000001580)={&(0x7f00000014c0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_PAYLOAD_CSUM_OFFSET={0x8, 0x7, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}]}, @NFT_MSG_DELSETELEM={0x1c, 0xe, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}]}], {0x14}}, 0x94}, 0x1, 0x0, 0x0, 0x1}, 0x1)
getsockname$packet(0xffffffffffffffff, &(0x7f0000001340), &(0x7f0000001380)=0x14)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r1, 0x0, 0x0)
sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, 0x0, 0x0)
getsockname(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001400)={&(0x7f0000000140), 0xc, &(0x7f0000000340)={&(0x7f0000000f00)=@newqdisc={0x1b8, 0x24, 0x0, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0xc}, {0x10, 0xffff}, {0xf, 0xfff2}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_RATE={0x6, 0x5, {0x8}}, @qdisc_kind_options=@q_choke={{0xa}, {0x18, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x4e0, 0x2, 0x6, 0x0, 0x1e, 0x2}}]}}, @qdisc_kind_options=@q_codel={{0xa}, {0x54, 0x2, [@TCA_CODEL_TARGET={0x8}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x4}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_LIMIT={0x8, 0x2, 0x2}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x80}, @TCA_CODEL_TARGET={0x8, 0x1, 0xb9}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_INTERVAL={0x8, 0x3, 0x7}, @TCA_CODEL_LIMIT={0x8, 0x2, 0x5}]}}, @TCA_STAB={0xf8, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x8, 0xc000, 0x9, 0x1, 0x80000001, 0x4, 0xa}}, {0x18, 0x2, [0x3, 0x4, 0x3, 0xff, 0x200, 0xfe01, 0x7, 0x8, 0x0, 0x2]}}, {{0x1c, 0x1, {0x0, 0x20, 0x1, 0xfc000, 0x1}}, {0x4}}, {{0x1c, 0x1, {0x3, 0x11, 0x100, 0x5, 0x0, 0x2dd, 0x7fff, 0x4}}, {0xc, 0x2, [0x6, 0x100, 0x2, 0x71]}}, {{0x1c, 0x1, {0x0, 0x40, 0x5, 0x3, 0x2}}, {0x4}}, {{0x1c, 0x1, {0x4, 0x8, 0x1ff, 0x3ff, 0x2, 0x5, 0x9, 0x5}}, {0xe, 0x2, [0x1, 0x1, 0xb41, 0x0, 0x8]}}, {{0x1c, 0x1, {0x9, 0x3f, 0x4, 0x3, 0x0, 0x4, 0x9, 0x5}}, {0xe, 0x2, [0x0, 0x0, 0x5ca, 0xfff, 0xfffb]}}]}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x81}]}, 0x1b8}, 0x1, 0x0, 0x0, 0x20000110}, 0x800)
connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10)
writev(r2, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1)
recvmmsg(r2, &(0x7f0000003e40)=[{{0x0, 0x3, 0x0, 0x0, &(0x7f00000035c0)=""/241, 0xf1}}, {{&(0x7f00000036c0)=@un=@abs, 0x80, &(0x7f0000003780)=[{&(0x7f0000003740)=""/4, 0x7ffff}], 0x1, &(0x7f00000037c0)=""/236, 0xec}}, {{0x0, 0x0, &(0x7f0000003bc0)=[{0x0, 0xe00000000000000}, {&(0x7f0000003a00)=""/190, 0xbe}, {&(0x7f0000003ac0)=""/131, 0x83}, {0x0}], 0x4, &(0x7f0000003c00)=""/73, 0x49}}, {{&(0x7f0000003c80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, 0x0, 0x0, &(0x7f0000003e00)=""/48, 0x30}}], 0x4, 0x40000121, 0x0)
shutdown(r2, 0x0)

13:45:11 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$inet_mreqn(r0, 0x88, 0xa, &(0x7f0000001a00)={@rand_addr, @remote}, 0xc)

[ 2226.726861][T22005] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'.
13:45:11 executing program 4:
bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x6}, 0x48)

13:45:12 executing program 4:
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(0xffffffffffffffff, 0x3ba0, &(0x7f0000000000)={0x38})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(0xffffffffffffffff, 0x3ba0, &(0x7f0000000040)={0x38})
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cpuacct.stat\x00', 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_IOAS_IOVA_RANGES(r0, 0x3b84, &(0x7f0000000180)={0x20, 0x0, 0x5, 0x0, &(0x7f0000000100)=[{}, {}, {}, {}, {}]})
openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000200), 0x14f002, 0x0)
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r2, 0x3ba0, &(0x7f0000000240)={0x38, 0x2, r1})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000280)={0x38, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1})
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r3=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r2, 0x3ba0, &(0x7f0000000300)={0x38, 0x5, r3, 0x0, 0xffffffffffffffff, 0x1})
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000340)={0x0, 0xfff}, 0x8)
ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000380)={0xc})
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000007c0)={0xffffffffffffffff, 0xe0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000500)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000580)=[0x0, 0x0], 0x0, 0x8, &(0x7f00000005c0)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000600), &(0x7f0000000640), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000680)}}, 0x10)
r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000bc0), 0x400, 0x0)
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r4, 0x3ba0, &(0x7f0000000c40)={0x38})

13:45:12 executing program 0:
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000080), &(0x7f0000000100)=0xc)

13:45:12 executing program 2:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
syz_genetlink_get_family_id$tipc(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$NFT_BATCH(r1, &(0x7f00000015c0)={&(0x7f0000000300), 0xc, &(0x7f0000001580)={&(0x7f00000014c0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_PAYLOAD_CSUM_OFFSET={0x8, 0x7, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}]}, @NFT_MSG_DELSETELEM={0x1c, 0xe, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}]}], {0x14}}, 0x94}, 0x1, 0x0, 0x0, 0x1}, 0x1)
getsockname$packet(0xffffffffffffffff, &(0x7f0000001340), &(0x7f0000001380)=0x14)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r1, 0x0, 0x0)
sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, 0x0, 0x0)
getsockname(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001400)={&(0x7f0000000140), 0xc, &(0x7f0000000340)={&(0x7f0000000f00)=@newqdisc={0x1b8, 0x24, 0x0, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0xc}, {0x10, 0xffff}, {0xf, 0xfff2}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_RATE={0x6, 0x5, {0x8}}, @qdisc_kind_options=@q_choke={{0xa}, {0x18, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x4e0, 0x2, 0x6, 0x0, 0x1e, 0x2}}]}}, @qdisc_kind_options=@q_codel={{0xa}, {0x54, 0x2, [@TCA_CODEL_TARGET={0x8}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x4}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_LIMIT={0x8, 0x2, 0x2}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x80}, @TCA_CODEL_TARGET={0x8, 0x1, 0xb9}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_INTERVAL={0x8, 0x3, 0x7}, @TCA_CODEL_LIMIT={0x8, 0x2, 0x5}]}}, @TCA_STAB={0xf8, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x8, 0xc000, 0x9, 0x1, 0x80000001, 0x4, 0xa}}, {0x18, 0x2, [0x3, 0x4, 0x3, 0xff, 0x200, 0xfe01, 0x7, 0x8, 0x0, 0x2]}}, {{0x1c, 0x1, {0x0, 0x20, 0x1, 0xfc000, 0x1}}, {0x4}}, {{0x1c, 0x1, {0x3, 0x11, 0x100, 0x5, 0x0, 0x2dd, 0x7fff, 0x4}}, {0xc, 0x2, [0x6, 0x100, 0x2, 0x71]}}, {{0x1c, 0x1, {0x0, 0x40, 0x5, 0x3, 0x2}}, {0x4}}, {{0x1c, 0x1, {0x4, 0x8, 0x1ff, 0x3ff, 0x2, 0x5, 0x9, 0x5}}, {0xe, 0x2, [0x1, 0x1, 0xb41, 0x0, 0x8]}}, {{0x1c, 0x1, {0x9, 0x3f, 0x4, 0x3, 0x0, 0x4, 0x9, 0x5}}, {0xe, 0x2, [0x0, 0x0, 0x5ca, 0xfff, 0xfffb]}}]}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x81}]}, 0x1b8}, 0x1, 0x0, 0x0, 0x20000110}, 0x800)
connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10)
writev(r2, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1)
recvmmsg(r2, &(0x7f0000003e40)=[{{0x0, 0x3, 0x0, 0x0, &(0x7f00000035c0)=""/241, 0xf1}}, {{&(0x7f00000036c0)=@un=@abs, 0x80, &(0x7f0000003780)=[{&(0x7f0000003740)=""/4, 0x7ffff}], 0x1, &(0x7f00000037c0)=""/236, 0xec}}, {{0x0, 0x0, &(0x7f0000003bc0)=[{0x0, 0xe00000000000000}, {&(0x7f0000003a00)=""/190, 0xbe}, {&(0x7f0000003ac0)=""/131, 0x83}, {0x0}], 0x4, &(0x7f0000003c00)=""/73, 0x49}}, {{&(0x7f0000003c80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, 0x0, 0x0, &(0x7f0000003e00)=""/48, 0x30}}], 0x4, 0x40000121, 0x0)
shutdown(r2, 0x0)

[ 2227.277473][ T1243] ieee802154 phy0 wpan0: encryption failed: -22
[ 2227.284258][ T1243] ieee802154 phy1 wpan1: encryption failed: -22
13:45:12 executing program 5:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, 0x0)
write$tun(r0, &(0x7f0000000240)={@val={0x0, 0x86dd}, @val={0x5, 0x0, 0x0, 0x0, 0x54}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "000003", 0x190, 0x3a, 0x0, @empty, @mcast2, {[@routing={0x0, 0x2, 0x0, 0x0, 0x0, [@empty]}], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x0, "ee7b615d"}, {}, {0x2b, 0x3, "6f8c008275021d683910c309293188a7c747eb2278d2794784"}, {0x0, 0x28, "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"}]}}}}}, 0x1c6)

13:45:12 executing program 4:
r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000008c0), 0x0, 0x0)
close$fd_v4l2_buffer(r0)

13:45:12 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r1)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400ee5c99f8435ecde50a0412", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x1, 0x803, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="50000000100001040000ff0f0000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e00000000180002800c0002001c0000001b000000060001000100000008000500", @ANYRES32=r5], 0x50}}, 0x0)
r6 = socket(0x1, 0x803, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080))
r8 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x1e}}]}}}, @IFLA_LINK={0x8, 0x5, r7}]}, 0x50}}, 0x0)
r9 = socket(0x1, 0x803, 0x0)
getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000540)=ANY=[@ANYBLOB="20000000110003040000007bb000000000000000", @ANYRES32=r10], 0x20}}, 0x0)

13:45:12 executing program 2:
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
syz_genetlink_get_family_id$tipc(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$NFT_BATCH(r0, &(0x7f00000015c0)={&(0x7f0000000300), 0xc, &(0x7f0000001580)={&(0x7f00000014c0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_PAYLOAD_CSUM_OFFSET={0x8, 0x7, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}]}, @NFT_MSG_DELSETELEM={0x1c, 0xe, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}]}], {0x14}}, 0x94}, 0x1, 0x0, 0x0, 0x1}, 0x1)
getsockname$packet(0xffffffffffffffff, &(0x7f0000001340), &(0x7f0000001380)=0x14)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, 0x0, 0x0)
sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, 0x0, 0x0)
getsockname(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001400)={&(0x7f0000000140), 0xc, &(0x7f0000000340)={&(0x7f0000000f00)=@newqdisc={0x1b8, 0x24, 0x0, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0xc}, {0x10, 0xffff}, {0xf, 0xfff2}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_RATE={0x6, 0x5, {0x8}}, @qdisc_kind_options=@q_choke={{0xa}, {0x18, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x4e0, 0x2, 0x6, 0x0, 0x1e, 0x2}}]}}, @qdisc_kind_options=@q_codel={{0xa}, {0x54, 0x2, [@TCA_CODEL_TARGET={0x8}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x4}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_LIMIT={0x8, 0x2, 0x2}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x80}, @TCA_CODEL_TARGET={0x8, 0x1, 0xb9}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_INTERVAL={0x8, 0x3, 0x7}, @TCA_CODEL_LIMIT={0x8, 0x2, 0x5}]}}, @TCA_STAB={0xf8, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x8, 0xc000, 0x9, 0x1, 0x80000001, 0x4, 0xa}}, {0x18, 0x2, [0x3, 0x4, 0x3, 0xff, 0x200, 0xfe01, 0x7, 0x8, 0x0, 0x2]}}, {{0x1c, 0x1, {0x0, 0x20, 0x1, 0xfc000, 0x1}}, {0x4}}, {{0x1c, 0x1, {0x3, 0x11, 0x100, 0x5, 0x0, 0x2dd, 0x7fff, 0x4}}, {0xc, 0x2, [0x6, 0x100, 0x2, 0x71]}}, {{0x1c, 0x1, {0x0, 0x40, 0x5, 0x3, 0x2}}, {0x4}}, {{0x1c, 0x1, {0x4, 0x8, 0x1ff, 0x3ff, 0x2, 0x5, 0x9, 0x5}}, {0xe, 0x2, [0x1, 0x1, 0xb41, 0x0, 0x8]}}, {{0x1c, 0x1, {0x9, 0x3f, 0x4, 0x3, 0x0, 0x4, 0x9, 0x5}}, {0xe, 0x2, [0x0, 0x0, 0x5ca, 0xfff, 0xfffb]}}]}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x81}]}, 0x1b8}, 0x1, 0x0, 0x0, 0x20000110}, 0x800)
connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10)
writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1)
recvmmsg(r1, &(0x7f0000003e40)=[{{0x0, 0x3, 0x0, 0x0, &(0x7f00000035c0)=""/241, 0xf1}}, {{&(0x7f00000036c0)=@un=@abs, 0x80, &(0x7f0000003780)=[{&(0x7f0000003740)=""/4, 0x7ffff}], 0x1, &(0x7f00000037c0)=""/236, 0xec}}, {{0x0, 0x0, &(0x7f0000003bc0)=[{0x0, 0xe00000000000000}, {&(0x7f0000003a00)=""/190, 0xbe}, {&(0x7f0000003ac0)=""/131, 0x83}, {0x0}], 0x4, &(0x7f0000003c00)=""/73, 0x49}}, {{&(0x7f0000003c80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, 0x0, 0x0, &(0x7f0000003e00)=""/48, 0x30}}], 0x4, 0x40000121, 0x0)
shutdown(r1, 0x0)

13:45:12 executing program 0:
arch_prctl$ARCH_GET_XCOMP_PERM(0x4003, &(0x7f00000000c0))

13:45:12 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, 0x0, 0x0)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f000000c380)='/proc/crypto\x00', 0x0, 0x0)
read$FUSE(r3, &(0x7f0000000200)={0x2020}, 0x2020)
execve(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000280)=[0x0, 0x0], &(0x7f0000000380)=[&(0x7f00000002c0)='*$%}\xce*\x00', &(0x7f0000000300)='\x00'])

13:45:12 executing program 4:
arch_prctl$ARCH_GET_XCOMP_PERM(0x5005, &(0x7f00000000c0))

[ 2227.814296][T22032] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'.
13:45:12 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x14}, 0x14}}, 0x0)
syz_genetlink_get_family_id$devlink(&(0x7f00000002c0), 0xffffffffffffffff)

13:45:13 executing program 2:
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
syz_genetlink_get_family_id$tipc(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$NFT_BATCH(r0, &(0x7f00000015c0)={&(0x7f0000000300), 0xc, &(0x7f0000001580)={&(0x7f00000014c0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_PAYLOAD_CSUM_OFFSET={0x8, 0x7, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}]}, @NFT_MSG_DELSETELEM={0x1c, 0xe, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}]}], {0x14}}, 0x94}, 0x1, 0x0, 0x0, 0x1}, 0x1)
getsockname$packet(0xffffffffffffffff, &(0x7f0000001340), &(0x7f0000001380)=0x14)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, 0x0, 0x0)
sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, 0x0, 0x0)
getsockname(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001400)={&(0x7f0000000140), 0xc, &(0x7f0000000340)={&(0x7f0000000f00)=@newqdisc={0x1b8, 0x24, 0x0, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0xc}, {0x10, 0xffff}, {0xf, 0xfff2}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_RATE={0x6, 0x5, {0x8}}, @qdisc_kind_options=@q_choke={{0xa}, {0x18, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x4e0, 0x2, 0x6, 0x0, 0x1e, 0x2}}]}}, @qdisc_kind_options=@q_codel={{0xa}, {0x54, 0x2, [@TCA_CODEL_TARGET={0x8}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x4}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_LIMIT={0x8, 0x2, 0x2}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x80}, @TCA_CODEL_TARGET={0x8, 0x1, 0xb9}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_INTERVAL={0x8, 0x3, 0x7}, @TCA_CODEL_LIMIT={0x8, 0x2, 0x5}]}}, @TCA_STAB={0xf8, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x8, 0xc000, 0x9, 0x1, 0x80000001, 0x4, 0xa}}, {0x18, 0x2, [0x3, 0x4, 0x3, 0xff, 0x200, 0xfe01, 0x7, 0x8, 0x0, 0x2]}}, {{0x1c, 0x1, {0x0, 0x20, 0x1, 0xfc000, 0x1}}, {0x4}}, {{0x1c, 0x1, {0x3, 0x11, 0x100, 0x5, 0x0, 0x2dd, 0x7fff, 0x4}}, {0xc, 0x2, [0x6, 0x100, 0x2, 0x71]}}, {{0x1c, 0x1, {0x0, 0x40, 0x5, 0x3, 0x2}}, {0x4}}, {{0x1c, 0x1, {0x4, 0x8, 0x1ff, 0x3ff, 0x2, 0x5, 0x9, 0x5}}, {0xe, 0x2, [0x1, 0x1, 0xb41, 0x0, 0x8]}}, {{0x1c, 0x1, {0x9, 0x3f, 0x4, 0x3, 0x0, 0x4, 0x9, 0x5}}, {0xe, 0x2, [0x0, 0x0, 0x5ca, 0xfff, 0xfffb]}}]}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x81}]}, 0x1b8}, 0x1, 0x0, 0x0, 0x20000110}, 0x800)
connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10)
writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1)
recvmmsg(r1, &(0x7f0000003e40)=[{{0x0, 0x3, 0x0, 0x0, &(0x7f00000035c0)=""/241, 0xf1}}, {{&(0x7f00000036c0)=@un=@abs, 0x80, &(0x7f0000003780)=[{&(0x7f0000003740)=""/4, 0x7ffff}], 0x1, &(0x7f00000037c0)=""/236, 0xec}}, {{0x0, 0x0, &(0x7f0000003bc0)=[{0x0, 0xe00000000000000}, {&(0x7f0000003a00)=""/190, 0xbe}, {&(0x7f0000003ac0)=""/131, 0x83}, {0x0}], 0x4, &(0x7f0000003c00)=""/73, 0x49}}, {{&(0x7f0000003c80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, 0x0, 0x0, &(0x7f0000003e00)=""/48, 0x30}}], 0x4, 0x40000121, 0x0)
shutdown(r1, 0x0)

13:45:13 executing program 4:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0)
ioctl$TUNGETFEATURES(r0, 0x800454cf, &(0x7f0000000500))

13:45:13 executing program 0:
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000480)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x2, [@int={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7f}]}}, 0x0, 0x2a}, 0x20)

13:45:13 executing program 5:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, 0x0)
write$tun(r0, &(0x7f0000000240)={@val={0x0, 0x86dd}, @val={0x5, 0x0, 0x0, 0x0, 0x54}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "000003", 0x190, 0x3a, 0x0, @empty, @mcast2, {[@routing={0x0, 0x2, 0x0, 0x0, 0x0, [@empty]}], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x0, "ee7b615d"}, {}, {0x2b, 0x3, "6f8c008275021d683910c309293188a7c747eb2278d2794784"}, {0x0, 0x28, "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"}]}}}}}, 0x1c6)

13:45:13 executing program 2:
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
syz_genetlink_get_family_id$tipc(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$NFT_BATCH(r0, &(0x7f00000015c0)={&(0x7f0000000300), 0xc, &(0x7f0000001580)={&(0x7f00000014c0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_PAYLOAD_CSUM_OFFSET={0x8, 0x7, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}]}, @NFT_MSG_DELSETELEM={0x1c, 0xe, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}]}], {0x14}}, 0x94}, 0x1, 0x0, 0x0, 0x1}, 0x1)
getsockname$packet(0xffffffffffffffff, &(0x7f0000001340), &(0x7f0000001380)=0x14)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, 0x0, 0x0)
sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, 0x0, 0x0)
getsockname(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001400)={&(0x7f0000000140), 0xc, &(0x7f0000000340)={&(0x7f0000000f00)=@newqdisc={0x1b8, 0x24, 0x0, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0xc}, {0x10, 0xffff}, {0xf, 0xfff2}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_RATE={0x6, 0x5, {0x8}}, @qdisc_kind_options=@q_choke={{0xa}, {0x18, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x4e0, 0x2, 0x6, 0x0, 0x1e, 0x2}}]}}, @qdisc_kind_options=@q_codel={{0xa}, {0x54, 0x2, [@TCA_CODEL_TARGET={0x8}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x4}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_LIMIT={0x8, 0x2, 0x2}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x80}, @TCA_CODEL_TARGET={0x8, 0x1, 0xb9}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_INTERVAL={0x8, 0x3, 0x7}, @TCA_CODEL_LIMIT={0x8, 0x2, 0x5}]}}, @TCA_STAB={0xf8, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x8, 0xc000, 0x9, 0x1, 0x80000001, 0x4, 0xa}}, {0x18, 0x2, [0x3, 0x4, 0x3, 0xff, 0x200, 0xfe01, 0x7, 0x8, 0x0, 0x2]}}, {{0x1c, 0x1, {0x0, 0x20, 0x1, 0xfc000, 0x1}}, {0x4}}, {{0x1c, 0x1, {0x3, 0x11, 0x100, 0x5, 0x0, 0x2dd, 0x7fff, 0x4}}, {0xc, 0x2, [0x6, 0x100, 0x2, 0x71]}}, {{0x1c, 0x1, {0x0, 0x40, 0x5, 0x3, 0x2}}, {0x4}}, {{0x1c, 0x1, {0x4, 0x8, 0x1ff, 0x3ff, 0x2, 0x5, 0x9, 0x5}}, {0xe, 0x2, [0x1, 0x1, 0xb41, 0x0, 0x8]}}, {{0x1c, 0x1, {0x9, 0x3f, 0x4, 0x3, 0x0, 0x4, 0x9, 0x5}}, {0xe, 0x2, [0x0, 0x0, 0x5ca, 0xfff, 0xfffb]}}]}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x81}]}, 0x1b8}, 0x1, 0x0, 0x0, 0x20000110}, 0x800)
connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10)
writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1)
recvmmsg(r1, &(0x7f0000003e40)=[{{0x0, 0x3, 0x0, 0x0, &(0x7f00000035c0)=""/241, 0xf1}}, {{&(0x7f00000036c0)=@un=@abs, 0x80, &(0x7f0000003780)=[{&(0x7f0000003740)=""/4, 0x7ffff}], 0x1, &(0x7f00000037c0)=""/236, 0xec}}, {{0x0, 0x0, &(0x7f0000003bc0)=[{0x0, 0xe00000000000000}, {&(0x7f0000003a00)=""/190, 0xbe}, {&(0x7f0000003ac0)=""/131, 0x83}, {0x0}], 0x4, &(0x7f0000003c00)=""/73, 0x49}}, {{&(0x7f0000003c80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, 0x0, 0x0, &(0x7f0000003e00)=""/48, 0x30}}], 0x4, 0x40000121, 0x0)
shutdown(r1, 0x0)

13:45:13 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r1)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400ee5c99f8435ecde50a0412", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x1, 0x803, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="50000000100001040000ff0f0000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e00000000180002800c0002001c0000001b000000060001000100000008000500", @ANYRES32=r5], 0x50}}, 0x0)
r6 = socket(0x1, 0x803, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080))
r8 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x1e}}]}}}, @IFLA_LINK={0x8, 0x5, r7}]}, 0x50}}, 0x0)
r9 = socket(0x1, 0x803, 0x0)
getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000540)=ANY=[@ANYBLOB="20000000110003040000007bb000000000000000", @ANYRES32=r10], 0x20}}, 0x0)

13:45:13 executing program 4:
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000016c0)={&(0x7f00000015c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@array]}}, 0x0, 0x32}, 0x20)

13:45:13 executing program 0:
r0 = socket$unix(0x1, 0x5, 0x0)
connect$unix(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="08012e2f6669"], 0xa)

13:45:13 executing program 4:
openat$tun(0xffffffffffffff9c, &(0x7f00000014c0), 0x40100, 0x0)

[ 2228.462864][T22060] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'.
13:45:14 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f000000c380)='/proc/crypto\x00', 0x0, 0x0)
read$FUSE(r2, &(0x7f0000000200)={0x2020}, 0x2020)
execve(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000280)=[0x0, 0x0], &(0x7f0000000380)=[&(0x7f00000002c0)='*$%}\xce*\x00', &(0x7f0000000300)='\x00'])

13:45:14 executing program 2:
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, 0x0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
syz_genetlink_get_family_id$tipc(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$NFT_BATCH(r1, &(0x7f00000015c0)={&(0x7f0000000300), 0xc, &(0x7f0000001580)={&(0x7f00000014c0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_PAYLOAD_CSUM_OFFSET={0x8, 0x7, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}]}, @NFT_MSG_DELSETELEM={0x1c, 0xe, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}]}], {0x14}}, 0x94}, 0x1, 0x0, 0x0, 0x1}, 0x1)
getsockname$packet(0xffffffffffffffff, &(0x7f0000001340), &(0x7f0000001380)=0x14)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r1, 0x0, 0x0)
sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, 0x0, 0x0)
getsockname(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001400)={&(0x7f0000000140), 0xc, &(0x7f0000000340)={&(0x7f0000000f00)=@newqdisc={0x1b8, 0x24, 0x0, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0xc}, {0x10, 0xffff}, {0xf, 0xfff2}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_RATE={0x6, 0x5, {0x8}}, @qdisc_kind_options=@q_choke={{0xa}, {0x18, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x4e0, 0x2, 0x6, 0x0, 0x1e, 0x2}}]}}, @qdisc_kind_options=@q_codel={{0xa}, {0x54, 0x2, [@TCA_CODEL_TARGET={0x8}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x4}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_LIMIT={0x8, 0x2, 0x2}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x80}, @TCA_CODEL_TARGET={0x8, 0x1, 0xb9}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_INTERVAL={0x8, 0x3, 0x7}, @TCA_CODEL_LIMIT={0x8, 0x2, 0x5}]}}, @TCA_STAB={0xf8, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x8, 0xc000, 0x9, 0x1, 0x80000001, 0x4, 0xa}}, {0x18, 0x2, [0x3, 0x4, 0x3, 0xff, 0x200, 0xfe01, 0x7, 0x8, 0x0, 0x2]}}, {{0x1c, 0x1, {0x0, 0x20, 0x1, 0xfc000, 0x1}}, {0x4}}, {{0x1c, 0x1, {0x3, 0x11, 0x100, 0x5, 0x0, 0x2dd, 0x7fff, 0x4}}, {0xc, 0x2, [0x6, 0x100, 0x2, 0x71]}}, {{0x1c, 0x1, {0x0, 0x40, 0x5, 0x3, 0x2}}, {0x4}}, {{0x1c, 0x1, {0x4, 0x8, 0x1ff, 0x3ff, 0x2, 0x5, 0x9, 0x5}}, {0xe, 0x2, [0x1, 0x1, 0xb41, 0x0, 0x8]}}, {{0x1c, 0x1, {0x9, 0x3f, 0x4, 0x3, 0x0, 0x4, 0x9, 0x5}}, {0xe, 0x2, [0x0, 0x0, 0x5ca, 0xfff, 0xfffb]}}]}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x81}]}, 0x1b8}, 0x1, 0x0, 0x0, 0x20000110}, 0x800)
connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10)
writev(r2, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1)
recvmmsg(r2, &(0x7f0000003e40)=[{{0x0, 0x3, 0x0, 0x0, &(0x7f00000035c0)=""/241, 0xf1}}, {{&(0x7f00000036c0)=@un=@abs, 0x80, &(0x7f0000003780)=[{&(0x7f0000003740)=""/4, 0x7ffff}], 0x1, &(0x7f00000037c0)=""/236, 0xec}}, {{0x0, 0x0, &(0x7f0000003bc0)=[{0x0, 0xe00000000000000}, {&(0x7f0000003a00)=""/190, 0xbe}, {&(0x7f0000003ac0)=""/131, 0x83}, {0x0}], 0x4, &(0x7f0000003c00)=""/73, 0x49}}, {{&(0x7f0000003c80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, 0x0, 0x0, &(0x7f0000003e00)=""/48, 0x30}}], 0x4, 0x40000121, 0x0)
shutdown(r2, 0x0)

13:45:14 executing program 0:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_CIPSOV4_C_LIST(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000040)={&(0x7f0000000200)={0x14}, 0x14}}, 0x0)

13:45:14 executing program 5:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, 0x0)
write$tun(r0, &(0x7f0000000240)={@val={0x0, 0x86dd}, @val={0x5, 0x0, 0x0, 0x0, 0x54}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "000003", 0x190, 0x3a, 0x0, @empty, @mcast2, {[@routing={0x0, 0x2, 0x0, 0x0, 0x0, [@empty]}], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x0, "ee7b615d"}, {}, {0x2b, 0x3, "6f8c008275021d683910c309293188a7c747eb2278d2794784"}, {0x0, 0x28, "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"}]}}}}}, 0x1c6)

13:45:14 executing program 4:
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000016c0)={&(0x7f00000015c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x0, 0x4}]}]}}, 0x0, 0x2e, 0x0, 0x1}, 0x20)

13:45:14 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r1)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400ee5c99f8435ecde50a0412", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x1, 0x803, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="50000000100001040000ff0f0000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e00000000180002800c0002001c0000001b000000060001000100000008000500", @ANYRES32=r5], 0x50}}, 0x0)
r6 = socket(0x1, 0x803, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080))
r8 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x1e}}]}}}, @IFLA_LINK={0x8, 0x5, r7}]}, 0x50}}, 0x0)
r9 = socket(0x1, 0x803, 0x0)
getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000540)=ANY=[@ANYBLOB="20000000110003040000007bb000000000000000", @ANYRES32=r10], 0x20}}, 0x0)

[ 2229.195843][T22077] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'.
13:45:14 executing program 0:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10)

13:45:14 executing program 4:
bpf$BPF_PROG_TEST_RUN_LIVE(0x16, &(0x7f0000000180)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

13:45:14 executing program 2:
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, 0x0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
syz_genetlink_get_family_id$tipc(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$NFT_BATCH(r1, &(0x7f00000015c0)={&(0x7f0000000300), 0xc, &(0x7f0000001580)={&(0x7f00000014c0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_PAYLOAD_CSUM_OFFSET={0x8, 0x7, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}]}, @NFT_MSG_DELSETELEM={0x1c, 0xe, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}]}], {0x14}}, 0x94}, 0x1, 0x0, 0x0, 0x1}, 0x1)
getsockname$packet(0xffffffffffffffff, &(0x7f0000001340), &(0x7f0000001380)=0x14)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r1, 0x0, 0x0)
sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, 0x0, 0x0)
getsockname(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001400)={&(0x7f0000000140), 0xc, &(0x7f0000000340)={&(0x7f0000000f00)=@newqdisc={0x1b8, 0x24, 0x0, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0xc}, {0x10, 0xffff}, {0xf, 0xfff2}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_RATE={0x6, 0x5, {0x8}}, @qdisc_kind_options=@q_choke={{0xa}, {0x18, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x4e0, 0x2, 0x6, 0x0, 0x1e, 0x2}}]}}, @qdisc_kind_options=@q_codel={{0xa}, {0x54, 0x2, [@TCA_CODEL_TARGET={0x8}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x4}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_LIMIT={0x8, 0x2, 0x2}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x80}, @TCA_CODEL_TARGET={0x8, 0x1, 0xb9}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_INTERVAL={0x8, 0x3, 0x7}, @TCA_CODEL_LIMIT={0x8, 0x2, 0x5}]}}, @TCA_STAB={0xf8, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x8, 0xc000, 0x9, 0x1, 0x80000001, 0x4, 0xa}}, {0x18, 0x2, [0x3, 0x4, 0x3, 0xff, 0x200, 0xfe01, 0x7, 0x8, 0x0, 0x2]}}, {{0x1c, 0x1, {0x0, 0x20, 0x1, 0xfc000, 0x1}}, {0x4}}, {{0x1c, 0x1, {0x3, 0x11, 0x100, 0x5, 0x0, 0x2dd, 0x7fff, 0x4}}, {0xc, 0x2, [0x6, 0x100, 0x2, 0x71]}}, {{0x1c, 0x1, {0x0, 0x40, 0x5, 0x3, 0x2}}, {0x4}}, {{0x1c, 0x1, {0x4, 0x8, 0x1ff, 0x3ff, 0x2, 0x5, 0x9, 0x5}}, {0xe, 0x2, [0x1, 0x1, 0xb41, 0x0, 0x8]}}, {{0x1c, 0x1, {0x9, 0x3f, 0x4, 0x3, 0x0, 0x4, 0x9, 0x5}}, {0xe, 0x2, [0x0, 0x0, 0x5ca, 0xfff, 0xfffb]}}]}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x81}]}, 0x1b8}, 0x1, 0x0, 0x0, 0x20000110}, 0x800)
connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10)
writev(r2, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1)
recvmmsg(r2, &(0x7f0000003e40)=[{{0x0, 0x3, 0x0, 0x0, &(0x7f00000035c0)=""/241, 0xf1}}, {{&(0x7f00000036c0)=@un=@abs, 0x80, &(0x7f0000003780)=[{&(0x7f0000003740)=""/4, 0x7ffff}], 0x1, &(0x7f00000037c0)=""/236, 0xec}}, {{0x0, 0x0, &(0x7f0000003bc0)=[{0x0, 0xe00000000000000}, {&(0x7f0000003a00)=""/190, 0xbe}, {&(0x7f0000003ac0)=""/131, 0x83}, {0x0}], 0x4, &(0x7f0000003c00)=""/73, 0x49}}, {{&(0x7f0000003c80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, 0x0, 0x0, &(0x7f0000003e00)=""/48, 0x30}}], 0x4, 0x40000121, 0x0)
shutdown(r2, 0x0)

13:45:14 executing program 4:
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
listen(r0, 0x0)
bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @empty}, 0x10)

13:45:14 executing program 0:
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000480)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x2, [@int]}}, 0x0, 0x2a}, 0x20)

13:45:14 executing program 5:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(0xffffffffffffffff, &(0x7f0000000240)={@val={0x0, 0x86dd}, @val={0x5, 0x0, 0x0, 0x0, 0x54}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "000003", 0x190, 0x3a, 0x0, @empty, @mcast2, {[@routing={0x0, 0x2, 0x0, 0x0, 0x0, [@empty]}], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x0, "ee7b615d"}, {}, {0x2b, 0x3, "6f8c008275021d683910c309293188a7c747eb2278d2794784"}, {0x0, 0x28, "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"}]}}}}}, 0x1c6)

13:45:15 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f000000c380)='/proc/crypto\x00', 0x0, 0x0)
read$FUSE(r2, &(0x7f0000000200)={0x2020}, 0x2020)
execve(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000280)=[0x0, 0x0], &(0x7f0000000380)=[&(0x7f00000002c0)='*$%}\xce*\x00', &(0x7f0000000300)='\x00'])

13:45:15 executing program 2:
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, 0x0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
syz_genetlink_get_family_id$tipc(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$NFT_BATCH(r1, &(0x7f00000015c0)={&(0x7f0000000300), 0xc, &(0x7f0000001580)={&(0x7f00000014c0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_PAYLOAD_CSUM_OFFSET={0x8, 0x7, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}]}, @NFT_MSG_DELSETELEM={0x1c, 0xe, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}]}], {0x14}}, 0x94}, 0x1, 0x0, 0x0, 0x1}, 0x1)
getsockname$packet(0xffffffffffffffff, &(0x7f0000001340), &(0x7f0000001380)=0x14)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r1, 0x0, 0x0)
sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, 0x0, 0x0)
getsockname(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001400)={&(0x7f0000000140), 0xc, &(0x7f0000000340)={&(0x7f0000000f00)=@newqdisc={0x1b8, 0x24, 0x0, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0xc}, {0x10, 0xffff}, {0xf, 0xfff2}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_RATE={0x6, 0x5, {0x8}}, @qdisc_kind_options=@q_choke={{0xa}, {0x18, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x4e0, 0x2, 0x6, 0x0, 0x1e, 0x2}}]}}, @qdisc_kind_options=@q_codel={{0xa}, {0x54, 0x2, [@TCA_CODEL_TARGET={0x8}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x4}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_LIMIT={0x8, 0x2, 0x2}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x80}, @TCA_CODEL_TARGET={0x8, 0x1, 0xb9}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_INTERVAL={0x8, 0x3, 0x7}, @TCA_CODEL_LIMIT={0x8, 0x2, 0x5}]}}, @TCA_STAB={0xf8, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x8, 0xc000, 0x9, 0x1, 0x80000001, 0x4, 0xa}}, {0x18, 0x2, [0x3, 0x4, 0x3, 0xff, 0x200, 0xfe01, 0x7, 0x8, 0x0, 0x2]}}, {{0x1c, 0x1, {0x0, 0x20, 0x1, 0xfc000, 0x1}}, {0x4}}, {{0x1c, 0x1, {0x3, 0x11, 0x100, 0x5, 0x0, 0x2dd, 0x7fff, 0x4}}, {0xc, 0x2, [0x6, 0x100, 0x2, 0x71]}}, {{0x1c, 0x1, {0x0, 0x40, 0x5, 0x3, 0x2}}, {0x4}}, {{0x1c, 0x1, {0x4, 0x8, 0x1ff, 0x3ff, 0x2, 0x5, 0x9, 0x5}}, {0xe, 0x2, [0x1, 0x1, 0xb41, 0x0, 0x8]}}, {{0x1c, 0x1, {0x9, 0x3f, 0x4, 0x3, 0x0, 0x4, 0x9, 0x5}}, {0xe, 0x2, [0x0, 0x0, 0x5ca, 0xfff, 0xfffb]}}]}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x81}]}, 0x1b8}, 0x1, 0x0, 0x0, 0x20000110}, 0x800)
connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10)
writev(r2, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1)
recvmmsg(r2, &(0x7f0000003e40)=[{{0x0, 0x3, 0x0, 0x0, &(0x7f00000035c0)=""/241, 0xf1}}, {{&(0x7f00000036c0)=@un=@abs, 0x80, &(0x7f0000003780)=[{&(0x7f0000003740)=""/4, 0x7ffff}], 0x1, &(0x7f00000037c0)=""/236, 0xec}}, {{0x0, 0x0, &(0x7f0000003bc0)=[{0x0, 0xe00000000000000}, {&(0x7f0000003a00)=""/190, 0xbe}, {&(0x7f0000003ac0)=""/131, 0x83}, {0x0}], 0x4, &(0x7f0000003c00)=""/73, 0x49}}, {{&(0x7f0000003c80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, 0x0, 0x0, &(0x7f0000003e00)=""/48, 0x30}}], 0x4, 0x40000121, 0x0)
shutdown(r2, 0x0)

13:45:15 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r1)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400ee5c99f8435ecde50a0412", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x1, 0x803, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="50000000100001040000ff0f0000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e00000000180002800c0002001c0000001b000000060001000100000008000500", @ANYRES32=r5], 0x50}}, 0x0)
r6 = socket(0x1, 0x803, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080))
socket(0x10, 0x3, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
r8 = socket(0x1, 0x803, 0x0)
getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000540)=ANY=[@ANYBLOB="20000000110003040000007bb000000000000000", @ANYRES32=r9], 0x20}}, 0x0)

13:45:15 executing program 4:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x2, 0x6, 0x5e8, 0x310, 0x1b0, 0x310, 0x3f8, 0xd0, 0x518, 0x518, 0x518, 0x518, 0x518, 0x6, 0x0, {[{{@ipv6={@mcast2, @private1={0xfc, 0x1, '\x00', 0x9c}, [], [], 'macvlan1\x00', 'erspan0\x00'}, 0x0, 0xa8, 0xd0, 0x0, {0x7a00000000000000}}, @HL={0x28}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff}, {0xffffffffffffffff}}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast2}, @remote, [], [], '\x00', 'bond_slave_0\x00'}, 0x0, 0x138, 0x160, 0x0, {}, [@common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @dev, @local, @empty}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@eui64={{0x28}}]}, @unspec=@CHECKSUM={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x648)

13:45:15 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f00000012c0)={0x0, @rand_addr, @loopback}, 0xc)

13:45:15 executing program 5:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(0xffffffffffffffff, &(0x7f0000000240)={@val={0x0, 0x86dd}, @val={0x5, 0x0, 0x0, 0x0, 0x54}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "000003", 0x190, 0x3a, 0x0, @empty, @mcast2, {[@routing={0x0, 0x2, 0x0, 0x0, 0x0, [@empty]}], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x0, "ee7b615d"}, {}, {0x2b, 0x3, "6f8c008275021d683910c309293188a7c747eb2278d2794784"}, {0x0, 0x28, "4429118927041312255133e4d2b8b863b5f5b4ace38952e94c581c85d2d86844f548415db4dbf1992868a2e15095b531ce55d4620ec637afdcc990a4d6bfecb289917d24b31a2ddeb64383b176b823cc203ec1927487b7a00d6a3446cf7db79e14b2206d882c28611fa4d8289337cd75b4688120c73a2710947b908fde68a05a0777a170a14e85c7849462b3f5c3152cf0f3d91c5db93dc4d8f9e6b53708650dc375e6da3650b5ff4079971f6e3ef363382a16b8ae07b7307b5619092e4669dbca480d25738314135509eda68f712b9b09bdb485ea0914590b7ae01c2e34832f16c23c82b22b6ba550acfcede288a5237a06b3f5e09b6e5a0404544efe1474664b985f070121e82070a9f4513c2031a58a3d99e99284b812c0f047061139620890416c9defce02fa49cd1dd14b22df7250314ccb3dfd9827f892656911150cd9d921a8"}]}}}}}, 0x1c6)

[ 2230.142912][T22100] Cannot find map_set index 0 as target
13:45:15 executing program 0:
bpf$BPF_PROG_TEST_RUN_LIVE(0x1c, 0x0, 0x0)

13:45:15 executing program 2:
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
syz_genetlink_get_family_id$tipc(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$NFT_BATCH(r1, &(0x7f00000015c0)={&(0x7f0000000300), 0xc, &(0x7f0000001580)={&(0x7f00000014c0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_PAYLOAD_CSUM_OFFSET={0x8, 0x7, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}]}, @NFT_MSG_DELSETELEM={0x1c, 0xe, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}]}], {0x14}}, 0x94}, 0x1, 0x0, 0x0, 0x1}, 0x1)
getsockname$packet(0xffffffffffffffff, &(0x7f0000001340), &(0x7f0000001380)=0x14)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r1, 0x0, 0x0)
sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, 0x0, 0x0)
getsockname(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001400)={&(0x7f0000000140), 0xc, &(0x7f0000000340)={&(0x7f0000000f00)=@newqdisc={0x1b8, 0x24, 0x0, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0xc}, {0x10, 0xffff}, {0xf, 0xfff2}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_RATE={0x6, 0x5, {0x8}}, @qdisc_kind_options=@q_choke={{0xa}, {0x18, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x4e0, 0x2, 0x6, 0x0, 0x1e, 0x2}}]}}, @qdisc_kind_options=@q_codel={{0xa}, {0x54, 0x2, [@TCA_CODEL_TARGET={0x8}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x4}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_LIMIT={0x8, 0x2, 0x2}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x80}, @TCA_CODEL_TARGET={0x8, 0x1, 0xb9}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_INTERVAL={0x8, 0x3, 0x7}, @TCA_CODEL_LIMIT={0x8, 0x2, 0x5}]}}, @TCA_STAB={0xf8, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x8, 0xc000, 0x9, 0x1, 0x80000001, 0x4, 0xa}}, {0x18, 0x2, [0x3, 0x4, 0x3, 0xff, 0x200, 0xfe01, 0x7, 0x8, 0x0, 0x2]}}, {{0x1c, 0x1, {0x0, 0x20, 0x1, 0xfc000, 0x1}}, {0x4}}, {{0x1c, 0x1, {0x3, 0x11, 0x100, 0x5, 0x0, 0x2dd, 0x7fff, 0x4}}, {0xc, 0x2, [0x6, 0x100, 0x2, 0x71]}}, {{0x1c, 0x1, {0x0, 0x40, 0x5, 0x3, 0x2}}, {0x4}}, {{0x1c, 0x1, {0x4, 0x8, 0x1ff, 0x3ff, 0x2, 0x5, 0x9, 0x5}}, {0xe, 0x2, [0x1, 0x1, 0xb41, 0x0, 0x8]}}, {{0x1c, 0x1, {0x9, 0x3f, 0x4, 0x3, 0x0, 0x4, 0x9, 0x5}}, {0xe, 0x2, [0x0, 0x0, 0x5ca, 0xfff, 0xfffb]}}]}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x81}]}, 0x1b8}, 0x1, 0x0, 0x0, 0x20000110}, 0x800)
connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10)
writev(r2, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1)
recvmmsg(r2, &(0x7f0000003e40)=[{{0x0, 0x3, 0x0, 0x0, &(0x7f00000035c0)=""/241, 0xf1}}, {{&(0x7f00000036c0)=@un=@abs, 0x80, &(0x7f0000003780)=[{&(0x7f0000003740)=""/4, 0x7ffff}], 0x1, &(0x7f00000037c0)=""/236, 0xec}}, {{0x0, 0x0, &(0x7f0000003bc0)=[{0x0, 0xe00000000000000}, {&(0x7f0000003a00)=""/190, 0xbe}, {&(0x7f0000003ac0)=""/131, 0x83}, {0x0}], 0x4, &(0x7f0000003c00)=""/73, 0x49}}, {{&(0x7f0000003c80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, 0x0, 0x0, &(0x7f0000003e00)=""/48, 0x30}}], 0x4, 0x40000121, 0x0)
shutdown(r2, 0x0)

13:45:15 executing program 4:
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4)
connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0), 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @empty}, 0x10)

[ 2230.205515][T22105] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'.
13:45:15 executing program 0:
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[@ANYBLOB="9feb010018"], 0x0, 0x7b}, 0x20)

13:45:15 executing program 2:
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
syz_genetlink_get_family_id$tipc(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$NFT_BATCH(r1, &(0x7f00000015c0)={&(0x7f0000000300), 0xc, &(0x7f0000001580)={&(0x7f00000014c0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_PAYLOAD_CSUM_OFFSET={0x8, 0x7, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}]}, @NFT_MSG_DELSETELEM={0x1c, 0xe, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}]}], {0x14}}, 0x94}, 0x1, 0x0, 0x0, 0x1}, 0x1)
getsockname$packet(0xffffffffffffffff, &(0x7f0000001340), &(0x7f0000001380)=0x14)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r1, 0x0, 0x0)
sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, 0x0, 0x0)
getsockname(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001400)={&(0x7f0000000140), 0xc, &(0x7f0000000340)={&(0x7f0000000f00)=@newqdisc={0x1b8, 0x24, 0x0, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0xc}, {0x10, 0xffff}, {0xf, 0xfff2}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_RATE={0x6, 0x5, {0x8}}, @qdisc_kind_options=@q_choke={{0xa}, {0x18, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x4e0, 0x2, 0x6, 0x0, 0x1e, 0x2}}]}}, @qdisc_kind_options=@q_codel={{0xa}, {0x54, 0x2, [@TCA_CODEL_TARGET={0x8}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x4}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_LIMIT={0x8, 0x2, 0x2}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x80}, @TCA_CODEL_TARGET={0x8, 0x1, 0xb9}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_INTERVAL={0x8, 0x3, 0x7}, @TCA_CODEL_LIMIT={0x8, 0x2, 0x5}]}}, @TCA_STAB={0xf8, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x8, 0xc000, 0x9, 0x1, 0x80000001, 0x4, 0xa}}, {0x18, 0x2, [0x3, 0x4, 0x3, 0xff, 0x200, 0xfe01, 0x7, 0x8, 0x0, 0x2]}}, {{0x1c, 0x1, {0x0, 0x20, 0x1, 0xfc000, 0x1}}, {0x4}}, {{0x1c, 0x1, {0x3, 0x11, 0x100, 0x5, 0x0, 0x2dd, 0x7fff, 0x4}}, {0xc, 0x2, [0x6, 0x100, 0x2, 0x71]}}, {{0x1c, 0x1, {0x0, 0x40, 0x5, 0x3, 0x2}}, {0x4}}, {{0x1c, 0x1, {0x4, 0x8, 0x1ff, 0x3ff, 0x2, 0x5, 0x9, 0x5}}, {0xe, 0x2, [0x1, 0x1, 0xb41, 0x0, 0x8]}}, {{0x1c, 0x1, {0x9, 0x3f, 0x4, 0x3, 0x0, 0x4, 0x9, 0x5}}, {0xe, 0x2, [0x0, 0x0, 0x5ca, 0xfff, 0xfffb]}}]}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x81}]}, 0x1b8}, 0x1, 0x0, 0x0, 0x20000110}, 0x800)
connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10)
writev(r2, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1)
recvmmsg(r2, &(0x7f0000003e40)=[{{0x0, 0x3, 0x0, 0x0, &(0x7f00000035c0)=""/241, 0xf1}}, {{&(0x7f00000036c0)=@un=@abs, 0x80, &(0x7f0000003780)=[{&(0x7f0000003740)=""/4, 0x7ffff}], 0x1, &(0x7f00000037c0)=""/236, 0xec}}, {{0x0, 0x0, &(0x7f0000003bc0)=[{0x0, 0xe00000000000000}, {&(0x7f0000003a00)=""/190, 0xbe}, {&(0x7f0000003ac0)=""/131, 0x83}, {0x0}], 0x4, &(0x7f0000003c00)=""/73, 0x49}}, {{&(0x7f0000003c80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, 0x0, 0x0, &(0x7f0000003e00)=""/48, 0x30}}], 0x4, 0x40000121, 0x0)
shutdown(r2, 0x0)

13:45:15 executing program 4:
bpf$OBJ_GET_MAP(0x7, &(0x7f0000001240)=@o_path={&(0x7f0000002080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x4010}, 0x18)

13:45:16 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f000000c380)='/proc/crypto\x00', 0x0, 0x0)
read$FUSE(r2, &(0x7f0000000200)={0x2020}, 0x2020)
execve(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000280)=[0x0, 0x0], &(0x7f0000000380)=[&(0x7f00000002c0)='*$%}\xce*\x00', &(0x7f0000000300)='\x00'])

13:45:16 executing program 0:
syz_clone(0x0, &(0x7f0000003340), 0x0, 0x0, 0x0, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, 0x0)

13:45:16 executing program 5:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(0xffffffffffffffff, &(0x7f0000000240)={@val={0x0, 0x86dd}, @val={0x5, 0x0, 0x0, 0x0, 0x54}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "000003", 0x190, 0x3a, 0x0, @empty, @mcast2, {[@routing={0x0, 0x2, 0x0, 0x0, 0x0, [@empty]}], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x0, "ee7b615d"}, {}, {0x2b, 0x3, "6f8c008275021d683910c309293188a7c747eb2278d2794784"}, {0x0, 0x28, "4429118927041312255133e4d2b8b863b5f5b4ace38952e94c581c85d2d86844f548415db4dbf1992868a2e15095b531ce55d4620ec637afdcc990a4d6bfecb289917d24b31a2ddeb64383b176b823cc203ec1927487b7a00d6a3446cf7db79e14b2206d882c28611fa4d8289337cd75b4688120c73a2710947b908fde68a05a0777a170a14e85c7849462b3f5c3152cf0f3d91c5db93dc4d8f9e6b53708650dc375e6da3650b5ff4079971f6e3ef363382a16b8ae07b7307b5619092e4669dbca480d25738314135509eda68f712b9b09bdb485ea0914590b7ae01c2e34832f16c23c82b22b6ba550acfcede288a5237a06b3f5e09b6e5a0404544efe1474664b985f070121e82070a9f4513c2031a58a3d99e99284b812c0f047061139620890416c9defce02fa49cd1dd14b22df7250314ccb3dfd9827f892656911150cd9d921a8"}]}}}}}, 0x1c6)

13:45:16 executing program 4:
bpf$ITER_CREATE(0x21, &(0x7f0000001280), 0x8)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000017c0))

13:45:16 executing program 2:
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
syz_genetlink_get_family_id$tipc(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$NFT_BATCH(r1, &(0x7f00000015c0)={&(0x7f0000000300), 0xc, &(0x7f0000001580)={&(0x7f00000014c0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_PAYLOAD_CSUM_OFFSET={0x8, 0x7, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}]}, @NFT_MSG_DELSETELEM={0x1c, 0xe, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}]}], {0x14}}, 0x94}, 0x1, 0x0, 0x0, 0x1}, 0x1)
getsockname$packet(0xffffffffffffffff, &(0x7f0000001340), &(0x7f0000001380)=0x14)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r1, 0x0, 0x0)
sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, 0x0, 0x0)
getsockname(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001400)={&(0x7f0000000140), 0xc, &(0x7f0000000340)={&(0x7f0000000f00)=@newqdisc={0x1b8, 0x24, 0x0, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0xc}, {0x10, 0xffff}, {0xf, 0xfff2}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_RATE={0x6, 0x5, {0x8}}, @qdisc_kind_options=@q_choke={{0xa}, {0x18, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x4e0, 0x2, 0x6, 0x0, 0x1e, 0x2}}]}}, @qdisc_kind_options=@q_codel={{0xa}, {0x54, 0x2, [@TCA_CODEL_TARGET={0x8}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x4}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_LIMIT={0x8, 0x2, 0x2}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x80}, @TCA_CODEL_TARGET={0x8, 0x1, 0xb9}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_INTERVAL={0x8, 0x3, 0x7}, @TCA_CODEL_LIMIT={0x8, 0x2, 0x5}]}}, @TCA_STAB={0xf8, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x8, 0xc000, 0x9, 0x1, 0x80000001, 0x4, 0xa}}, {0x18, 0x2, [0x3, 0x4, 0x3, 0xff, 0x200, 0xfe01, 0x7, 0x8, 0x0, 0x2]}}, {{0x1c, 0x1, {0x0, 0x20, 0x1, 0xfc000, 0x1}}, {0x4}}, {{0x1c, 0x1, {0x3, 0x11, 0x100, 0x5, 0x0, 0x2dd, 0x7fff, 0x4}}, {0xc, 0x2, [0x6, 0x100, 0x2, 0x71]}}, {{0x1c, 0x1, {0x0, 0x40, 0x5, 0x3, 0x2}}, {0x4}}, {{0x1c, 0x1, {0x4, 0x8, 0x1ff, 0x3ff, 0x2, 0x5, 0x9, 0x5}}, {0xe, 0x2, [0x1, 0x1, 0xb41, 0x0, 0x8]}}, {{0x1c, 0x1, {0x9, 0x3f, 0x4, 0x3, 0x0, 0x4, 0x9, 0x5}}, {0xe, 0x2, [0x0, 0x0, 0x5ca, 0xfff, 0xfffb]}}]}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x81}]}, 0x1b8}, 0x1, 0x0, 0x0, 0x20000110}, 0x800)
connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10)
writev(r2, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1)
recvmmsg(r2, &(0x7f0000003e40)=[{{0x0, 0x3, 0x0, 0x0, &(0x7f00000035c0)=""/241, 0xf1}}, {{&(0x7f00000036c0)=@un=@abs, 0x80, &(0x7f0000003780)=[{&(0x7f0000003740)=""/4, 0x7ffff}], 0x1, &(0x7f00000037c0)=""/236, 0xec}}, {{0x0, 0x0, &(0x7f0000003bc0)=[{0x0, 0xe00000000000000}, {&(0x7f0000003a00)=""/190, 0xbe}, {&(0x7f0000003ac0)=""/131, 0x83}, {0x0}], 0x4, &(0x7f0000003c00)=""/73, 0x49}}, {{&(0x7f0000003c80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, 0x0, 0x0, &(0x7f0000003e00)=""/48, 0x30}}], 0x4, 0x40000121, 0x0)
shutdown(r2, 0x0)

13:45:16 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r1)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400ee5c99f8435ecde50a0412", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x1, 0x803, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="50000000100001040000ff0f0000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e00000000180002800c0002001c0000001b000000060001000100000008000500", @ANYRES32=r5], 0x50}}, 0x0)
r6 = socket(0x1, 0x803, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080))
socket(0x10, 0x3, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
r8 = socket(0x1, 0x803, 0x0)
getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000540)=ANY=[@ANYBLOB="20000000110003040000007bb000000000000000", @ANYRES32=r9], 0x20}}, 0x0)

[ 2231.111016][T22126] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'.
13:45:16 executing program 4:
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000002ac0)={<r0=>0xffffffffffffffff})
sendmsg$inet(r0, &(0x7f0000002e40)={0x0, 0x0, &(0x7f0000002dc0)=[{&(0x7f0000002c40)="d6", 0x1}], 0x1}, 0x0)

13:45:16 executing program 2:
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff)
sendmsg$NFT_BATCH(r1, &(0x7f00000015c0)={&(0x7f0000000300), 0xc, &(0x7f0000001580)={&(0x7f00000014c0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_PAYLOAD_CSUM_OFFSET={0x8, 0x7, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}]}, @NFT_MSG_DELSETELEM={0x1c, 0xe, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}]}], {0x14}}, 0x94}, 0x1, 0x0, 0x0, 0x1}, 0x1)
getsockname$packet(0xffffffffffffffff, &(0x7f0000001340), &(0x7f0000001380)=0x14)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r1, 0x0, 0x0)
sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, 0x0, 0x0)
getsockname(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001400)={&(0x7f0000000140), 0xc, &(0x7f0000000340)={&(0x7f0000000f00)=@newqdisc={0x1b8, 0x24, 0x0, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0xc}, {0x10, 0xffff}, {0xf, 0xfff2}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_RATE={0x6, 0x5, {0x8}}, @qdisc_kind_options=@q_choke={{0xa}, {0x18, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x4e0, 0x2, 0x6, 0x0, 0x1e, 0x2}}]}}, @qdisc_kind_options=@q_codel={{0xa}, {0x54, 0x2, [@TCA_CODEL_TARGET={0x8}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x4}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_LIMIT={0x8, 0x2, 0x2}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x80}, @TCA_CODEL_TARGET={0x8, 0x1, 0xb9}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_INTERVAL={0x8, 0x3, 0x7}, @TCA_CODEL_LIMIT={0x8, 0x2, 0x5}]}}, @TCA_STAB={0xf8, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x8, 0xc000, 0x9, 0x1, 0x80000001, 0x4, 0xa}}, {0x18, 0x2, [0x3, 0x4, 0x3, 0xff, 0x200, 0xfe01, 0x7, 0x8, 0x0, 0x2]}}, {{0x1c, 0x1, {0x0, 0x20, 0x1, 0xfc000, 0x1}}, {0x4}}, {{0x1c, 0x1, {0x3, 0x11, 0x100, 0x5, 0x0, 0x2dd, 0x7fff, 0x4}}, {0xc, 0x2, [0x6, 0x100, 0x2, 0x71]}}, {{0x1c, 0x1, {0x0, 0x40, 0x5, 0x3, 0x2}}, {0x4}}, {{0x1c, 0x1, {0x4, 0x8, 0x1ff, 0x3ff, 0x2, 0x5, 0x9, 0x5}}, {0xe, 0x2, [0x1, 0x1, 0xb41, 0x0, 0x8]}}, {{0x1c, 0x1, {0x9, 0x3f, 0x4, 0x3, 0x0, 0x4, 0x9, 0x5}}, {0xe, 0x2, [0x0, 0x0, 0x5ca, 0xfff, 0xfffb]}}]}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x81}]}, 0x1b8}, 0x1, 0x0, 0x0, 0x20000110}, 0x800)
connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10)
writev(r2, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1)
recvmmsg(r2, &(0x7f0000003e40)=[{{0x0, 0x3, 0x0, 0x0, &(0x7f00000035c0)=""/241, 0xf1}}, {{&(0x7f00000036c0)=@un=@abs, 0x80, &(0x7f0000003780)=[{&(0x7f0000003740)=""/4, 0x7ffff}], 0x1, &(0x7f00000037c0)=""/236, 0xec}}, {{0x0, 0x0, &(0x7f0000003bc0)=[{0x0, 0xe00000000000000}, {&(0x7f0000003a00)=""/190, 0xbe}, {&(0x7f0000003ac0)=""/131, 0x83}, {0x0}], 0x4, &(0x7f0000003c00)=""/73, 0x49}}, {{&(0x7f0000003c80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, 0x0, 0x0, &(0x7f0000003e00)=""/48, 0x30}}], 0x4, 0x40000121, 0x0)
shutdown(r2, 0x0)

13:45:16 executing program 0:
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x90)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r0, 0x1}, 0xc)

13:45:16 executing program 4:
bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000001f40)={0xffffffffffffffff, 0x0, 0x0}, 0x20)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000001f80))

13:45:16 executing program 0:
r0 = socket$kcm(0x29, 0x0, 0x0)
ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, &(0x7f00000000c0))
r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000100)={r0}, 0x8)
write$cgroup_devices(r1, &(0x7f0000000140)={'a', ' *:* ', 'rwm\x00'}, 0xa)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
recvmsg(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000001c0)=""/203, 0xcb}, {&(0x7f00000002c0)=""/222, 0xde}, {&(0x7f00000003c0)=""/63, 0x3f}, {&(0x7f0000000400)=""/249, 0xf9}], 0x4, &(0x7f0000000540)=""/41, 0x29}, 0x2)
recvmsg$kcm(r0, &(0x7f0000000e40)={&(0x7f00000005c0)=@ethernet, 0x80, &(0x7f0000000cc0)=[{&(0x7f0000000640)=""/220, 0xdc}, {&(0x7f0000000740)=""/46, 0x2e}, {&(0x7f0000000780)=""/54, 0x36}, {&(0x7f00000007c0)}, {&(0x7f0000000800)=""/176, 0xb0}, {&(0x7f00000008c0)=""/154, 0x9a}, {&(0x7f0000000980)=""/133, 0x85}, {&(0x7f0000000a40)=""/217, 0xd9}, {&(0x7f0000000b40)=""/186, 0xba}, {&(0x7f0000000c00)=""/151, 0x97}], 0xa, &(0x7f0000000d80)=""/139, 0x8b}, 0x2000)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000e80)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, &(0x7f0000000ec0)={r4})
socketpair(0x9, 0x2, 0x91, &(0x7f0000000f00))
r6 = getpid()
write$cgroup_pid(r1, &(0x7f0000000f40)=r6, 0x12)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000f80)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
recvmsg(r7, &(0x7f0000001180)={&(0x7f0000000fc0)=@hci, 0x80, &(0x7f0000001040), 0x0, &(0x7f0000001080)=""/204, 0xcc}, 0x80)
recvmsg$unix(r3, &(0x7f0000001480)={&(0x7f00000011c0)=@abs, 0x6e, &(0x7f0000001440)=[{&(0x7f0000001240)=""/101, 0x65}, {&(0x7f00000012c0)=""/62, 0x3e}, {&(0x7f0000001300)=""/207, 0xcf}, {&(0x7f0000001400)=""/9, 0x9}], 0x4}, 0x20)
r8 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000001500), 0x2, 0x0)
bpf$OBJ_GET_MAP(0x7, &(0x7f0000001540)=@o_path={&(0x7f00000014c0)='./file0\x00', 0x0, 0x18, r8}, 0x18)
bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000001580)={0x0, 0xfff}, 0xc)
openat$cgroup_freezer_state(r1, &(0x7f0000001780), 0x2, 0x0)
setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f00000017c0)=r1, 0x4)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001800)='./cgroup/syz0\x00', 0x200002, 0x0)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000001840), 0x4)
r9 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000001d40)={@map=r9, 0xffffffffffffffff, 0x13, 0x14, 0x0, @prog_id}, 0x20)

13:45:16 executing program 2:
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff)
sendmsg$NFT_BATCH(r1, &(0x7f00000015c0)={&(0x7f0000000300), 0xc, &(0x7f0000001580)={&(0x7f00000014c0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_PAYLOAD_CSUM_OFFSET={0x8, 0x7, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}]}, @NFT_MSG_DELSETELEM={0x1c, 0xe, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}]}], {0x14}}, 0x94}, 0x1, 0x0, 0x0, 0x1}, 0x1)
getsockname$packet(0xffffffffffffffff, &(0x7f0000001340), &(0x7f0000001380)=0x14)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r1, 0x0, 0x0)
sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, 0x0, 0x0)
getsockname(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001400)={&(0x7f0000000140), 0xc, &(0x7f0000000340)={&(0x7f0000000f00)=@newqdisc={0x1b8, 0x24, 0x0, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0xc}, {0x10, 0xffff}, {0xf, 0xfff2}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_RATE={0x6, 0x5, {0x8}}, @qdisc_kind_options=@q_choke={{0xa}, {0x18, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x4e0, 0x2, 0x6, 0x0, 0x1e, 0x2}}]}}, @qdisc_kind_options=@q_codel={{0xa}, {0x54, 0x2, [@TCA_CODEL_TARGET={0x8}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x4}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_LIMIT={0x8, 0x2, 0x2}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x80}, @TCA_CODEL_TARGET={0x8, 0x1, 0xb9}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_INTERVAL={0x8, 0x3, 0x7}, @TCA_CODEL_LIMIT={0x8, 0x2, 0x5}]}}, @TCA_STAB={0xf8, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x8, 0xc000, 0x9, 0x1, 0x80000001, 0x4, 0xa}}, {0x18, 0x2, [0x3, 0x4, 0x3, 0xff, 0x200, 0xfe01, 0x7, 0x8, 0x0, 0x2]}}, {{0x1c, 0x1, {0x0, 0x20, 0x1, 0xfc000, 0x1}}, {0x4}}, {{0x1c, 0x1, {0x3, 0x11, 0x100, 0x5, 0x0, 0x2dd, 0x7fff, 0x4}}, {0xc, 0x2, [0x6, 0x100, 0x2, 0x71]}}, {{0x1c, 0x1, {0x0, 0x40, 0x5, 0x3, 0x2}}, {0x4}}, {{0x1c, 0x1, {0x4, 0x8, 0x1ff, 0x3ff, 0x2, 0x5, 0x9, 0x5}}, {0xe, 0x2, [0x1, 0x1, 0xb41, 0x0, 0x8]}}, {{0x1c, 0x1, {0x9, 0x3f, 0x4, 0x3, 0x0, 0x4, 0x9, 0x5}}, {0xe, 0x2, [0x0, 0x0, 0x5ca, 0xfff, 0xfffb]}}]}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x81}]}, 0x1b8}, 0x1, 0x0, 0x0, 0x20000110}, 0x800)
connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10)
writev(r2, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1)
recvmmsg(r2, &(0x7f0000003e40)=[{{0x0, 0x3, 0x0, 0x0, &(0x7f00000035c0)=""/241, 0xf1}}, {{&(0x7f00000036c0)=@un=@abs, 0x80, &(0x7f0000003780)=[{&(0x7f0000003740)=""/4, 0x7ffff}], 0x1, &(0x7f00000037c0)=""/236, 0xec}}, {{0x0, 0x0, &(0x7f0000003bc0)=[{0x0, 0xe00000000000000}, {&(0x7f0000003a00)=""/190, 0xbe}, {&(0x7f0000003ac0)=""/131, 0x83}, {0x0}], 0x4, &(0x7f0000003c00)=""/73, 0x49}}, {{&(0x7f0000003c80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, 0x0, 0x0, &(0x7f0000003e00)=""/48, 0x30}}], 0x4, 0x40000121, 0x0)
shutdown(r2, 0x0)

13:45:17 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, 0x0, 0x0, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f000000c380)='/proc/crypto\x00', 0x0, 0x0)
read$FUSE(r3, &(0x7f0000000200)={0x2020}, 0x2020)
execve(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000280)=[0x0, 0x0], &(0x7f0000000380)=[&(0x7f00000002c0)='*$%}\xce*\x00', &(0x7f0000000300)='\x00'])

13:45:17 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0xc)
sendmsg$IPVS_CMD_SET_DEST(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000540)={0x140}, 0x14}}, 0x0)

13:45:17 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r1)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400ee5c99f8435ecde50a0412", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x1, 0x803, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="50000000100001040000ff0f0000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e00000000180002800c0002001c0000001b000000060001000100000008000500", @ANYRES32=r5], 0x50}}, 0x0)
r6 = socket(0x1, 0x803, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080))
socket(0x10, 0x3, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
r8 = socket(0x1, 0x803, 0x0)
getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000540)=ANY=[@ANYBLOB="20000000110003040000007bb000000000000000", @ANYRES32=r9], 0x20}}, 0x0)

13:45:17 executing program 2:
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff)
sendmsg$NFT_BATCH(r1, &(0x7f00000015c0)={&(0x7f0000000300), 0xc, &(0x7f0000001580)={&(0x7f00000014c0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_PAYLOAD_CSUM_OFFSET={0x8, 0x7, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}]}, @NFT_MSG_DELSETELEM={0x1c, 0xe, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}]}], {0x14}}, 0x94}, 0x1, 0x0, 0x0, 0x1}, 0x1)
getsockname$packet(0xffffffffffffffff, &(0x7f0000001340), &(0x7f0000001380)=0x14)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r1, 0x0, 0x0)
sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, 0x0, 0x0)
getsockname(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001400)={&(0x7f0000000140), 0xc, &(0x7f0000000340)={&(0x7f0000000f00)=@newqdisc={0x1b8, 0x24, 0x0, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0xc}, {0x10, 0xffff}, {0xf, 0xfff2}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_RATE={0x6, 0x5, {0x8}}, @qdisc_kind_options=@q_choke={{0xa}, {0x18, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x4e0, 0x2, 0x6, 0x0, 0x1e, 0x2}}]}}, @qdisc_kind_options=@q_codel={{0xa}, {0x54, 0x2, [@TCA_CODEL_TARGET={0x8}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x4}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_LIMIT={0x8, 0x2, 0x2}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x80}, @TCA_CODEL_TARGET={0x8, 0x1, 0xb9}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_INTERVAL={0x8, 0x3, 0x7}, @TCA_CODEL_LIMIT={0x8, 0x2, 0x5}]}}, @TCA_STAB={0xf8, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x8, 0xc000, 0x9, 0x1, 0x80000001, 0x4, 0xa}}, {0x18, 0x2, [0x3, 0x4, 0x3, 0xff, 0x200, 0xfe01, 0x7, 0x8, 0x0, 0x2]}}, {{0x1c, 0x1, {0x0, 0x20, 0x1, 0xfc000, 0x1}}, {0x4}}, {{0x1c, 0x1, {0x3, 0x11, 0x100, 0x5, 0x0, 0x2dd, 0x7fff, 0x4}}, {0xc, 0x2, [0x6, 0x100, 0x2, 0x71]}}, {{0x1c, 0x1, {0x0, 0x40, 0x5, 0x3, 0x2}}, {0x4}}, {{0x1c, 0x1, {0x4, 0x8, 0x1ff, 0x3ff, 0x2, 0x5, 0x9, 0x5}}, {0xe, 0x2, [0x1, 0x1, 0xb41, 0x0, 0x8]}}, {{0x1c, 0x1, {0x9, 0x3f, 0x4, 0x3, 0x0, 0x4, 0x9, 0x5}}, {0xe, 0x2, [0x0, 0x0, 0x5ca, 0xfff, 0xfffb]}}]}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x81}]}, 0x1b8}, 0x1, 0x0, 0x0, 0x20000110}, 0x800)
connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10)
writev(r2, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1)
recvmmsg(r2, &(0x7f0000003e40)=[{{0x0, 0x3, 0x0, 0x0, &(0x7f00000035c0)=""/241, 0xf1}}, {{&(0x7f00000036c0)=@un=@abs, 0x80, &(0x7f0000003780)=[{&(0x7f0000003740)=""/4, 0x7ffff}], 0x1, &(0x7f00000037c0)=""/236, 0xec}}, {{0x0, 0x0, &(0x7f0000003bc0)=[{0x0, 0xe00000000000000}, {&(0x7f0000003a00)=""/190, 0xbe}, {&(0x7f0000003ac0)=""/131, 0x83}, {0x0}], 0x4, &(0x7f0000003c00)=""/73, 0x49}}, {{&(0x7f0000003c80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, 0x0, 0x0, &(0x7f0000003e00)=""/48, 0x30}}], 0x4, 0x40000121, 0x0)
shutdown(r2, 0x0)

13:45:17 executing program 5:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, 0x0, 0x0)

13:45:17 executing program 4:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8000000000000001}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1)
ioprio_get$pid(0x0, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
getpid()
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
sched_setscheduler(0x0, 0x0, &(0x7f0000000040)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x8, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0xfffffffe}, 0x10}, 0x90)
execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r3 = openat$loop_ctrl(0xffffff9c, &(0x7f0000001280), 0x0, 0x0)
ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0)
timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000440)={{0x0, 0x3938700}}, &(0x7f0000000600))
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0)

13:45:17 executing program 2:
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
syz_genetlink_get_family_id$tipc(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000015c0)={&(0x7f0000000300), 0xc, &(0x7f0000001580)={&(0x7f00000014c0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_PAYLOAD_CSUM_OFFSET={0x8, 0x7, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}]}, @NFT_MSG_DELSETELEM={0x1c, 0xe, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}]}], {0x14}}, 0x94}, 0x1, 0x0, 0x0, 0x1}, 0x1)
getsockname$packet(0xffffffffffffffff, &(0x7f0000001340), &(0x7f0000001380)=0x14)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r1, 0x0, 0x0)
sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, 0x0, 0x0)
getsockname(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001400)={&(0x7f0000000140), 0xc, &(0x7f0000000340)={&(0x7f0000000f00)=@newqdisc={0x1b8, 0x24, 0x0, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0xc}, {0x10, 0xffff}, {0xf, 0xfff2}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_RATE={0x6, 0x5, {0x8}}, @qdisc_kind_options=@q_choke={{0xa}, {0x18, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x4e0, 0x2, 0x6, 0x0, 0x1e, 0x2}}]}}, @qdisc_kind_options=@q_codel={{0xa}, {0x54, 0x2, [@TCA_CODEL_TARGET={0x8}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x4}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_LIMIT={0x8, 0x2, 0x2}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x80}, @TCA_CODEL_TARGET={0x8, 0x1, 0xb9}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_INTERVAL={0x8, 0x3, 0x7}, @TCA_CODEL_LIMIT={0x8, 0x2, 0x5}]}}, @TCA_STAB={0xf8, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x8, 0xc000, 0x9, 0x1, 0x80000001, 0x4, 0xa}}, {0x18, 0x2, [0x3, 0x4, 0x3, 0xff, 0x200, 0xfe01, 0x7, 0x8, 0x0, 0x2]}}, {{0x1c, 0x1, {0x0, 0x20, 0x1, 0xfc000, 0x1}}, {0x4}}, {{0x1c, 0x1, {0x3, 0x11, 0x100, 0x5, 0x0, 0x2dd, 0x7fff, 0x4}}, {0xc, 0x2, [0x6, 0x100, 0x2, 0x71]}}, {{0x1c, 0x1, {0x0, 0x40, 0x5, 0x3, 0x2}}, {0x4}}, {{0x1c, 0x1, {0x4, 0x8, 0x1ff, 0x3ff, 0x2, 0x5, 0x9, 0x5}}, {0xe, 0x2, [0x1, 0x1, 0xb41, 0x0, 0x8]}}, {{0x1c, 0x1, {0x9, 0x3f, 0x4, 0x3, 0x0, 0x4, 0x9, 0x5}}, {0xe, 0x2, [0x0, 0x0, 0x5ca, 0xfff, 0xfffb]}}]}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x81}]}, 0x1b8}, 0x1, 0x0, 0x0, 0x20000110}, 0x800)
connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10)
writev(r2, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1)
recvmmsg(r2, &(0x7f0000003e40)=[{{0x0, 0x3, 0x0, 0x0, &(0x7f00000035c0)=""/241, 0xf1}}, {{&(0x7f00000036c0)=@un=@abs, 0x80, &(0x7f0000003780)=[{&(0x7f0000003740)=""/4, 0x7ffff}], 0x1, &(0x7f00000037c0)=""/236, 0xec}}, {{0x0, 0x0, &(0x7f0000003bc0)=[{0x0, 0xe00000000000000}, {&(0x7f0000003a00)=""/190, 0xbe}, {&(0x7f0000003ac0)=""/131, 0x83}, {0x0}], 0x4, &(0x7f0000003c00)=""/73, 0x49}}, {{&(0x7f0000003c80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, 0x0, 0x0, &(0x7f0000003e00)=""/48, 0x30}}], 0x4, 0x40000121, 0x0)
shutdown(r2, 0x0)

[ 2232.116351][T22162] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'.
13:45:17 executing program 2:
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
syz_genetlink_get_family_id$tipc(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000015c0)={&(0x7f0000000300), 0xc, &(0x7f0000001580)={&(0x7f00000014c0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_PAYLOAD_CSUM_OFFSET={0x8, 0x7, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}]}, @NFT_MSG_DELSETELEM={0x1c, 0xe, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}]}], {0x14}}, 0x94}, 0x1, 0x0, 0x0, 0x1}, 0x1)
getsockname$packet(0xffffffffffffffff, &(0x7f0000001340), &(0x7f0000001380)=0x14)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r1, 0x0, 0x0)
sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, 0x0, 0x0)
getsockname(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001400)={&(0x7f0000000140), 0xc, &(0x7f0000000340)={&(0x7f0000000f00)=@newqdisc={0x1b8, 0x24, 0x0, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0xc}, {0x10, 0xffff}, {0xf, 0xfff2}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_RATE={0x6, 0x5, {0x8}}, @qdisc_kind_options=@q_choke={{0xa}, {0x18, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x4e0, 0x2, 0x6, 0x0, 0x1e, 0x2}}]}}, @qdisc_kind_options=@q_codel={{0xa}, {0x54, 0x2, [@TCA_CODEL_TARGET={0x8}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x4}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_LIMIT={0x8, 0x2, 0x2}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x80}, @TCA_CODEL_TARGET={0x8, 0x1, 0xb9}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_INTERVAL={0x8, 0x3, 0x7}, @TCA_CODEL_LIMIT={0x8, 0x2, 0x5}]}}, @TCA_STAB={0xf8, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x8, 0xc000, 0x9, 0x1, 0x80000001, 0x4, 0xa}}, {0x18, 0x2, [0x3, 0x4, 0x3, 0xff, 0x200, 0xfe01, 0x7, 0x8, 0x0, 0x2]}}, {{0x1c, 0x1, {0x0, 0x20, 0x1, 0xfc000, 0x1}}, {0x4}}, {{0x1c, 0x1, {0x3, 0x11, 0x100, 0x5, 0x0, 0x2dd, 0x7fff, 0x4}}, {0xc, 0x2, [0x6, 0x100, 0x2, 0x71]}}, {{0x1c, 0x1, {0x0, 0x40, 0x5, 0x3, 0x2}}, {0x4}}, {{0x1c, 0x1, {0x4, 0x8, 0x1ff, 0x3ff, 0x2, 0x5, 0x9, 0x5}}, {0xe, 0x2, [0x1, 0x1, 0xb41, 0x0, 0x8]}}, {{0x1c, 0x1, {0x9, 0x3f, 0x4, 0x3, 0x0, 0x4, 0x9, 0x5}}, {0xe, 0x2, [0x0, 0x0, 0x5ca, 0xfff, 0xfffb]}}]}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x81}]}, 0x1b8}, 0x1, 0x0, 0x0, 0x20000110}, 0x800)
connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10)
writev(r2, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1)
recvmmsg(r2, &(0x7f0000003e40)=[{{0x0, 0x3, 0x0, 0x0, &(0x7f00000035c0)=""/241, 0xf1}}, {{&(0x7f00000036c0)=@un=@abs, 0x80, &(0x7f0000003780)=[{&(0x7f0000003740)=""/4, 0x7ffff}], 0x1, &(0x7f00000037c0)=""/236, 0xec}}, {{0x0, 0x0, &(0x7f0000003bc0)=[{0x0, 0xe00000000000000}, {&(0x7f0000003a00)=""/190, 0xbe}, {&(0x7f0000003ac0)=""/131, 0x83}, {0x0}], 0x4, &(0x7f0000003c00)=""/73, 0x49}}, {{&(0x7f0000003c80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, 0x0, 0x0, &(0x7f0000003e00)=""/48, 0x30}}], 0x4, 0x40000121, 0x0)
shutdown(r2, 0x0)

13:45:18 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, 0x0, 0x0, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f000000c380)='/proc/crypto\x00', 0x0, 0x0)
read$FUSE(r3, &(0x7f0000000200)={0x2020}, 0x2020)
execve(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000280)=[0x0, 0x0], &(0x7f0000000380)=[&(0x7f00000002c0)='*$%}\xce*\x00', &(0x7f0000000300)='\x00'])

13:45:18 executing program 0:
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet6_mtu(r0, 0x29, 0x17, 0x0, &(0x7f0000000040))

13:45:18 executing program 4:
memfd_create(&(0x7f00000003c0)=',[(\x00', 0x3)

13:45:18 executing program 2:
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
syz_genetlink_get_family_id$tipc(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000015c0)={&(0x7f0000000300), 0xc, &(0x7f0000001580)={&(0x7f00000014c0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_PAYLOAD_CSUM_OFFSET={0x8, 0x7, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}]}, @NFT_MSG_DELSETELEM={0x1c, 0xe, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}]}], {0x14}}, 0x94}, 0x1, 0x0, 0x0, 0x1}, 0x1)
getsockname$packet(0xffffffffffffffff, &(0x7f0000001340), &(0x7f0000001380)=0x14)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r1, 0x0, 0x0)
sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, 0x0, 0x0)
getsockname(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001400)={&(0x7f0000000140), 0xc, &(0x7f0000000340)={&(0x7f0000000f00)=@newqdisc={0x1b8, 0x24, 0x0, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0xc}, {0x10, 0xffff}, {0xf, 0xfff2}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_RATE={0x6, 0x5, {0x8}}, @qdisc_kind_options=@q_choke={{0xa}, {0x18, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x4e0, 0x2, 0x6, 0x0, 0x1e, 0x2}}]}}, @qdisc_kind_options=@q_codel={{0xa}, {0x54, 0x2, [@TCA_CODEL_TARGET={0x8}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x4}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_LIMIT={0x8, 0x2, 0x2}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x80}, @TCA_CODEL_TARGET={0x8, 0x1, 0xb9}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_INTERVAL={0x8, 0x3, 0x7}, @TCA_CODEL_LIMIT={0x8, 0x2, 0x5}]}}, @TCA_STAB={0xf8, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x8, 0xc000, 0x9, 0x1, 0x80000001, 0x4, 0xa}}, {0x18, 0x2, [0x3, 0x4, 0x3, 0xff, 0x200, 0xfe01, 0x7, 0x8, 0x0, 0x2]}}, {{0x1c, 0x1, {0x0, 0x20, 0x1, 0xfc000, 0x1}}, {0x4}}, {{0x1c, 0x1, {0x3, 0x11, 0x100, 0x5, 0x0, 0x2dd, 0x7fff, 0x4}}, {0xc, 0x2, [0x6, 0x100, 0x2, 0x71]}}, {{0x1c, 0x1, {0x0, 0x40, 0x5, 0x3, 0x2}}, {0x4}}, {{0x1c, 0x1, {0x4, 0x8, 0x1ff, 0x3ff, 0x2, 0x5, 0x9, 0x5}}, {0xe, 0x2, [0x1, 0x1, 0xb41, 0x0, 0x8]}}, {{0x1c, 0x1, {0x9, 0x3f, 0x4, 0x3, 0x0, 0x4, 0x9, 0x5}}, {0xe, 0x2, [0x0, 0x0, 0x5ca, 0xfff, 0xfffb]}}]}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x81}]}, 0x1b8}, 0x1, 0x0, 0x0, 0x20000110}, 0x800)
connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10)
writev(r2, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1)
recvmmsg(r2, &(0x7f0000003e40)=[{{0x0, 0x3, 0x0, 0x0, &(0x7f00000035c0)=""/241, 0xf1}}, {{&(0x7f00000036c0)=@un=@abs, 0x80, &(0x7f0000003780)=[{&(0x7f0000003740)=""/4, 0x7ffff}], 0x1, &(0x7f00000037c0)=""/236, 0xec}}, {{0x0, 0x0, &(0x7f0000003bc0)=[{0x0, 0xe00000000000000}, {&(0x7f0000003a00)=""/190, 0xbe}, {&(0x7f0000003ac0)=""/131, 0x83}, {0x0}], 0x4, &(0x7f0000003c00)=""/73, 0x49}}, {{&(0x7f0000003c80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, 0x0, 0x0, &(0x7f0000003e00)=""/48, 0x30}}], 0x4, 0x40000121, 0x0)
shutdown(r2, 0x0)

13:45:18 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r1)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400ee5c99f8435ecde50a0412", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x1, 0x803, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="50000000100001040000ff0f0000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e00000000180002800c0002001c0000001b000000060001000100000008000500", @ANYRES32=r5], 0x50}}, 0x0)
r6 = socket(0x1, 0x803, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080))
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x1e}}]}}}, @IFLA_LINK={0x8, 0x5, r7}]}, 0x50}}, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = socket(0x1, 0x803, 0x0)
getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000540)=ANY=[@ANYBLOB="20000000110003040000007bb000000000000000", @ANYRES32=r10], 0x20}}, 0x0)

13:45:18 executing program 0:
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0)
ioctl$IOMMU_IOAS_COPY$syz(r0, 0x3b83, &(0x7f0000000040)={0x28, 0x10000})

13:45:18 executing program 5:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, 0x0, 0x0)

13:45:18 executing program 4:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_TPROXY_FAMILY={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x74}}, 0x0)

13:45:18 executing program 2:
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
syz_genetlink_get_family_id$tipc(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$NFT_BATCH(r1, 0x0, 0x1)
getsockname$packet(0xffffffffffffffff, &(0x7f0000001340), &(0x7f0000001380)=0x14)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r1, 0x0, 0x0)
sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, 0x0, 0x0)
getsockname(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001400)={&(0x7f0000000140), 0xc, &(0x7f0000000340)={&(0x7f0000000f00)=@newqdisc={0x1b8, 0x24, 0x0, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0xc}, {0x10, 0xffff}, {0xf, 0xfff2}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_RATE={0x6, 0x5, {0x8}}, @qdisc_kind_options=@q_choke={{0xa}, {0x18, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x4e0, 0x2, 0x6, 0x0, 0x1e, 0x2}}]}}, @qdisc_kind_options=@q_codel={{0xa}, {0x54, 0x2, [@TCA_CODEL_TARGET={0x8}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x4}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_LIMIT={0x8, 0x2, 0x2}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x80}, @TCA_CODEL_TARGET={0x8, 0x1, 0xb9}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_INTERVAL={0x8, 0x3, 0x7}, @TCA_CODEL_LIMIT={0x8, 0x2, 0x5}]}}, @TCA_STAB={0xf8, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x8, 0xc000, 0x9, 0x1, 0x80000001, 0x4, 0xa}}, {0x18, 0x2, [0x3, 0x4, 0x3, 0xff, 0x200, 0xfe01, 0x7, 0x8, 0x0, 0x2]}}, {{0x1c, 0x1, {0x0, 0x20, 0x1, 0xfc000, 0x1}}, {0x4}}, {{0x1c, 0x1, {0x3, 0x11, 0x100, 0x5, 0x0, 0x2dd, 0x7fff, 0x4}}, {0xc, 0x2, [0x6, 0x100, 0x2, 0x71]}}, {{0x1c, 0x1, {0x0, 0x40, 0x5, 0x3, 0x2}}, {0x4}}, {{0x1c, 0x1, {0x4, 0x8, 0x1ff, 0x3ff, 0x2, 0x5, 0x9, 0x5}}, {0xe, 0x2, [0x1, 0x1, 0xb41, 0x0, 0x8]}}, {{0x1c, 0x1, {0x9, 0x3f, 0x4, 0x3, 0x0, 0x4, 0x9, 0x5}}, {0xe, 0x2, [0x0, 0x0, 0x5ca, 0xfff, 0xfffb]}}]}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x81}]}, 0x1b8}, 0x1, 0x0, 0x0, 0x20000110}, 0x800)
connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10)
writev(r2, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1)
recvmmsg(r2, &(0x7f0000003e40)=[{{0x0, 0x3, 0x0, 0x0, &(0x7f00000035c0)=""/241, 0xf1}}, {{&(0x7f00000036c0)=@un=@abs, 0x80, &(0x7f0000003780)=[{&(0x7f0000003740)=""/4, 0x7ffff}], 0x1, &(0x7f00000037c0)=""/236, 0xec}}, {{0x0, 0x0, &(0x7f0000003bc0)=[{0x0, 0xe00000000000000}, {&(0x7f0000003a00)=""/190, 0xbe}, {&(0x7f0000003ac0)=""/131, 0x83}, {0x0}], 0x4, &(0x7f0000003c00)=""/73, 0x49}}, {{&(0x7f0000003c80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, 0x0, 0x0, &(0x7f0000003e00)=""/48, 0x30}}], 0x4, 0x40000121, 0x0)
shutdown(r2, 0x0)

[ 2233.633057][T22191] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'.
13:45:18 executing program 0:
syz_genetlink_get_family_id$tipc2(&(0x7f00000016c0), 0xffffffffffffffff)

13:45:18 executing program 4:
arch_prctl$ARCH_GET_XCOMP_PERM(0x5001, 0x0)

13:45:18 executing program 5:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, 0x0, 0x0)

13:45:19 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, 0x0, 0x0, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f000000c380)='/proc/crypto\x00', 0x0, 0x0)
read$FUSE(r3, &(0x7f0000000200)={0x2020}, 0x2020)
execve(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000280)=[0x0, 0x0], &(0x7f0000000380)=[&(0x7f00000002c0)='*$%}\xce*\x00', &(0x7f0000000300)='\x00'])

13:45:19 executing program 2:
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
syz_genetlink_get_family_id$tipc(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$NFT_BATCH(r1, 0x0, 0x1)
getsockname$packet(0xffffffffffffffff, &(0x7f0000001340), &(0x7f0000001380)=0x14)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r1, 0x0, 0x0)
sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, 0x0, 0x0)
getsockname(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001400)={&(0x7f0000000140), 0xc, &(0x7f0000000340)={&(0x7f0000000f00)=@newqdisc={0x1b8, 0x24, 0x0, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0xc}, {0x10, 0xffff}, {0xf, 0xfff2}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_RATE={0x6, 0x5, {0x8}}, @qdisc_kind_options=@q_choke={{0xa}, {0x18, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x4e0, 0x2, 0x6, 0x0, 0x1e, 0x2}}]}}, @qdisc_kind_options=@q_codel={{0xa}, {0x54, 0x2, [@TCA_CODEL_TARGET={0x8}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x4}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_LIMIT={0x8, 0x2, 0x2}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x80}, @TCA_CODEL_TARGET={0x8, 0x1, 0xb9}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_INTERVAL={0x8, 0x3, 0x7}, @TCA_CODEL_LIMIT={0x8, 0x2, 0x5}]}}, @TCA_STAB={0xf8, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x8, 0xc000, 0x9, 0x1, 0x80000001, 0x4, 0xa}}, {0x18, 0x2, [0x3, 0x4, 0x3, 0xff, 0x200, 0xfe01, 0x7, 0x8, 0x0, 0x2]}}, {{0x1c, 0x1, {0x0, 0x20, 0x1, 0xfc000, 0x1}}, {0x4}}, {{0x1c, 0x1, {0x3, 0x11, 0x100, 0x5, 0x0, 0x2dd, 0x7fff, 0x4}}, {0xc, 0x2, [0x6, 0x100, 0x2, 0x71]}}, {{0x1c, 0x1, {0x0, 0x40, 0x5, 0x3, 0x2}}, {0x4}}, {{0x1c, 0x1, {0x4, 0x8, 0x1ff, 0x3ff, 0x2, 0x5, 0x9, 0x5}}, {0xe, 0x2, [0x1, 0x1, 0xb41, 0x0, 0x8]}}, {{0x1c, 0x1, {0x9, 0x3f, 0x4, 0x3, 0x0, 0x4, 0x9, 0x5}}, {0xe, 0x2, [0x0, 0x0, 0x5ca, 0xfff, 0xfffb]}}]}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x81}]}, 0x1b8}, 0x1, 0x0, 0x0, 0x20000110}, 0x800)
connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10)
writev(r2, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1)
recvmmsg(r2, &(0x7f0000003e40)=[{{0x0, 0x3, 0x0, 0x0, &(0x7f00000035c0)=""/241, 0xf1}}, {{&(0x7f00000036c0)=@un=@abs, 0x80, &(0x7f0000003780)=[{&(0x7f0000003740)=""/4, 0x7ffff}], 0x1, &(0x7f00000037c0)=""/236, 0xec}}, {{0x0, 0x0, &(0x7f0000003bc0)=[{0x0, 0xe00000000000000}, {&(0x7f0000003a00)=""/190, 0xbe}, {&(0x7f0000003ac0)=""/131, 0x83}, {0x0}], 0x4, &(0x7f0000003c00)=""/73, 0x49}}, {{&(0x7f0000003c80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, 0x0, 0x0, &(0x7f0000003e00)=""/48, 0x30}}], 0x4, 0x40000121, 0x0)
shutdown(r2, 0x0)

13:45:19 executing program 0:
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @mcast2}}}, &(0x7f00000000c0)=0x90)

13:45:19 executing program 4:
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000000)={0x0, 0xffff}, 0x8)

13:45:19 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r1)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400ee5c99f8435ecde50a0412", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x1, 0x803, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="50000000100001040000ff0f0000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e00000000180002800c0002001c0000001b000000060001000100000008000500", @ANYRES32=r5], 0x50}}, 0x0)
r6 = socket(0x1, 0x803, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080))
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x1e}}]}}}, @IFLA_LINK={0x8, 0x5, r7}]}, 0x50}}, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = socket(0x1, 0x803, 0x0)
getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000540)=ANY=[@ANYBLOB="20000000110003040000007bb000000000000000", @ANYRES32=r10], 0x20}}, 0x0)

13:45:19 executing program 5:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000240)={@val, @val={0x5, 0x0, 0x0, 0x0, 0x54}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "000003", 0x190, 0x3a, 0x0, @empty, @mcast2, {[@routing={0x0, 0x2, 0x0, 0x0, 0x0, [@empty]}], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x0, "ee7b615d"}, {}, {0x2b, 0x3, "6f8c008275021d683910c309293188a7c747eb2278d2794784"}, {0x0, 0x28, "4429118927041312255133e4d2b8b863b5f5b4ace38952e94c581c85d2d86844f548415db4dbf1992868a2e15095b531ce55d4620ec637afdcc990a4d6bfecb289917d24b31a2ddeb64383b176b823cc203ec1927487b7a00d6a3446cf7db79e14b2206d882c28611fa4d8289337cd75b4688120c73a2710947b908fde68a05a0777a170a14e85c7849462b3f5c3152cf0f3d91c5db93dc4d8f9e6b53708650dc375e6da3650b5ff4079971f6e3ef363382a16b8ae07b7307b5619092e4669dbca480d25738314135509eda68f712b9b09bdb485ea0914590b7ae01c2e34832f16c23c82b22b6ba550acfcede288a5237a06b3f5e09b6e5a0404544efe1474664b985f070121e82070a9f4513c2031a58a3d99e99284b812c0f047061139620890416c9defce02fa49cd1dd14b22df7250314ccb3dfd9827f892656911150cd9d921a8"}]}}}}}, 0x1c6)

13:45:19 executing program 2:
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
syz_genetlink_get_family_id$tipc(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$NFT_BATCH(r1, 0x0, 0x1)
getsockname$packet(0xffffffffffffffff, &(0x7f0000001340), &(0x7f0000001380)=0x14)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r1, 0x0, 0x0)
sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, 0x0, 0x0)
getsockname(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001400)={&(0x7f0000000140), 0xc, &(0x7f0000000340)={&(0x7f0000000f00)=@newqdisc={0x1b8, 0x24, 0x0, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0xc}, {0x10, 0xffff}, {0xf, 0xfff2}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_RATE={0x6, 0x5, {0x8}}, @qdisc_kind_options=@q_choke={{0xa}, {0x18, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x4e0, 0x2, 0x6, 0x0, 0x1e, 0x2}}]}}, @qdisc_kind_options=@q_codel={{0xa}, {0x54, 0x2, [@TCA_CODEL_TARGET={0x8}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x4}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_LIMIT={0x8, 0x2, 0x2}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x80}, @TCA_CODEL_TARGET={0x8, 0x1, 0xb9}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_INTERVAL={0x8, 0x3, 0x7}, @TCA_CODEL_LIMIT={0x8, 0x2, 0x5}]}}, @TCA_STAB={0xf8, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x8, 0xc000, 0x9, 0x1, 0x80000001, 0x4, 0xa}}, {0x18, 0x2, [0x3, 0x4, 0x3, 0xff, 0x200, 0xfe01, 0x7, 0x8, 0x0, 0x2]}}, {{0x1c, 0x1, {0x0, 0x20, 0x1, 0xfc000, 0x1}}, {0x4}}, {{0x1c, 0x1, {0x3, 0x11, 0x100, 0x5, 0x0, 0x2dd, 0x7fff, 0x4}}, {0xc, 0x2, [0x6, 0x100, 0x2, 0x71]}}, {{0x1c, 0x1, {0x0, 0x40, 0x5, 0x3, 0x2}}, {0x4}}, {{0x1c, 0x1, {0x4, 0x8, 0x1ff, 0x3ff, 0x2, 0x5, 0x9, 0x5}}, {0xe, 0x2, [0x1, 0x1, 0xb41, 0x0, 0x8]}}, {{0x1c, 0x1, {0x9, 0x3f, 0x4, 0x3, 0x0, 0x4, 0x9, 0x5}}, {0xe, 0x2, [0x0, 0x0, 0x5ca, 0xfff, 0xfffb]}}]}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x81}]}, 0x1b8}, 0x1, 0x0, 0x0, 0x20000110}, 0x800)
connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10)
writev(r2, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1)
recvmmsg(r2, &(0x7f0000003e40)=[{{0x0, 0x3, 0x0, 0x0, &(0x7f00000035c0)=""/241, 0xf1}}, {{&(0x7f00000036c0)=@un=@abs, 0x80, &(0x7f0000003780)=[{&(0x7f0000003740)=""/4, 0x7ffff}], 0x1, &(0x7f00000037c0)=""/236, 0xec}}, {{0x0, 0x0, &(0x7f0000003bc0)=[{0x0, 0xe00000000000000}, {&(0x7f0000003a00)=""/190, 0xbe}, {&(0x7f0000003ac0)=""/131, 0x83}, {0x0}], 0x4, &(0x7f0000003c00)=""/73, 0x49}}, {{&(0x7f0000003c80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, 0x0, 0x0, &(0x7f0000003e00)=""/48, 0x30}}], 0x4, 0x40000121, 0x0)
shutdown(r2, 0x0)

13:45:19 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_NL_MON_PEER_GET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000007c0)={0xec4, 0x0, 0x0, 0x0, 0x0, {}, [@TIPC_NLA_MON={0x4c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_REF={0x8}]}, @TIPC_NLA_NODE={0xe64, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x45, 0x4, {'gcm(aes)\x00', 0x1d, "037dec722d52ba3a648351b7ad4f4534ea842089b77ba156a42d520cbb"}}, @TIPC_NLA_NODE_REKEYING={0x8}, @TIPC_NLA_NODE_ID={0xe0d, 0x3, "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"}]}]}, 0xec4}}, 0x0)

[ 2234.363116][T22213] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'.
13:45:19 executing program 0:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f00000001c0)={'tunl0\x00', &(0x7f0000000100)={'tunl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @multicast1}}}})

13:45:19 executing program 4:
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f00000000c0), &(0x7f0000000100)=0x4)

13:45:19 executing program 2:
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
syz_genetlink_get_family_id$tipc(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$NFT_BATCH(r1, &(0x7f00000015c0)={0x0, 0x0, &(0x7f0000001580)={&(0x7f00000014c0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_PAYLOAD_CSUM_OFFSET={0x8, 0x7, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}]}, @NFT_MSG_DELSETELEM={0x1c, 0xe, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}]}], {0x14}}, 0x94}, 0x1, 0x0, 0x0, 0x1}, 0x1)
getsockname$packet(0xffffffffffffffff, &(0x7f0000001340), &(0x7f0000001380)=0x14)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r1, 0x0, 0x0)
sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, 0x0, 0x0)
getsockname(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001400)={&(0x7f0000000140), 0xc, &(0x7f0000000340)={&(0x7f0000000f00)=@newqdisc={0x1b8, 0x24, 0x0, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0xc}, {0x10, 0xffff}, {0xf, 0xfff2}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_RATE={0x6, 0x5, {0x8}}, @qdisc_kind_options=@q_choke={{0xa}, {0x18, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x4e0, 0x2, 0x6, 0x0, 0x1e, 0x2}}]}}, @qdisc_kind_options=@q_codel={{0xa}, {0x54, 0x2, [@TCA_CODEL_TARGET={0x8}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x4}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_LIMIT={0x8, 0x2, 0x2}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x80}, @TCA_CODEL_TARGET={0x8, 0x1, 0xb9}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_INTERVAL={0x8, 0x3, 0x7}, @TCA_CODEL_LIMIT={0x8, 0x2, 0x5}]}}, @TCA_STAB={0xf8, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x8, 0xc000, 0x9, 0x1, 0x80000001, 0x4, 0xa}}, {0x18, 0x2, [0x3, 0x4, 0x3, 0xff, 0x200, 0xfe01, 0x7, 0x8, 0x0, 0x2]}}, {{0x1c, 0x1, {0x0, 0x20, 0x1, 0xfc000, 0x1}}, {0x4}}, {{0x1c, 0x1, {0x3, 0x11, 0x100, 0x5, 0x0, 0x2dd, 0x7fff, 0x4}}, {0xc, 0x2, [0x6, 0x100, 0x2, 0x71]}}, {{0x1c, 0x1, {0x0, 0x40, 0x5, 0x3, 0x2}}, {0x4}}, {{0x1c, 0x1, {0x4, 0x8, 0x1ff, 0x3ff, 0x2, 0x5, 0x9, 0x5}}, {0xe, 0x2, [0x1, 0x1, 0xb41, 0x0, 0x8]}}, {{0x1c, 0x1, {0x9, 0x3f, 0x4, 0x3, 0x0, 0x4, 0x9, 0x5}}, {0xe, 0x2, [0x0, 0x0, 0x5ca, 0xfff, 0xfffb]}}]}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x81}]}, 0x1b8}, 0x1, 0x0, 0x0, 0x20000110}, 0x800)
connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10)
writev(r2, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1)
recvmmsg(r2, &(0x7f0000003e40)=[{{0x0, 0x3, 0x0, 0x0, &(0x7f00000035c0)=""/241, 0xf1}}, {{&(0x7f00000036c0)=@un=@abs, 0x80, &(0x7f0000003780)=[{&(0x7f0000003740)=""/4, 0x7ffff}], 0x1, &(0x7f00000037c0)=""/236, 0xec}}, {{0x0, 0x0, &(0x7f0000003bc0)=[{0x0, 0xe00000000000000}, {&(0x7f0000003a00)=""/190, 0xbe}, {&(0x7f0000003ac0)=""/131, 0x83}, {0x0}], 0x4, &(0x7f0000003c00)=""/73, 0x49}}, {{&(0x7f0000003c80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, 0x0, 0x0, &(0x7f0000003e00)=""/48, 0x30}}], 0x4, 0x40000121, 0x0)
shutdown(r2, 0x0)

13:45:19 executing program 0:
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, 0x0, &(0x7f00000001c0))

13:45:20 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f000000c380)='/proc/crypto\x00', 0x0, 0x0)
read$FUSE(r3, &(0x7f0000000200)={0x2020}, 0x2020)
execve(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000280)=[0x0, 0x0], &(0x7f0000000380)=[&(0x7f00000002c0)='*$%}\xce*\x00', &(0x7f0000000300)='\x00'])

13:45:20 executing program 5:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000240)={@val, @val={0x5, 0x0, 0x0, 0x0, 0x54}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "000003", 0x190, 0x3a, 0x0, @empty, @mcast2, {[@routing={0x0, 0x2, 0x0, 0x0, 0x0, [@empty]}], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x0, "ee7b615d"}, {}, {0x2b, 0x3, "6f8c008275021d683910c309293188a7c747eb2278d2794784"}, {0x0, 0x28, "4429118927041312255133e4d2b8b863b5f5b4ace38952e94c581c85d2d86844f548415db4dbf1992868a2e15095b531ce55d4620ec637afdcc990a4d6bfecb289917d24b31a2ddeb64383b176b823cc203ec1927487b7a00d6a3446cf7db79e14b2206d882c28611fa4d8289337cd75b4688120c73a2710947b908fde68a05a0777a170a14e85c7849462b3f5c3152cf0f3d91c5db93dc4d8f9e6b53708650dc375e6da3650b5ff4079971f6e3ef363382a16b8ae07b7307b5619092e4669dbca480d25738314135509eda68f712b9b09bdb485ea0914590b7ae01c2e34832f16c23c82b22b6ba550acfcede288a5237a06b3f5e09b6e5a0404544efe1474664b985f070121e82070a9f4513c2031a58a3d99e99284b812c0f047061139620890416c9defce02fa49cd1dd14b22df7250314ccb3dfd9827f892656911150cd9d921a8"}]}}}}}, 0x1c6)

13:45:20 executing program 0:
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, 0x0, &(0x7f00000001c0))

13:45:20 executing program 2:
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
syz_genetlink_get_family_id$tipc(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$NFT_BATCH(r1, &(0x7f00000015c0)={0x0, 0x0, &(0x7f0000001580)={&(0x7f00000014c0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_PAYLOAD_CSUM_OFFSET={0x8, 0x7, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}]}, @NFT_MSG_DELSETELEM={0x1c, 0xe, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}]}], {0x14}}, 0x94}, 0x1, 0x0, 0x0, 0x1}, 0x1)
getsockname$packet(0xffffffffffffffff, &(0x7f0000001340), &(0x7f0000001380)=0x14)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r1, 0x0, 0x0)
sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, 0x0, 0x0)
getsockname(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001400)={&(0x7f0000000140), 0xc, &(0x7f0000000340)={&(0x7f0000000f00)=@newqdisc={0x1b8, 0x24, 0x0, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0xc}, {0x10, 0xffff}, {0xf, 0xfff2}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_RATE={0x6, 0x5, {0x8}}, @qdisc_kind_options=@q_choke={{0xa}, {0x18, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x4e0, 0x2, 0x6, 0x0, 0x1e, 0x2}}]}}, @qdisc_kind_options=@q_codel={{0xa}, {0x54, 0x2, [@TCA_CODEL_TARGET={0x8}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x4}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_LIMIT={0x8, 0x2, 0x2}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x80}, @TCA_CODEL_TARGET={0x8, 0x1, 0xb9}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_INTERVAL={0x8, 0x3, 0x7}, @TCA_CODEL_LIMIT={0x8, 0x2, 0x5}]}}, @TCA_STAB={0xf8, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x8, 0xc000, 0x9, 0x1, 0x80000001, 0x4, 0xa}}, {0x18, 0x2, [0x3, 0x4, 0x3, 0xff, 0x200, 0xfe01, 0x7, 0x8, 0x0, 0x2]}}, {{0x1c, 0x1, {0x0, 0x20, 0x1, 0xfc000, 0x1}}, {0x4}}, {{0x1c, 0x1, {0x3, 0x11, 0x100, 0x5, 0x0, 0x2dd, 0x7fff, 0x4}}, {0xc, 0x2, [0x6, 0x100, 0x2, 0x71]}}, {{0x1c, 0x1, {0x0, 0x40, 0x5, 0x3, 0x2}}, {0x4}}, {{0x1c, 0x1, {0x4, 0x8, 0x1ff, 0x3ff, 0x2, 0x5, 0x9, 0x5}}, {0xe, 0x2, [0x1, 0x1, 0xb41, 0x0, 0x8]}}, {{0x1c, 0x1, {0x9, 0x3f, 0x4, 0x3, 0x0, 0x4, 0x9, 0x5}}, {0xe, 0x2, [0x0, 0x0, 0x5ca, 0xfff, 0xfffb]}}]}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x81}]}, 0x1b8}, 0x1, 0x0, 0x0, 0x20000110}, 0x800)
connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10)
writev(r2, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1)
recvmmsg(r2, &(0x7f0000003e40)=[{{0x0, 0x3, 0x0, 0x0, &(0x7f00000035c0)=""/241, 0xf1}}, {{&(0x7f00000036c0)=@un=@abs, 0x80, &(0x7f0000003780)=[{&(0x7f0000003740)=""/4, 0x7ffff}], 0x1, &(0x7f00000037c0)=""/236, 0xec}}, {{0x0, 0x0, &(0x7f0000003bc0)=[{0x0, 0xe00000000000000}, {&(0x7f0000003a00)=""/190, 0xbe}, {&(0x7f0000003ac0)=""/131, 0x83}, {0x0}], 0x4, &(0x7f0000003c00)=""/73, 0x49}}, {{&(0x7f0000003c80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, 0x0, 0x0, &(0x7f0000003e00)=""/48, 0x30}}], 0x4, 0x40000121, 0x0)
shutdown(r2, 0x0)

13:45:20 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r1)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400ee5c99f8435ecde50a0412", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x1, 0x803, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="50000000100001040000ff0f0000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e00000000180002800c0002001c0000001b000000060001000100000008000500", @ANYRES32=r5], 0x50}}, 0x0)
r6 = socket(0x1, 0x803, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080))
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x1e}}]}}}, @IFLA_LINK={0x8, 0x5, r7}]}, 0x50}}, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = socket(0x1, 0x803, 0x0)
getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000540)=ANY=[@ANYBLOB="20000000110003040000007bb000000000000000", @ANYRES32=r10], 0x20}}, 0x0)

13:45:20 executing program 4:
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000080)=@assoc_value, 0x8)

13:45:20 executing program 4:
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, &(0x7f0000000180))
arch_prctl$ARCH_GET_XCOMP_PERM(0x4001, &(0x7f00000000c0))

13:45:20 executing program 0:
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f00000002c0)=@assoc_value={0x0, 0x4}, 0x8)

13:45:20 executing program 2:
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
syz_genetlink_get_family_id$tipc(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$NFT_BATCH(r1, &(0x7f00000015c0)={0x0, 0x0, &(0x7f0000001580)={&(0x7f00000014c0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_PAYLOAD_CSUM_OFFSET={0x8, 0x7, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}]}, @NFT_MSG_DELSETELEM={0x1c, 0xe, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}]}], {0x14}}, 0x94}, 0x1, 0x0, 0x0, 0x1}, 0x1)
getsockname$packet(0xffffffffffffffff, &(0x7f0000001340), &(0x7f0000001380)=0x14)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r1, 0x0, 0x0)
sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, 0x0, 0x0)
getsockname(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001400)={&(0x7f0000000140), 0xc, &(0x7f0000000340)={&(0x7f0000000f00)=@newqdisc={0x1b8, 0x24, 0x0, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0xc}, {0x10, 0xffff}, {0xf, 0xfff2}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_RATE={0x6, 0x5, {0x8}}, @qdisc_kind_options=@q_choke={{0xa}, {0x18, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x4e0, 0x2, 0x6, 0x0, 0x1e, 0x2}}]}}, @qdisc_kind_options=@q_codel={{0xa}, {0x54, 0x2, [@TCA_CODEL_TARGET={0x8}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x4}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_LIMIT={0x8, 0x2, 0x2}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x80}, @TCA_CODEL_TARGET={0x8, 0x1, 0xb9}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_INTERVAL={0x8, 0x3, 0x7}, @TCA_CODEL_LIMIT={0x8, 0x2, 0x5}]}}, @TCA_STAB={0xf8, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x8, 0xc000, 0x9, 0x1, 0x80000001, 0x4, 0xa}}, {0x18, 0x2, [0x3, 0x4, 0x3, 0xff, 0x200, 0xfe01, 0x7, 0x8, 0x0, 0x2]}}, {{0x1c, 0x1, {0x0, 0x20, 0x1, 0xfc000, 0x1}}, {0x4}}, {{0x1c, 0x1, {0x3, 0x11, 0x100, 0x5, 0x0, 0x2dd, 0x7fff, 0x4}}, {0xc, 0x2, [0x6, 0x100, 0x2, 0x71]}}, {{0x1c, 0x1, {0x0, 0x40, 0x5, 0x3, 0x2}}, {0x4}}, {{0x1c, 0x1, {0x4, 0x8, 0x1ff, 0x3ff, 0x2, 0x5, 0x9, 0x5}}, {0xe, 0x2, [0x1, 0x1, 0xb41, 0x0, 0x8]}}, {{0x1c, 0x1, {0x9, 0x3f, 0x4, 0x3, 0x0, 0x4, 0x9, 0x5}}, {0xe, 0x2, [0x0, 0x0, 0x5ca, 0xfff, 0xfffb]}}]}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x81}]}, 0x1b8}, 0x1, 0x0, 0x0, 0x20000110}, 0x800)
connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10)
writev(r2, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1)
recvmmsg(r2, &(0x7f0000003e40)=[{{0x0, 0x3, 0x0, 0x0, &(0x7f00000035c0)=""/241, 0xf1}}, {{&(0x7f00000036c0)=@un=@abs, 0x80, &(0x7f0000003780)=[{&(0x7f0000003740)=""/4, 0x7ffff}], 0x1, &(0x7f00000037c0)=""/236, 0xec}}, {{0x0, 0x0, &(0x7f0000003bc0)=[{0x0, 0xe00000000000000}, {&(0x7f0000003a00)=""/190, 0xbe}, {&(0x7f0000003ac0)=""/131, 0x83}, {0x0}], 0x4, &(0x7f0000003c00)=""/73, 0x49}}, {{&(0x7f0000003c80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, 0x0, 0x0, &(0x7f0000003e00)=""/48, 0x30}}], 0x4, 0x40000121, 0x0)
shutdown(r2, 0x0)

[ 2235.398691][T22239] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'.
13:45:20 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$BATADV_CMD_GET_GATEWAYS(r0, 0x0, 0x0)
syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000dc0), 0xffffffffffffffff)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$batadv(&(0x7f0000001480), 0xffffffffffffffff)
sendmsg$BATADV_CMD_SET_VLAN(r0, 0x0, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f00000016c0), 0xffffffffffffffff)

13:45:20 executing program 0:
syz_emit_ethernet(0x3e, &(0x7f0000000000)={@link_local, @dev, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "0d53a2", 0x8, 0x0, 0x0, @remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {[@fragment={0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x66}]}}}}}, 0x0)

13:45:20 executing program 2:
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
syz_genetlink_get_family_id$tipc(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$NFT_BATCH(r1, &(0x7f00000015c0)={&(0x7f0000000300), 0xc, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x1)
getsockname$packet(0xffffffffffffffff, &(0x7f0000001340), &(0x7f0000001380)=0x14)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r1, 0x0, 0x0)
sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, 0x0, 0x0)
getsockname(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001400)={&(0x7f0000000140), 0xc, &(0x7f0000000340)={&(0x7f0000000f00)=@newqdisc={0x1b8, 0x24, 0x0, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0xc}, {0x10, 0xffff}, {0xf, 0xfff2}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_RATE={0x6, 0x5, {0x8}}, @qdisc_kind_options=@q_choke={{0xa}, {0x18, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x4e0, 0x2, 0x6, 0x0, 0x1e, 0x2}}]}}, @qdisc_kind_options=@q_codel={{0xa}, {0x54, 0x2, [@TCA_CODEL_TARGET={0x8}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x4}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_LIMIT={0x8, 0x2, 0x2}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x80}, @TCA_CODEL_TARGET={0x8, 0x1, 0xb9}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_INTERVAL={0x8, 0x3, 0x7}, @TCA_CODEL_LIMIT={0x8, 0x2, 0x5}]}}, @TCA_STAB={0xf8, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x8, 0xc000, 0x9, 0x1, 0x80000001, 0x4, 0xa}}, {0x18, 0x2, [0x3, 0x4, 0x3, 0xff, 0x200, 0xfe01, 0x7, 0x8, 0x0, 0x2]}}, {{0x1c, 0x1, {0x0, 0x20, 0x1, 0xfc000, 0x1}}, {0x4}}, {{0x1c, 0x1, {0x3, 0x11, 0x100, 0x5, 0x0, 0x2dd, 0x7fff, 0x4}}, {0xc, 0x2, [0x6, 0x100, 0x2, 0x71]}}, {{0x1c, 0x1, {0x0, 0x40, 0x5, 0x3, 0x2}}, {0x4}}, {{0x1c, 0x1, {0x4, 0x8, 0x1ff, 0x3ff, 0x2, 0x5, 0x9, 0x5}}, {0xe, 0x2, [0x1, 0x1, 0xb41, 0x0, 0x8]}}, {{0x1c, 0x1, {0x9, 0x3f, 0x4, 0x3, 0x0, 0x4, 0x9, 0x5}}, {0xe, 0x2, [0x0, 0x0, 0x5ca, 0xfff, 0xfffb]}}]}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x81}]}, 0x1b8}, 0x1, 0x0, 0x0, 0x20000110}, 0x800)
connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10)
writev(r2, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1)
recvmmsg(r2, &(0x7f0000003e40)=[{{0x0, 0x3, 0x0, 0x0, &(0x7f00000035c0)=""/241, 0xf1}}, {{&(0x7f00000036c0)=@un=@abs, 0x80, &(0x7f0000003780)=[{&(0x7f0000003740)=""/4, 0x7ffff}], 0x1, &(0x7f00000037c0)=""/236, 0xec}}, {{0x0, 0x0, &(0x7f0000003bc0)=[{0x0, 0xe00000000000000}, {&(0x7f0000003a00)=""/190, 0xbe}, {&(0x7f0000003ac0)=""/131, 0x83}, {0x0}], 0x4, &(0x7f0000003c00)=""/73, 0x49}}, {{&(0x7f0000003c80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, 0x0, 0x0, &(0x7f0000003e00)=""/48, 0x30}}], 0x4, 0x40000121, 0x0)
shutdown(r2, 0x0)

13:45:21 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f000000c380)='/proc/crypto\x00', 0x0, 0x0)
read$FUSE(r3, &(0x7f0000000200)={0x2020}, 0x2020)
execve(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000280)=[0x0, 0x0], &(0x7f0000000380)=[&(0x7f00000002c0)='*$%}\xce*\x00', &(0x7f0000000300)='\x00'])

13:45:21 executing program 5:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000240)={@val, @val={0x5, 0x0, 0x0, 0x0, 0x54}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "000003", 0x190, 0x3a, 0x0, @empty, @mcast2, {[@routing={0x0, 0x2, 0x0, 0x0, 0x0, [@empty]}], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x0, "ee7b615d"}, {}, {0x2b, 0x3, "6f8c008275021d683910c309293188a7c747eb2278d2794784"}, {0x0, 0x28, "4429118927041312255133e4d2b8b863b5f5b4ace38952e94c581c85d2d86844f548415db4dbf1992868a2e15095b531ce55d4620ec637afdcc990a4d6bfecb289917d24b31a2ddeb64383b176b823cc203ec1927487b7a00d6a3446cf7db79e14b2206d882c28611fa4d8289337cd75b4688120c73a2710947b908fde68a05a0777a170a14e85c7849462b3f5c3152cf0f3d91c5db93dc4d8f9e6b53708650dc375e6da3650b5ff4079971f6e3ef363382a16b8ae07b7307b5619092e4669dbca480d25738314135509eda68f712b9b09bdb485ea0914590b7ae01c2e34832f16c23c82b22b6ba550acfcede288a5237a06b3f5e09b6e5a0404544efe1474664b985f070121e82070a9f4513c2031a58a3d99e99284b812c0f047061139620890416c9defce02fa49cd1dd14b22df7250314ccb3dfd9827f892656911150cd9d921a8"}]}}}}}, 0x1c6)

13:45:21 executing program 4:
syz_emit_ethernet(0x12, &(0x7f0000000000)={@link_local, @multicast, @void, {@llc={0x4, {@llc={0x42, 0x0, 'G', 'O'}}}}}, 0x0)

13:45:21 executing program 2:
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
syz_genetlink_get_family_id$tipc(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$NFT_BATCH(r1, &(0x7f00000015c0)={&(0x7f0000000300), 0xc, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x1)
getsockname$packet(0xffffffffffffffff, &(0x7f0000001340), &(0x7f0000001380)=0x14)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r1, 0x0, 0x0)
sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, 0x0, 0x0)
getsockname(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001400)={&(0x7f0000000140), 0xc, &(0x7f0000000340)={&(0x7f0000000f00)=@newqdisc={0x1b8, 0x24, 0x0, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0xc}, {0x10, 0xffff}, {0xf, 0xfff2}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_RATE={0x6, 0x5, {0x8}}, @qdisc_kind_options=@q_choke={{0xa}, {0x18, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x4e0, 0x2, 0x6, 0x0, 0x1e, 0x2}}]}}, @qdisc_kind_options=@q_codel={{0xa}, {0x54, 0x2, [@TCA_CODEL_TARGET={0x8}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x4}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_LIMIT={0x8, 0x2, 0x2}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x80}, @TCA_CODEL_TARGET={0x8, 0x1, 0xb9}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_INTERVAL={0x8, 0x3, 0x7}, @TCA_CODEL_LIMIT={0x8, 0x2, 0x5}]}}, @TCA_STAB={0xf8, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x8, 0xc000, 0x9, 0x1, 0x80000001, 0x4, 0xa}}, {0x18, 0x2, [0x3, 0x4, 0x3, 0xff, 0x200, 0xfe01, 0x7, 0x8, 0x0, 0x2]}}, {{0x1c, 0x1, {0x0, 0x20, 0x1, 0xfc000, 0x1}}, {0x4}}, {{0x1c, 0x1, {0x3, 0x11, 0x100, 0x5, 0x0, 0x2dd, 0x7fff, 0x4}}, {0xc, 0x2, [0x6, 0x100, 0x2, 0x71]}}, {{0x1c, 0x1, {0x0, 0x40, 0x5, 0x3, 0x2}}, {0x4}}, {{0x1c, 0x1, {0x4, 0x8, 0x1ff, 0x3ff, 0x2, 0x5, 0x9, 0x5}}, {0xe, 0x2, [0x1, 0x1, 0xb41, 0x0, 0x8]}}, {{0x1c, 0x1, {0x9, 0x3f, 0x4, 0x3, 0x0, 0x4, 0x9, 0x5}}, {0xe, 0x2, [0x0, 0x0, 0x5ca, 0xfff, 0xfffb]}}]}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x81}]}, 0x1b8}, 0x1, 0x0, 0x0, 0x20000110}, 0x800)
connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10)
writev(r2, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1)
recvmmsg(r2, &(0x7f0000003e40)=[{{0x0, 0x3, 0x0, 0x0, &(0x7f00000035c0)=""/241, 0xf1}}, {{&(0x7f00000036c0)=@un=@abs, 0x80, &(0x7f0000003780)=[{&(0x7f0000003740)=""/4, 0x7ffff}], 0x1, &(0x7f00000037c0)=""/236, 0xec}}, {{0x0, 0x0, &(0x7f0000003bc0)=[{0x0, 0xe00000000000000}, {&(0x7f0000003a00)=""/190, 0xbe}, {&(0x7f0000003ac0)=""/131, 0x83}, {0x0}], 0x4, &(0x7f0000003c00)=""/73, 0x49}}, {{&(0x7f0000003c80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, 0x0, 0x0, &(0x7f0000003e00)=""/48, 0x30}}], 0x4, 0x40000121, 0x0)
shutdown(r2, 0x0)

13:45:21 executing program 0:
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x81, 0x9, 0x7}, 0x48)

13:45:21 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r1)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400ee5c99f8435ecde50a0412", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x1, 0x803, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="50000000100001040000ff0f0000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e00000000180002800c0002001c0000001b000000060001000100000008000500", @ANYRES32=r5], 0x50}}, 0x0)
socket(0x1, 0x803, 0x0)
r6 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x1e}}]}}}, @IFLA_LINK={0x8}]}, 0x50}}, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
r8 = socket(0x1, 0x803, 0x0)
getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000540)=ANY=[@ANYBLOB="20000000110003040000007bb000000000000000", @ANYRES32=r9], 0x20}}, 0x0)

13:45:21 executing program 4:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$OSF_MSG_ADD(r0, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000240)={0x268, 0x0, 0x5, 0x603, 0x0, 0x0, {}, [{{0x254, 0x1, {{}, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz0\x00', "8c3a0e39e564e8d3bc7a7cced0e17cfa754fef9fae87b8347c75ecb80f5d47cb", "18796a3c8b043ea6492c87c095094f69139a45833b661b36fa43eced24b91086"}}}]}, 0x268}}, 0x0)

13:45:21 executing program 0:
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
accept(r0, 0x0, 0x0)

13:45:21 executing program 2:
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
syz_genetlink_get_family_id$tipc(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$NFT_BATCH(r1, &(0x7f00000015c0)={&(0x7f0000000300), 0xc, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x1)
getsockname$packet(0xffffffffffffffff, &(0x7f0000001340), &(0x7f0000001380)=0x14)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r1, 0x0, 0x0)
sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, 0x0, 0x0)
getsockname(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001400)={&(0x7f0000000140), 0xc, &(0x7f0000000340)={&(0x7f0000000f00)=@newqdisc={0x1b8, 0x24, 0x0, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0xc}, {0x10, 0xffff}, {0xf, 0xfff2}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_RATE={0x6, 0x5, {0x8}}, @qdisc_kind_options=@q_choke={{0xa}, {0x18, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x4e0, 0x2, 0x6, 0x0, 0x1e, 0x2}}]}}, @qdisc_kind_options=@q_codel={{0xa}, {0x54, 0x2, [@TCA_CODEL_TARGET={0x8}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x4}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_LIMIT={0x8, 0x2, 0x2}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x80}, @TCA_CODEL_TARGET={0x8, 0x1, 0xb9}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_INTERVAL={0x8, 0x3, 0x7}, @TCA_CODEL_LIMIT={0x8, 0x2, 0x5}]}}, @TCA_STAB={0xf8, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x8, 0xc000, 0x9, 0x1, 0x80000001, 0x4, 0xa}}, {0x18, 0x2, [0x3, 0x4, 0x3, 0xff, 0x200, 0xfe01, 0x7, 0x8, 0x0, 0x2]}}, {{0x1c, 0x1, {0x0, 0x20, 0x1, 0xfc000, 0x1}}, {0x4}}, {{0x1c, 0x1, {0x3, 0x11, 0x100, 0x5, 0x0, 0x2dd, 0x7fff, 0x4}}, {0xc, 0x2, [0x6, 0x100, 0x2, 0x71]}}, {{0x1c, 0x1, {0x0, 0x40, 0x5, 0x3, 0x2}}, {0x4}}, {{0x1c, 0x1, {0x4, 0x8, 0x1ff, 0x3ff, 0x2, 0x5, 0x9, 0x5}}, {0xe, 0x2, [0x1, 0x1, 0xb41, 0x0, 0x8]}}, {{0x1c, 0x1, {0x9, 0x3f, 0x4, 0x3, 0x0, 0x4, 0x9, 0x5}}, {0xe, 0x2, [0x0, 0x0, 0x5ca, 0xfff, 0xfffb]}}]}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x81}]}, 0x1b8}, 0x1, 0x0, 0x0, 0x20000110}, 0x800)
connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10)
writev(r2, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1)
recvmmsg(r2, &(0x7f0000003e40)=[{{0x0, 0x3, 0x0, 0x0, &(0x7f00000035c0)=""/241, 0xf1}}, {{&(0x7f00000036c0)=@un=@abs, 0x80, &(0x7f0000003780)=[{&(0x7f0000003740)=""/4, 0x7ffff}], 0x1, &(0x7f00000037c0)=""/236, 0xec}}, {{0x0, 0x0, &(0x7f0000003bc0)=[{0x0, 0xe00000000000000}, {&(0x7f0000003a00)=""/190, 0xbe}, {&(0x7f0000003ac0)=""/131, 0x83}, {0x0}], 0x4, &(0x7f0000003c00)=""/73, 0x49}}, {{&(0x7f0000003c80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, 0x0, 0x0, &(0x7f0000003e00)=""/48, 0x30}}], 0x4, 0x40000121, 0x0)
shutdown(r2, 0x0)

[ 2236.389845][T22269] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'.
13:45:21 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000680)={0x0, {0x2, 0x4e22}, {0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x2, 0x4e24, @multicast2}, 0x354, 0x0, 0x0, 0x0, 0xfffa, &(0x7f0000000580)='ipvlan0\x00', 0xffffffffffffffc1, 0x8, 0x14})
ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000900)={0x0, {0x2, 0x4e23, @local}, {0x2, 0x4e20, @empty}, {0x2, 0x4e23, @broadcast}, 0x200, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000300)='batadv_slave_1\x00', 0x9, 0x5, 0xdb})
getsockopt$EBT_SO_GET_INFO(r0, 0x0, 0x80, &(0x7f00000009c0)={'broute\x00', 0x0, 0x0, 0x0, [0xffff, 0x8, 0x0, 0x3, 0x8653, 0xfffffffffffffff7]}, &(0x7f0000000080)=0x78)
unshare(0x40000000)
mmap(&(0x7f00004f5000/0x2000)=nil, 0x2000, 0x3, 0x30, 0xffffffffffffffff, 0xd3691000)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000480)={0xffffffffffffffff, &(0x7f0000000cc0)="f7463800cbdec122707151f05fdbd8938bbf8e35f2cd4fec8d9bae70aadf80cf9f98c710a7807cc71a3f9b51e9b206eb0f7836d047f5da73aa0e8a6592fe9606764f157767f90280b4acbf9f0f8eb1501d65e4083ce3a7dad0a7dc6b7f1034c9418fa54731ddfeebf4731dc0e048536f934865eca5e2f3b831c553128246b3154a21a1ebada7191d32809cfd3d7f4625215736f672", &(0x7f0000000c00)=@buf="d81112022f5038422a647a383fd134e8f791fb1ae2d4d27d71a49366569e0e74dd2e02ba840d740118a33cad199eac48991e396323c1ddf4da1a8864c62ec7aca92cd1e22f6a8190ab00e0d2b0c1ea174bb1144b0fd1f6d67d3010ca4cd57a27d2bdc1efd25bd9a3d2cddce87c05e9ad3ab7e1bd9958695043ebfb342fcfb432fd78102494f470f978bb1ce16c8c096660fa205105", 0x4}, 0x20)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
unshare(0x100)
sendfile(r0, 0xffffffffffffffff, &(0x7f0000000b80)=0x6, 0x3)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000000), 0x4)
getsockopt$EBT_SO_GET_INFO(r3, 0x0, 0x80, &(0x7f00000004c0)={'nat\x00', 0x0, 0x0, 0x0, [0x1, 0xffffffffffffffff, 0x0, 0xae, 0x401, 0x8]}, &(0x7f0000000280)=0x78)
ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000100)={0x0, {0x2, 0x4e23, @remote}, {0x2, 0x0, @remote}, {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x36}}, 0x107, 0x0, 0x0, 0x0, 0xfc01})
sendmsg$TIPC_NL_NET_GET(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4090014}, 0xc, &(0x7f0000000740)={&(0x7f0000000d80)=ANY=[@ANYBLOB="700002001a6b19b553e827f52cabce6f4a18bd04d2603a6492cca0c878f4c51719c74293c0629af2e7a290e106ed4827f3fd2753dcae35209eded4569ad3b1e61ab2f40071634127f6d542ac6a371af8072eeaeea9569259aee61b5280e925f21a4c4c021666580b0ca51a49dffbcc40126689c9598fc75996ebcaad927cb81ba078fdb3d8c4f3a0ff888b772a3789bf193f84f11bf1a6e7ec23f3d7a18c87560e231afb658c", @ANYRES16=0x0, @ANYBLOB="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"], 0x70}}, 0x0)
unshare(0x40000080)
r4 = socket(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000840)={0x0, {0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x4, 0x0, @loopback}, {0x2, 0x4e23, @remote}, 0x1c4, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)='lo\x00', 0xffffffff})
setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f00000005c0)={0x0, 0x7, 0x0, 0x4}, 0x32)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r4, 0x8982, &(0x7f0000000340)={0x0, 'team0\x00', {0x7}, 0x401})
syz_genetlink_get_family_id$nl80211(&(0x7f00000022c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000011c0)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0)
ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000200)={0x0, {0x2, 0x4e21, @multicast1}, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x1}}, {0x2, 0x4e24, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0xd4, 0x0, 0x8, 0x8, 0x7fff})
sendmsg$NL80211_CMD_STOP_P2P_DEVICE(r4, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000780)={&(0x7f0000000980)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x48810)
socket$inet(0x2, 0xa, 0xffffff10)
sendto$inet6(r4, &(0x7f0000000180), 0x0, 0x40080, &(0x7f00000001c0)={0xa, 0x4e22, 0x5, @dev={0xfe, 0x80, '\x00', 0x29}, 0x6}, 0x1c)
unshare(0xa040900)
r5 = socket$netlink(0x10, 0x3, 0x0)
writev(r5, &(0x7f0000000040)=[{&(0x7f00000000c0)="390000001300094700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1)

13:45:21 executing program 4:
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
recvmsg(r0, &(0x7f0000001500)={0x0, 0x0, 0x0}, 0x2000)

13:45:21 executing program 2:
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
syz_genetlink_get_family_id$tipc(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$NFT_BATCH(r1, &(0x7f00000015c0)={&(0x7f0000000300), 0xc, &(0x7f0000001580)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x1)
getsockname$packet(0xffffffffffffffff, &(0x7f0000001340), &(0x7f0000001380)=0x14)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r1, 0x0, 0x0)
sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, 0x0, 0x0)
getsockname(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001400)={&(0x7f0000000140), 0xc, &(0x7f0000000340)={&(0x7f0000000f00)=@newqdisc={0x1b8, 0x24, 0x0, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0xc}, {0x10, 0xffff}, {0xf, 0xfff2}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_RATE={0x6, 0x5, {0x8}}, @qdisc_kind_options=@q_choke={{0xa}, {0x18, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x4e0, 0x2, 0x6, 0x0, 0x1e, 0x2}}]}}, @qdisc_kind_options=@q_codel={{0xa}, {0x54, 0x2, [@TCA_CODEL_TARGET={0x8}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x4}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_LIMIT={0x8, 0x2, 0x2}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x80}, @TCA_CODEL_TARGET={0x8, 0x1, 0xb9}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_INTERVAL={0x8, 0x3, 0x7}, @TCA_CODEL_LIMIT={0x8, 0x2, 0x5}]}}, @TCA_STAB={0xf8, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x8, 0xc000, 0x9, 0x1, 0x80000001, 0x4, 0xa}}, {0x18, 0x2, [0x3, 0x4, 0x3, 0xff, 0x200, 0xfe01, 0x7, 0x8, 0x0, 0x2]}}, {{0x1c, 0x1, {0x0, 0x20, 0x1, 0xfc000, 0x1}}, {0x4}}, {{0x1c, 0x1, {0x3, 0x11, 0x100, 0x5, 0x0, 0x2dd, 0x7fff, 0x4}}, {0xc, 0x2, [0x6, 0x100, 0x2, 0x71]}}, {{0x1c, 0x1, {0x0, 0x40, 0x5, 0x3, 0x2}}, {0x4}}, {{0x1c, 0x1, {0x4, 0x8, 0x1ff, 0x3ff, 0x2, 0x5, 0x9, 0x5}}, {0xe, 0x2, [0x1, 0x1, 0xb41, 0x0, 0x8]}}, {{0x1c, 0x1, {0x9, 0x3f, 0x4, 0x3, 0x0, 0x4, 0x9, 0x5}}, {0xe, 0x2, [0x0, 0x0, 0x5ca, 0xfff, 0xfffb]}}]}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x81}]}, 0x1b8}, 0x1, 0x0, 0x0, 0x20000110}, 0x800)
connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10)
writev(r2, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1)
recvmmsg(r2, &(0x7f0000003e40)=[{{0x0, 0x3, 0x0, 0x0, &(0x7f00000035c0)=""/241, 0xf1}}, {{&(0x7f00000036c0)=@un=@abs, 0x80, &(0x7f0000003780)=[{&(0x7f0000003740)=""/4, 0x7ffff}], 0x1, &(0x7f00000037c0)=""/236, 0xec}}, {{0x0, 0x0, &(0x7f0000003bc0)=[{0x0, 0xe00000000000000}, {&(0x7f0000003a00)=""/190, 0xbe}, {&(0x7f0000003ac0)=""/131, 0x83}, {0x0}], 0x4, &(0x7f0000003c00)=""/73, 0x49}}, {{&(0x7f0000003c80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, 0x0, 0x0, &(0x7f0000003e00)=""/48, 0x30}}], 0x4, 0x40000121, 0x0)
shutdown(r2, 0x0)

[ 2236.859717][T22285] netlink: 'syz-executor.0': attribute type 4 has an invalid length.
13:45:22 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f000000c380)='/proc/crypto\x00', 0x0, 0x0)
read$FUSE(r3, &(0x7f0000000200)={0x2020}, 0x2020)
execve(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000280)=[0x0, 0x0], &(0x7f0000000380)=[&(0x7f00000002c0)='*$%}\xce*\x00', &(0x7f0000000300)='\x00'])

13:45:22 executing program 5:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000240)={@val={0x0, 0x86dd}, @val={0x0, 0x0, 0x0, 0x0, 0x54}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "000003", 0x190, 0x3a, 0x0, @empty, @mcast2, {[@routing={0x0, 0x2, 0x0, 0x0, 0x0, [@empty]}], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x0, "ee7b615d"}, {}, {0x2b, 0x3, "6f8c008275021d683910c309293188a7c747eb2278d2794784"}, {0x0, 0x28, "4429118927041312255133e4d2b8b863b5f5b4ace38952e94c581c85d2d86844f548415db4dbf1992868a2e15095b531ce55d4620ec637afdcc990a4d6bfecb289917d24b31a2ddeb64383b176b823cc203ec1927487b7a00d6a3446cf7db79e14b2206d882c28611fa4d8289337cd75b4688120c73a2710947b908fde68a05a0777a170a14e85c7849462b3f5c3152cf0f3d91c5db93dc4d8f9e6b53708650dc375e6da3650b5ff4079971f6e3ef363382a16b8ae07b7307b5619092e4669dbca480d25738314135509eda68f712b9b09bdb485ea0914590b7ae01c2e34832f16c23c82b22b6ba550acfcede288a5237a06b3f5e09b6e5a0404544efe1474664b985f070121e82070a9f4513c2031a58a3d99e99284b812c0f047061139620890416c9defce02fa49cd1dd14b22df7250314ccb3dfd9827f892656911150cd9d921a8"}]}}}}}, 0x1c6)

13:45:22 executing program 4:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x24, 0x1, 0x1, 0x201, 0x0, 0x0, {}, [@CTA_STATUS_MASK={0x8}, @CTA_MARK={0x8}]}, 0x24}}, 0x0)

13:45:22 executing program 2:
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
syz_genetlink_get_family_id$tipc(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$NFT_BATCH(r1, &(0x7f00000015c0)={&(0x7f0000000300), 0xc, &(0x7f0000001580)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x1)
getsockname$packet(0xffffffffffffffff, &(0x7f0000001340), &(0x7f0000001380)=0x14)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r1, 0x0, 0x0)
sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, 0x0, 0x0)
getsockname(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001400)={&(0x7f0000000140), 0xc, &(0x7f0000000340)={&(0x7f0000000f00)=@newqdisc={0x1b8, 0x24, 0x0, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0xc}, {0x10, 0xffff}, {0xf, 0xfff2}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_RATE={0x6, 0x5, {0x8}}, @qdisc_kind_options=@q_choke={{0xa}, {0x18, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x4e0, 0x2, 0x6, 0x0, 0x1e, 0x2}}]}}, @qdisc_kind_options=@q_codel={{0xa}, {0x54, 0x2, [@TCA_CODEL_TARGET={0x8}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x4}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_LIMIT={0x8, 0x2, 0x2}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x80}, @TCA_CODEL_TARGET={0x8, 0x1, 0xb9}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_INTERVAL={0x8, 0x3, 0x7}, @TCA_CODEL_LIMIT={0x8, 0x2, 0x5}]}}, @TCA_STAB={0xf8, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x8, 0xc000, 0x9, 0x1, 0x80000001, 0x4, 0xa}}, {0x18, 0x2, [0x3, 0x4, 0x3, 0xff, 0x200, 0xfe01, 0x7, 0x8, 0x0, 0x2]}}, {{0x1c, 0x1, {0x0, 0x20, 0x1, 0xfc000, 0x1}}, {0x4}}, {{0x1c, 0x1, {0x3, 0x11, 0x100, 0x5, 0x0, 0x2dd, 0x7fff, 0x4}}, {0xc, 0x2, [0x6, 0x100, 0x2, 0x71]}}, {{0x1c, 0x1, {0x0, 0x40, 0x5, 0x3, 0x2}}, {0x4}}, {{0x1c, 0x1, {0x4, 0x8, 0x1ff, 0x3ff, 0x2, 0x5, 0x9, 0x5}}, {0xe, 0x2, [0x1, 0x1, 0xb41, 0x0, 0x8]}}, {{0x1c, 0x1, {0x9, 0x3f, 0x4, 0x3, 0x0, 0x4, 0x9, 0x5}}, {0xe, 0x2, [0x0, 0x0, 0x5ca, 0xfff, 0xfffb]}}]}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x81}]}, 0x1b8}, 0x1, 0x0, 0x0, 0x20000110}, 0x800)
connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10)
writev(r2, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1)
recvmmsg(r2, &(0x7f0000003e40)=[{{0x0, 0x3, 0x0, 0x0, &(0x7f00000035c0)=""/241, 0xf1}}, {{&(0x7f00000036c0)=@un=@abs, 0x80, &(0x7f0000003780)=[{&(0x7f0000003740)=""/4, 0x7ffff}], 0x1, &(0x7f00000037c0)=""/236, 0xec}}, {{0x0, 0x0, &(0x7f0000003bc0)=[{0x0, 0xe00000000000000}, {&(0x7f0000003a00)=""/190, 0xbe}, {&(0x7f0000003ac0)=""/131, 0x83}, {0x0}], 0x4, &(0x7f0000003c00)=""/73, 0x49}}, {{&(0x7f0000003c80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, 0x0, 0x0, &(0x7f0000003e00)=""/48, 0x30}}], 0x4, 0x40000121, 0x0)
shutdown(r2, 0x0)

13:45:22 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r1)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400ee5c99f8435ecde50a0412", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x1, 0x803, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="50000000100001040000ff0f0000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e00000000180002800c0002001c0000001b000000060001000100000008000500", @ANYRES32=r5], 0x50}}, 0x0)
socket(0x1, 0x803, 0x0)
r6 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x1e}}]}}}, @IFLA_LINK={0x8}]}, 0x50}}, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
r8 = socket(0x1, 0x803, 0x0)
getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000540)=ANY=[@ANYBLOB="20000000110003040000007bb000000000000000", @ANYRES32=r9], 0x20}}, 0x0)

13:45:22 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000680)={0x0, {0x2, 0x4e22}, {0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x2, 0x4e24, @multicast2}, 0x354, 0x0, 0x0, 0x0, 0xfffa, &(0x7f0000000580)='ipvlan0\x00', 0xffffffffffffffc1, 0x8, 0x14})
ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000900)={0x0, {0x2, 0x4e23, @local}, {0x2, 0x4e20, @empty}, {0x2, 0x4e23, @broadcast}, 0x200, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000300)='batadv_slave_1\x00', 0x9, 0x5, 0xdb})
getsockopt$EBT_SO_GET_INFO(r0, 0x0, 0x80, &(0x7f00000009c0)={'broute\x00', 0x0, 0x0, 0x0, [0xffff, 0x8, 0x0, 0x3, 0x8653, 0xfffffffffffffff7]}, &(0x7f0000000080)=0x78)
unshare(0x40000000)
mmap(&(0x7f00004f5000/0x2000)=nil, 0x2000, 0x3, 0x30, 0xffffffffffffffff, 0xd3691000)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000480)={0xffffffffffffffff, &(0x7f0000000cc0)="f7463800cbdec122707151f05fdbd8938bbf8e35f2cd4fec8d9bae70aadf80cf9f98c710a7807cc71a3f9b51e9b206eb0f7836d047f5da73aa0e8a6592fe9606764f157767f90280b4acbf9f0f8eb1501d65e4083ce3a7dad0a7dc6b7f1034c9418fa54731ddfeebf4731dc0e048536f934865eca5e2f3b831c553128246b3154a21a1ebada7191d32809cfd3d7f4625215736f672", &(0x7f0000000c00)=@buf="d81112022f5038422a647a383fd134e8f791fb1ae2d4d27d71a49366569e0e74dd2e02ba840d740118a33cad199eac48991e396323c1ddf4da1a8864c62ec7aca92cd1e22f6a8190ab00e0d2b0c1ea174bb1144b0fd1f6d67d3010ca4cd57a27d2bdc1efd25bd9a3d2cddce87c05e9ad3ab7e1bd9958695043ebfb342fcfb432fd78102494f470f978bb1ce16c8c096660fa205105", 0x4}, 0x20)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
unshare(0x100)
sendfile(r0, 0xffffffffffffffff, &(0x7f0000000b80)=0x6, 0x3)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000000), 0x4)
getsockopt$EBT_SO_GET_INFO(r3, 0x0, 0x80, &(0x7f00000004c0)={'nat\x00', 0x0, 0x0, 0x0, [0x1, 0xffffffffffffffff, 0x0, 0xae, 0x401, 0x8]}, &(0x7f0000000280)=0x78)
ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000100)={0x0, {0x2, 0x4e23, @remote}, {0x2, 0x0, @remote}, {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x36}}, 0x107, 0x0, 0x0, 0x0, 0xfc01})
sendmsg$TIPC_NL_NET_GET(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4090014}, 0xc, &(0x7f0000000740)={&(0x7f0000000d80)=ANY=[@ANYBLOB="700002001a6b19b553e827f52cabce6f4a18bd04d2603a6492cca0c878f4c51719c74293c0629af2e7a290e106ed4827f3fd2753dcae35209eded4569ad3b1e61ab2f40071634127f6d542ac6a371af8072eeaeea9569259aee61b5280e925f21a4c4c021666580b0ca51a49dffbcc40126689c9598fc75996ebcaad927cb81ba078fdb3d8c4f3a0ff888b772a3789bf193f84f11bf1a6e7ec23f3d7a18c87560e231afb658c", @ANYRES16=0x0, @ANYBLOB="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"], 0x70}}, 0x0)
unshare(0x40000080)
r4 = socket(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000840)={0x0, {0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x4, 0x0, @loopback}, {0x2, 0x4e23, @remote}, 0x1c4, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)='lo\x00', 0xffffffff})
setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f00000005c0)={0x0, 0x7, 0x0, 0x4}, 0x32)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r4, 0x8982, &(0x7f0000000340)={0x0, 'team0\x00', {0x7}, 0x401})
syz_genetlink_get_family_id$nl80211(&(0x7f00000022c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000011c0)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0)
ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000200)={0x0, {0x2, 0x4e21, @multicast1}, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x1}}, {0x2, 0x4e24, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0xd4, 0x0, 0x8, 0x8, 0x7fff})
sendmsg$NL80211_CMD_STOP_P2P_DEVICE(r4, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000780)={&(0x7f0000000980)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x48810)
socket$inet(0x2, 0xa, 0xffffff10)
sendto$inet6(r4, &(0x7f0000000180), 0x0, 0x40080, &(0x7f00000001c0)={0xa, 0x4e22, 0x5, @dev={0xfe, 0x80, '\x00', 0x29}, 0x6}, 0x1c)
unshare(0xa040900)
r5 = socket$netlink(0x10, 0x3, 0x0)
writev(r5, &(0x7f0000000040)=[{&(0x7f00000000c0)="390000001300094700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1)

[ 2237.264304][T22295] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'.
13:45:22 executing program 2:
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
syz_genetlink_get_family_id$tipc(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$NFT_BATCH(r1, &(0x7f00000015c0)={&(0x7f0000000300), 0xc, &(0x7f0000001580)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x1)
getsockname$packet(0xffffffffffffffff, &(0x7f0000001340), &(0x7f0000001380)=0x14)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r1, 0x0, 0x0)
sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, 0x0, 0x0)
getsockname(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001400)={&(0x7f0000000140), 0xc, &(0x7f0000000340)={&(0x7f0000000f00)=@newqdisc={0x1b8, 0x24, 0x0, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0xc}, {0x10, 0xffff}, {0xf, 0xfff2}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_RATE={0x6, 0x5, {0x8}}, @qdisc_kind_options=@q_choke={{0xa}, {0x18, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x4e0, 0x2, 0x6, 0x0, 0x1e, 0x2}}]}}, @qdisc_kind_options=@q_codel={{0xa}, {0x54, 0x2, [@TCA_CODEL_TARGET={0x8}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x4}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_LIMIT={0x8, 0x2, 0x2}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x80}, @TCA_CODEL_TARGET={0x8, 0x1, 0xb9}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_INTERVAL={0x8, 0x3, 0x7}, @TCA_CODEL_LIMIT={0x8, 0x2, 0x5}]}}, @TCA_STAB={0xf8, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x8, 0xc000, 0x9, 0x1, 0x80000001, 0x4, 0xa}}, {0x18, 0x2, [0x3, 0x4, 0x3, 0xff, 0x200, 0xfe01, 0x7, 0x8, 0x0, 0x2]}}, {{0x1c, 0x1, {0x0, 0x20, 0x1, 0xfc000, 0x1}}, {0x4}}, {{0x1c, 0x1, {0x3, 0x11, 0x100, 0x5, 0x0, 0x2dd, 0x7fff, 0x4}}, {0xc, 0x2, [0x6, 0x100, 0x2, 0x71]}}, {{0x1c, 0x1, {0x0, 0x40, 0x5, 0x3, 0x2}}, {0x4}}, {{0x1c, 0x1, {0x4, 0x8, 0x1ff, 0x3ff, 0x2, 0x5, 0x9, 0x5}}, {0xe, 0x2, [0x1, 0x1, 0xb41, 0x0, 0x8]}}, {{0x1c, 0x1, {0x9, 0x3f, 0x4, 0x3, 0x0, 0x4, 0x9, 0x5}}, {0xe, 0x2, [0x0, 0x0, 0x5ca, 0xfff, 0xfffb]}}]}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x81}]}, 0x1b8}, 0x1, 0x0, 0x0, 0x20000110}, 0x800)
connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10)
writev(r2, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1)
recvmmsg(r2, &(0x7f0000003e40)=[{{0x0, 0x3, 0x0, 0x0, &(0x7f00000035c0)=""/241, 0xf1}}, {{&(0x7f00000036c0)=@un=@abs, 0x80, &(0x7f0000003780)=[{&(0x7f0000003740)=""/4, 0x7ffff}], 0x1, &(0x7f00000037c0)=""/236, 0xec}}, {{0x0, 0x0, &(0x7f0000003bc0)=[{0x0, 0xe00000000000000}, {&(0x7f0000003a00)=""/190, 0xbe}, {&(0x7f0000003ac0)=""/131, 0x83}, {0x0}], 0x4, &(0x7f0000003c00)=""/73, 0x49}}, {{&(0x7f0000003c80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, 0x0, 0x0, &(0x7f0000003e00)=""/48, 0x30}}], 0x4, 0x40000121, 0x0)
shutdown(r2, 0x0)

13:45:22 executing program 4:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000680)={0x0, {0x2, 0x4e22}, {0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x2, 0x4e24, @multicast2}, 0x354, 0x0, 0x0, 0x0, 0xfffa, &(0x7f0000000580)='ipvlan0\x00', 0xffffffffffffffc1, 0x8, 0x14})
ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000900)={0x0, {0x2, 0x4e23, @local}, {0x2, 0x4e20, @empty}, {0x2, 0x4e23, @broadcast}, 0x200, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000300)='batadv_slave_1\x00', 0x9, 0x5, 0xdb})
getsockopt$EBT_SO_GET_INFO(r0, 0x0, 0x80, &(0x7f00000009c0)={'broute\x00', 0x0, 0x0, 0x0, [0xffff, 0x8, 0x0, 0x3, 0x8653, 0xfffffffffffffff7]}, &(0x7f0000000080)=0x78)
unshare(0x40000000)
mmap(&(0x7f00004f5000/0x2000)=nil, 0x2000, 0x3, 0x30, 0xffffffffffffffff, 0xd3691000)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000480)={0xffffffffffffffff, &(0x7f0000000cc0)="f7463800cbdec122707151f05fdbd8938bbf8e35f2cd4fec8d9bae70aadf80cf9f98c710a7807cc71a3f9b51e9b206eb0f7836d047f5da73aa0e8a6592fe9606764f157767f90280b4acbf9f0f8eb1501d65e4083ce3a7dad0a7dc6b7f1034c9418fa54731ddfeebf4731dc0e048536f934865eca5e2f3b831c553128246b3154a21a1ebada7191d32809cfd3d7f4625215736f672", &(0x7f0000000c00)=@buf="d81112022f5038422a647a383fd134e8f791fb1ae2d4d27d71a49366569e0e74dd2e02ba840d740118a33cad199eac48991e396323c1ddf4da1a8864c62ec7aca92cd1e22f6a8190ab00e0d2b0c1ea174bb1144b0fd1f6d67d3010ca4cd57a27d2bdc1efd25bd9a3d2cddce87c05e9ad3ab7e1bd9958695043ebfb342fcfb432fd78102494f470f978bb1ce16c8c096660fa205105", 0x4}, 0x20)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
unshare(0x100)
sendfile(r0, 0xffffffffffffffff, &(0x7f0000000b80)=0x6, 0x3)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000000), 0x4)
getsockopt$EBT_SO_GET_INFO(r3, 0x0, 0x80, &(0x7f00000004c0)={'nat\x00', 0x0, 0x0, 0x0, [0x1, 0xffffffffffffffff, 0x0, 0xae, 0x401, 0x8]}, &(0x7f0000000280)=0x78)
ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000100)={0x0, {0x2, 0x4e23, @remote}, {0x2, 0x0, @remote}, {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x36}}, 0x107, 0x0, 0x0, 0x0, 0xfc01})
sendmsg$TIPC_NL_NET_GET(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4090014}, 0xc, &(0x7f0000000740)={&(0x7f0000000d80)=ANY=[@ANYBLOB="700002001a6b19b553e827f52cabce6f4a18bd04d2603a6492cca0c878f4c51719c74293c0629af2e7a290e106ed4827f3fd2753dcae35209eded4569ad3b1e61ab2f40071634127f6d542ac6a371af8072eeaeea9569259aee61b5280e925f21a4c4c021666580b0ca51a49dffbcc40126689c9598fc75996ebcaad927cb81ba078fdb3d8c4f3a0ff888b772a3789bf193f84f11bf1a6e7ec23f3d7a18c87560e231afb658c", @ANYRES16=0x0, @ANYBLOB="08002cbd7000fedbdf250e000000400002803400038008000200080000000800010004000000080002005a0600000800010001000000080002000000000008000100eeeb000008000000ff0700001c00098008000200c0ffffff080001000900000008000200090000004e69966854d8782169fe6da964d343af91b0aceda6320f325a8e113b4a8dc974d5ca21628fb03588c6cc2dd6c50dc6eae03cc2b9462267c964b6d0e6cf2241437694e9868faa02bec18ea984da5f85f54a0e92f521932cf161d6c996f4e92e918137a710978640e1d9f3b4204be555a3841f8e6c7c5dd7ea2bbf566d5db98b6701dff17fd27e65c6723379a15098a1987e7a99ca82066c01703e49329734eea11354adc8abe1fa59"], 0x70}}, 0x0)
unshare(0x40000080)
r4 = socket(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000840)={0x0, {0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x4, 0x0, @loopback}, {0x2, 0x4e23, @remote}, 0x1c4, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)='lo\x00', 0xffffffff})
setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f00000005c0)={0x0, 0x7, 0x0, 0x4}, 0x32)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r4, 0x8982, &(0x7f0000000340)={0x0, 'team0\x00', {0x7}, 0x401})
syz_genetlink_get_family_id$nl80211(&(0x7f00000022c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000011c0)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0)
ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000200)={0x0, {0x2, 0x4e21, @multicast1}, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x1}}, {0x2, 0x4e24, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0xd4, 0x0, 0x8, 0x8, 0x7fff})
sendmsg$NL80211_CMD_STOP_P2P_DEVICE(r4, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000780)={&(0x7f0000000980)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x48810)
socket$inet(0x2, 0xa, 0xffffff10)
sendto$inet6(r4, &(0x7f0000000180), 0x0, 0x40080, &(0x7f00000001c0)={0xa, 0x4e22, 0x5, @dev={0xfe, 0x80, '\x00', 0x29}, 0x6}, 0x1c)
unshare(0xa040900)
r5 = socket$netlink(0x10, 0x3, 0x0)
writev(r5, &(0x7f0000000040)=[{&(0x7f00000000c0)="390000001300094700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1)

13:45:22 executing program 2:
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
syz_genetlink_get_family_id$tipc(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$NFT_BATCH(r1, &(0x7f00000015c0)={&(0x7f0000000300), 0xc, &(0x7f0000001580)={&(0x7f00000014c0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_PAYLOAD_CSUM_OFFSET={0x8, 0x7, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}]}], {0x14}}, 0x78}, 0x1, 0x0, 0x0, 0x1}, 0x1)
getsockname$packet(0xffffffffffffffff, &(0x7f0000001340), &(0x7f0000001380)=0x14)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r1, 0x0, 0x0)
sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, 0x0, 0x0)
getsockname(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001400)={&(0x7f0000000140), 0xc, &(0x7f0000000340)={&(0x7f0000000f00)=@newqdisc={0x1b8, 0x24, 0x0, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0xc}, {0x10, 0xffff}, {0xf, 0xfff2}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_RATE={0x6, 0x5, {0x8}}, @qdisc_kind_options=@q_choke={{0xa}, {0x18, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x4e0, 0x2, 0x6, 0x0, 0x1e, 0x2}}]}}, @qdisc_kind_options=@q_codel={{0xa}, {0x54, 0x2, [@TCA_CODEL_TARGET={0x8}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x4}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_LIMIT={0x8, 0x2, 0x2}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x80}, @TCA_CODEL_TARGET={0x8, 0x1, 0xb9}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_INTERVAL={0x8, 0x3, 0x7}, @TCA_CODEL_LIMIT={0x8, 0x2, 0x5}]}}, @TCA_STAB={0xf8, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x8, 0xc000, 0x9, 0x1, 0x80000001, 0x4, 0xa}}, {0x18, 0x2, [0x3, 0x4, 0x3, 0xff, 0x200, 0xfe01, 0x7, 0x8, 0x0, 0x2]}}, {{0x1c, 0x1, {0x0, 0x20, 0x1, 0xfc000, 0x1}}, {0x4}}, {{0x1c, 0x1, {0x3, 0x11, 0x100, 0x5, 0x0, 0x2dd, 0x7fff, 0x4}}, {0xc, 0x2, [0x6, 0x100, 0x2, 0x71]}}, {{0x1c, 0x1, {0x0, 0x40, 0x5, 0x3, 0x2}}, {0x4}}, {{0x1c, 0x1, {0x4, 0x8, 0x1ff, 0x3ff, 0x2, 0x5, 0x9, 0x5}}, {0xe, 0x2, [0x1, 0x1, 0xb41, 0x0, 0x8]}}, {{0x1c, 0x1, {0x9, 0x3f, 0x4, 0x3, 0x0, 0x4, 0x9, 0x5}}, {0xe, 0x2, [0x0, 0x0, 0x5ca, 0xfff, 0xfffb]}}]}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x81}]}, 0x1b8}, 0x1, 0x0, 0x0, 0x20000110}, 0x800)
connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10)
writev(r2, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1)
recvmmsg(r2, &(0x7f0000003e40)=[{{0x0, 0x3, 0x0, 0x0, &(0x7f00000035c0)=""/241, 0xf1}}, {{&(0x7f00000036c0)=@un=@abs, 0x80, &(0x7f0000003780)=[{&(0x7f0000003740)=""/4, 0x7ffff}], 0x1, &(0x7f00000037c0)=""/236, 0xec}}, {{0x0, 0x0, &(0x7f0000003bc0)=[{0x0, 0xe00000000000000}, {&(0x7f0000003a00)=""/190, 0xbe}, {&(0x7f0000003ac0)=""/131, 0x83}, {0x0}], 0x4, &(0x7f0000003c00)=""/73, 0x49}}, {{&(0x7f0000003c80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, 0x0, 0x0, &(0x7f0000003e00)=""/48, 0x30}}], 0x4, 0x40000121, 0x0)
shutdown(r2, 0x0)

13:45:22 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r1)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400ee5c99f8435ecde50a0412", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x1, 0x803, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="50000000100001040000ff0f0000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e00000000180002800c0002001c0000001b000000060001000100000008000500", @ANYRES32=r5], 0x50}}, 0x0)
socket(0x1, 0x803, 0x0)
r6 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x1e}}]}}}, @IFLA_LINK={0x8}]}, 0x50}}, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
r8 = socket(0x1, 0x803, 0x0)
getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000540)=ANY=[@ANYBLOB="20000000110003040000007bb000000000000000", @ANYRES32=r9], 0x20}}, 0x0)

13:45:22 executing program 5:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000240)={@val={0x0, 0x86dd}, @val={0x0, 0x0, 0x0, 0x0, 0x54}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "000003", 0x190, 0x3a, 0x0, @empty, @mcast2, {[@routing={0x0, 0x2, 0x0, 0x0, 0x0, [@empty]}], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x0, "ee7b615d"}, {}, {0x2b, 0x3, "6f8c008275021d683910c309293188a7c747eb2278d2794784"}, {0x0, 0x28, "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"}]}}}}}, 0x1c6)

13:45:22 executing program 2:
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
syz_genetlink_get_family_id$tipc(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$NFT_BATCH(r1, &(0x7f00000015c0)={&(0x7f0000000300), 0xc, &(0x7f0000001580)={&(0x7f00000014c0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_PAYLOAD_CSUM_OFFSET={0x8, 0x7, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}]}], {0x14}}, 0x78}, 0x1, 0x0, 0x0, 0x1}, 0x1)
getsockname$packet(0xffffffffffffffff, &(0x7f0000001340), &(0x7f0000001380)=0x14)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r1, 0x0, 0x0)
sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, 0x0, 0x0)
getsockname(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001400)={&(0x7f0000000140), 0xc, &(0x7f0000000340)={&(0x7f0000000f00)=@newqdisc={0x1b8, 0x24, 0x0, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0xc}, {0x10, 0xffff}, {0xf, 0xfff2}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_RATE={0x6, 0x5, {0x8}}, @qdisc_kind_options=@q_choke={{0xa}, {0x18, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x4e0, 0x2, 0x6, 0x0, 0x1e, 0x2}}]}}, @qdisc_kind_options=@q_codel={{0xa}, {0x54, 0x2, [@TCA_CODEL_TARGET={0x8}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x4}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_LIMIT={0x8, 0x2, 0x2}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x80}, @TCA_CODEL_TARGET={0x8, 0x1, 0xb9}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_INTERVAL={0x8, 0x3, 0x7}, @TCA_CODEL_LIMIT={0x8, 0x2, 0x5}]}}, @TCA_STAB={0xf8, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x8, 0xc000, 0x9, 0x1, 0x80000001, 0x4, 0xa}}, {0x18, 0x2, [0x3, 0x4, 0x3, 0xff, 0x200, 0xfe01, 0x7, 0x8, 0x0, 0x2]}}, {{0x1c, 0x1, {0x0, 0x20, 0x1, 0xfc000, 0x1}}, {0x4}}, {{0x1c, 0x1, {0x3, 0x11, 0x100, 0x5, 0x0, 0x2dd, 0x7fff, 0x4}}, {0xc, 0x2, [0x6, 0x100, 0x2, 0x71]}}, {{0x1c, 0x1, {0x0, 0x40, 0x5, 0x3, 0x2}}, {0x4}}, {{0x1c, 0x1, {0x4, 0x8, 0x1ff, 0x3ff, 0x2, 0x5, 0x9, 0x5}}, {0xe, 0x2, [0x1, 0x1, 0xb41, 0x0, 0x8]}}, {{0x1c, 0x1, {0x9, 0x3f, 0x4, 0x3, 0x0, 0x4, 0x9, 0x5}}, {0xe, 0x2, [0x0, 0x0, 0x5ca, 0xfff, 0xfffb]}}]}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x81}]}, 0x1b8}, 0x1, 0x0, 0x0, 0x20000110}, 0x800)
connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10)
writev(r2, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1)
recvmmsg(r2, &(0x7f0000003e40)=[{{0x0, 0x3, 0x0, 0x0, &(0x7f00000035c0)=""/241, 0xf1}}, {{&(0x7f00000036c0)=@un=@abs, 0x80, &(0x7f0000003780)=[{&(0x7f0000003740)=""/4, 0x7ffff}], 0x1, &(0x7f00000037c0)=""/236, 0xec}}, {{0x0, 0x0, &(0x7f0000003bc0)=[{0x0, 0xe00000000000000}, {&(0x7f0000003a00)=""/190, 0xbe}, {&(0x7f0000003ac0)=""/131, 0x83}, {0x0}], 0x4, &(0x7f0000003c00)=""/73, 0x49}}, {{&(0x7f0000003c80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, 0x0, 0x0, &(0x7f0000003e00)=""/48, 0x30}}], 0x4, 0x40000121, 0x0)
shutdown(r2, 0x0)

[ 2237.987192][T22311] netlink: 'syz-executor.0': attribute type 4 has an invalid length.
13:45:23 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, 0x0, 0x0, 0x2, 0x0)
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f000000c380)='/proc/crypto\x00', 0x0, 0x0)
read$FUSE(r3, &(0x7f0000000200)={0x2020}, 0x2020)
execve(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000280)=[0x0, 0x0], &(0x7f0000000380)=[&(0x7f00000002c0)='*$%}\xce*\x00', &(0x7f0000000300)='\x00'])

13:45:23 executing program 2:
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
syz_genetlink_get_family_id$tipc(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$NFT_BATCH(r1, &(0x7f00000015c0)={&(0x7f0000000300), 0xc, &(0x7f0000001580)={&(0x7f00000014c0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_PAYLOAD_CSUM_OFFSET={0x8, 0x7, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}]}], {0x14}}, 0x78}, 0x1, 0x0, 0x0, 0x1}, 0x1)
getsockname$packet(0xffffffffffffffff, &(0x7f0000001340), &(0x7f0000001380)=0x14)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r1, 0x0, 0x0)
sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, 0x0, 0x0)
getsockname(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001400)={&(0x7f0000000140), 0xc, &(0x7f0000000340)={&(0x7f0000000f00)=@newqdisc={0x1b8, 0x24, 0x0, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0xc}, {0x10, 0xffff}, {0xf, 0xfff2}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_RATE={0x6, 0x5, {0x8}}, @qdisc_kind_options=@q_choke={{0xa}, {0x18, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x4e0, 0x2, 0x6, 0x0, 0x1e, 0x2}}]}}, @qdisc_kind_options=@q_codel={{0xa}, {0x54, 0x2, [@TCA_CODEL_TARGET={0x8}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x4}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_LIMIT={0x8, 0x2, 0x2}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x80}, @TCA_CODEL_TARGET={0x8, 0x1, 0xb9}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_INTERVAL={0x8, 0x3, 0x7}, @TCA_CODEL_LIMIT={0x8, 0x2, 0x5}]}}, @TCA_STAB={0xf8, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x8, 0xc000, 0x9, 0x1, 0x80000001, 0x4, 0xa}}, {0x18, 0x2, [0x3, 0x4, 0x3, 0xff, 0x200, 0xfe01, 0x7, 0x8, 0x0, 0x2]}}, {{0x1c, 0x1, {0x0, 0x20, 0x1, 0xfc000, 0x1}}, {0x4}}, {{0x1c, 0x1, {0x3, 0x11, 0x100, 0x5, 0x0, 0x2dd, 0x7fff, 0x4}}, {0xc, 0x2, [0x6, 0x100, 0x2, 0x71]}}, {{0x1c, 0x1, {0x0, 0x40, 0x5, 0x3, 0x2}}, {0x4}}, {{0x1c, 0x1, {0x4, 0x8, 0x1ff, 0x3ff, 0x2, 0x5, 0x9, 0x5}}, {0xe, 0x2, [0x1, 0x1, 0xb41, 0x0, 0x8]}}, {{0x1c, 0x1, {0x9, 0x3f, 0x4, 0x3, 0x0, 0x4, 0x9, 0x5}}, {0xe, 0x2, [0x0, 0x0, 0x5ca, 0xfff, 0xfffb]}}]}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x81}]}, 0x1b8}, 0x1, 0x0, 0x0, 0x20000110}, 0x800)
connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10)
writev(r2, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1)
recvmmsg(r2, &(0x7f0000003e40)=[{{0x0, 0x3, 0x0, 0x0, &(0x7f00000035c0)=""/241, 0xf1}}, {{&(0x7f00000036c0)=@un=@abs, 0x80, &(0x7f0000003780)=[{&(0x7f0000003740)=""/4, 0x7ffff}], 0x1, &(0x7f00000037c0)=""/236, 0xec}}, {{0x0, 0x0, &(0x7f0000003bc0)=[{0x0, 0xe00000000000000}, {&(0x7f0000003a00)=""/190, 0xbe}, {&(0x7f0000003ac0)=""/131, 0x83}, {0x0}], 0x4, &(0x7f0000003c00)=""/73, 0x49}}, {{&(0x7f0000003c80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, 0x0, 0x0, &(0x7f0000003e00)=""/48, 0x30}}], 0x4, 0x40000121, 0x0)
shutdown(r2, 0x0)

[ 2238.106614][T22322] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'.
13:45:23 executing program 2:
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
syz_genetlink_get_family_id$tipc(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$NFT_BATCH(r1, &(0x7f00000015c0)={&(0x7f0000000300), 0xc, &(0x7f0000001580)={&(0x7f00000014c0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_PAYLOAD_CSUM_OFFSET={0x8, 0x7, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}]}, @NFT_MSG_DELSETELEM={0x1c, 0xe, 0xa, 0x0, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}]}], {0x14}}, 0x94}, 0x1, 0x0, 0x0, 0x1}, 0x1)
getsockname$packet(0xffffffffffffffff, &(0x7f0000001340), &(0x7f0000001380)=0x14)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r1, 0x0, 0x0)
sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, 0x0, 0x0)
getsockname(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001400)={&(0x7f0000000140), 0xc, &(0x7f0000000340)={&(0x7f0000000f00)=@newqdisc={0x1b8, 0x24, 0x0, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0xc}, {0x10, 0xffff}, {0xf, 0xfff2}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_RATE={0x6, 0x5, {0x8}}, @qdisc_kind_options=@q_choke={{0xa}, {0x18, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x4e0, 0x2, 0x6, 0x0, 0x1e, 0x2}}]}}, @qdisc_kind_options=@q_codel={{0xa}, {0x54, 0x2, [@TCA_CODEL_TARGET={0x8}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x4}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_LIMIT={0x8, 0x2, 0x2}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x80}, @TCA_CODEL_TARGET={0x8, 0x1, 0xb9}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_INTERVAL={0x8, 0x3, 0x7}, @TCA_CODEL_LIMIT={0x8, 0x2, 0x5}]}}, @TCA_STAB={0xf8, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x8, 0xc000, 0x9, 0x1, 0x80000001, 0x4, 0xa}}, {0x18, 0x2, [0x3, 0x4, 0x3, 0xff, 0x200, 0xfe01, 0x7, 0x8, 0x0, 0x2]}}, {{0x1c, 0x1, {0x0, 0x20, 0x1, 0xfc000, 0x1}}, {0x4}}, {{0x1c, 0x1, {0x3, 0x11, 0x100, 0x5, 0x0, 0x2dd, 0x7fff, 0x4}}, {0xc, 0x2, [0x6, 0x100, 0x2, 0x71]}}, {{0x1c, 0x1, {0x0, 0x40, 0x5, 0x3, 0x2}}, {0x4}}, {{0x1c, 0x1, {0x4, 0x8, 0x1ff, 0x3ff, 0x2, 0x5, 0x9, 0x5}}, {0xe, 0x2, [0x1, 0x1, 0xb41, 0x0, 0x8]}}, {{0x1c, 0x1, {0x9, 0x3f, 0x4, 0x3, 0x0, 0x4, 0x9, 0x5}}, {0xe, 0x2, [0x0, 0x0, 0x5ca, 0xfff, 0xfffb]}}]}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x81}]}, 0x1b8}, 0x1, 0x0, 0x0, 0x20000110}, 0x800)
connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10)
writev(r2, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1)
recvmmsg(r2, &(0x7f0000003e40)=[{{0x0, 0x3, 0x0, 0x0, &(0x7f00000035c0)=""/241, 0xf1}}, {{&(0x7f00000036c0)=@un=@abs, 0x80, &(0x7f0000003780)=[{&(0x7f0000003740)=""/4, 0x7ffff}], 0x1, &(0x7f00000037c0)=""/236, 0xec}}, {{0x0, 0x0, &(0x7f0000003bc0)=[{0x0, 0xe00000000000000}, {&(0x7f0000003a00)=""/190, 0xbe}, {&(0x7f0000003ac0)=""/131, 0x83}, {0x0}], 0x4, &(0x7f0000003c00)=""/73, 0x49}}, {{&(0x7f0000003c80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, 0x0, 0x0, &(0x7f0000003e00)=""/48, 0x30}}], 0x4, 0x40000121, 0x0)
shutdown(r2, 0x0)

13:45:23 executing program 2:
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
syz_genetlink_get_family_id$tipc(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$NFT_BATCH(r1, &(0x7f00000015c0)={&(0x7f0000000300), 0xc, &(0x7f0000001580)={&(0x7f00000014c0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_PAYLOAD_CSUM_OFFSET={0x8, 0x7, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}]}, @NFT_MSG_DELSETELEM={0x1c, 0xe, 0xa, 0x0, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}]}], {0x14}}, 0x94}, 0x1, 0x0, 0x0, 0x1}, 0x1)
getsockname$packet(0xffffffffffffffff, &(0x7f0000001340), &(0x7f0000001380)=0x14)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r1, 0x0, 0x0)
sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, 0x0, 0x0)
getsockname(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001400)={&(0x7f0000000140), 0xc, &(0x7f0000000340)={&(0x7f0000000f00)=@newqdisc={0x1b8, 0x24, 0x0, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0xc}, {0x10, 0xffff}, {0xf, 0xfff2}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_RATE={0x6, 0x5, {0x8}}, @qdisc_kind_options=@q_choke={{0xa}, {0x18, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x4e0, 0x2, 0x6, 0x0, 0x1e, 0x2}}]}}, @qdisc_kind_options=@q_codel={{0xa}, {0x54, 0x2, [@TCA_CODEL_TARGET={0x8}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x4}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_LIMIT={0x8, 0x2, 0x2}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x80}, @TCA_CODEL_TARGET={0x8, 0x1, 0xb9}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_INTERVAL={0x8, 0x3, 0x7}, @TCA_CODEL_LIMIT={0x8, 0x2, 0x5}]}}, @TCA_STAB={0xf8, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x8, 0xc000, 0x9, 0x1, 0x80000001, 0x4, 0xa}}, {0x18, 0x2, [0x3, 0x4, 0x3, 0xff, 0x200, 0xfe01, 0x7, 0x8, 0x0, 0x2]}}, {{0x1c, 0x1, {0x0, 0x20, 0x1, 0xfc000, 0x1}}, {0x4}}, {{0x1c, 0x1, {0x3, 0x11, 0x100, 0x5, 0x0, 0x2dd, 0x7fff, 0x4}}, {0xc, 0x2, [0x6, 0x100, 0x2, 0x71]}}, {{0x1c, 0x1, {0x0, 0x40, 0x5, 0x3, 0x2}}, {0x4}}, {{0x1c, 0x1, {0x4, 0x8, 0x1ff, 0x3ff, 0x2, 0x5, 0x9, 0x5}}, {0xe, 0x2, [0x1, 0x1, 0xb41, 0x0, 0x8]}}, {{0x1c, 0x1, {0x9, 0x3f, 0x4, 0x3, 0x0, 0x4, 0x9, 0x5}}, {0xe, 0x2, [0x0, 0x0, 0x5ca, 0xfff, 0xfffb]}}]}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x81}]}, 0x1b8}, 0x1, 0x0, 0x0, 0x20000110}, 0x800)
connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10)
writev(r2, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1)
recvmmsg(r2, &(0x7f0000003e40)=[{{0x0, 0x3, 0x0, 0x0, &(0x7f00000035c0)=""/241, 0xf1}}, {{&(0x7f00000036c0)=@un=@abs, 0x80, &(0x7f0000003780)=[{&(0x7f0000003740)=""/4, 0x7ffff}], 0x1, &(0x7f00000037c0)=""/236, 0xec}}, {{0x0, 0x0, &(0x7f0000003bc0)=[{0x0, 0xe00000000000000}, {&(0x7f0000003a00)=""/190, 0xbe}, {&(0x7f0000003ac0)=""/131, 0x83}, {0x0}], 0x4, &(0x7f0000003c00)=""/73, 0x49}}, {{&(0x7f0000003c80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, 0x0, 0x0, &(0x7f0000003e00)=""/48, 0x30}}], 0x4, 0x40000121, 0x0)
shutdown(r2, 0x0)

[ 2238.418156][T22327] netlink: 'syz-executor.4': attribute type 4 has an invalid length.
13:45:23 executing program 2:
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
syz_genetlink_get_family_id$tipc(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$NFT_BATCH(r1, &(0x7f00000015c0)={&(0x7f0000000300), 0xc, &(0x7f0000001580)={&(0x7f00000014c0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_PAYLOAD_CSUM_OFFSET={0x8, 0x7, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}]}, @NFT_MSG_DELSETELEM={0x1c, 0xe, 0xa, 0x0, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}]}], {0x14}}, 0x94}, 0x1, 0x0, 0x0, 0x1}, 0x1)
getsockname$packet(0xffffffffffffffff, &(0x7f0000001340), &(0x7f0000001380)=0x14)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r1, 0x0, 0x0)
sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, 0x0, 0x0)
getsockname(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001400)={&(0x7f0000000140), 0xc, &(0x7f0000000340)={&(0x7f0000000f00)=@newqdisc={0x1b8, 0x24, 0x0, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0xc}, {0x10, 0xffff}, {0xf, 0xfff2}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_RATE={0x6, 0x5, {0x8}}, @qdisc_kind_options=@q_choke={{0xa}, {0x18, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x4e0, 0x2, 0x6, 0x0, 0x1e, 0x2}}]}}, @qdisc_kind_options=@q_codel={{0xa}, {0x54, 0x2, [@TCA_CODEL_TARGET={0x8}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x4}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_LIMIT={0x8, 0x2, 0x2}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x80}, @TCA_CODEL_TARGET={0x8, 0x1, 0xb9}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_INTERVAL={0x8, 0x3, 0x7}, @TCA_CODEL_LIMIT={0x8, 0x2, 0x5}]}}, @TCA_STAB={0xf8, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x8, 0xc000, 0x9, 0x1, 0x80000001, 0x4, 0xa}}, {0x18, 0x2, [0x3, 0x4, 0x3, 0xff, 0x200, 0xfe01, 0x7, 0x8, 0x0, 0x2]}}, {{0x1c, 0x1, {0x0, 0x20, 0x1, 0xfc000, 0x1}}, {0x4}}, {{0x1c, 0x1, {0x3, 0x11, 0x100, 0x5, 0x0, 0x2dd, 0x7fff, 0x4}}, {0xc, 0x2, [0x6, 0x100, 0x2, 0x71]}}, {{0x1c, 0x1, {0x0, 0x40, 0x5, 0x3, 0x2}}, {0x4}}, {{0x1c, 0x1, {0x4, 0x8, 0x1ff, 0x3ff, 0x2, 0x5, 0x9, 0x5}}, {0xe, 0x2, [0x1, 0x1, 0xb41, 0x0, 0x8]}}, {{0x1c, 0x1, {0x9, 0x3f, 0x4, 0x3, 0x0, 0x4, 0x9, 0x5}}, {0xe, 0x2, [0x0, 0x0, 0x5ca, 0xfff, 0xfffb]}}]}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x81}]}, 0x1b8}, 0x1, 0x0, 0x0, 0x20000110}, 0x800)
connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10)
writev(r2, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1)
recvmmsg(r2, &(0x7f0000003e40)=[{{0x0, 0x3, 0x0, 0x0, &(0x7f00000035c0)=""/241, 0xf1}}, {{&(0x7f00000036c0)=@un=@abs, 0x80, &(0x7f0000003780)=[{&(0x7f0000003740)=""/4, 0x7ffff}], 0x1, &(0x7f00000037c0)=""/236, 0xec}}, {{0x0, 0x0, &(0x7f0000003bc0)=[{0x0, 0xe00000000000000}, {&(0x7f0000003a00)=""/190, 0xbe}, {&(0x7f0000003ac0)=""/131, 0x83}, {0x0}], 0x4, &(0x7f0000003c00)=""/73, 0x49}}, {{&(0x7f0000003c80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, 0x0, 0x0, &(0x7f0000003e00)=""/48, 0x30}}], 0x4, 0x40000121, 0x0)
shutdown(r2, 0x0)

13:45:28 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000680)={0x0, {0x2, 0x4e22}, {0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x2, 0x4e24, @multicast2}, 0x354, 0x0, 0x0, 0x0, 0xfffa, &(0x7f0000000580)='ipvlan0\x00', 0xffffffffffffffc1, 0x8, 0x14})
ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000900)={0x0, {0x2, 0x4e23, @local}, {0x2, 0x4e20, @empty}, {0x2, 0x4e23, @broadcast}, 0x200, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000300)='batadv_slave_1\x00', 0x9, 0x5, 0xdb})
getsockopt$EBT_SO_GET_INFO(r0, 0x0, 0x80, &(0x7f00000009c0)={'broute\x00', 0x0, 0x0, 0x0, [0xffff, 0x8, 0x0, 0x3, 0x8653, 0xfffffffffffffff7]}, &(0x7f0000000080)=0x78)
unshare(0x40000000)
mmap(&(0x7f00004f5000/0x2000)=nil, 0x2000, 0x3, 0x30, 0xffffffffffffffff, 0xd3691000)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000480)={0xffffffffffffffff, &(0x7f0000000cc0)="f7463800cbdec122707151f05fdbd8938bbf8e35f2cd4fec8d9bae70aadf80cf9f98c710a7807cc71a3f9b51e9b206eb0f7836d047f5da73aa0e8a6592fe9606764f157767f90280b4acbf9f0f8eb1501d65e4083ce3a7dad0a7dc6b7f1034c9418fa54731ddfeebf4731dc0e048536f934865eca5e2f3b831c553128246b3154a21a1ebada7191d32809cfd3d7f4625215736f672", &(0x7f0000000c00)=@buf="d81112022f5038422a647a383fd134e8f791fb1ae2d4d27d71a49366569e0e74dd2e02ba840d740118a33cad199eac48991e396323c1ddf4da1a8864c62ec7aca92cd1e22f6a8190ab00e0d2b0c1ea174bb1144b0fd1f6d67d3010ca4cd57a27d2bdc1efd25bd9a3d2cddce87c05e9ad3ab7e1bd9958695043ebfb342fcfb432fd78102494f470f978bb1ce16c8c096660fa205105", 0x4}, 0x20)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
unshare(0x100)
sendfile(r0, 0xffffffffffffffff, &(0x7f0000000b80)=0x6, 0x3)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000000), 0x4)
getsockopt$EBT_SO_GET_INFO(r3, 0x0, 0x80, &(0x7f00000004c0)={'nat\x00', 0x0, 0x0, 0x0, [0x1, 0xffffffffffffffff, 0x0, 0xae, 0x401, 0x8]}, &(0x7f0000000280)=0x78)
ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000100)={0x0, {0x2, 0x4e23, @remote}, {0x2, 0x0, @remote}, {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x36}}, 0x107, 0x0, 0x0, 0x0, 0xfc01})
sendmsg$TIPC_NL_NET_GET(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4090014}, 0xc, &(0x7f0000000740)={&(0x7f0000000d80)=ANY=[@ANYBLOB="700002001a6b19b553e827f52cabce6f4a18bd04d2603a6492cca0c878f4c51719c74293c0629af2e7a290e106ed4827f3fd2753dcae35209eded4569ad3b1e61ab2f40071634127f6d542ac6a371af8072eeaeea9569259aee61b5280e925f21a4c4c021666580b0ca51a49dffbcc40126689c9598fc75996ebcaad927cb81ba078fdb3d8c4f3a0ff888b772a3789bf193f84f11bf1a6e7ec23f3d7a18c87560e231afb658c", @ANYRES16=0x0, @ANYBLOB="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"], 0x70}}, 0x0)
unshare(0x40000080)
r4 = socket(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000840)={0x0, {0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x4, 0x0, @loopback}, {0x2, 0x4e23, @remote}, 0x1c4, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)='lo\x00', 0xffffffff})
setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f00000005c0)={0x0, 0x7, 0x0, 0x4}, 0x32)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r4, 0x8982, &(0x7f0000000340)={0x0, 'team0\x00', {0x7}, 0x401})
syz_genetlink_get_family_id$nl80211(&(0x7f00000022c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000011c0)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0)
ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000200)={0x0, {0x2, 0x4e21, @multicast1}, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x1}}, {0x2, 0x4e24, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0xd4, 0x0, 0x8, 0x8, 0x7fff})
sendmsg$NL80211_CMD_STOP_P2P_DEVICE(r4, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000780)={&(0x7f0000000980)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x48810)
socket$inet(0x2, 0xa, 0xffffff10)
sendto$inet6(r4, &(0x7f0000000180), 0x0, 0x40080, &(0x7f00000001c0)={0xa, 0x4e22, 0x5, @dev={0xfe, 0x80, '\x00', 0x29}, 0x6}, 0x1c)
unshare(0xa040900)
r5 = socket$netlink(0x10, 0x3, 0x0)
writev(r5, &(0x7f0000000040)=[{&(0x7f00000000c0)="390000001300094700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1)

13:45:28 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r1)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400ee5c99f8435ecde50a0412", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x1, 0x803, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="50000000100001040000ff0f0000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e00000000180002800c0002001c0000001b000000060001000100000008000500", @ANYRES32=r5], 0x50}}, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080))
r7 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x1e}}]}}}, @IFLA_LINK={0x8, 0x5, r6}]}, 0x50}}, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = socket(0x1, 0x803, 0x0)
getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000540)=ANY=[@ANYBLOB="20000000110003040000007bb000000000000000", @ANYRES32=r10], 0x20}}, 0x0)

13:45:28 executing program 5:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000240)={@val={0x0, 0x86dd}, @val={0x0, 0x0, 0x0, 0x0, 0x54}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "000003", 0x190, 0x3a, 0x0, @empty, @mcast2, {[@routing={0x0, 0x2, 0x0, 0x0, 0x0, [@empty]}], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x0, "ee7b615d"}, {}, {0x2b, 0x3, "6f8c008275021d683910c309293188a7c747eb2278d2794784"}, {0x0, 0x28, "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"}]}}}}}, 0x1c6)

13:45:28 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, 0x0, 0x0, 0x2, 0x0)
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f000000c380)='/proc/crypto\x00', 0x0, 0x0)
read$FUSE(r3, &(0x7f0000000200)={0x2020}, 0x2020)
execve(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000280)=[0x0, 0x0], &(0x7f0000000380)=[&(0x7f00000002c0)='*$%}\xce*\x00', &(0x7f0000000300)='\x00'])

13:45:28 executing program 4:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000680)={0x0, {0x2, 0x4e22}, {0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x2, 0x4e24, @multicast2}, 0x354, 0x0, 0x0, 0x0, 0xfffa, &(0x7f0000000580)='ipvlan0\x00', 0xffffffffffffffc1, 0x8, 0x14})
ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000900)={0x0, {0x2, 0x4e23, @local}, {0x2, 0x4e20, @empty}, {0x2, 0x4e23, @broadcast}, 0x200, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000300)='batadv_slave_1\x00', 0x9, 0x5, 0xdb})
getsockopt$EBT_SO_GET_INFO(r0, 0x0, 0x80, &(0x7f00000009c0)={'broute\x00', 0x0, 0x0, 0x0, [0xffff, 0x8, 0x0, 0x3, 0x8653, 0xfffffffffffffff7]}, &(0x7f0000000080)=0x78)
unshare(0x40000000)
mmap(&(0x7f00004f5000/0x2000)=nil, 0x2000, 0x3, 0x30, 0xffffffffffffffff, 0xd3691000)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000480)={0xffffffffffffffff, &(0x7f0000000cc0)="f7463800cbdec122707151f05fdbd8938bbf8e35f2cd4fec8d9bae70aadf80cf9f98c710a7807cc71a3f9b51e9b206eb0f7836d047f5da73aa0e8a6592fe9606764f157767f90280b4acbf9f0f8eb1501d65e4083ce3a7dad0a7dc6b7f1034c9418fa54731ddfeebf4731dc0e048536f934865eca5e2f3b831c553128246b3154a21a1ebada7191d32809cfd3d7f4625215736f672", &(0x7f0000000c00)=@buf="d81112022f5038422a647a383fd134e8f791fb1ae2d4d27d71a49366569e0e74dd2e02ba840d740118a33cad199eac48991e396323c1ddf4da1a8864c62ec7aca92cd1e22f6a8190ab00e0d2b0c1ea174bb1144b0fd1f6d67d3010ca4cd57a27d2bdc1efd25bd9a3d2cddce87c05e9ad3ab7e1bd9958695043ebfb342fcfb432fd78102494f470f978bb1ce16c8c096660fa205105", 0x4}, 0x20)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
unshare(0x100)
sendfile(r0, 0xffffffffffffffff, &(0x7f0000000b80)=0x6, 0x3)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000000), 0x4)
getsockopt$EBT_SO_GET_INFO(r3, 0x0, 0x80, &(0x7f00000004c0)={'nat\x00', 0x0, 0x0, 0x0, [0x1, 0xffffffffffffffff, 0x0, 0xae, 0x401, 0x8]}, &(0x7f0000000280)=0x78)
ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000100)={0x0, {0x2, 0x4e23, @remote}, {0x2, 0x0, @remote}, {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x36}}, 0x107, 0x0, 0x0, 0x0, 0xfc01})
sendmsg$TIPC_NL_NET_GET(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4090014}, 0xc, &(0x7f0000000740)={&(0x7f0000000d80)=ANY=[@ANYBLOB="700002001a6b19b553e827f52cabce6f4a18bd04d2603a6492cca0c878f4c51719c74293c0629af2e7a290e106ed4827f3fd2753dcae35209eded4569ad3b1e61ab2f40071634127f6d542ac6a371af8072eeaeea9569259aee61b5280e925f21a4c4c021666580b0ca51a49dffbcc40126689c9598fc75996ebcaad927cb81ba078fdb3d8c4f3a0ff888b772a3789bf193f84f11bf1a6e7ec23f3d7a18c87560e231afb658c", @ANYRES16=0x0, @ANYBLOB="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"], 0x70}}, 0x0)
unshare(0x40000080)
r4 = socket(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000840)={0x0, {0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x4, 0x0, @loopback}, {0x2, 0x4e23, @remote}, 0x1c4, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)='lo\x00', 0xffffffff})
setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f00000005c0)={0x0, 0x7, 0x0, 0x4}, 0x32)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r4, 0x8982, &(0x7f0000000340)={0x0, 'team0\x00', {0x7}, 0x401})
syz_genetlink_get_family_id$nl80211(&(0x7f00000022c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000011c0)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0)
ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000200)={0x0, {0x2, 0x4e21, @multicast1}, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x1}}, {0x2, 0x4e24, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0xd4, 0x0, 0x8, 0x8, 0x7fff})
sendmsg$NL80211_CMD_STOP_P2P_DEVICE(r4, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000780)={&(0x7f0000000980)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x48810)
socket$inet(0x2, 0xa, 0xffffff10)
sendto$inet6(r4, &(0x7f0000000180), 0x0, 0x40080, &(0x7f00000001c0)={0xa, 0x4e22, 0x5, @dev={0xfe, 0x80, '\x00', 0x29}, 0x6}, 0x1c)
unshare(0xa040900)
r5 = socket$netlink(0x10, 0x3, 0x0)
writev(r5, &(0x7f0000000040)=[{&(0x7f00000000c0)="390000001300094700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1)

13:45:28 executing program 2:
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
syz_genetlink_get_family_id$tipc(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$NFT_BATCH(r1, &(0x7f00000015c0)={&(0x7f0000000300), 0xc, &(0x7f0000001580)={&(0x7f00000014c0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_PAYLOAD_CSUM_OFFSET={0x8, 0x7, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}]}, @NFT_MSG_DELSETELEM={0x1c, 0xe, 0xa, 0x5, 0x0, 0x0, {0x0, 0x0, 0x8}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}]}], {0x14}}, 0x94}, 0x1, 0x0, 0x0, 0x1}, 0x1)
getsockname$packet(0xffffffffffffffff, &(0x7f0000001340), &(0x7f0000001380)=0x14)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r1, 0x0, 0x0)
sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, 0x0, 0x0)
getsockname(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001400)={&(0x7f0000000140), 0xc, &(0x7f0000000340)={&(0x7f0000000f00)=@newqdisc={0x1b8, 0x24, 0x0, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0xc}, {0x10, 0xffff}, {0xf, 0xfff2}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_RATE={0x6, 0x5, {0x8}}, @qdisc_kind_options=@q_choke={{0xa}, {0x18, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x4e0, 0x2, 0x6, 0x0, 0x1e, 0x2}}]}}, @qdisc_kind_options=@q_codel={{0xa}, {0x54, 0x2, [@TCA_CODEL_TARGET={0x8}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x4}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_LIMIT={0x8, 0x2, 0x2}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x80}, @TCA_CODEL_TARGET={0x8, 0x1, 0xb9}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_INTERVAL={0x8, 0x3, 0x7}, @TCA_CODEL_LIMIT={0x8, 0x2, 0x5}]}}, @TCA_STAB={0xf8, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x8, 0xc000, 0x9, 0x1, 0x80000001, 0x4, 0xa}}, {0x18, 0x2, [0x3, 0x4, 0x3, 0xff, 0x200, 0xfe01, 0x7, 0x8, 0x0, 0x2]}}, {{0x1c, 0x1, {0x0, 0x20, 0x1, 0xfc000, 0x1}}, {0x4}}, {{0x1c, 0x1, {0x3, 0x11, 0x100, 0x5, 0x0, 0x2dd, 0x7fff, 0x4}}, {0xc, 0x2, [0x6, 0x100, 0x2, 0x71]}}, {{0x1c, 0x1, {0x0, 0x40, 0x5, 0x3, 0x2}}, {0x4}}, {{0x1c, 0x1, {0x4, 0x8, 0x1ff, 0x3ff, 0x2, 0x5, 0x9, 0x5}}, {0xe, 0x2, [0x1, 0x1, 0xb41, 0x0, 0x8]}}, {{0x1c, 0x1, {0x9, 0x3f, 0x4, 0x3, 0x0, 0x4, 0x9, 0x5}}, {0xe, 0x2, [0x0, 0x0, 0x5ca, 0xfff, 0xfffb]}}]}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x81}]}, 0x1b8}, 0x1, 0x0, 0x0, 0x20000110}, 0x800)
connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10)
writev(r2, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1)
recvmmsg(r2, &(0x7f0000003e40)=[{{0x0, 0x3, 0x0, 0x0, &(0x7f00000035c0)=""/241, 0xf1}}, {{&(0x7f00000036c0)=@un=@abs, 0x80, &(0x7f0000003780)=[{&(0x7f0000003740)=""/4, 0x7ffff}], 0x1, &(0x7f00000037c0)=""/236, 0xec}}, {{0x0, 0x0, &(0x7f0000003bc0)=[{0x0, 0xe00000000000000}, {&(0x7f0000003a00)=""/190, 0xbe}, {&(0x7f0000003ac0)=""/131, 0x83}, {0x0}], 0x4, &(0x7f0000003c00)=""/73, 0x49}}, {{&(0x7f0000003c80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, 0x0, 0x0, &(0x7f0000003e00)=""/48, 0x30}}], 0x4, 0x40000121, 0x0)
shutdown(r2, 0x0)

[ 2243.503938][T22345] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'.
13:45:28 executing program 2:
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
syz_genetlink_get_family_id$tipc(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$NFT_BATCH(r1, &(0x7f00000015c0)={&(0x7f0000000300), 0xc, &(0x7f0000001580)={&(0x7f00000014c0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_PAYLOAD_CSUM_OFFSET={0x8, 0x7, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}]}, @NFT_MSG_DELSETELEM={0x1c, 0xe, 0xa, 0x5, 0x0, 0x0, {0x0, 0x0, 0x8}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}]}], {0x14}}, 0x94}, 0x1, 0x0, 0x0, 0x1}, 0x1)
getsockname$packet(0xffffffffffffffff, &(0x7f0000001340), &(0x7f0000001380)=0x14)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r1, 0x0, 0x0)
sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, 0x0, 0x0)
getsockname(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001400)={&(0x7f0000000140), 0xc, &(0x7f0000000340)={&(0x7f0000000f00)=@newqdisc={0x1b8, 0x24, 0x0, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0xc}, {0x10, 0xffff}, {0xf, 0xfff2}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_RATE={0x6, 0x5, {0x8}}, @qdisc_kind_options=@q_choke={{0xa}, {0x18, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x4e0, 0x2, 0x6, 0x0, 0x1e, 0x2}}]}}, @qdisc_kind_options=@q_codel={{0xa}, {0x54, 0x2, [@TCA_CODEL_TARGET={0x8}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x4}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_LIMIT={0x8, 0x2, 0x2}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x80}, @TCA_CODEL_TARGET={0x8, 0x1, 0xb9}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_INTERVAL={0x8, 0x3, 0x7}, @TCA_CODEL_LIMIT={0x8, 0x2, 0x5}]}}, @TCA_STAB={0xf8, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x8, 0xc000, 0x9, 0x1, 0x80000001, 0x4, 0xa}}, {0x18, 0x2, [0x3, 0x4, 0x3, 0xff, 0x200, 0xfe01, 0x7, 0x8, 0x0, 0x2]}}, {{0x1c, 0x1, {0x0, 0x20, 0x1, 0xfc000, 0x1}}, {0x4}}, {{0x1c, 0x1, {0x3, 0x11, 0x100, 0x5, 0x0, 0x2dd, 0x7fff, 0x4}}, {0xc, 0x2, [0x6, 0x100, 0x2, 0x71]}}, {{0x1c, 0x1, {0x0, 0x40, 0x5, 0x3, 0x2}}, {0x4}}, {{0x1c, 0x1, {0x4, 0x8, 0x1ff, 0x3ff, 0x2, 0x5, 0x9, 0x5}}, {0xe, 0x2, [0x1, 0x1, 0xb41, 0x0, 0x8]}}, {{0x1c, 0x1, {0x9, 0x3f, 0x4, 0x3, 0x0, 0x4, 0x9, 0x5}}, {0xe, 0x2, [0x0, 0x0, 0x5ca, 0xfff, 0xfffb]}}]}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x81}]}, 0x1b8}, 0x1, 0x0, 0x0, 0x20000110}, 0x800)
connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10)
writev(r2, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1)
recvmmsg(r2, &(0x7f0000003e40)=[{{0x0, 0x3, 0x0, 0x0, &(0x7f00000035c0)=""/241, 0xf1}}, {{&(0x7f00000036c0)=@un=@abs, 0x80, &(0x7f0000003780)=[{&(0x7f0000003740)=""/4, 0x7ffff}], 0x1, &(0x7f00000037c0)=""/236, 0xec}}, {{0x0, 0x0, &(0x7f0000003bc0)=[{0x0, 0xe00000000000000}, {&(0x7f0000003a00)=""/190, 0xbe}, {&(0x7f0000003ac0)=""/131, 0x83}, {0x0}], 0x4, &(0x7f0000003c00)=""/73, 0x49}}, {{&(0x7f0000003c80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, 0x0, 0x0, &(0x7f0000003e00)=""/48, 0x30}}], 0x4, 0x40000121, 0x0)
shutdown(r2, 0x0)

13:45:29 executing program 2:
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
syz_genetlink_get_family_id$tipc(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$NFT_BATCH(r1, &(0x7f00000015c0)={&(0x7f0000000300), 0xc, &(0x7f0000001580)={&(0x7f00000014c0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_PAYLOAD_CSUM_OFFSET={0x8, 0x7, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}]}, @NFT_MSG_DELSETELEM={0x1c, 0xe, 0xa, 0x5, 0x0, 0x0, {0x0, 0x0, 0x8}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}]}], {0x14}}, 0x94}, 0x1, 0x0, 0x0, 0x1}, 0x1)
getsockname$packet(0xffffffffffffffff, &(0x7f0000001340), &(0x7f0000001380)=0x14)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r1, 0x0, 0x0)
sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, 0x0, 0x0)
getsockname(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001400)={&(0x7f0000000140), 0xc, &(0x7f0000000340)={&(0x7f0000000f00)=@newqdisc={0x1b8, 0x24, 0x0, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0xc}, {0x10, 0xffff}, {0xf, 0xfff2}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_RATE={0x6, 0x5, {0x8}}, @qdisc_kind_options=@q_choke={{0xa}, {0x18, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x4e0, 0x2, 0x6, 0x0, 0x1e, 0x2}}]}}, @qdisc_kind_options=@q_codel={{0xa}, {0x54, 0x2, [@TCA_CODEL_TARGET={0x8}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x4}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_LIMIT={0x8, 0x2, 0x2}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x80}, @TCA_CODEL_TARGET={0x8, 0x1, 0xb9}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_INTERVAL={0x8, 0x3, 0x7}, @TCA_CODEL_LIMIT={0x8, 0x2, 0x5}]}}, @TCA_STAB={0xf8, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x8, 0xc000, 0x9, 0x1, 0x80000001, 0x4, 0xa}}, {0x18, 0x2, [0x3, 0x4, 0x3, 0xff, 0x200, 0xfe01, 0x7, 0x8, 0x0, 0x2]}}, {{0x1c, 0x1, {0x0, 0x20, 0x1, 0xfc000, 0x1}}, {0x4}}, {{0x1c, 0x1, {0x3, 0x11, 0x100, 0x5, 0x0, 0x2dd, 0x7fff, 0x4}}, {0xc, 0x2, [0x6, 0x100, 0x2, 0x71]}}, {{0x1c, 0x1, {0x0, 0x40, 0x5, 0x3, 0x2}}, {0x4}}, {{0x1c, 0x1, {0x4, 0x8, 0x1ff, 0x3ff, 0x2, 0x5, 0x9, 0x5}}, {0xe, 0x2, [0x1, 0x1, 0xb41, 0x0, 0x8]}}, {{0x1c, 0x1, {0x9, 0x3f, 0x4, 0x3, 0x0, 0x4, 0x9, 0x5}}, {0xe, 0x2, [0x0, 0x0, 0x5ca, 0xfff, 0xfffb]}}]}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x81}]}, 0x1b8}, 0x1, 0x0, 0x0, 0x20000110}, 0x800)
connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10)
writev(r2, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1)
recvmmsg(r2, &(0x7f0000003e40)=[{{0x0, 0x3, 0x0, 0x0, &(0x7f00000035c0)=""/241, 0xf1}}, {{&(0x7f00000036c0)=@un=@abs, 0x80, &(0x7f0000003780)=[{&(0x7f0000003740)=""/4, 0x7ffff}], 0x1, &(0x7f00000037c0)=""/236, 0xec}}, {{0x0, 0x0, &(0x7f0000003bc0)=[{0x0, 0xe00000000000000}, {&(0x7f0000003a00)=""/190, 0xbe}, {&(0x7f0000003ac0)=""/131, 0x83}, {0x0}], 0x4, &(0x7f0000003c00)=""/73, 0x49}}, {{&(0x7f0000003c80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, 0x0, 0x0, &(0x7f0000003e00)=""/48, 0x30}}], 0x4, 0x40000121, 0x0)
shutdown(r2, 0x0)

13:45:29 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r1)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400ee5c99f8435ecde50a0412", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x1, 0x803, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="50000000100001040000ff0f0000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e00000000180002800c0002001c0000001b000000060001000100000008000500", @ANYRES32=r5], 0x50}}, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080))
r7 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x1e}}]}}}, @IFLA_LINK={0x8, 0x5, r6}]}, 0x50}}, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = socket(0x1, 0x803, 0x0)
getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000540)=ANY=[@ANYBLOB="20000000110003040000007bb000000000000000", @ANYRES32=r10], 0x20}}, 0x0)

[ 2244.189041][T22369] netlink: 'syz-executor.0': attribute type 4 has an invalid length.
13:45:29 executing program 2:
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
syz_genetlink_get_family_id$tipc(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$NFT_BATCH(r1, &(0x7f00000015c0)={&(0x7f0000000300), 0xc, &(0x7f0000001580)={&(0x7f00000014c0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_PAYLOAD_CSUM_OFFSET={0x8, 0x7, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}]}, @NFT_MSG_DELSETELEM={0x1c, 0xe, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}]}], {0x14}}, 0x94}, 0x1, 0x0, 0x0, 0x1}, 0x1)
getsockname$packet(0xffffffffffffffff, &(0x7f0000001340), &(0x7f0000001380)=0x14)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r1, 0x0, 0x0)
sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, 0x0, 0x0)
getsockname(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001400)={&(0x7f0000000140), 0xc, &(0x7f0000000340)={&(0x7f0000000f00)=@newqdisc={0x1b8, 0x24, 0x0, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0xc}, {0x10, 0xffff}, {0xf, 0xfff2}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_RATE={0x6, 0x5, {0x8}}, @qdisc_kind_options=@q_choke={{0xa}, {0x18, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x4e0, 0x2, 0x6, 0x0, 0x1e, 0x2}}]}}, @qdisc_kind_options=@q_codel={{0xa}, {0x54, 0x2, [@TCA_CODEL_TARGET={0x8}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x4}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_LIMIT={0x8, 0x2, 0x2}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x80}, @TCA_CODEL_TARGET={0x8, 0x1, 0xb9}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_INTERVAL={0x8, 0x3, 0x7}, @TCA_CODEL_LIMIT={0x8, 0x2, 0x5}]}}, @TCA_STAB={0xf8, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x8, 0xc000, 0x9, 0x1, 0x80000001, 0x4, 0xa}}, {0x18, 0x2, [0x3, 0x4, 0x3, 0xff, 0x200, 0xfe01, 0x7, 0x8, 0x0, 0x2]}}, {{0x1c, 0x1, {0x0, 0x20, 0x1, 0xfc000, 0x1}}, {0x4}}, {{0x1c, 0x1, {0x3, 0x11, 0x100, 0x5, 0x0, 0x2dd, 0x7fff, 0x4}}, {0xc, 0x2, [0x6, 0x100, 0x2, 0x71]}}, {{0x1c, 0x1, {0x0, 0x40, 0x5, 0x3, 0x2}}, {0x4}}, {{0x1c, 0x1, {0x4, 0x8, 0x1ff, 0x3ff, 0x2, 0x5, 0x9, 0x5}}, {0xe, 0x2, [0x1, 0x1, 0xb41, 0x0, 0x8]}}, {{0x1c, 0x1, {0x9, 0x3f, 0x4, 0x3, 0x0, 0x4, 0x9, 0x5}}, {0xe, 0x2, [0x0, 0x0, 0x5ca, 0xfff, 0xfffb]}}]}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x81}]}, 0x1b8}, 0x1, 0x0, 0x0, 0x20000110}, 0x800)
connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10)
writev(r2, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1)
recvmmsg(r2, &(0x7f0000003e40)=[{{0x0, 0x3, 0x0, 0x0, &(0x7f00000035c0)=""/241, 0xf1}}, {{&(0x7f00000036c0)=@un=@abs, 0x80, &(0x7f0000003780)=[{&(0x7f0000003740)=""/4, 0x7ffff}], 0x1, &(0x7f00000037c0)=""/236, 0xec}}, {{0x0, 0x0, &(0x7f0000003bc0)=[{0x0, 0xe00000000000000}, {&(0x7f0000003a00)=""/190, 0xbe}, {&(0x7f0000003ac0)=""/131, 0x83}, {0x0}], 0x4, &(0x7f0000003c00)=""/73, 0x49}}, {{&(0x7f0000003c80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, 0x0, 0x0, &(0x7f0000003e00)=""/48, 0x30}}], 0x4, 0x40000121, 0x0)
shutdown(r2, 0x0)

13:45:29 executing program 2:
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
syz_genetlink_get_family_id$tipc(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$NFT_BATCH(r1, &(0x7f00000015c0)={&(0x7f0000000300), 0xc, &(0x7f0000001580)={&(0x7f00000014c0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_PAYLOAD_CSUM_OFFSET={0x8, 0x7, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}]}, @NFT_MSG_DELSETELEM={0x1c, 0xe, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}]}], {0x14}}, 0x94}, 0x1, 0x0, 0x0, 0x1}, 0x1)
getsockname$packet(0xffffffffffffffff, &(0x7f0000001340), &(0x7f0000001380)=0x14)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r1, 0x0, 0x0)
sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, 0x0, 0x0)
getsockname(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001400)={&(0x7f0000000140), 0xc, &(0x7f0000000340)={&(0x7f0000000f00)=@newqdisc={0x1b8, 0x24, 0x0, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0xc}, {0x10, 0xffff}, {0xf, 0xfff2}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_RATE={0x6, 0x5, {0x8}}, @qdisc_kind_options=@q_choke={{0xa}, {0x18, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x4e0, 0x2, 0x6, 0x0, 0x1e, 0x2}}]}}, @qdisc_kind_options=@q_codel={{0xa}, {0x54, 0x2, [@TCA_CODEL_TARGET={0x8}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x4}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_LIMIT={0x8, 0x2, 0x2}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x80}, @TCA_CODEL_TARGET={0x8, 0x1, 0xb9}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_INTERVAL={0x8, 0x3, 0x7}, @TCA_CODEL_LIMIT={0x8, 0x2, 0x5}]}}, @TCA_STAB={0xf8, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x8, 0xc000, 0x9, 0x1, 0x80000001, 0x4, 0xa}}, {0x18, 0x2, [0x3, 0x4, 0x3, 0xff, 0x200, 0xfe01, 0x7, 0x8, 0x0, 0x2]}}, {{0x1c, 0x1, {0x0, 0x20, 0x1, 0xfc000, 0x1}}, {0x4}}, {{0x1c, 0x1, {0x3, 0x11, 0x100, 0x5, 0x0, 0x2dd, 0x7fff, 0x4}}, {0xc, 0x2, [0x6, 0x100, 0x2, 0x71]}}, {{0x1c, 0x1, {0x0, 0x40, 0x5, 0x3, 0x2}}, {0x4}}, {{0x1c, 0x1, {0x4, 0x8, 0x1ff, 0x3ff, 0x2, 0x5, 0x9, 0x5}}, {0xe, 0x2, [0x1, 0x1, 0xb41, 0x0, 0x8]}}, {{0x1c, 0x1, {0x9, 0x3f, 0x4, 0x3, 0x0, 0x4, 0x9, 0x5}}, {0xe, 0x2, [0x0, 0x0, 0x5ca, 0xfff, 0xfffb]}}]}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x81}]}, 0x1b8}, 0x1, 0x0, 0x0, 0x20000110}, 0x800)
connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10)
writev(r2, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1)
recvmmsg(r2, &(0x7f0000003e40)=[{{0x0, 0x3, 0x0, 0x0, &(0x7f00000035c0)=""/241, 0xf1}}, {{&(0x7f00000036c0)=@un=@abs, 0x80, &(0x7f0000003780)=[{&(0x7f0000003740)=""/4, 0x7ffff}], 0x1, &(0x7f00000037c0)=""/236, 0xec}}, {{0x0, 0x0, &(0x7f0000003bc0)=[{0x0, 0xe00000000000000}, {&(0x7f0000003a00)=""/190, 0xbe}, {&(0x7f0000003ac0)=""/131, 0x83}, {0x0}], 0x4, &(0x7f0000003c00)=""/73, 0x49}}, {{&(0x7f0000003c80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, 0x0, 0x0, &(0x7f0000003e00)=""/48, 0x30}}], 0x4, 0x40000121, 0x0)
shutdown(r2, 0x0)

[ 2244.438433][T22376] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'.
13:45:29 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, 0x0, 0x0, 0x2, 0x0)
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f000000c380)='/proc/crypto\x00', 0x0, 0x0)
read$FUSE(r3, &(0x7f0000000200)={0x2020}, 0x2020)
execve(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000280)=[0x0, 0x0], &(0x7f0000000380)=[&(0x7f00000002c0)='*$%}\xce*\x00', &(0x7f0000000300)='\x00'])

[ 2244.631503][T22375] netlink: 'syz-executor.4': attribute type 4 has an invalid length.
13:45:33 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000680)={0x0, {0x2, 0x4e22}, {0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x2, 0x4e24, @multicast2}, 0x354, 0x0, 0x0, 0x0, 0xfffa, &(0x7f0000000580)='ipvlan0\x00', 0xffffffffffffffc1, 0x8, 0x14})
ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000900)={0x0, {0x2, 0x4e23, @local}, {0x2, 0x4e20, @empty}, {0x2, 0x4e23, @broadcast}, 0x200, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000300)='batadv_slave_1\x00', 0x9, 0x5, 0xdb})
getsockopt$EBT_SO_GET_INFO(r0, 0x0, 0x80, &(0x7f00000009c0)={'broute\x00', 0x0, 0x0, 0x0, [0xffff, 0x8, 0x0, 0x3, 0x8653, 0xfffffffffffffff7]}, &(0x7f0000000080)=0x78)
unshare(0x40000000)
mmap(&(0x7f00004f5000/0x2000)=nil, 0x2000, 0x3, 0x30, 0xffffffffffffffff, 0xd3691000)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000480)={0xffffffffffffffff, &(0x7f0000000cc0)="f7463800cbdec122707151f05fdbd8938bbf8e35f2cd4fec8d9bae70aadf80cf9f98c710a7807cc71a3f9b51e9b206eb0f7836d047f5da73aa0e8a6592fe9606764f157767f90280b4acbf9f0f8eb1501d65e4083ce3a7dad0a7dc6b7f1034c9418fa54731ddfeebf4731dc0e048536f934865eca5e2f3b831c553128246b3154a21a1ebada7191d32809cfd3d7f4625215736f672", &(0x7f0000000c00)=@buf="d81112022f5038422a647a383fd134e8f791fb1ae2d4d27d71a49366569e0e74dd2e02ba840d740118a33cad199eac48991e396323c1ddf4da1a8864c62ec7aca92cd1e22f6a8190ab00e0d2b0c1ea174bb1144b0fd1f6d67d3010ca4cd57a27d2bdc1efd25bd9a3d2cddce87c05e9ad3ab7e1bd9958695043ebfb342fcfb432fd78102494f470f978bb1ce16c8c096660fa205105", 0x4}, 0x20)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
unshare(0x100)
sendfile(r0, 0xffffffffffffffff, &(0x7f0000000b80)=0x6, 0x3)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000000), 0x4)
getsockopt$EBT_SO_GET_INFO(r3, 0x0, 0x80, &(0x7f00000004c0)={'nat\x00', 0x0, 0x0, 0x0, [0x1, 0xffffffffffffffff, 0x0, 0xae, 0x401, 0x8]}, &(0x7f0000000280)=0x78)
ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000100)={0x0, {0x2, 0x4e23, @remote}, {0x2, 0x0, @remote}, {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x36}}, 0x107, 0x0, 0x0, 0x0, 0xfc01})
sendmsg$TIPC_NL_NET_GET(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4090014}, 0xc, &(0x7f0000000740)={&(0x7f0000000d80)=ANY=[@ANYBLOB="700002001a6b19b553e827f52cabce6f4a18bd04d2603a6492cca0c878f4c51719c74293c0629af2e7a290e106ed4827f3fd2753dcae35209eded4569ad3b1e61ab2f40071634127f6d542ac6a371af8072eeaeea9569259aee61b5280e925f21a4c4c021666580b0ca51a49dffbcc40126689c9598fc75996ebcaad927cb81ba078fdb3d8c4f3a0ff888b772a3789bf193f84f11bf1a6e7ec23f3d7a18c87560e231afb658c", @ANYRES16=0x0, @ANYBLOB="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"], 0x70}}, 0x0)
unshare(0x40000080)
r4 = socket(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000840)={0x0, {0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x4, 0x0, @loopback}, {0x2, 0x4e23, @remote}, 0x1c4, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)='lo\x00', 0xffffffff})
setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f00000005c0)={0x0, 0x7, 0x0, 0x4}, 0x32)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r4, 0x8982, &(0x7f0000000340)={0x0, 'team0\x00', {0x7}, 0x401})
syz_genetlink_get_family_id$nl80211(&(0x7f00000022c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000011c0)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0)
ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000200)={0x0, {0x2, 0x4e21, @multicast1}, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x1}}, {0x2, 0x4e24, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0xd4, 0x0, 0x8, 0x8, 0x7fff})
sendmsg$NL80211_CMD_STOP_P2P_DEVICE(r4, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000780)={&(0x7f0000000980)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x48810)
socket$inet(0x2, 0xa, 0xffffff10)
sendto$inet6(r4, &(0x7f0000000180), 0x0, 0x40080, &(0x7f00000001c0)={0xa, 0x4e22, 0x5, @dev={0xfe, 0x80, '\x00', 0x29}, 0x6}, 0x1c)
unshare(0xa040900)
r5 = socket$netlink(0x10, 0x3, 0x0)
writev(r5, &(0x7f0000000040)=[{&(0x7f00000000c0)="390000001300094700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1)

13:45:33 executing program 5:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000240)={@val={0x0, 0x86dd}, @val={0x5}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "000003", 0x190, 0x3a, 0x0, @empty, @mcast2, {[@routing={0x0, 0x2, 0x0, 0x0, 0x0, [@empty]}], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x0, "ee7b615d"}, {}, {0x2b, 0x3, "6f8c008275021d683910c309293188a7c747eb2278d2794784"}, {0x0, 0x28, "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"}]}}}}}, 0x1c6)

13:45:33 executing program 2:
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
syz_genetlink_get_family_id$tipc(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$NFT_BATCH(r1, &(0x7f00000015c0)={&(0x7f0000000300), 0xc, &(0x7f0000001580)={&(0x7f00000014c0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_PAYLOAD_CSUM_OFFSET={0x8, 0x7, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}]}, @NFT_MSG_DELSETELEM={0x1c, 0xe, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}]}], {0x14}}, 0x94}, 0x1, 0x0, 0x0, 0x1}, 0x1)
getsockname$packet(0xffffffffffffffff, &(0x7f0000001340), &(0x7f0000001380)=0x14)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r1, 0x0, 0x0)
sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, 0x0, 0x0)
getsockname(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001400)={&(0x7f0000000140), 0xc, &(0x7f0000000340)={&(0x7f0000000f00)=@newqdisc={0x1b8, 0x24, 0x0, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0xc}, {0x10, 0xffff}, {0xf, 0xfff2}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_RATE={0x6, 0x5, {0x8}}, @qdisc_kind_options=@q_choke={{0xa}, {0x18, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x4e0, 0x2, 0x6, 0x0, 0x1e, 0x2}}]}}, @qdisc_kind_options=@q_codel={{0xa}, {0x54, 0x2, [@TCA_CODEL_TARGET={0x8}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x4}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_LIMIT={0x8, 0x2, 0x2}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x80}, @TCA_CODEL_TARGET={0x8, 0x1, 0xb9}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_INTERVAL={0x8, 0x3, 0x7}, @TCA_CODEL_LIMIT={0x8, 0x2, 0x5}]}}, @TCA_STAB={0xf8, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x8, 0xc000, 0x9, 0x1, 0x80000001, 0x4, 0xa}}, {0x18, 0x2, [0x3, 0x4, 0x3, 0xff, 0x200, 0xfe01, 0x7, 0x8, 0x0, 0x2]}}, {{0x1c, 0x1, {0x0, 0x20, 0x1, 0xfc000, 0x1}}, {0x4}}, {{0x1c, 0x1, {0x3, 0x11, 0x100, 0x5, 0x0, 0x2dd, 0x7fff, 0x4}}, {0xc, 0x2, [0x6, 0x100, 0x2, 0x71]}}, {{0x1c, 0x1, {0x0, 0x40, 0x5, 0x3, 0x2}}, {0x4}}, {{0x1c, 0x1, {0x4, 0x8, 0x1ff, 0x3ff, 0x2, 0x5, 0x9, 0x5}}, {0xe, 0x2, [0x1, 0x1, 0xb41, 0x0, 0x8]}}, {{0x1c, 0x1, {0x9, 0x3f, 0x4, 0x3, 0x0, 0x4, 0x9, 0x5}}, {0xe, 0x2, [0x0, 0x0, 0x5ca, 0xfff, 0xfffb]}}]}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x81}]}, 0x1b8}, 0x1, 0x0, 0x0, 0x20000110}, 0x800)
connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10)
writev(r2, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1)
recvmmsg(r2, &(0x7f0000003e40)=[{{0x0, 0x3, 0x0, 0x0, &(0x7f00000035c0)=""/241, 0xf1}}, {{&(0x7f00000036c0)=@un=@abs, 0x80, &(0x7f0000003780)=[{&(0x7f0000003740)=""/4, 0x7ffff}], 0x1, &(0x7f00000037c0)=""/236, 0xec}}, {{0x0, 0x0, &(0x7f0000003bc0)=[{0x0, 0xe00000000000000}, {&(0x7f0000003a00)=""/190, 0xbe}, {&(0x7f0000003ac0)=""/131, 0x83}, {0x0}], 0x4, &(0x7f0000003c00)=""/73, 0x49}}, {{&(0x7f0000003c80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, 0x0, 0x0, &(0x7f0000003e00)=""/48, 0x30}}], 0x4, 0x40000121, 0x0)
shutdown(r2, 0x0)

13:45:33 executing program 4:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000680)={0x0, {0x2, 0x4e22}, {0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x2, 0x4e24, @multicast2}, 0x354, 0x0, 0x0, 0x0, 0xfffa, &(0x7f0000000580)='ipvlan0\x00', 0xffffffffffffffc1, 0x8, 0x14})
ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000900)={0x0, {0x2, 0x4e23, @local}, {0x2, 0x4e20, @empty}, {0x2, 0x4e23, @broadcast}, 0x200, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000300)='batadv_slave_1\x00', 0x9, 0x5, 0xdb})
getsockopt$EBT_SO_GET_INFO(r0, 0x0, 0x80, &(0x7f00000009c0)={'broute\x00', 0x0, 0x0, 0x0, [0xffff, 0x8, 0x0, 0x3, 0x8653, 0xfffffffffffffff7]}, &(0x7f0000000080)=0x78)
unshare(0x40000000)
mmap(&(0x7f00004f5000/0x2000)=nil, 0x2000, 0x3, 0x30, 0xffffffffffffffff, 0xd3691000)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000480)={0xffffffffffffffff, &(0x7f0000000cc0)="f7463800cbdec122707151f05fdbd8938bbf8e35f2cd4fec8d9bae70aadf80cf9f98c710a7807cc71a3f9b51e9b206eb0f7836d047f5da73aa0e8a6592fe9606764f157767f90280b4acbf9f0f8eb1501d65e4083ce3a7dad0a7dc6b7f1034c9418fa54731ddfeebf4731dc0e048536f934865eca5e2f3b831c553128246b3154a21a1ebada7191d32809cfd3d7f4625215736f672", &(0x7f0000000c00)=@buf="d81112022f5038422a647a383fd134e8f791fb1ae2d4d27d71a49366569e0e74dd2e02ba840d740118a33cad199eac48991e396323c1ddf4da1a8864c62ec7aca92cd1e22f6a8190ab00e0d2b0c1ea174bb1144b0fd1f6d67d3010ca4cd57a27d2bdc1efd25bd9a3d2cddce87c05e9ad3ab7e1bd9958695043ebfb342fcfb432fd78102494f470f978bb1ce16c8c096660fa205105", 0x4}, 0x20)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
unshare(0x100)
sendfile(r0, 0xffffffffffffffff, &(0x7f0000000b80)=0x6, 0x3)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000000), 0x4)
getsockopt$EBT_SO_GET_INFO(r3, 0x0, 0x80, &(0x7f00000004c0)={'nat\x00', 0x0, 0x0, 0x0, [0x1, 0xffffffffffffffff, 0x0, 0xae, 0x401, 0x8]}, &(0x7f0000000280)=0x78)
ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000100)={0x0, {0x2, 0x4e23, @remote}, {0x2, 0x0, @remote}, {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x36}}, 0x107, 0x0, 0x0, 0x0, 0xfc01})
sendmsg$TIPC_NL_NET_GET(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4090014}, 0xc, &(0x7f0000000740)={&(0x7f0000000d80)=ANY=[@ANYBLOB="700002001a6b19b553e827f52cabce6f4a18bd04d2603a6492cca0c878f4c51719c74293c0629af2e7a290e106ed4827f3fd2753dcae35209eded4569ad3b1e61ab2f40071634127f6d542ac6a371af8072eeaeea9569259aee61b5280e925f21a4c4c021666580b0ca51a49dffbcc40126689c9598fc75996ebcaad927cb81ba078fdb3d8c4f3a0ff888b772a3789bf193f84f11bf1a6e7ec23f3d7a18c87560e231afb658c", @ANYRES16=0x0, @ANYBLOB="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"], 0x70}}, 0x0)
unshare(0x40000080)
r4 = socket(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000840)={0x0, {0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x4, 0x0, @loopback}, {0x2, 0x4e23, @remote}, 0x1c4, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)='lo\x00', 0xffffffff})
setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f00000005c0)={0x0, 0x7, 0x0, 0x4}, 0x32)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r4, 0x8982, &(0x7f0000000340)={0x0, 'team0\x00', {0x7}, 0x401})
syz_genetlink_get_family_id$nl80211(&(0x7f00000022c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000011c0)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0)
ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000200)={0x0, {0x2, 0x4e21, @multicast1}, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x1}}, {0x2, 0x4e24, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0xd4, 0x0, 0x8, 0x8, 0x7fff})
sendmsg$NL80211_CMD_STOP_P2P_DEVICE(r4, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000780)={&(0x7f0000000980)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x48810)
socket$inet(0x2, 0xa, 0xffffff10)
sendto$inet6(r4, &(0x7f0000000180), 0x0, 0x40080, &(0x7f00000001c0)={0xa, 0x4e22, 0x5, @dev={0xfe, 0x80, '\x00', 0x29}, 0x6}, 0x1c)
unshare(0xa040900)
r5 = socket$netlink(0x10, 0x3, 0x0)
writev(r5, &(0x7f0000000040)=[{&(0x7f00000000c0)="390000001300094700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1)

13:45:33 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r1)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400ee5c99f8435ecde50a0412", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x1, 0x803, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="50000000100001040000ff0f0000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e00000000180002800c0002001c0000001b000000060001000100000008000500", @ANYRES32=r5], 0x50}}, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080))
r7 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x1e}}]}}}, @IFLA_LINK={0x8, 0x5, r6}]}, 0x50}}, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = socket(0x1, 0x803, 0x0)
getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000540)=ANY=[@ANYBLOB="20000000110003040000007bb000000000000000", @ANYRES32=r10], 0x20}}, 0x0)

13:45:33 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x0, 0x0)
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f000000c380)='/proc/crypto\x00', 0x0, 0x0)
read$FUSE(r3, &(0x7f0000000200)={0x2020}, 0x2020)
execve(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000280)=[0x0, 0x0], &(0x7f0000000380)=[&(0x7f00000002c0)='*$%}\xce*\x00', &(0x7f0000000300)='\x00'])

13:45:34 executing program 5:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000240)={@val={0x0, 0x86dd}, @val={0x5}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "000003", 0x190, 0x3a, 0x0, @empty, @mcast2, {[@routing={0x0, 0x2, 0x0, 0x0, 0x0, [@empty]}], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x0, "ee7b615d"}, {}, {0x2b, 0x3, "6f8c008275021d683910c309293188a7c747eb2278d2794784"}, {0x0, 0x28, "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"}]}}}}}, 0x1c6)

13:45:34 executing program 2:
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
syz_genetlink_get_family_id$tipc(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$NFT_BATCH(r1, &(0x7f00000015c0)={&(0x7f0000000300), 0xc, &(0x7f0000001580)={&(0x7f00000014c0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_PAYLOAD_CSUM_OFFSET={0x8, 0x7, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}]}, @NFT_MSG_DELSETELEM={0x14, 0xe, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x8}}], {0x14}}, 0x8c}, 0x1, 0x0, 0x0, 0x1}, 0x1)
getsockname$packet(0xffffffffffffffff, &(0x7f0000001340), &(0x7f0000001380)=0x14)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r1, 0x0, 0x0)
sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, 0x0, 0x0)
getsockname(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001400)={&(0x7f0000000140), 0xc, &(0x7f0000000340)={&(0x7f0000000f00)=@newqdisc={0x1b8, 0x24, 0x0, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0xc}, {0x10, 0xffff}, {0xf, 0xfff2}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_RATE={0x6, 0x5, {0x8}}, @qdisc_kind_options=@q_choke={{0xa}, {0x18, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x4e0, 0x2, 0x6, 0x0, 0x1e, 0x2}}]}}, @qdisc_kind_options=@q_codel={{0xa}, {0x54, 0x2, [@TCA_CODEL_TARGET={0x8}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x4}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_LIMIT={0x8, 0x2, 0x2}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x80}, @TCA_CODEL_TARGET={0x8, 0x1, 0xb9}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_INTERVAL={0x8, 0x3, 0x7}, @TCA_CODEL_LIMIT={0x8, 0x2, 0x5}]}}, @TCA_STAB={0xf8, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x8, 0xc000, 0x9, 0x1, 0x80000001, 0x4, 0xa}}, {0x18, 0x2, [0x3, 0x4, 0x3, 0xff, 0x200, 0xfe01, 0x7, 0x8, 0x0, 0x2]}}, {{0x1c, 0x1, {0x0, 0x20, 0x1, 0xfc000, 0x1}}, {0x4}}, {{0x1c, 0x1, {0x3, 0x11, 0x100, 0x5, 0x0, 0x2dd, 0x7fff, 0x4}}, {0xc, 0x2, [0x6, 0x100, 0x2, 0x71]}}, {{0x1c, 0x1, {0x0, 0x40, 0x5, 0x3, 0x2}}, {0x4}}, {{0x1c, 0x1, {0x4, 0x8, 0x1ff, 0x3ff, 0x2, 0x5, 0x9, 0x5}}, {0xe, 0x2, [0x1, 0x1, 0xb41, 0x0, 0x8]}}, {{0x1c, 0x1, {0x9, 0x3f, 0x4, 0x3, 0x0, 0x4, 0x9, 0x5}}, {0xe, 0x2, [0x0, 0x0, 0x5ca, 0xfff, 0xfffb]}}]}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x81}]}, 0x1b8}, 0x1, 0x0, 0x0, 0x20000110}, 0x800)
connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10)
writev(r2, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1)
recvmmsg(r2, &(0x7f0000003e40)=[{{0x0, 0x3, 0x0, 0x0, &(0x7f00000035c0)=""/241, 0xf1}}, {{&(0x7f00000036c0)=@un=@abs, 0x80, &(0x7f0000003780)=[{&(0x7f0000003740)=""/4, 0x7ffff}], 0x1, &(0x7f00000037c0)=""/236, 0xec}}, {{0x0, 0x0, &(0x7f0000003bc0)=[{0x0, 0xe00000000000000}, {&(0x7f0000003a00)=""/190, 0xbe}, {&(0x7f0000003ac0)=""/131, 0x83}, {0x0}], 0x4, &(0x7f0000003c00)=""/73, 0x49}}, {{&(0x7f0000003c80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, 0x0, 0x0, &(0x7f0000003e00)=""/48, 0x30}}], 0x4, 0x40000121, 0x0)
shutdown(r2, 0x0)

[ 2249.136533][T22392] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'.
13:45:34 executing program 2:
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
syz_genetlink_get_family_id$tipc(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$NFT_BATCH(r1, &(0x7f00000015c0)={&(0x7f0000000300), 0xc, &(0x7f0000001580)={&(0x7f00000014c0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_PAYLOAD_CSUM_OFFSET={0x8, 0x7, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}]}, @NFT_MSG_DELSETELEM={0x14, 0xe, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x8}}], {0x14}}, 0x8c}, 0x1, 0x0, 0x0, 0x1}, 0x1)
getsockname$packet(0xffffffffffffffff, &(0x7f0000001340), &(0x7f0000001380)=0x14)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r1, 0x0, 0x0)
sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, 0x0, 0x0)
getsockname(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001400)={&(0x7f0000000140), 0xc, &(0x7f0000000340)={&(0x7f0000000f00)=@newqdisc={0x1b8, 0x24, 0x0, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0xc}, {0x10, 0xffff}, {0xf, 0xfff2}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_RATE={0x6, 0x5, {0x8}}, @qdisc_kind_options=@q_choke={{0xa}, {0x18, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x4e0, 0x2, 0x6, 0x0, 0x1e, 0x2}}]}}, @qdisc_kind_options=@q_codel={{0xa}, {0x54, 0x2, [@TCA_CODEL_TARGET={0x8}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x4}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_LIMIT={0x8, 0x2, 0x2}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x80}, @TCA_CODEL_TARGET={0x8, 0x1, 0xb9}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_INTERVAL={0x8, 0x3, 0x7}, @TCA_CODEL_LIMIT={0x8, 0x2, 0x5}]}}, @TCA_STAB={0xf8, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x8, 0xc000, 0x9, 0x1, 0x80000001, 0x4, 0xa}}, {0x18, 0x2, [0x3, 0x4, 0x3, 0xff, 0x200, 0xfe01, 0x7, 0x8, 0x0, 0x2]}}, {{0x1c, 0x1, {0x0, 0x20, 0x1, 0xfc000, 0x1}}, {0x4}}, {{0x1c, 0x1, {0x3, 0x11, 0x100, 0x5, 0x0, 0x2dd, 0x7fff, 0x4}}, {0xc, 0x2, [0x6, 0x100, 0x2, 0x71]}}, {{0x1c, 0x1, {0x0, 0x40, 0x5, 0x3, 0x2}}, {0x4}}, {{0x1c, 0x1, {0x4, 0x8, 0x1ff, 0x3ff, 0x2, 0x5, 0x9, 0x5}}, {0xe, 0x2, [0x1, 0x1, 0xb41, 0x0, 0x8]}}, {{0x1c, 0x1, {0x9, 0x3f, 0x4, 0x3, 0x0, 0x4, 0x9, 0x5}}, {0xe, 0x2, [0x0, 0x0, 0x5ca, 0xfff, 0xfffb]}}]}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x81}]}, 0x1b8}, 0x1, 0x0, 0x0, 0x20000110}, 0x800)
connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10)
writev(r2, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1)
recvmmsg(r2, &(0x7f0000003e40)=[{{0x0, 0x3, 0x0, 0x0, &(0x7f00000035c0)=""/241, 0xf1}}, {{&(0x7f00000036c0)=@un=@abs, 0x80, &(0x7f0000003780)=[{&(0x7f0000003740)=""/4, 0x7ffff}], 0x1, &(0x7f00000037c0)=""/236, 0xec}}, {{0x0, 0x0, &(0x7f0000003bc0)=[{0x0, 0xe00000000000000}, {&(0x7f0000003a00)=""/190, 0xbe}, {&(0x7f0000003ac0)=""/131, 0x83}, {0x0}], 0x4, &(0x7f0000003c00)=""/73, 0x49}}, {{&(0x7f0000003c80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, 0x0, 0x0, &(0x7f0000003e00)=""/48, 0x30}}], 0x4, 0x40000121, 0x0)
shutdown(r2, 0x0)

13:45:34 executing program 2:
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
syz_genetlink_get_family_id$tipc(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$NFT_BATCH(r1, &(0x7f00000015c0)={&(0x7f0000000300), 0xc, &(0x7f0000001580)={&(0x7f00000014c0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_PAYLOAD_CSUM_OFFSET={0x8, 0x7, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}]}, @NFT_MSG_DELSETELEM={0x14, 0xe, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x8}}], {0x14}}, 0x8c}, 0x1, 0x0, 0x0, 0x1}, 0x1)
getsockname$packet(0xffffffffffffffff, &(0x7f0000001340), &(0x7f0000001380)=0x14)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r1, 0x0, 0x0)
sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, 0x0, 0x0)
getsockname(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001400)={&(0x7f0000000140), 0xc, &(0x7f0000000340)={&(0x7f0000000f00)=@newqdisc={0x1b8, 0x24, 0x0, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0xc}, {0x10, 0xffff}, {0xf, 0xfff2}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_RATE={0x6, 0x5, {0x8}}, @qdisc_kind_options=@q_choke={{0xa}, {0x18, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x4e0, 0x2, 0x6, 0x0, 0x1e, 0x2}}]}}, @qdisc_kind_options=@q_codel={{0xa}, {0x54, 0x2, [@TCA_CODEL_TARGET={0x8}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x4}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_LIMIT={0x8, 0x2, 0x2}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x80}, @TCA_CODEL_TARGET={0x8, 0x1, 0xb9}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_INTERVAL={0x8, 0x3, 0x7}, @TCA_CODEL_LIMIT={0x8, 0x2, 0x5}]}}, @TCA_STAB={0xf8, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x8, 0xc000, 0x9, 0x1, 0x80000001, 0x4, 0xa}}, {0x18, 0x2, [0x3, 0x4, 0x3, 0xff, 0x200, 0xfe01, 0x7, 0x8, 0x0, 0x2]}}, {{0x1c, 0x1, {0x0, 0x20, 0x1, 0xfc000, 0x1}}, {0x4}}, {{0x1c, 0x1, {0x3, 0x11, 0x100, 0x5, 0x0, 0x2dd, 0x7fff, 0x4}}, {0xc, 0x2, [0x6, 0x100, 0x2, 0x71]}}, {{0x1c, 0x1, {0x0, 0x40, 0x5, 0x3, 0x2}}, {0x4}}, {{0x1c, 0x1, {0x4, 0x8, 0x1ff, 0x3ff, 0x2, 0x5, 0x9, 0x5}}, {0xe, 0x2, [0x1, 0x1, 0xb41, 0x0, 0x8]}}, {{0x1c, 0x1, {0x9, 0x3f, 0x4, 0x3, 0x0, 0x4, 0x9, 0x5}}, {0xe, 0x2, [0x0, 0x0, 0x5ca, 0xfff, 0xfffb]}}]}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x81}]}, 0x1b8}, 0x1, 0x0, 0x0, 0x20000110}, 0x800)
connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10)
writev(r2, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1)
recvmmsg(r2, &(0x7f0000003e40)=[{{0x0, 0x3, 0x0, 0x0, &(0x7f00000035c0)=""/241, 0xf1}}, {{&(0x7f00000036c0)=@un=@abs, 0x80, &(0x7f0000003780)=[{&(0x7f0000003740)=""/4, 0x7ffff}], 0x1, &(0x7f00000037c0)=""/236, 0xec}}, {{0x0, 0x0, &(0x7f0000003bc0)=[{0x0, 0xe00000000000000}, {&(0x7f0000003a00)=""/190, 0xbe}, {&(0x7f0000003ac0)=""/131, 0x83}, {0x0}], 0x4, &(0x7f0000003c00)=""/73, 0x49}}, {{&(0x7f0000003c80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, 0x0, 0x0, &(0x7f0000003e00)=""/48, 0x30}}], 0x4, 0x40000121, 0x0)
shutdown(r2, 0x0)

[ 2249.609110][T22399] netlink: 'syz-executor.0': attribute type 4 has an invalid length.
13:45:34 executing program 2:
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
syz_genetlink_get_family_id$tipc(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$NFT_BATCH(r1, &(0x7f00000015c0)={&(0x7f0000000300), 0xc, &(0x7f0000001580)={&(0x7f00000014c0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_PAYLOAD_CSUM_OFFSET={0x8, 0x7, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}]}, @NFT_MSG_DELSETELEM={0x1c, 0xe, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8}]}], {0x14}}, 0x94}, 0x1, 0x0, 0x0, 0x1}, 0x1)
getsockname$packet(0xffffffffffffffff, &(0x7f0000001340), &(0x7f0000001380)=0x14)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r1, 0x0, 0x0)
sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, 0x0, 0x0)
getsockname(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001400)={&(0x7f0000000140), 0xc, &(0x7f0000000340)={&(0x7f0000000f00)=@newqdisc={0x1b8, 0x24, 0x0, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0xc}, {0x10, 0xffff}, {0xf, 0xfff2}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_RATE={0x6, 0x5, {0x8}}, @qdisc_kind_options=@q_choke={{0xa}, {0x18, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x4e0, 0x2, 0x6, 0x0, 0x1e, 0x2}}]}}, @qdisc_kind_options=@q_codel={{0xa}, {0x54, 0x2, [@TCA_CODEL_TARGET={0x8}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x4}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_LIMIT={0x8, 0x2, 0x2}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x80}, @TCA_CODEL_TARGET={0x8, 0x1, 0xb9}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_INTERVAL={0x8, 0x3, 0x7}, @TCA_CODEL_LIMIT={0x8, 0x2, 0x5}]}}, @TCA_STAB={0xf8, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x8, 0xc000, 0x9, 0x1, 0x80000001, 0x4, 0xa}}, {0x18, 0x2, [0x3, 0x4, 0x3, 0xff, 0x200, 0xfe01, 0x7, 0x8, 0x0, 0x2]}}, {{0x1c, 0x1, {0x0, 0x20, 0x1, 0xfc000, 0x1}}, {0x4}}, {{0x1c, 0x1, {0x3, 0x11, 0x100, 0x5, 0x0, 0x2dd, 0x7fff, 0x4}}, {0xc, 0x2, [0x6, 0x100, 0x2, 0x71]}}, {{0x1c, 0x1, {0x0, 0x40, 0x5, 0x3, 0x2}}, {0x4}}, {{0x1c, 0x1, {0x4, 0x8, 0x1ff, 0x3ff, 0x2, 0x5, 0x9, 0x5}}, {0xe, 0x2, [0x1, 0x1, 0xb41, 0x0, 0x8]}}, {{0x1c, 0x1, {0x9, 0x3f, 0x4, 0x3, 0x0, 0x4, 0x9, 0x5}}, {0xe, 0x2, [0x0, 0x0, 0x5ca, 0xfff, 0xfffb]}}]}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x81}]}, 0x1b8}, 0x1, 0x0, 0x0, 0x20000110}, 0x800)
connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10)
writev(r2, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1)
recvmmsg(r2, &(0x7f0000003e40)=[{{0x0, 0x3, 0x0, 0x0, &(0x7f00000035c0)=""/241, 0xf1}}, {{&(0x7f00000036c0)=@un=@abs, 0x80, &(0x7f0000003780)=[{&(0x7f0000003740)=""/4, 0x7ffff}], 0x1, &(0x7f00000037c0)=""/236, 0xec}}, {{0x0, 0x0, &(0x7f0000003bc0)=[{0x0, 0xe00000000000000}, {&(0x7f0000003a00)=""/190, 0xbe}, {&(0x7f0000003ac0)=""/131, 0x83}, {0x0}], 0x4, &(0x7f0000003c00)=""/73, 0x49}}, {{&(0x7f0000003c80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, 0x0, 0x0, &(0x7f0000003e00)=""/48, 0x30}}], 0x4, 0x40000121, 0x0)
shutdown(r2, 0x0)

13:45:34 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r1)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400ee5c99f8435ecde50a0412", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r3 = socket(0x1, 0x803, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
r4 = socket(0x1, 0x803, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080))
r6 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x1e}}]}}}, @IFLA_LINK={0x8, 0x5, r5}]}, 0x50}}, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
r8 = socket(0x1, 0x803, 0x0)
getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000540)=ANY=[@ANYBLOB="20000000110003040000007bb000000000000000", @ANYRES32=r9], 0x20}}, 0x0)

[ 2249.848280][T22405] netlink: 'syz-executor.4': attribute type 4 has an invalid length.
[ 2250.022455][T22427] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'.
13:45:39 executing program 0:
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000180)={0x0, 0x80}, 0x8)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000000)={0x0, 0x5, 0x1, [0x20]}, 0xa)

13:45:39 executing program 2:
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
syz_genetlink_get_family_id$tipc(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$NFT_BATCH(r1, &(0x7f00000015c0)={&(0x7f0000000300), 0xc, &(0x7f0000001580)={&(0x7f00000014c0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_PAYLOAD_CSUM_OFFSET={0x8, 0x7, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}]}, @NFT_MSG_DELSETELEM={0x1c, 0xe, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8}]}], {0x14}}, 0x94}, 0x1, 0x0, 0x0, 0x1}, 0x1)
getsockname$packet(0xffffffffffffffff, &(0x7f0000001340), &(0x7f0000001380)=0x14)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r1, 0x0, 0x0)
sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, 0x0, 0x0)
getsockname(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001400)={&(0x7f0000000140), 0xc, &(0x7f0000000340)={&(0x7f0000000f00)=@newqdisc={0x1b8, 0x24, 0x0, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0xc}, {0x10, 0xffff}, {0xf, 0xfff2}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_RATE={0x6, 0x5, {0x8}}, @qdisc_kind_options=@q_choke={{0xa}, {0x18, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x4e0, 0x2, 0x6, 0x0, 0x1e, 0x2}}]}}, @qdisc_kind_options=@q_codel={{0xa}, {0x54, 0x2, [@TCA_CODEL_TARGET={0x8}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x4}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_LIMIT={0x8, 0x2, 0x2}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x80}, @TCA_CODEL_TARGET={0x8, 0x1, 0xb9}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_INTERVAL={0x8, 0x3, 0x7}, @TCA_CODEL_LIMIT={0x8, 0x2, 0x5}]}}, @TCA_STAB={0xf8, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x8, 0xc000, 0x9, 0x1, 0x80000001, 0x4, 0xa}}, {0x18, 0x2, [0x3, 0x4, 0x3, 0xff, 0x200, 0xfe01, 0x7, 0x8, 0x0, 0x2]}}, {{0x1c, 0x1, {0x0, 0x20, 0x1, 0xfc000, 0x1}}, {0x4}}, {{0x1c, 0x1, {0x3, 0x11, 0x100, 0x5, 0x0, 0x2dd, 0x7fff, 0x4}}, {0xc, 0x2, [0x6, 0x100, 0x2, 0x71]}}, {{0x1c, 0x1, {0x0, 0x40, 0x5, 0x3, 0x2}}, {0x4}}, {{0x1c, 0x1, {0x4, 0x8, 0x1ff, 0x3ff, 0x2, 0x5, 0x9, 0x5}}, {0xe, 0x2, [0x1, 0x1, 0xb41, 0x0, 0x8]}}, {{0x1c, 0x1, {0x9, 0x3f, 0x4, 0x3, 0x0, 0x4, 0x9, 0x5}}, {0xe, 0x2, [0x0, 0x0, 0x5ca, 0xfff, 0xfffb]}}]}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x81}]}, 0x1b8}, 0x1, 0x0, 0x0, 0x20000110}, 0x800)
connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10)
writev(r2, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1)
recvmmsg(r2, &(0x7f0000003e40)=[{{0x0, 0x3, 0x0, 0x0, &(0x7f00000035c0)=""/241, 0xf1}}, {{&(0x7f00000036c0)=@un=@abs, 0x80, &(0x7f0000003780)=[{&(0x7f0000003740)=""/4, 0x7ffff}], 0x1, &(0x7f00000037c0)=""/236, 0xec}}, {{0x0, 0x0, &(0x7f0000003bc0)=[{0x0, 0xe00000000000000}, {&(0x7f0000003a00)=""/190, 0xbe}, {&(0x7f0000003ac0)=""/131, 0x83}, {0x0}], 0x4, &(0x7f0000003c00)=""/73, 0x49}}, {{&(0x7f0000003c80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, 0x0, 0x0, &(0x7f0000003e00)=""/48, 0x30}}], 0x4, 0x40000121, 0x0)
shutdown(r2, 0x0)

13:45:39 executing program 5:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000240)={@val={0x0, 0x86dd}, @val={0x5}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "000003", 0x190, 0x3a, 0x0, @empty, @mcast2, {[@routing={0x0, 0x2, 0x0, 0x0, 0x0, [@empty]}], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x0, "ee7b615d"}, {}, {0x2b, 0x3, "6f8c008275021d683910c309293188a7c747eb2278d2794784"}, {0x0, 0x28, "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"}]}}}}}, 0x1c6)

13:45:39 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x0, 0x0)
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f000000c380)='/proc/crypto\x00', 0x0, 0x0)
read$FUSE(r3, &(0x7f0000000200)={0x2020}, 0x2020)
execve(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000280)=[0x0, 0x0], &(0x7f0000000380)=[&(0x7f00000002c0)='*$%}\xce*\x00', &(0x7f0000000300)='\x00'])

13:45:39 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r1)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400ee5c99f8435ecde50a0412", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r3 = socket(0x1, 0x803, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
r4 = socket(0x1, 0x803, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080))
r6 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x1e}}]}}}, @IFLA_LINK={0x8, 0x5, r5}]}, 0x50}}, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
r8 = socket(0x1, 0x803, 0x0)
getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000540)=ANY=[@ANYBLOB="20000000110003040000007bb000000000000000", @ANYRES32=r9], 0x20}}, 0x0)

13:45:39 executing program 4:
r0 = socket$can_raw(0x1d, 0x3, 0x1)
bind$can_raw(r0, &(0x7f0000000000), 0x10)
setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x2, &(0x7f0000000040)=0xfffffff7, 0x4)

13:45:39 executing program 2:
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
syz_genetlink_get_family_id$tipc(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$NFT_BATCH(r1, &(0x7f00000015c0)={&(0x7f0000000300), 0xc, &(0x7f0000001580)={&(0x7f00000014c0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_PAYLOAD_CSUM_OFFSET={0x8, 0x7, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}]}, @NFT_MSG_DELSETELEM={0x1c, 0xe, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8}]}], {0x14}}, 0x94}, 0x1, 0x0, 0x0, 0x1}, 0x1)
getsockname$packet(0xffffffffffffffff, &(0x7f0000001340), &(0x7f0000001380)=0x14)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r1, 0x0, 0x0)
sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, 0x0, 0x0)
getsockname(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001400)={&(0x7f0000000140), 0xc, &(0x7f0000000340)={&(0x7f0000000f00)=@newqdisc={0x1b8, 0x24, 0x0, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0xc}, {0x10, 0xffff}, {0xf, 0xfff2}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_RATE={0x6, 0x5, {0x8}}, @qdisc_kind_options=@q_choke={{0xa}, {0x18, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x4e0, 0x2, 0x6, 0x0, 0x1e, 0x2}}]}}, @qdisc_kind_options=@q_codel={{0xa}, {0x54, 0x2, [@TCA_CODEL_TARGET={0x8}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x4}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_LIMIT={0x8, 0x2, 0x2}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x80}, @TCA_CODEL_TARGET={0x8, 0x1, 0xb9}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_INTERVAL={0x8, 0x3, 0x7}, @TCA_CODEL_LIMIT={0x8, 0x2, 0x5}]}}, @TCA_STAB={0xf8, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x8, 0xc000, 0x9, 0x1, 0x80000001, 0x4, 0xa}}, {0x18, 0x2, [0x3, 0x4, 0x3, 0xff, 0x200, 0xfe01, 0x7, 0x8, 0x0, 0x2]}}, {{0x1c, 0x1, {0x0, 0x20, 0x1, 0xfc000, 0x1}}, {0x4}}, {{0x1c, 0x1, {0x3, 0x11, 0x100, 0x5, 0x0, 0x2dd, 0x7fff, 0x4}}, {0xc, 0x2, [0x6, 0x100, 0x2, 0x71]}}, {{0x1c, 0x1, {0x0, 0x40, 0x5, 0x3, 0x2}}, {0x4}}, {{0x1c, 0x1, {0x4, 0x8, 0x1ff, 0x3ff, 0x2, 0x5, 0x9, 0x5}}, {0xe, 0x2, [0x1, 0x1, 0xb41, 0x0, 0x8]}}, {{0x1c, 0x1, {0x9, 0x3f, 0x4, 0x3, 0x0, 0x4, 0x9, 0x5}}, {0xe, 0x2, [0x0, 0x0, 0x5ca, 0xfff, 0xfffb]}}]}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x81}]}, 0x1b8}, 0x1, 0x0, 0x0, 0x20000110}, 0x800)
connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10)
writev(r2, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1)
recvmmsg(r2, &(0x7f0000003e40)=[{{0x0, 0x3, 0x0, 0x0, &(0x7f00000035c0)=""/241, 0xf1}}, {{&(0x7f00000036c0)=@un=@abs, 0x80, &(0x7f0000003780)=[{&(0x7f0000003740)=""/4, 0x7ffff}], 0x1, &(0x7f00000037c0)=""/236, 0xec}}, {{0x0, 0x0, &(0x7f0000003bc0)=[{0x0, 0xe00000000000000}, {&(0x7f0000003a00)=""/190, 0xbe}, {&(0x7f0000003ac0)=""/131, 0x83}, {0x0}], 0x4, &(0x7f0000003c00)=""/73, 0x49}}, {{&(0x7f0000003c80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, 0x0, 0x0, &(0x7f0000003e00)=""/48, 0x30}}], 0x4, 0x40000121, 0x0)
shutdown(r2, 0x0)

[ 2254.128990][T22440] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'.
13:45:39 executing program 0:
syz_emit_ethernet(0x36, &(0x7f0000000000)={@link_local, @dev, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "0d53a2", 0x0, 0x0, 0x0, @remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}}, 0x0)

13:45:39 executing program 5:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000240)={@val={0x0, 0x86dd}, @val={0x5, 0x0, 0x0, 0x0, 0x54}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "000003", 0x178, 0x3a, 0x0, @empty, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x0, "ee7b615d"}, {}, {0x2b, 0x3, "6f8c008275021d683910c309293188a7c747eb2278d2794784"}, {0x0, 0x28, "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"}]}}}}}, 0x1ae)

13:45:39 executing program 4:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x1c, 0xa, &(0x7f0000000000)=@framed={{}, [@func, @map_fd, @map_idx_val, @generic, @func={0x85, 0x0, 0x1, 0x0, 0x8}]}, &(0x7f0000000180)='GPL\x00', 0xf, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x90)

13:45:39 executing program 2:
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
syz_genetlink_get_family_id$tipc(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$NFT_BATCH(r1, &(0x7f00000015c0)={&(0x7f0000000300), 0xc, &(0x7f0000001580)={&(0x7f00000014c0)={{0x14}, [@NFT_MSG_DELSETELEM={0x1c, 0xe, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}]}], {0x14}}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x1)
getsockname$packet(0xffffffffffffffff, &(0x7f0000001340), &(0x7f0000001380)=0x14)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r1, 0x0, 0x0)
sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, 0x0, 0x0)
getsockname(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001400)={&(0x7f0000000140), 0xc, &(0x7f0000000340)={&(0x7f0000000f00)=@newqdisc={0x1b8, 0x24, 0x0, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0xc}, {0x10, 0xffff}, {0xf, 0xfff2}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_RATE={0x6, 0x5, {0x8}}, @qdisc_kind_options=@q_choke={{0xa}, {0x18, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x4e0, 0x2, 0x6, 0x0, 0x1e, 0x2}}]}}, @qdisc_kind_options=@q_codel={{0xa}, {0x54, 0x2, [@TCA_CODEL_TARGET={0x8}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x4}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_LIMIT={0x8, 0x2, 0x2}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x80}, @TCA_CODEL_TARGET={0x8, 0x1, 0xb9}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_INTERVAL={0x8, 0x3, 0x7}, @TCA_CODEL_LIMIT={0x8, 0x2, 0x5}]}}, @TCA_STAB={0xf8, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x8, 0xc000, 0x9, 0x1, 0x80000001, 0x4, 0xa}}, {0x18, 0x2, [0x3, 0x4, 0x3, 0xff, 0x200, 0xfe01, 0x7, 0x8, 0x0, 0x2]}}, {{0x1c, 0x1, {0x0, 0x20, 0x1, 0xfc000, 0x1}}, {0x4}}, {{0x1c, 0x1, {0x3, 0x11, 0x100, 0x5, 0x0, 0x2dd, 0x7fff, 0x4}}, {0xc, 0x2, [0x6, 0x100, 0x2, 0x71]}}, {{0x1c, 0x1, {0x0, 0x40, 0x5, 0x3, 0x2}}, {0x4}}, {{0x1c, 0x1, {0x4, 0x8, 0x1ff, 0x3ff, 0x2, 0x5, 0x9, 0x5}}, {0xe, 0x2, [0x1, 0x1, 0xb41, 0x0, 0x8]}}, {{0x1c, 0x1, {0x9, 0x3f, 0x4, 0x3, 0x0, 0x4, 0x9, 0x5}}, {0xe, 0x2, [0x0, 0x0, 0x5ca, 0xfff, 0xfffb]}}]}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x81}]}, 0x1b8}, 0x1, 0x0, 0x0, 0x20000110}, 0x800)
connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10)
writev(r2, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1)
recvmmsg(r2, &(0x7f0000003e40)=[{{0x0, 0x3, 0x0, 0x0, &(0x7f00000035c0)=""/241, 0xf1}}, {{&(0x7f00000036c0)=@un=@abs, 0x80, &(0x7f0000003780)=[{&(0x7f0000003740)=""/4, 0x7ffff}], 0x1, &(0x7f00000037c0)=""/236, 0xec}}, {{0x0, 0x0, &(0x7f0000003bc0)=[{0x0, 0xe00000000000000}, {&(0x7f0000003a00)=""/190, 0xbe}, {&(0x7f0000003ac0)=""/131, 0x83}, {0x0}], 0x4, &(0x7f0000003c00)=""/73, 0x49}}, {{&(0x7f0000003c80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, 0x0, 0x0, &(0x7f0000003e00)=""/48, 0x30}}], 0x4, 0x40000121, 0x0)
shutdown(r2, 0x0)

13:45:39 executing program 0:
syz_emit_ethernet(0x36, &(0x7f0000000000)={@link_local, @dev, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "0d53a2", 0x0, 0x0, 0x0, @remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}}, 0x0)

13:45:39 executing program 4:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x2, &(0x7f0000000200)=[{0x35}, {}]})

13:45:39 executing program 2:
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
syz_genetlink_get_family_id$tipc(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$NFT_BATCH(r1, &(0x7f00000015c0)={&(0x7f0000000300), 0xc, &(0x7f0000001580)={&(0x7f00000014c0)={{0x14}, [@NFT_MSG_DELSETELEM={0x1c, 0xe, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}]}], {0x14}}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x1)
getsockname$packet(0xffffffffffffffff, &(0x7f0000001340), &(0x7f0000001380)=0x14)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r1, 0x0, 0x0)
sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, 0x0, 0x0)
getsockname(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001400)={&(0x7f0000000140), 0xc, &(0x7f0000000340)={&(0x7f0000000f00)=@newqdisc={0x1b8, 0x24, 0x0, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0xc}, {0x10, 0xffff}, {0xf, 0xfff2}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_RATE={0x6, 0x5, {0x8}}, @qdisc_kind_options=@q_choke={{0xa}, {0x18, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x4e0, 0x2, 0x6, 0x0, 0x1e, 0x2}}]}}, @qdisc_kind_options=@q_codel={{0xa}, {0x54, 0x2, [@TCA_CODEL_TARGET={0x8}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x4}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_LIMIT={0x8, 0x2, 0x2}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x80}, @TCA_CODEL_TARGET={0x8, 0x1, 0xb9}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_INTERVAL={0x8, 0x3, 0x7}, @TCA_CODEL_LIMIT={0x8, 0x2, 0x5}]}}, @TCA_STAB={0xf8, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x8, 0xc000, 0x9, 0x1, 0x80000001, 0x4, 0xa}}, {0x18, 0x2, [0x3, 0x4, 0x3, 0xff, 0x200, 0xfe01, 0x7, 0x8, 0x0, 0x2]}}, {{0x1c, 0x1, {0x0, 0x20, 0x1, 0xfc000, 0x1}}, {0x4}}, {{0x1c, 0x1, {0x3, 0x11, 0x100, 0x5, 0x0, 0x2dd, 0x7fff, 0x4}}, {0xc, 0x2, [0x6, 0x100, 0x2, 0x71]}}, {{0x1c, 0x1, {0x0, 0x40, 0x5, 0x3, 0x2}}, {0x4}}, {{0x1c, 0x1, {0x4, 0x8, 0x1ff, 0x3ff, 0x2, 0x5, 0x9, 0x5}}, {0xe, 0x2, [0x1, 0x1, 0xb41, 0x0, 0x8]}}, {{0x1c, 0x1, {0x9, 0x3f, 0x4, 0x3, 0x0, 0x4, 0x9, 0x5}}, {0xe, 0x2, [0x0, 0x0, 0x5ca, 0xfff, 0xfffb]}}]}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x81}]}, 0x1b8}, 0x1, 0x0, 0x0, 0x20000110}, 0x800)
connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10)
writev(r2, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1)
recvmmsg(r2, &(0x7f0000003e40)=[{{0x0, 0x3, 0x0, 0x0, &(0x7f00000035c0)=""/241, 0xf1}}, {{&(0x7f00000036c0)=@un=@abs, 0x80, &(0x7f0000003780)=[{&(0x7f0000003740)=""/4, 0x7ffff}], 0x1, &(0x7f00000037c0)=""/236, 0xec}}, {{0x0, 0x0, &(0x7f0000003bc0)=[{0x0, 0xe00000000000000}, {&(0x7f0000003a00)=""/190, 0xbe}, {&(0x7f0000003ac0)=""/131, 0x83}, {0x0}], 0x4, &(0x7f0000003c00)=""/73, 0x49}}, {{&(0x7f0000003c80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, 0x0, 0x0, &(0x7f0000003e00)=""/48, 0x30}}], 0x4, 0x40000121, 0x0)
shutdown(r2, 0x0)

13:45:39 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r1)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400ee5c99f8435ecde50a0412", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r3 = socket(0x1, 0x803, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
r4 = socket(0x1, 0x803, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080))
r6 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x1e}}]}}}, @IFLA_LINK={0x8, 0x5, r5}]}, 0x50}}, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
r8 = socket(0x1, 0x803, 0x0)
getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000540)=ANY=[@ANYBLOB="20000000110003040000007bb000000000000000", @ANYRES32=r9], 0x20}}, 0x0)

13:45:39 executing program 0:
syz_emit_ethernet(0x36, &(0x7f0000000000)={@link_local, @dev, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "0d53a2", 0x0, 0x0, 0x0, @remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}}, 0x0)

[ 2254.841782][T22463] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'.
13:45:40 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x0, 0x0)
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f000000c380)='/proc/crypto\x00', 0x0, 0x0)
read$FUSE(r3, &(0x7f0000000200)={0x2020}, 0x2020)
execve(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000280)=[0x0, 0x0], &(0x7f0000000380)=[&(0x7f00000002c0)='*$%}\xce*\x00', &(0x7f0000000300)='\x00'])

13:45:40 executing program 4:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
sendmsg$inet6(r0, &(0x7f0000000340)={&(0x7f0000000000)={0xa, 0x2, 0x0, @loopback}, 0x1c, 0x0, 0x0, &(0x7f0000000080)=ANY=[], 0xf}, 0x7ffffff7)

13:45:40 executing program 5:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000240)={@val={0x0, 0x86dd}, @val={0x5, 0x0, 0x0, 0x0, 0x54}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "000003", 0x178, 0x3a, 0x0, @empty, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x0, "ee7b615d"}, {}, {0x2b, 0x3, "6f8c008275021d683910c309293188a7c747eb2278d2794784"}, {0x0, 0x28, "4429118927041312255133e4d2b8b863b5f5b4ace38952e94c581c85d2d86844f548415db4dbf1992868a2e15095b531ce55d4620ec637afdcc990a4d6bfecb289917d24b31a2ddeb64383b176b823cc203ec1927487b7a00d6a3446cf7db79e14b2206d882c28611fa4d8289337cd75b4688120c73a2710947b908fde68a05a0777a170a14e85c7849462b3f5c3152cf0f3d91c5db93dc4d8f9e6b53708650dc375e6da3650b5ff4079971f6e3ef363382a16b8ae07b7307b5619092e4669dbca480d25738314135509eda68f712b9b09bdb485ea0914590b7ae01c2e34832f16c23c82b22b6ba550acfcede288a5237a06b3f5e09b6e5a0404544efe1474664b985f070121e82070a9f4513c2031a58a3d99e99284b812c0f047061139620890416c9defce02fa49cd1dd14b22df7250314ccb3dfd9827f892656911150cd9d921a8"}]}}}}}, 0x1ae)

13:45:40 executing program 0:
syz_emit_ethernet(0x36, &(0x7f0000000000)={@link_local, @dev, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "0d53a2", 0x0, 0x0, 0x0, @remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}}, 0x0)

13:45:40 executing program 2:
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
syz_genetlink_get_family_id$tipc(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$NFT_BATCH(r1, &(0x7f00000015c0)={&(0x7f0000000300), 0xc, &(0x7f0000001580)={&(0x7f00000014c0)={{0x14}, [@NFT_MSG_DELSETELEM={0x1c, 0xe, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}]}], {0x14}}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x1)
getsockname$packet(0xffffffffffffffff, &(0x7f0000001340), &(0x7f0000001380)=0x14)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r1, 0x0, 0x0)
sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, 0x0, 0x0)
getsockname(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001400)={&(0x7f0000000140), 0xc, &(0x7f0000000340)={&(0x7f0000000f00)=@newqdisc={0x1b8, 0x24, 0x0, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0xc}, {0x10, 0xffff}, {0xf, 0xfff2}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_RATE={0x6, 0x5, {0x8}}, @qdisc_kind_options=@q_choke={{0xa}, {0x18, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x4e0, 0x2, 0x6, 0x0, 0x1e, 0x2}}]}}, @qdisc_kind_options=@q_codel={{0xa}, {0x54, 0x2, [@TCA_CODEL_TARGET={0x8}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x4}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_LIMIT={0x8, 0x2, 0x2}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x80}, @TCA_CODEL_TARGET={0x8, 0x1, 0xb9}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_INTERVAL={0x8, 0x3, 0x7}, @TCA_CODEL_LIMIT={0x8, 0x2, 0x5}]}}, @TCA_STAB={0xf8, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x8, 0xc000, 0x9, 0x1, 0x80000001, 0x4, 0xa}}, {0x18, 0x2, [0x3, 0x4, 0x3, 0xff, 0x200, 0xfe01, 0x7, 0x8, 0x0, 0x2]}}, {{0x1c, 0x1, {0x0, 0x20, 0x1, 0xfc000, 0x1}}, {0x4}}, {{0x1c, 0x1, {0x3, 0x11, 0x100, 0x5, 0x0, 0x2dd, 0x7fff, 0x4}}, {0xc, 0x2, [0x6, 0x100, 0x2, 0x71]}}, {{0x1c, 0x1, {0x0, 0x40, 0x5, 0x3, 0x2}}, {0x4}}, {{0x1c, 0x1, {0x4, 0x8, 0x1ff, 0x3ff, 0x2, 0x5, 0x9, 0x5}}, {0xe, 0x2, [0x1, 0x1, 0xb41, 0x0, 0x8]}}, {{0x1c, 0x1, {0x9, 0x3f, 0x4, 0x3, 0x0, 0x4, 0x9, 0x5}}, {0xe, 0x2, [0x0, 0x0, 0x5ca, 0xfff, 0xfffb]}}]}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x81}]}, 0x1b8}, 0x1, 0x0, 0x0, 0x20000110}, 0x800)
connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10)
writev(r2, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1)
recvmmsg(r2, &(0x7f0000003e40)=[{{0x0, 0x3, 0x0, 0x0, &(0x7f00000035c0)=""/241, 0xf1}}, {{&(0x7f00000036c0)=@un=@abs, 0x80, &(0x7f0000003780)=[{&(0x7f0000003740)=""/4, 0x7ffff}], 0x1, &(0x7f00000037c0)=""/236, 0xec}}, {{0x0, 0x0, &(0x7f0000003bc0)=[{0x0, 0xe00000000000000}, {&(0x7f0000003a00)=""/190, 0xbe}, {&(0x7f0000003ac0)=""/131, 0x83}, {0x0}], 0x4, &(0x7f0000003c00)=""/73, 0x49}}, {{&(0x7f0000003c80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, 0x0, 0x0, &(0x7f0000003e00)=""/48, 0x30}}], 0x4, 0x40000121, 0x0)
shutdown(r2, 0x0)

13:45:40 executing program 0:
syz_emit_ethernet(0x0, 0x0, 0x0)

13:45:40 executing program 4:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
sendto$inet6(r0, &(0x7f0000001700)="b9162629c364298520c6da46ad05ea33e8d0269466aba4572dc7db39daedac693bb7702e2a1f3ff445196891f4798f879da98457bbc2fb007666399e740da3c261f060fdbb2066e91868", 0x4a, 0x0, &(0x7f00000017c0)={0xa, 0x4e24, 0x0, @remote}, 0x1c)

13:45:40 executing program 2:
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
syz_genetlink_get_family_id$tipc(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$NFT_BATCH(r1, &(0x7f00000015c0)={&(0x7f0000000300), 0xc, &(0x7f0000001580)={&(0x7f00000014c0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x0, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_PAYLOAD_CSUM_OFFSET={0x8, 0x7, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}]}, @NFT_MSG_DELSETELEM={0x1c, 0xe, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}]}], {0x14}}, 0x94}, 0x1, 0x0, 0x0, 0x1}, 0x1)
getsockname$packet(0xffffffffffffffff, &(0x7f0000001340), &(0x7f0000001380)=0x14)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r1, 0x0, 0x0)
sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, 0x0, 0x0)
getsockname(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001400)={&(0x7f0000000140), 0xc, &(0x7f0000000340)={&(0x7f0000000f00)=@newqdisc={0x1b8, 0x24, 0x0, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0xc}, {0x10, 0xffff}, {0xf, 0xfff2}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_RATE={0x6, 0x5, {0x8}}, @qdisc_kind_options=@q_choke={{0xa}, {0x18, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x4e0, 0x2, 0x6, 0x0, 0x1e, 0x2}}]}}, @qdisc_kind_options=@q_codel={{0xa}, {0x54, 0x2, [@TCA_CODEL_TARGET={0x8}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x4}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_LIMIT={0x8, 0x2, 0x2}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x80}, @TCA_CODEL_TARGET={0x8, 0x1, 0xb9}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_INTERVAL={0x8, 0x3, 0x7}, @TCA_CODEL_LIMIT={0x8, 0x2, 0x5}]}}, @TCA_STAB={0xf8, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x8, 0xc000, 0x9, 0x1, 0x80000001, 0x4, 0xa}}, {0x18, 0x2, [0x3, 0x4, 0x3, 0xff, 0x200, 0xfe01, 0x7, 0x8, 0x0, 0x2]}}, {{0x1c, 0x1, {0x0, 0x20, 0x1, 0xfc000, 0x1}}, {0x4}}, {{0x1c, 0x1, {0x3, 0x11, 0x100, 0x5, 0x0, 0x2dd, 0x7fff, 0x4}}, {0xc, 0x2, [0x6, 0x100, 0x2, 0x71]}}, {{0x1c, 0x1, {0x0, 0x40, 0x5, 0x3, 0x2}}, {0x4}}, {{0x1c, 0x1, {0x4, 0x8, 0x1ff, 0x3ff, 0x2, 0x5, 0x9, 0x5}}, {0xe, 0x2, [0x1, 0x1, 0xb41, 0x0, 0x8]}}, {{0x1c, 0x1, {0x9, 0x3f, 0x4, 0x3, 0x0, 0x4, 0x9, 0x5}}, {0xe, 0x2, [0x0, 0x0, 0x5ca, 0xfff, 0xfffb]}}]}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x81}]}, 0x1b8}, 0x1, 0x0, 0x0, 0x20000110}, 0x800)
connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10)
writev(r2, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1)
recvmmsg(r2, &(0x7f0000003e40)=[{{0x0, 0x3, 0x0, 0x0, &(0x7f00000035c0)=""/241, 0xf1}}, {{&(0x7f00000036c0)=@un=@abs, 0x80, &(0x7f0000003780)=[{&(0x7f0000003740)=""/4, 0x7ffff}], 0x1, &(0x7f00000037c0)=""/236, 0xec}}, {{0x0, 0x0, &(0x7f0000003bc0)=[{0x0, 0xe00000000000000}, {&(0x7f0000003a00)=""/190, 0xbe}, {&(0x7f0000003ac0)=""/131, 0x83}, {0x0}], 0x4, &(0x7f0000003c00)=""/73, 0x49}}, {{&(0x7f0000003c80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, 0x0, 0x0, &(0x7f0000003e00)=""/48, 0x30}}], 0x4, 0x40000121, 0x0)
shutdown(r2, 0x0)

13:45:40 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r1)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400ee5c99f8435ecde50a0412", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
socket(0x1, 0x803, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="50000000100001040000ff0f0000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e00000000180002800c0002001c0000001b000000060001000100000008000500", @ANYRES32], 0x50}}, 0x0)
r4 = socket(0x1, 0x803, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080))
r6 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x1e}}]}}}, @IFLA_LINK={0x8, 0x5, r5}]}, 0x50}}, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
r8 = socket(0x1, 0x803, 0x0)
getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000540)=ANY=[@ANYBLOB="20000000110003040000007bb000000000000000", @ANYRES32=r9], 0x20}}, 0x0)

13:45:40 executing program 0:
syz_emit_ethernet(0x0, 0x0, 0x0)

13:45:40 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$team(&(0x7f00000005c0), r0)
sendmsg$TEAM_CMD_OPTIONS_GET(r0, &(0x7f0000000580)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000540)={&(0x7f0000000600)=ANY=[], 0x1f8}}, 0x0)

13:45:40 executing program 2:
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
syz_genetlink_get_family_id$tipc(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$NFT_BATCH(r1, &(0x7f00000015c0)={&(0x7f0000000300), 0xc, &(0x7f0000001580)={&(0x7f00000014c0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x0, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_PAYLOAD_CSUM_OFFSET={0x8, 0x7, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}]}, @NFT_MSG_DELSETELEM={0x1c, 0xe, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}]}], {0x14}}, 0x94}, 0x1, 0x0, 0x0, 0x1}, 0x1)
getsockname$packet(0xffffffffffffffff, &(0x7f0000001340), &(0x7f0000001380)=0x14)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r1, 0x0, 0x0)
sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, 0x0, 0x0)
getsockname(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001400)={&(0x7f0000000140), 0xc, &(0x7f0000000340)={&(0x7f0000000f00)=@newqdisc={0x1b8, 0x24, 0x0, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0xc}, {0x10, 0xffff}, {0xf, 0xfff2}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_RATE={0x6, 0x5, {0x8}}, @qdisc_kind_options=@q_choke={{0xa}, {0x18, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x4e0, 0x2, 0x6, 0x0, 0x1e, 0x2}}]}}, @qdisc_kind_options=@q_codel={{0xa}, {0x54, 0x2, [@TCA_CODEL_TARGET={0x8}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x4}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_LIMIT={0x8, 0x2, 0x2}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x80}, @TCA_CODEL_TARGET={0x8, 0x1, 0xb9}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_INTERVAL={0x8, 0x3, 0x7}, @TCA_CODEL_LIMIT={0x8, 0x2, 0x5}]}}, @TCA_STAB={0xf8, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x8, 0xc000, 0x9, 0x1, 0x80000001, 0x4, 0xa}}, {0x18, 0x2, [0x3, 0x4, 0x3, 0xff, 0x200, 0xfe01, 0x7, 0x8, 0x0, 0x2]}}, {{0x1c, 0x1, {0x0, 0x20, 0x1, 0xfc000, 0x1}}, {0x4}}, {{0x1c, 0x1, {0x3, 0x11, 0x100, 0x5, 0x0, 0x2dd, 0x7fff, 0x4}}, {0xc, 0x2, [0x6, 0x100, 0x2, 0x71]}}, {{0x1c, 0x1, {0x0, 0x40, 0x5, 0x3, 0x2}}, {0x4}}, {{0x1c, 0x1, {0x4, 0x8, 0x1ff, 0x3ff, 0x2, 0x5, 0x9, 0x5}}, {0xe, 0x2, [0x1, 0x1, 0xb41, 0x0, 0x8]}}, {{0x1c, 0x1, {0x9, 0x3f, 0x4, 0x3, 0x0, 0x4, 0x9, 0x5}}, {0xe, 0x2, [0x0, 0x0, 0x5ca, 0xfff, 0xfffb]}}]}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x81}]}, 0x1b8}, 0x1, 0x0, 0x0, 0x20000110}, 0x800)
connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10)
writev(r2, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1)
recvmmsg(r2, &(0x7f0000003e40)=[{{0x0, 0x3, 0x0, 0x0, &(0x7f00000035c0)=""/241, 0xf1}}, {{&(0x7f00000036c0)=@un=@abs, 0x80, &(0x7f0000003780)=[{&(0x7f0000003740)=""/4, 0x7ffff}], 0x1, &(0x7f00000037c0)=""/236, 0xec}}, {{0x0, 0x0, &(0x7f0000003bc0)=[{0x0, 0xe00000000000000}, {&(0x7f0000003a00)=""/190, 0xbe}, {&(0x7f0000003ac0)=""/131, 0x83}, {0x0}], 0x4, &(0x7f0000003c00)=""/73, 0x49}}, {{&(0x7f0000003c80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, 0x0, 0x0, &(0x7f0000003e00)=""/48, 0x30}}], 0x4, 0x40000121, 0x0)
shutdown(r2, 0x0)

[ 2255.459595][T22490] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'.
13:45:40 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
read$FUSE(r3, &(0x7f0000000200)={0x2020}, 0x2020)
execve(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000280)=[0x0, 0x0], &(0x7f0000000380)=[&(0x7f00000002c0)='*$%}\xce*\x00', &(0x7f0000000300)='\x00'])

13:45:40 executing program 2:
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
syz_genetlink_get_family_id$tipc(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$NFT_BATCH(r1, &(0x7f00000015c0)={&(0x7f0000000300), 0xc, &(0x7f0000001580)={&(0x7f00000014c0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x0, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_PAYLOAD_CSUM_OFFSET={0x8, 0x7, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}]}, @NFT_MSG_DELSETELEM={0x1c, 0xe, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}]}], {0x14}}, 0x94}, 0x1, 0x0, 0x0, 0x1}, 0x1)
getsockname$packet(0xffffffffffffffff, &(0x7f0000001340), &(0x7f0000001380)=0x14)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r1, 0x0, 0x0)
sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, 0x0, 0x0)
getsockname(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001400)={&(0x7f0000000140), 0xc, &(0x7f0000000340)={&(0x7f0000000f00)=@newqdisc={0x1b8, 0x24, 0x0, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0xc}, {0x10, 0xffff}, {0xf, 0xfff2}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_RATE={0x6, 0x5, {0x8}}, @qdisc_kind_options=@q_choke={{0xa}, {0x18, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x4e0, 0x2, 0x6, 0x0, 0x1e, 0x2}}]}}, @qdisc_kind_options=@q_codel={{0xa}, {0x54, 0x2, [@TCA_CODEL_TARGET={0x8}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x4}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_LIMIT={0x8, 0x2, 0x2}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x80}, @TCA_CODEL_TARGET={0x8, 0x1, 0xb9}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_INTERVAL={0x8, 0x3, 0x7}, @TCA_CODEL_LIMIT={0x8, 0x2, 0x5}]}}, @TCA_STAB={0xf8, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x8, 0xc000, 0x9, 0x1, 0x80000001, 0x4, 0xa}}, {0x18, 0x2, [0x3, 0x4, 0x3, 0xff, 0x200, 0xfe01, 0x7, 0x8, 0x0, 0x2]}}, {{0x1c, 0x1, {0x0, 0x20, 0x1, 0xfc000, 0x1}}, {0x4}}, {{0x1c, 0x1, {0x3, 0x11, 0x100, 0x5, 0x0, 0x2dd, 0x7fff, 0x4}}, {0xc, 0x2, [0x6, 0x100, 0x2, 0x71]}}, {{0x1c, 0x1, {0x0, 0x40, 0x5, 0x3, 0x2}}, {0x4}}, {{0x1c, 0x1, {0x4, 0x8, 0x1ff, 0x3ff, 0x2, 0x5, 0x9, 0x5}}, {0xe, 0x2, [0x1, 0x1, 0xb41, 0x0, 0x8]}}, {{0x1c, 0x1, {0x9, 0x3f, 0x4, 0x3, 0x0, 0x4, 0x9, 0x5}}, {0xe, 0x2, [0x0, 0x0, 0x5ca, 0xfff, 0xfffb]}}]}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x81}]}, 0x1b8}, 0x1, 0x0, 0x0, 0x20000110}, 0x800)
connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10)
writev(r2, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1)
recvmmsg(r2, &(0x7f0000003e40)=[{{0x0, 0x3, 0x0, 0x0, &(0x7f00000035c0)=""/241, 0xf1}}, {{&(0x7f00000036c0)=@un=@abs, 0x80, &(0x7f0000003780)=[{&(0x7f0000003740)=""/4, 0x7ffff}], 0x1, &(0x7f00000037c0)=""/236, 0xec}}, {{0x0, 0x0, &(0x7f0000003bc0)=[{0x0, 0xe00000000000000}, {&(0x7f0000003a00)=""/190, 0xbe}, {&(0x7f0000003ac0)=""/131, 0x83}, {0x0}], 0x4, &(0x7f0000003c00)=""/73, 0x49}}, {{&(0x7f0000003c80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, 0x0, 0x0, &(0x7f0000003e00)=""/48, 0x30}}], 0x4, 0x40000121, 0x0)
shutdown(r2, 0x0)

13:45:40 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r1)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400ee5c99f8435ecde50a0412", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
socket(0x1, 0x803, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="50000000100001040000ff0f0000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e00000000180002800c0002001c0000001b000000060001000100000008000500", @ANYRES32], 0x50}}, 0x0)
r4 = socket(0x1, 0x803, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080))
r6 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x1e}}]}}}, @IFLA_LINK={0x8, 0x5, r5}]}, 0x50}}, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
r8 = socket(0x1, 0x803, 0x0)
getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000540)=ANY=[@ANYBLOB="20000000110003040000007bb000000000000000", @ANYRES32=r9], 0x20}}, 0x0)

13:45:40 executing program 0:
syz_emit_ethernet(0x0, 0x0, 0x0)

13:45:40 executing program 4:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
sendmsg$inet6(r0, &(0x7f0000000340)={&(0x7f0000000000)={0x2, 0x4e21, 0x0, @loopback}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=ANY=[], 0xf}, 0x0)

13:45:40 executing program 5:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000240)={@val={0x0, 0x86dd}, @val={0x5, 0x0, 0x0, 0x0, 0x54}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "000003", 0x178, 0x3a, 0x0, @empty, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x0, "ee7b615d"}, {}, {0x2b, 0x3, "6f8c008275021d683910c309293188a7c747eb2278d2794784"}, {0x0, 0x28, "4429118927041312255133e4d2b8b863b5f5b4ace38952e94c581c85d2d86844f548415db4dbf1992868a2e15095b531ce55d4620ec637afdcc990a4d6bfecb289917d24b31a2ddeb64383b176b823cc203ec1927487b7a00d6a3446cf7db79e14b2206d882c28611fa4d8289337cd75b4688120c73a2710947b908fde68a05a0777a170a14e85c7849462b3f5c3152cf0f3d91c5db93dc4d8f9e6b53708650dc375e6da3650b5ff4079971f6e3ef363382a16b8ae07b7307b5619092e4669dbca480d25738314135509eda68f712b9b09bdb485ea0914590b7ae01c2e34832f16c23c82b22b6ba550acfcede288a5237a06b3f5e09b6e5a0404544efe1474664b985f070121e82070a9f4513c2031a58a3d99e99284b812c0f047061139620890416c9defce02fa49cd1dd14b22df7250314ccb3dfd9827f892656911150cd9d921a8"}]}}}}}, 0x1ae)

13:45:41 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_INTERRUPT(r2, 0x4008ae89, 0x0)

[ 2256.026932][T22502] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'.
13:45:41 executing program 0:
r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0)
pwrite64(r0, 0x0, 0x0, 0x0)

13:45:41 executing program 2:
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
syz_genetlink_get_family_id$tipc(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$NFT_BATCH(r1, &(0x7f00000015c0)={&(0x7f0000000300), 0xc, &(0x7f0000001580)={&(0x7f00000014c0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_PAYLOAD_CSUM_OFFSET={0x8, 0x7, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}]}, @NFT_MSG_DELSETELEM={0x1c, 0xe, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}]}], {0x14}}, 0x94}, 0x1, 0x0, 0x0, 0x1}, 0x1)
getsockname$packet(0xffffffffffffffff, &(0x7f0000001340), &(0x7f0000001380)=0x14)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r1, 0x0, 0x0)
sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, 0x0, 0x0)
getsockname(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001400)={&(0x7f0000000140), 0xc, &(0x7f0000000340)={&(0x7f0000000f00)=@newqdisc={0x1b8, 0x24, 0x0, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0xc}, {0x10, 0xffff}, {0xf, 0xfff2}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_RATE={0x6, 0x5, {0x8}}, @qdisc_kind_options=@q_choke={{0xa}, {0x18, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x4e0, 0x2, 0x6, 0x0, 0x1e, 0x2}}]}}, @qdisc_kind_options=@q_codel={{0xa}, {0x54, 0x2, [@TCA_CODEL_TARGET={0x8}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x4}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_LIMIT={0x8, 0x2, 0x2}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x80}, @TCA_CODEL_TARGET={0x8, 0x1, 0xb9}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_INTERVAL={0x8, 0x3, 0x7}, @TCA_CODEL_LIMIT={0x8, 0x2, 0x5}]}}, @TCA_STAB={0xf8, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x8, 0xc000, 0x9, 0x1, 0x80000001, 0x4, 0xa}}, {0x18, 0x2, [0x3, 0x4, 0x3, 0xff, 0x200, 0xfe01, 0x7, 0x8, 0x0, 0x2]}}, {{0x1c, 0x1, {0x0, 0x20, 0x1, 0xfc000, 0x1}}, {0x4}}, {{0x1c, 0x1, {0x3, 0x11, 0x100, 0x5, 0x0, 0x2dd, 0x7fff, 0x4}}, {0xc, 0x2, [0x6, 0x100, 0x2, 0x71]}}, {{0x1c, 0x1, {0x0, 0x40, 0x5, 0x3, 0x2}}, {0x4}}, {{0x1c, 0x1, {0x4, 0x8, 0x1ff, 0x3ff, 0x2, 0x5, 0x9, 0x5}}, {0xe, 0x2, [0x1, 0x1, 0xb41, 0x0, 0x8]}}, {{0x1c, 0x1, {0x9, 0x3f, 0x4, 0x3, 0x0, 0x4, 0x9, 0x5}}, {0xe, 0x2, [0x0, 0x0, 0x5ca, 0xfff, 0xfffb]}}]}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x81}]}, 0x1b8}, 0x1, 0x0, 0x0, 0x20000110}, 0x800)
connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10)
writev(r2, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1)
recvmmsg(r2, &(0x7f0000003e40)=[{{0x0, 0x3, 0x0, 0x0, &(0x7f00000035c0)=""/241, 0xf1}}, {{&(0x7f00000036c0)=@un=@abs, 0x80, &(0x7f0000003780)=[{&(0x7f0000003740)=""/4, 0x7ffff}], 0x1, &(0x7f00000037c0)=""/236, 0xec}}, {{0x0, 0x0, &(0x7f0000003bc0)=[{0x0, 0xe00000000000000}, {&(0x7f0000003a00)=""/190, 0xbe}, {&(0x7f0000003ac0)=""/131, 0x83}, {0x0}], 0x4, &(0x7f0000003c00)=""/73, 0x49}}, {{&(0x7f0000003c80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, 0x0, 0x0, &(0x7f0000003e00)=""/48, 0x30}}], 0x4, 0x40000121, 0x0)
shutdown(r2, 0x0)

13:45:41 executing program 4:
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080), 0xfffffe48)

13:45:41 executing program 0:
semtimedop(0x0, &(0x7f0000000000)=[{0x0, 0x0, 0x1000}, {0x3}], 0x2, 0x0)

13:45:41 executing program 2:
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
syz_genetlink_get_family_id$tipc(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$NFT_BATCH(r1, &(0x7f00000015c0)={&(0x7f0000000300), 0xc, &(0x7f0000001580)={&(0x7f00000014c0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_PAYLOAD_CSUM_OFFSET={0x8, 0x7, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}]}, @NFT_MSG_DELSETELEM={0x1c, 0xe, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}]}], {0x14}}, 0x94}, 0x1, 0x0, 0x0, 0x1}, 0x1)
getsockname$packet(0xffffffffffffffff, &(0x7f0000001340), &(0x7f0000001380)=0x14)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r1, 0x0, 0x0)
sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, 0x0, 0x0)
getsockname(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001400)={&(0x7f0000000140), 0xc, &(0x7f0000000340)={&(0x7f0000000f00)=@newqdisc={0x1b8, 0x24, 0x0, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0xc}, {0x10, 0xffff}, {0xf, 0xfff2}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_RATE={0x6, 0x5, {0x8}}, @qdisc_kind_options=@q_choke={{0xa}, {0x18, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x4e0, 0x2, 0x6, 0x0, 0x1e, 0x2}}]}}, @qdisc_kind_options=@q_codel={{0xa}, {0x54, 0x2, [@TCA_CODEL_TARGET={0x8}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x4}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_LIMIT={0x8, 0x2, 0x2}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x80}, @TCA_CODEL_TARGET={0x8, 0x1, 0xb9}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_INTERVAL={0x8, 0x3, 0x7}, @TCA_CODEL_LIMIT={0x8, 0x2, 0x5}]}}, @TCA_STAB={0xf8, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x8, 0xc000, 0x9, 0x1, 0x80000001, 0x4, 0xa}}, {0x18, 0x2, [0x3, 0x4, 0x3, 0xff, 0x200, 0xfe01, 0x7, 0x8, 0x0, 0x2]}}, {{0x1c, 0x1, {0x0, 0x20, 0x1, 0xfc000, 0x1}}, {0x4}}, {{0x1c, 0x1, {0x3, 0x11, 0x100, 0x5, 0x0, 0x2dd, 0x7fff, 0x4}}, {0xc, 0x2, [0x6, 0x100, 0x2, 0x71]}}, {{0x1c, 0x1, {0x0, 0x40, 0x5, 0x3, 0x2}}, {0x4}}, {{0x1c, 0x1, {0x4, 0x8, 0x1ff, 0x3ff, 0x2, 0x5, 0x9, 0x5}}, {0xe, 0x2, [0x1, 0x1, 0xb41, 0x0, 0x8]}}, {{0x1c, 0x1, {0x9, 0x3f, 0x4, 0x3, 0x0, 0x4, 0x9, 0x5}}, {0xe, 0x2, [0x0, 0x0, 0x5ca, 0xfff, 0xfffb]}}]}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x81}]}, 0x1b8}, 0x1, 0x0, 0x0, 0x20000110}, 0x800)
connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10)
writev(r2, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1)
recvmmsg(r2, &(0x7f0000003e40)=[{{0x0, 0x3, 0x0, 0x0, &(0x7f00000035c0)=""/241, 0xf1}}, {{&(0x7f00000036c0)=@un=@abs, 0x80, &(0x7f0000003780)=[{&(0x7f0000003740)=""/4, 0x7ffff}], 0x1, &(0x7f00000037c0)=""/236, 0xec}}, {{0x0, 0x0, &(0x7f0000003bc0)=[{0x0, 0xe00000000000000}, {&(0x7f0000003a00)=""/190, 0xbe}, {&(0x7f0000003ac0)=""/131, 0x83}, {0x0}], 0x4, &(0x7f0000003c00)=""/73, 0x49}}, {{&(0x7f0000003c80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, 0x0, 0x0, &(0x7f0000003e00)=""/48, 0x30}}], 0x4, 0x40000121, 0x0)
shutdown(r2, 0x0)

13:45:42 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
read$FUSE(r3, &(0x7f0000000200)={0x2020}, 0x2020)
execve(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000280)=[0x0, 0x0], &(0x7f0000000380)=[&(0x7f00000002c0)='*$%}\xce*\x00', &(0x7f0000000300)='\x00'])

13:45:42 executing program 5:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000240)={@val={0x0, 0x86dd}, @val={0x5, 0x0, 0x0, 0x0, 0x54}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "000003", 0x180, 0x3a, 0x0, @empty, @mcast2, {[@routing], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x0, "ee7b615d"}, {}, {0x2b, 0x3, "6f8c008275021d683910c309293188a7c747eb2278d2794784"}, {0x0, 0x28, "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"}]}}}}}, 0x1b6)

13:45:42 executing program 4:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
sendmsg$inet6(r0, &(0x7f0000003dc0)={&(0x7f0000003940)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f0000003a80)=[@hopopts={{0x18}}, @hoplimit={{0x14, 0x29, 0x34, 0x6}}, @dstopts_2292={{0x18}}, @tclass={{0x14}}], 0x60}, 0x40408c0)

13:45:42 executing program 0:
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000040)='.)\x00', &(0x7f0000000080)='./file0\x00', 0xffffffffffffffff)

13:45:42 executing program 2:
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
syz_genetlink_get_family_id$tipc(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$NFT_BATCH(r1, &(0x7f00000015c0)={&(0x7f0000000300), 0xc, &(0x7f0000001580)={&(0x7f00000014c0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_PAYLOAD_CSUM_OFFSET={0x8, 0x7, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}]}, @NFT_MSG_DELSETELEM={0x1c, 0xe, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}]}], {0x14}}, 0x94}, 0x1, 0x0, 0x0, 0x1}, 0x1)
getsockname$packet(0xffffffffffffffff, &(0x7f0000001340), &(0x7f0000001380)=0x14)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r1, 0x0, 0x0)
sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, 0x0, 0x0)
getsockname(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001400)={&(0x7f0000000140), 0xc, &(0x7f0000000340)={&(0x7f0000000f00)=@newqdisc={0x1b8, 0x24, 0x0, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0xc}, {0x10, 0xffff}, {0xf, 0xfff2}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_RATE={0x6, 0x5, {0x8}}, @qdisc_kind_options=@q_choke={{0xa}, {0x18, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x4e0, 0x2, 0x6, 0x0, 0x1e, 0x2}}]}}, @qdisc_kind_options=@q_codel={{0xa}, {0x54, 0x2, [@TCA_CODEL_TARGET={0x8}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x4}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_LIMIT={0x8, 0x2, 0x2}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x80}, @TCA_CODEL_TARGET={0x8, 0x1, 0xb9}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_INTERVAL={0x8, 0x3, 0x7}, @TCA_CODEL_LIMIT={0x8, 0x2, 0x5}]}}, @TCA_STAB={0xf8, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x8, 0xc000, 0x9, 0x1, 0x80000001, 0x4, 0xa}}, {0x18, 0x2, [0x3, 0x4, 0x3, 0xff, 0x200, 0xfe01, 0x7, 0x8, 0x0, 0x2]}}, {{0x1c, 0x1, {0x0, 0x20, 0x1, 0xfc000, 0x1}}, {0x4}}, {{0x1c, 0x1, {0x3, 0x11, 0x100, 0x5, 0x0, 0x2dd, 0x7fff, 0x4}}, {0xc, 0x2, [0x6, 0x100, 0x2, 0x71]}}, {{0x1c, 0x1, {0x0, 0x40, 0x5, 0x3, 0x2}}, {0x4}}, {{0x1c, 0x1, {0x4, 0x8, 0x1ff, 0x3ff, 0x2, 0x5, 0x9, 0x5}}, {0xe, 0x2, [0x1, 0x1, 0xb41, 0x0, 0x8]}}, {{0x1c, 0x1, {0x9, 0x3f, 0x4, 0x3, 0x0, 0x4, 0x9, 0x5}}, {0xe, 0x2, [0x0, 0x0, 0x5ca, 0xfff, 0xfffb]}}]}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x81}]}, 0x1b8}, 0x1, 0x0, 0x0, 0x20000110}, 0x800)
connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10)
writev(r2, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1)
recvmmsg(r2, &(0x7f0000003e40)=[{{0x0, 0x3, 0x0, 0x0, &(0x7f00000035c0)=""/241, 0xf1}}, {{&(0x7f00000036c0)=@un=@abs, 0x80, &(0x7f0000003780)=[{&(0x7f0000003740)=""/4, 0x7ffff}], 0x1, &(0x7f00000037c0)=""/236, 0xec}}, {{0x0, 0x0, &(0x7f0000003bc0)=[{0x0, 0xe00000000000000}, {&(0x7f0000003a00)=""/190, 0xbe}, {&(0x7f0000003ac0)=""/131, 0x83}, {0x0}], 0x4, &(0x7f0000003c00)=""/73, 0x49}}, {{&(0x7f0000003c80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, 0x0, 0x0, &(0x7f0000003e00)=""/48, 0x30}}], 0x4, 0x40000121, 0x0)
shutdown(r2, 0x0)

13:45:42 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r1)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400ee5c99f8435ecde50a0412", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
socket(0x1, 0x803, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="50000000100001040000ff0f0000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e00000000180002800c0002001c0000001b000000060001000100000008000500", @ANYRES32], 0x50}}, 0x0)
r4 = socket(0x1, 0x803, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080))
r6 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x1e}}]}}}, @IFLA_LINK={0x8, 0x5, r5}]}, 0x50}}, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
r8 = socket(0x1, 0x803, 0x0)
getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000540)=ANY=[@ANYBLOB="20000000110003040000007bb000000000000000", @ANYRES32=r9], 0x20}}, 0x0)

13:45:42 executing program 4:
setpriority(0x0, 0x0, 0x6)

13:45:42 executing program 0:
capget(&(0x7f0000000400)={0x20080522}, 0x0)

[ 2257.480979][T22534] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'.
13:45:42 executing program 2:
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
syz_genetlink_get_family_id$tipc(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$NFT_BATCH(r1, &(0x7f00000015c0)={&(0x7f0000000300), 0xc, &(0x7f0000001580)={&(0x7f00000014c0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_PAYLOAD_CSUM_OFFSET={0x8, 0x7, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}]}, @NFT_MSG_DELSETELEM={0x1c, 0xe, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}]}], {0x14}}, 0x94}, 0x1, 0x0, 0x0, 0x1}, 0x1)
getsockname$packet(0xffffffffffffffff, &(0x7f0000001340), &(0x7f0000001380)=0x14)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r1, 0x0, 0x0)
sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, 0x0, 0x0)
getsockname(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001400)={&(0x7f0000000140), 0xc, &(0x7f0000000340)={&(0x7f0000000f00)=@newqdisc={0x1b8, 0x24, 0x0, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0xc}, {0x10, 0xffff}, {0xf, 0xfff2}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_RATE={0x6, 0x5, {0x8}}, @qdisc_kind_options=@q_choke={{0xa}, {0x18, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x4e0, 0x2, 0x6, 0x0, 0x1e, 0x2}}]}}, @qdisc_kind_options=@q_codel={{0xa}, {0x54, 0x2, [@TCA_CODEL_TARGET={0x8}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x4}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_LIMIT={0x8, 0x2, 0x2}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x80}, @TCA_CODEL_TARGET={0x8, 0x1, 0xb9}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_INTERVAL={0x8, 0x3, 0x7}, @TCA_CODEL_LIMIT={0x8, 0x2, 0x5}]}}, @TCA_STAB={0xf8, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x8, 0xc000, 0x9, 0x1, 0x80000001, 0x4, 0xa}}, {0x18, 0x2, [0x3, 0x4, 0x3, 0xff, 0x200, 0xfe01, 0x7, 0x8, 0x0, 0x2]}}, {{0x1c, 0x1, {0x0, 0x20, 0x1, 0xfc000, 0x1}}, {0x4}}, {{0x1c, 0x1, {0x3, 0x11, 0x100, 0x5, 0x0, 0x2dd, 0x7fff, 0x4}}, {0xc, 0x2, [0x6, 0x100, 0x2, 0x71]}}, {{0x1c, 0x1, {0x0, 0x40, 0x5, 0x3, 0x2}}, {0x4}}, {{0x1c, 0x1, {0x4, 0x8, 0x1ff, 0x3ff, 0x2, 0x5, 0x9, 0x5}}, {0xe, 0x2, [0x1, 0x1, 0xb41, 0x0, 0x8]}}, {{0x1c, 0x1, {0x9, 0x3f, 0x4, 0x3, 0x0, 0x4, 0x9, 0x5}}, {0xe, 0x2, [0x0, 0x0, 0x5ca, 0xfff, 0xfffb]}}]}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x81}]}, 0x1b8}, 0x1, 0x0, 0x0, 0x20000110}, 0x800)
connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10)
writev(r2, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1)
recvmmsg(r2, &(0x7f0000003e40)=[{{0x0, 0x3, 0x0, 0x0, &(0x7f00000035c0)=""/241, 0xf1}}, {{&(0x7f00000036c0)=@un=@abs, 0x80, &(0x7f0000003780)=[{&(0x7f0000003740)=""/4, 0x7ffff}], 0x1, &(0x7f00000037c0)=""/236, 0xec}}, {{0x0, 0x0, &(0x7f0000003bc0)=[{0x0, 0xe00000000000000}, {&(0x7f0000003a00)=""/190, 0xbe}, {&(0x7f0000003ac0)=""/131, 0x83}, {0x0}], 0x4, &(0x7f0000003c00)=""/73, 0x49}}, {{&(0x7f0000003c80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, 0x0, 0x0, &(0x7f0000003e00)=""/48, 0x30}}], 0x4, 0x40000121, 0x0)
shutdown(r2, 0x0)

13:45:42 executing program 4:
r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$UHID_INPUT(r0, &(0x7f0000000040)={0x8, {"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", 0x1000}}, 0x1006)

13:45:42 executing program 0:
syz_clone3(&(0x7f0000004540)={0x200200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

13:45:42 executing program 5:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000240)={@val={0x0, 0x86dd}, @val={0x5, 0x0, 0x0, 0x0, 0x54}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "000003", 0x180, 0x3a, 0x0, @empty, @mcast2, {[@routing], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x0, "ee7b615d"}, {}, {0x2b, 0x3, "6f8c008275021d683910c309293188a7c747eb2278d2794784"}, {0x0, 0x28, "4429118927041312255133e4d2b8b863b5f5b4ace38952e94c581c85d2d86844f548415db4dbf1992868a2e15095b531ce55d4620ec637afdcc990a4d6bfecb289917d24b31a2ddeb64383b176b823cc203ec1927487b7a00d6a3446cf7db79e14b2206d882c28611fa4d8289337cd75b4688120c73a2710947b908fde68a05a0777a170a14e85c7849462b3f5c3152cf0f3d91c5db93dc4d8f9e6b53708650dc375e6da3650b5ff4079971f6e3ef363382a16b8ae07b7307b5619092e4669dbca480d25738314135509eda68f712b9b09bdb485ea0914590b7ae01c2e34832f16c23c82b22b6ba550acfcede288a5237a06b3f5e09b6e5a0404544efe1474664b985f070121e82070a9f4513c2031a58a3d99e99284b812c0f047061139620890416c9defce02fa49cd1dd14b22df7250314ccb3dfd9827f892656911150cd9d921a8"}]}}}}}, 0x1b6)

13:45:43 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
read$FUSE(r3, &(0x7f0000000200)={0x2020}, 0x2020)
execve(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000280)=[0x0, 0x0], &(0x7f0000000380)=[&(0x7f00000002c0)='*$%}\xce*\x00', &(0x7f0000000300)='\x00'])

13:45:43 executing program 4:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
sendmsg$inet6(r0, &(0x7f0000003dc0)={&(0x7f0000003940)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f0000003a80)=[@hopopts={{0x18}}, @dstopts={{0x18}}], 0x30}, 0x0)

13:45:43 executing program 2:
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
syz_genetlink_get_family_id$tipc(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$NFT_BATCH(r1, &(0x7f00000015c0)={&(0x7f0000000300), 0xc, &(0x7f0000001580)={&(0x7f00000014c0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_PAYLOAD_CSUM_OFFSET={0x8, 0x7, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}]}, @NFT_MSG_DELSETELEM={0x1c, 0xe, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}]}], {0x14}}, 0x94}, 0x1, 0x0, 0x0, 0x1}, 0x1)
getsockname$packet(0xffffffffffffffff, &(0x7f0000001340), &(0x7f0000001380)=0x14)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r1, 0x0, 0x0)
sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, 0x0, 0x0)
getsockname(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001400)={&(0x7f0000000140), 0xc, &(0x7f0000000340)={&(0x7f0000000f00)=@newqdisc={0x1b8, 0x24, 0x0, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0xc}, {0x10, 0xffff}, {0xf, 0xfff2}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_RATE={0x6, 0x5, {0x8}}, @qdisc_kind_options=@q_choke={{0xa}, {0x18, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x4e0, 0x2, 0x6, 0x0, 0x1e, 0x2}}]}}, @qdisc_kind_options=@q_codel={{0xa}, {0x54, 0x2, [@TCA_CODEL_TARGET={0x8}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x4}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_LIMIT={0x8, 0x2, 0x2}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x80}, @TCA_CODEL_TARGET={0x8, 0x1, 0xb9}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_INTERVAL={0x8, 0x3, 0x7}, @TCA_CODEL_LIMIT={0x8, 0x2, 0x5}]}}, @TCA_STAB={0xf8, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x8, 0xc000, 0x9, 0x1, 0x80000001, 0x4, 0xa}}, {0x18, 0x2, [0x3, 0x4, 0x3, 0xff, 0x200, 0xfe01, 0x7, 0x8, 0x0, 0x2]}}, {{0x1c, 0x1, {0x0, 0x20, 0x1, 0xfc000, 0x1}}, {0x4}}, {{0x1c, 0x1, {0x3, 0x11, 0x100, 0x5, 0x0, 0x2dd, 0x7fff, 0x4}}, {0xc, 0x2, [0x6, 0x100, 0x2, 0x71]}}, {{0x1c, 0x1, {0x0, 0x40, 0x5, 0x3, 0x2}}, {0x4}}, {{0x1c, 0x1, {0x4, 0x8, 0x1ff, 0x3ff, 0x2, 0x5, 0x9, 0x5}}, {0xe, 0x2, [0x1, 0x1, 0xb41, 0x0, 0x8]}}, {{0x1c, 0x1, {0x9, 0x3f, 0x4, 0x3, 0x0, 0x4, 0x9, 0x5}}, {0xe, 0x2, [0x0, 0x0, 0x5ca, 0xfff, 0xfffb]}}]}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x81}]}, 0x1b8}, 0x1, 0x0, 0x0, 0x20000110}, 0x800)
connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10)
writev(r2, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1)
recvmmsg(r2, &(0x7f0000003e40)=[{{0x0, 0x3, 0x0, 0x0, &(0x7f00000035c0)=""/241, 0xf1}}, {{&(0x7f00000036c0)=@un=@abs, 0x80, &(0x7f0000003780)=[{&(0x7f0000003740)=""/4, 0x7ffff}], 0x1, &(0x7f00000037c0)=""/236, 0xec}}, {{0x0, 0x0, &(0x7f0000003bc0)=[{0x0, 0xe00000000000000}, {&(0x7f0000003a00)=""/190, 0xbe}, {&(0x7f0000003ac0)=""/131, 0x83}, {0x0}], 0x4, &(0x7f0000003c00)=""/73, 0x49}}, {{&(0x7f0000003c80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, 0x0, 0x0, &(0x7f0000003e00)=""/48, 0x30}}], 0x4, 0x40000121, 0x0)
shutdown(r2, 0x0)

13:45:43 executing program 0:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
sendmmsg$unix(r0, &(0x7f0000002900)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000040)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000001580)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, &(0x7f0000001840)=[@cred={{0x1c}}, @rights={{0x10}}], 0x30}}], 0x2, 0x0)

13:45:43 executing program 5:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000240)={@val={0x0, 0x86dd}, @val={0x5, 0x0, 0x0, 0x0, 0x54}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "000003", 0x180, 0x3a, 0x0, @empty, @mcast2, {[@routing], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x0, "ee7b615d"}, {}, {0x2b, 0x3, "6f8c008275021d683910c309293188a7c747eb2278d2794784"}, {0x0, 0x28, "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"}]}}}}}, 0x1b6)

13:45:43 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r1)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400ee5c99f8435ecde50a0412", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="50000000100001040000ff0f0000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e00000000180002800c0002001c0000001b000000060001000100000008000500", @ANYRES32=r4], 0x50}}, 0x0)
r5 = socket(0x1, 0x803, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080))
r7 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x1e}}]}}}, @IFLA_LINK={0x8, 0x5, r6}]}, 0x50}}, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = socket(0x1, 0x803, 0x0)
getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000540)=ANY=[@ANYBLOB="20000000110003040000007bb000000000000000", @ANYRES32=r10], 0x20}}, 0x0)

13:45:44 executing program 0:
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
fcntl$dupfd(r0, 0x406, r0)

13:45:44 executing program 4:
r0 = getpgid(0x0)
ptrace$PTRACE_GETSIGMASK(0x420a, r0, 0x0, 0x0)

[ 2258.912265][T22564] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'.
13:45:44 executing program 2:
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
syz_genetlink_get_family_id$tipc(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$NFT_BATCH(r1, &(0x7f00000015c0)={&(0x7f0000000300), 0xc, &(0x7f0000001580)={&(0x7f00000014c0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_PAYLOAD_CSUM_OFFSET={0x8, 0x7, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}]}, @NFT_MSG_DELSETELEM={0x1c, 0xe, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}]}], {0x14}}, 0x94}, 0x1, 0x0, 0x0, 0x1}, 0x1)
getsockname$packet(0xffffffffffffffff, &(0x7f0000001340), &(0x7f0000001380)=0x14)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r1, 0x0, 0x0)
sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, 0x0, 0x0)
getsockname(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001400)={&(0x7f0000000140), 0xc, &(0x7f0000000340)={&(0x7f0000000f00)=@newqdisc={0x1b8, 0x24, 0x0, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0xc}, {0x10, 0xffff}, {0xf, 0xfff2}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_RATE={0x6, 0x5, {0x8}}, @qdisc_kind_options=@q_choke={{0xa}, {0x18, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x4e0, 0x2, 0x6, 0x0, 0x1e, 0x2}}]}}, @qdisc_kind_options=@q_codel={{0xa}, {0x54, 0x2, [@TCA_CODEL_TARGET={0x8}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x4}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_LIMIT={0x8, 0x2, 0x2}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x80}, @TCA_CODEL_TARGET={0x8, 0x1, 0xb9}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_INTERVAL={0x8, 0x3, 0x7}, @TCA_CODEL_LIMIT={0x8, 0x2, 0x5}]}}, @TCA_STAB={0xf8, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x8, 0xc000, 0x9, 0x1, 0x80000001, 0x4, 0xa}}, {0x18, 0x2, [0x3, 0x4, 0x3, 0xff, 0x200, 0xfe01, 0x7, 0x8, 0x0, 0x2]}}, {{0x1c, 0x1, {0x0, 0x20, 0x1, 0xfc000, 0x1}}, {0x4}}, {{0x1c, 0x1, {0x3, 0x11, 0x100, 0x5, 0x0, 0x2dd, 0x7fff, 0x4}}, {0xc, 0x2, [0x6, 0x100, 0x2, 0x71]}}, {{0x1c, 0x1, {0x0, 0x40, 0x5, 0x3, 0x2}}, {0x4}}, {{0x1c, 0x1, {0x4, 0x8, 0x1ff, 0x3ff, 0x2, 0x5, 0x9, 0x5}}, {0xe, 0x2, [0x1, 0x1, 0xb41, 0x0, 0x8]}}, {{0x1c, 0x1, {0x9, 0x3f, 0x4, 0x3, 0x0, 0x4, 0x9, 0x5}}, {0xe, 0x2, [0x0, 0x0, 0x5ca, 0xfff, 0xfffb]}}]}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x81}]}, 0x1b8}, 0x1, 0x0, 0x0, 0x20000110}, 0x800)
connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10)
writev(r2, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1)
recvmmsg(r2, &(0x7f0000003e40)=[{{0x0, 0x3, 0x0, 0x0, &(0x7f00000035c0)=""/241, 0xf1}}, {{&(0x7f00000036c0)=@un=@abs, 0x80, &(0x7f0000003780)=[{&(0x7f0000003740)=""/4, 0x7ffff}], 0x1, &(0x7f00000037c0)=""/236, 0xec}}, {{0x0, 0x0, &(0x7f0000003bc0)=[{0x0, 0xe00000000000000}, {&(0x7f0000003a00)=""/190, 0xbe}, {&(0x7f0000003ac0)=""/131, 0x83}, {0x0}], 0x4, &(0x7f0000003c00)=""/73, 0x49}}, {{&(0x7f0000003c80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, 0x0, 0x0, &(0x7f0000003e00)=""/48, 0x30}}], 0x4, 0x40000121, 0x0)
shutdown(r2, 0x0)

13:45:44 executing program 4:
r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000500), 0x8, 0x0)
syz_clone3(&(0x7f0000001140)={0x264001080, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000002f40)=[0x0], 0x1, {r0}}, 0x58)

13:45:44 executing program 2:
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
syz_genetlink_get_family_id$tipc(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$NFT_BATCH(r1, &(0x7f00000015c0)={&(0x7f0000000300), 0xc, &(0x7f0000001580)={&(0x7f00000014c0)={{0x14}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_PAYLOAD_CSUM_OFFSET={0x8, 0x7, 0x1, 0x0, 0x3}]}}}]}]}, @NFT_MSG_DELSETELEM={0x1c, 0xe, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}]}], {0x14}}, 0x8c}, 0x1, 0x0, 0x0, 0x1}, 0x1)
getsockname$packet(0xffffffffffffffff, &(0x7f0000001340), &(0x7f0000001380)=0x14)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r1, 0x0, 0x0)
sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, 0x0, 0x0)
getsockname(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001400)={&(0x7f0000000140), 0xc, &(0x7f0000000340)={&(0x7f0000000f00)=@newqdisc={0x1b8, 0x24, 0x0, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0xc}, {0x10, 0xffff}, {0xf, 0xfff2}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_RATE={0x6, 0x5, {0x8}}, @qdisc_kind_options=@q_choke={{0xa}, {0x18, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x4e0, 0x2, 0x6, 0x0, 0x1e, 0x2}}]}}, @qdisc_kind_options=@q_codel={{0xa}, {0x54, 0x2, [@TCA_CODEL_TARGET={0x8}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x4}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_LIMIT={0x8, 0x2, 0x2}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x80}, @TCA_CODEL_TARGET={0x8, 0x1, 0xb9}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_INTERVAL={0x8, 0x3, 0x7}, @TCA_CODEL_LIMIT={0x8, 0x2, 0x5}]}}, @TCA_STAB={0xf8, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x8, 0xc000, 0x9, 0x1, 0x80000001, 0x4, 0xa}}, {0x18, 0x2, [0x3, 0x4, 0x3, 0xff, 0x200, 0xfe01, 0x7, 0x8, 0x0, 0x2]}}, {{0x1c, 0x1, {0x0, 0x20, 0x1, 0xfc000, 0x1}}, {0x4}}, {{0x1c, 0x1, {0x3, 0x11, 0x100, 0x5, 0x0, 0x2dd, 0x7fff, 0x4}}, {0xc, 0x2, [0x6, 0x100, 0x2, 0x71]}}, {{0x1c, 0x1, {0x0, 0x40, 0x5, 0x3, 0x2}}, {0x4}}, {{0x1c, 0x1, {0x4, 0x8, 0x1ff, 0x3ff, 0x2, 0x5, 0x9, 0x5}}, {0xe, 0x2, [0x1, 0x1, 0xb41, 0x0, 0x8]}}, {{0x1c, 0x1, {0x9, 0x3f, 0x4, 0x3, 0x0, 0x4, 0x9, 0x5}}, {0xe, 0x2, [0x0, 0x0, 0x5ca, 0xfff, 0xfffb]}}]}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x81}]}, 0x1b8}, 0x1, 0x0, 0x0, 0x20000110}, 0x800)
connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10)
writev(r2, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1)
recvmmsg(r2, &(0x7f0000003e40)=[{{0x0, 0x3, 0x0, 0x0, &(0x7f00000035c0)=""/241, 0xf1}}, {{&(0x7f00000036c0)=@un=@abs, 0x80, &(0x7f0000003780)=[{&(0x7f0000003740)=""/4, 0x7ffff}], 0x1, &(0x7f00000037c0)=""/236, 0xec}}, {{0x0, 0x0, &(0x7f0000003bc0)=[{0x0, 0xe00000000000000}, {&(0x7f0000003a00)=""/190, 0xbe}, {&(0x7f0000003ac0)=""/131, 0x83}, {0x0}], 0x4, &(0x7f0000003c00)=""/73, 0x49}}, {{&(0x7f0000003c80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, 0x0, 0x0, &(0x7f0000003e00)=""/48, 0x30}}], 0x4, 0x40000121, 0x0)
shutdown(r2, 0x0)

13:45:44 executing program 0:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
sendmsg$inet6(r0, &(0x7f0000003dc0)={&(0x7f0000003940)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f0000003a80)=[@hoplimit={{0x14}}, @dstopts_2292={{0x18}}], 0x30}, 0x0)

13:45:45 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
openat$procfs(0xffffffffffffff9c, &(0x7f000000c380)='/proc/crypto\x00', 0x0, 0x0)
read$FUSE(0xffffffffffffffff, &(0x7f0000000200)={0x2020}, 0x2020)
execve(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000280)=[0x0, 0x0], &(0x7f0000000380)=[&(0x7f00000002c0)='*$%}\xce*\x00', &(0x7f0000000300)='\x00'])

13:45:45 executing program 2:
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
syz_genetlink_get_family_id$tipc(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$NFT_BATCH(r1, &(0x7f00000015c0)={&(0x7f0000000300), 0xc, &(0x7f0000001580)={&(0x7f00000014c0)={{0x14}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_PAYLOAD_CSUM_OFFSET={0x8, 0x7, 0x1, 0x0, 0x3}]}}}]}]}, @NFT_MSG_DELSETELEM={0x1c, 0xe, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}]}], {0x14}}, 0x8c}, 0x1, 0x0, 0x0, 0x1}, 0x1)
getsockname$packet(0xffffffffffffffff, &(0x7f0000001340), &(0x7f0000001380)=0x14)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r1, 0x0, 0x0)
sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, 0x0, 0x0)
getsockname(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001400)={&(0x7f0000000140), 0xc, &(0x7f0000000340)={&(0x7f0000000f00)=@newqdisc={0x1b8, 0x24, 0x0, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0xc}, {0x10, 0xffff}, {0xf, 0xfff2}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_RATE={0x6, 0x5, {0x8}}, @qdisc_kind_options=@q_choke={{0xa}, {0x18, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x4e0, 0x2, 0x6, 0x0, 0x1e, 0x2}}]}}, @qdisc_kind_options=@q_codel={{0xa}, {0x54, 0x2, [@TCA_CODEL_TARGET={0x8}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x4}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_LIMIT={0x8, 0x2, 0x2}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x80}, @TCA_CODEL_TARGET={0x8, 0x1, 0xb9}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_INTERVAL={0x8, 0x3, 0x7}, @TCA_CODEL_LIMIT={0x8, 0x2, 0x5}]}}, @TCA_STAB={0xf8, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x8, 0xc000, 0x9, 0x1, 0x80000001, 0x4, 0xa}}, {0x18, 0x2, [0x3, 0x4, 0x3, 0xff, 0x200, 0xfe01, 0x7, 0x8, 0x0, 0x2]}}, {{0x1c, 0x1, {0x0, 0x20, 0x1, 0xfc000, 0x1}}, {0x4}}, {{0x1c, 0x1, {0x3, 0x11, 0x100, 0x5, 0x0, 0x2dd, 0x7fff, 0x4}}, {0xc, 0x2, [0x6, 0x100, 0x2, 0x71]}}, {{0x1c, 0x1, {0x0, 0x40, 0x5, 0x3, 0x2}}, {0x4}}, {{0x1c, 0x1, {0x4, 0x8, 0x1ff, 0x3ff, 0x2, 0x5, 0x9, 0x5}}, {0xe, 0x2, [0x1, 0x1, 0xb41, 0x0, 0x8]}}, {{0x1c, 0x1, {0x9, 0x3f, 0x4, 0x3, 0x0, 0x4, 0x9, 0x5}}, {0xe, 0x2, [0x0, 0x0, 0x5ca, 0xfff, 0xfffb]}}]}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x81}]}, 0x1b8}, 0x1, 0x0, 0x0, 0x20000110}, 0x800)
connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10)
writev(r2, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1)
recvmmsg(r2, &(0x7f0000003e40)=[{{0x0, 0x3, 0x0, 0x0, &(0x7f00000035c0)=""/241, 0xf1}}, {{&(0x7f00000036c0)=@un=@abs, 0x80, &(0x7f0000003780)=[{&(0x7f0000003740)=""/4, 0x7ffff}], 0x1, &(0x7f00000037c0)=""/236, 0xec}}, {{0x0, 0x0, &(0x7f0000003bc0)=[{0x0, 0xe00000000000000}, {&(0x7f0000003a00)=""/190, 0xbe}, {&(0x7f0000003ac0)=""/131, 0x83}, {0x0}], 0x4, &(0x7f0000003c00)=""/73, 0x49}}, {{&(0x7f0000003c80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, 0x0, 0x0, &(0x7f0000003e00)=""/48, 0x30}}], 0x4, 0x40000121, 0x0)
shutdown(r2, 0x0)

13:45:45 executing program 0:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
mkdir(&(0x7f00000002c0)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0)
r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x8b}, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r1, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10)
setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4)
connect$inet(r1, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10)
sendmmsg$inet(r1, &(0x7f0000002080)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[@ip_retopts={{0x10, 0x60000000}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @empty}}}], 0x30}}], 0x300, 0x0)
rt_sigtimedwait(&(0x7f0000000080)={[0x1]}, &(0x7f0000000340), &(0x7f0000000240)={0x0, 0x3938700}, 0x8)

13:45:45 executing program 5:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000240)={@val={0x0, 0x86dd}, @val={0x5, 0x0, 0x0, 0x0, 0x54}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "000003", 0x4b, 0x3a, 0x0, @empty, @mcast2, {[@routing={0x0, 0x2, 0x0, 0x0, 0x0, [@empty]}], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x0, "ee7b615d"}, {}, {0x2b, 0x3, "6f8c008275021d683910c309293188a7c747eb2278d2794784"}]}}}}}, 0x81)

13:45:45 executing program 4:
setrlimit(0xe, &(0x7f00000000c0)={0x0, 0x7})

13:45:45 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r1)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400ee5c99f8435ecde50a0412", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="50000000100001040000ff0f0000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e00000000180002800c0002001c0000001b000000060001000100000008000500", @ANYRES32=r4], 0x50}}, 0x0)
r5 = socket(0x1, 0x803, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080))
r7 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x1e}}]}}}, @IFLA_LINK={0x8, 0x5, r6}]}, 0x50}}, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = socket(0x1, 0x803, 0x0)
getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000540)=ANY=[@ANYBLOB="20000000110003040000007bb000000000000000", @ANYRES32=r10], 0x20}}, 0x0)

13:45:45 executing program 4:
semget(0x0, 0x3, 0x7b0)
r0 = semget(0x3, 0x3, 0x4)
semctl$IPC_SET(r0, 0x0, 0x1, 0x0)

13:45:45 executing program 2:
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
syz_genetlink_get_family_id$tipc(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$NFT_BATCH(r1, &(0x7f00000015c0)={&(0x7f0000000300), 0xc, &(0x7f0000001580)={&(0x7f00000014c0)={{0x14}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_PAYLOAD_CSUM_OFFSET={0x8, 0x7, 0x1, 0x0, 0x3}]}}}]}]}, @NFT_MSG_DELSETELEM={0x1c, 0xe, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}]}], {0x14}}, 0x8c}, 0x1, 0x0, 0x0, 0x1}, 0x1)
getsockname$packet(0xffffffffffffffff, &(0x7f0000001340), &(0x7f0000001380)=0x14)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r1, 0x0, 0x0)
sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, 0x0, 0x0)
getsockname(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001400)={&(0x7f0000000140), 0xc, &(0x7f0000000340)={&(0x7f0000000f00)=@newqdisc={0x1b8, 0x24, 0x0, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0xc}, {0x10, 0xffff}, {0xf, 0xfff2}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_RATE={0x6, 0x5, {0x8}}, @qdisc_kind_options=@q_choke={{0xa}, {0x18, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x4e0, 0x2, 0x6, 0x0, 0x1e, 0x2}}]}}, @qdisc_kind_options=@q_codel={{0xa}, {0x54, 0x2, [@TCA_CODEL_TARGET={0x8}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x4}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_LIMIT={0x8, 0x2, 0x2}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x80}, @TCA_CODEL_TARGET={0x8, 0x1, 0xb9}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_INTERVAL={0x8, 0x3, 0x7}, @TCA_CODEL_LIMIT={0x8, 0x2, 0x5}]}}, @TCA_STAB={0xf8, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x8, 0xc000, 0x9, 0x1, 0x80000001, 0x4, 0xa}}, {0x18, 0x2, [0x3, 0x4, 0x3, 0xff, 0x200, 0xfe01, 0x7, 0x8, 0x0, 0x2]}}, {{0x1c, 0x1, {0x0, 0x20, 0x1, 0xfc000, 0x1}}, {0x4}}, {{0x1c, 0x1, {0x3, 0x11, 0x100, 0x5, 0x0, 0x2dd, 0x7fff, 0x4}}, {0xc, 0x2, [0x6, 0x100, 0x2, 0x71]}}, {{0x1c, 0x1, {0x0, 0x40, 0x5, 0x3, 0x2}}, {0x4}}, {{0x1c, 0x1, {0x4, 0x8, 0x1ff, 0x3ff, 0x2, 0x5, 0x9, 0x5}}, {0xe, 0x2, [0x1, 0x1, 0xb41, 0x0, 0x8]}}, {{0x1c, 0x1, {0x9, 0x3f, 0x4, 0x3, 0x0, 0x4, 0x9, 0x5}}, {0xe, 0x2, [0x0, 0x0, 0x5ca, 0xfff, 0xfffb]}}]}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x81}]}, 0x1b8}, 0x1, 0x0, 0x0, 0x20000110}, 0x800)
connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10)
writev(r2, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1)
recvmmsg(r2, &(0x7f0000003e40)=[{{0x0, 0x3, 0x0, 0x0, &(0x7f00000035c0)=""/241, 0xf1}}, {{&(0x7f00000036c0)=@un=@abs, 0x80, &(0x7f0000003780)=[{&(0x7f0000003740)=""/4, 0x7ffff}], 0x1, &(0x7f00000037c0)=""/236, 0xec}}, {{0x0, 0x0, &(0x7f0000003bc0)=[{0x0, 0xe00000000000000}, {&(0x7f0000003a00)=""/190, 0xbe}, {&(0x7f0000003ac0)=""/131, 0x83}, {0x0}], 0x4, &(0x7f0000003c00)=""/73, 0x49}}, {{&(0x7f0000003c80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, 0x0, 0x0, &(0x7f0000003e00)=""/48, 0x30}}], 0x4, 0x40000121, 0x0)
shutdown(r2, 0x0)

[ 2260.733171][T22599] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'.
13:45:46 executing program 4:
openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0xc41, 0x0)

13:45:46 executing program 2:
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
syz_genetlink_get_family_id$tipc(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$NFT_BATCH(r1, &(0x7f00000015c0)={&(0x7f0000000300), 0xc, &(0x7f0000001580)={&(0x7f00000014c0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_PAYLOAD_CSUM_OFFSET={0x8, 0x7, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_CHAIN_ID={0x8}]}, @NFT_MSG_DELSETELEM={0x1c, 0xe, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}]}], {0x14}}, 0x94}, 0x1, 0x0, 0x0, 0x1}, 0x1)
getsockname$packet(0xffffffffffffffff, &(0x7f0000001340), &(0x7f0000001380)=0x14)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r1, 0x0, 0x0)
sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, 0x0, 0x0)
getsockname(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001400)={&(0x7f0000000140), 0xc, &(0x7f0000000340)={&(0x7f0000000f00)=@newqdisc={0x1b8, 0x24, 0x0, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0xc}, {0x10, 0xffff}, {0xf, 0xfff2}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_RATE={0x6, 0x5, {0x8}}, @qdisc_kind_options=@q_choke={{0xa}, {0x18, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x4e0, 0x2, 0x6, 0x0, 0x1e, 0x2}}]}}, @qdisc_kind_options=@q_codel={{0xa}, {0x54, 0x2, [@TCA_CODEL_TARGET={0x8}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x4}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_LIMIT={0x8, 0x2, 0x2}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x80}, @TCA_CODEL_TARGET={0x8, 0x1, 0xb9}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_INTERVAL={0x8, 0x3, 0x7}, @TCA_CODEL_LIMIT={0x8, 0x2, 0x5}]}}, @TCA_STAB={0xf8, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x8, 0xc000, 0x9, 0x1, 0x80000001, 0x4, 0xa}}, {0x18, 0x2, [0x3, 0x4, 0x3, 0xff, 0x200, 0xfe01, 0x7, 0x8, 0x0, 0x2]}}, {{0x1c, 0x1, {0x0, 0x20, 0x1, 0xfc000, 0x1}}, {0x4}}, {{0x1c, 0x1, {0x3, 0x11, 0x100, 0x5, 0x0, 0x2dd, 0x7fff, 0x4}}, {0xc, 0x2, [0x6, 0x100, 0x2, 0x71]}}, {{0x1c, 0x1, {0x0, 0x40, 0x5, 0x3, 0x2}}, {0x4}}, {{0x1c, 0x1, {0x4, 0x8, 0x1ff, 0x3ff, 0x2, 0x5, 0x9, 0x5}}, {0xe, 0x2, [0x1, 0x1, 0xb41, 0x0, 0x8]}}, {{0x1c, 0x1, {0x9, 0x3f, 0x4, 0x3, 0x0, 0x4, 0x9, 0x5}}, {0xe, 0x2, [0x0, 0x0, 0x5ca, 0xfff, 0xfffb]}}]}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x81}]}, 0x1b8}, 0x1, 0x0, 0x0, 0x20000110}, 0x800)
connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10)
writev(r2, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1)
recvmmsg(r2, &(0x7f0000003e40)=[{{0x0, 0x3, 0x0, 0x0, &(0x7f00000035c0)=""/241, 0xf1}}, {{&(0x7f00000036c0)=@un=@abs, 0x80, &(0x7f0000003780)=[{&(0x7f0000003740)=""/4, 0x7ffff}], 0x1, &(0x7f00000037c0)=""/236, 0xec}}, {{0x0, 0x0, &(0x7f0000003bc0)=[{0x0, 0xe00000000000000}, {&(0x7f0000003a00)=""/190, 0xbe}, {&(0x7f0000003ac0)=""/131, 0x83}, {0x0}], 0x4, &(0x7f0000003c00)=""/73, 0x49}}, {{&(0x7f0000003c80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, 0x0, 0x0, &(0x7f0000003e00)=""/48, 0x30}}], 0x4, 0x40000121, 0x0)
shutdown(r2, 0x0)

13:45:46 executing program 0:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
mkdir(&(0x7f00000002c0)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0)
r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x8b}, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r1, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10)
setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4)
connect$inet(r1, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10)
sendmmsg$inet(r1, &(0x7f0000002080)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[@ip_retopts={{0x10, 0x60000000}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @empty}}}], 0x30}}], 0x300, 0x0)
rt_sigtimedwait(&(0x7f0000000080)={[0x1]}, &(0x7f0000000340), &(0x7f0000000240)={0x0, 0x3938700}, 0x8)

13:45:46 executing program 4:
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
bind$vsock_stream(r0, 0x0, 0x0)

13:45:48 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
openat$procfs(0xffffffffffffff9c, &(0x7f000000c380)='/proc/crypto\x00', 0x0, 0x0)
read$FUSE(0xffffffffffffffff, &(0x7f0000000200)={0x2020}, 0x2020)
execve(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000280)=[0x0, 0x0], &(0x7f0000000380)=[&(0x7f00000002c0)='*$%}\xce*\x00', &(0x7f0000000300)='\x00'])

13:45:48 executing program 0:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
mkdir(&(0x7f00000002c0)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0)
r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x8b}, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r1, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10)
setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4)
connect$inet(r1, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10)
sendmmsg$inet(r1, &(0x7f0000002080)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[@ip_retopts={{0x10, 0x60000000}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @empty}}}], 0x30}}], 0x300, 0x0)
rt_sigtimedwait(&(0x7f0000000080)={[0x1]}, &(0x7f0000000340), &(0x7f0000000240)={0x0, 0x3938700}, 0x8)

13:45:48 executing program 4:
accept$packet(0xffffffffffffffff, 0x0, 0x0)
geteuid()
mount$binderfs(&(0x7f0000004580), &(0x7f00000045c0)='./binderfs\x00', &(0x7f0000004600), 0x0, &(0x7f0000006680)={[{}, {@stats}], [{@audit}, {@seclabel}]})

13:45:48 executing program 2:
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
syz_genetlink_get_family_id$tipc(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$NFT_BATCH(r1, &(0x7f00000015c0)={&(0x7f0000000300), 0xc, &(0x7f0000001580)={&(0x7f00000014c0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_PAYLOAD_CSUM_OFFSET={0x8, 0x7, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_CHAIN_ID={0x8}]}, @NFT_MSG_DELSETELEM={0x1c, 0xe, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}]}], {0x14}}, 0x94}, 0x1, 0x0, 0x0, 0x1}, 0x1)
getsockname$packet(0xffffffffffffffff, &(0x7f0000001340), &(0x7f0000001380)=0x14)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r1, 0x0, 0x0)
sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, 0x0, 0x0)
getsockname(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001400)={&(0x7f0000000140), 0xc, &(0x7f0000000340)={&(0x7f0000000f00)=@newqdisc={0x1b8, 0x24, 0x0, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0xc}, {0x10, 0xffff}, {0xf, 0xfff2}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_RATE={0x6, 0x5, {0x8}}, @qdisc_kind_options=@q_choke={{0xa}, {0x18, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x4e0, 0x2, 0x6, 0x0, 0x1e, 0x2}}]}}, @qdisc_kind_options=@q_codel={{0xa}, {0x54, 0x2, [@TCA_CODEL_TARGET={0x8}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x4}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_LIMIT={0x8, 0x2, 0x2}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x80}, @TCA_CODEL_TARGET={0x8, 0x1, 0xb9}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_INTERVAL={0x8, 0x3, 0x7}, @TCA_CODEL_LIMIT={0x8, 0x2, 0x5}]}}, @TCA_STAB={0xf8, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x8, 0xc000, 0x9, 0x1, 0x80000001, 0x4, 0xa}}, {0x18, 0x2, [0x3, 0x4, 0x3, 0xff, 0x200, 0xfe01, 0x7, 0x8, 0x0, 0x2]}}, {{0x1c, 0x1, {0x0, 0x20, 0x1, 0xfc000, 0x1}}, {0x4}}, {{0x1c, 0x1, {0x3, 0x11, 0x100, 0x5, 0x0, 0x2dd, 0x7fff, 0x4}}, {0xc, 0x2, [0x6, 0x100, 0x2, 0x71]}}, {{0x1c, 0x1, {0x0, 0x40, 0x5, 0x3, 0x2}}, {0x4}}, {{0x1c, 0x1, {0x4, 0x8, 0x1ff, 0x3ff, 0x2, 0x5, 0x9, 0x5}}, {0xe, 0x2, [0x1, 0x1, 0xb41, 0x0, 0x8]}}, {{0x1c, 0x1, {0x9, 0x3f, 0x4, 0x3, 0x0, 0x4, 0x9, 0x5}}, {0xe, 0x2, [0x0, 0x0, 0x5ca, 0xfff, 0xfffb]}}]}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x81}]}, 0x1b8}, 0x1, 0x0, 0x0, 0x20000110}, 0x800)
connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10)
writev(r2, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1)
recvmmsg(r2, &(0x7f0000003e40)=[{{0x0, 0x3, 0x0, 0x0, &(0x7f00000035c0)=""/241, 0xf1}}, {{&(0x7f00000036c0)=@un=@abs, 0x80, &(0x7f0000003780)=[{&(0x7f0000003740)=""/4, 0x7ffff}], 0x1, &(0x7f00000037c0)=""/236, 0xec}}, {{0x0, 0x0, &(0x7f0000003bc0)=[{0x0, 0xe00000000000000}, {&(0x7f0000003a00)=""/190, 0xbe}, {&(0x7f0000003ac0)=""/131, 0x83}, {0x0}], 0x4, &(0x7f0000003c00)=""/73, 0x49}}, {{&(0x7f0000003c80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, 0x0, 0x0, &(0x7f0000003e00)=""/48, 0x30}}], 0x4, 0x40000121, 0x0)
shutdown(r2, 0x0)

13:45:48 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r1)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400ee5c99f8435ecde50a0412", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="50000000100001040000ff0f0000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e00000000180002800c0002001c0000001b000000060001000100000008000500", @ANYRES32=r4], 0x50}}, 0x0)
r5 = socket(0x1, 0x803, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080))
r7 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x1e}}]}}}, @IFLA_LINK={0x8, 0x5, r6}]}, 0x50}}, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = socket(0x1, 0x803, 0x0)
getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000540)=ANY=[@ANYBLOB="20000000110003040000007bb000000000000000", @ANYRES32=r10], 0x20}}, 0x0)

13:45:48 executing program 5:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000240)={@val={0x0, 0x86dd}, @val={0x5, 0x0, 0x0, 0x0, 0x54}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "000003", 0x4b, 0x3a, 0x0, @empty, @mcast2, {[@routing={0x0, 0x2, 0x0, 0x0, 0x0, [@empty]}], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x0, "ee7b615d"}, {}, {0x2b, 0x3, "6f8c008275021d683910c309293188a7c747eb2278d2794784"}]}}}}}, 0x81)

[ 2263.108823][T22626] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'.
13:45:48 executing program 4:
mount$binderfs(&(0x7f0000004580), 0x0, 0x0, 0x0, 0x0)

13:45:48 executing program 2:
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
syz_genetlink_get_family_id$tipc(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$NFT_BATCH(r1, &(0x7f00000015c0)={&(0x7f0000000300), 0xc, &(0x7f0000001580)={&(0x7f00000014c0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_PAYLOAD_CSUM_OFFSET={0x8, 0x7, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_CHAIN_ID={0x8}]}, @NFT_MSG_DELSETELEM={0x1c, 0xe, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}]}], {0x14}}, 0x94}, 0x1, 0x0, 0x0, 0x1}, 0x1)
getsockname$packet(0xffffffffffffffff, &(0x7f0000001340), &(0x7f0000001380)=0x14)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r1, 0x0, 0x0)
sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, 0x0, 0x0)
getsockname(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001400)={&(0x7f0000000140), 0xc, &(0x7f0000000340)={&(0x7f0000000f00)=@newqdisc={0x1b8, 0x24, 0x0, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0xc}, {0x10, 0xffff}, {0xf, 0xfff2}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_RATE={0x6, 0x5, {0x8}}, @qdisc_kind_options=@q_choke={{0xa}, {0x18, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x4e0, 0x2, 0x6, 0x0, 0x1e, 0x2}}]}}, @qdisc_kind_options=@q_codel={{0xa}, {0x54, 0x2, [@TCA_CODEL_TARGET={0x8}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x4}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_LIMIT={0x8, 0x2, 0x2}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x80}, @TCA_CODEL_TARGET={0x8, 0x1, 0xb9}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_INTERVAL={0x8, 0x3, 0x7}, @TCA_CODEL_LIMIT={0x8, 0x2, 0x5}]}}, @TCA_STAB={0xf8, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x8, 0xc000, 0x9, 0x1, 0x80000001, 0x4, 0xa}}, {0x18, 0x2, [0x3, 0x4, 0x3, 0xff, 0x200, 0xfe01, 0x7, 0x8, 0x0, 0x2]}}, {{0x1c, 0x1, {0x0, 0x20, 0x1, 0xfc000, 0x1}}, {0x4}}, {{0x1c, 0x1, {0x3, 0x11, 0x100, 0x5, 0x0, 0x2dd, 0x7fff, 0x4}}, {0xc, 0x2, [0x6, 0x100, 0x2, 0x71]}}, {{0x1c, 0x1, {0x0, 0x40, 0x5, 0x3, 0x2}}, {0x4}}, {{0x1c, 0x1, {0x4, 0x8, 0x1ff, 0x3ff, 0x2, 0x5, 0x9, 0x5}}, {0xe, 0x2, [0x1, 0x1, 0xb41, 0x0, 0x8]}}, {{0x1c, 0x1, {0x9, 0x3f, 0x4, 0x3, 0x0, 0x4, 0x9, 0x5}}, {0xe, 0x2, [0x0, 0x0, 0x5ca, 0xfff, 0xfffb]}}]}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x81}]}, 0x1b8}, 0x1, 0x0, 0x0, 0x20000110}, 0x800)
connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10)
writev(r2, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1)
recvmmsg(r2, &(0x7f0000003e40)=[{{0x0, 0x3, 0x0, 0x0, &(0x7f00000035c0)=""/241, 0xf1}}, {{&(0x7f00000036c0)=@un=@abs, 0x80, &(0x7f0000003780)=[{&(0x7f0000003740)=""/4, 0x7ffff}], 0x1, &(0x7f00000037c0)=""/236, 0xec}}, {{0x0, 0x0, &(0x7f0000003bc0)=[{0x0, 0xe00000000000000}, {&(0x7f0000003a00)=""/190, 0xbe}, {&(0x7f0000003ac0)=""/131, 0x83}, {0x0}], 0x4, &(0x7f0000003c00)=""/73, 0x49}}, {{&(0x7f0000003c80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, 0x0, 0x0, &(0x7f0000003e00)=""/48, 0x30}}], 0x4, 0x40000121, 0x0)
shutdown(r2, 0x0)

13:45:48 executing program 4:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x275a, 0x0)
write(r1, &(0x7f0000000200)="993e483cb18ec31a9cd7989ac541efcb16a2d3496435241fbe282f28409284d475c127168c51a3e760b2e3976c1ec752c77fbe3f33611402211c81e4ca19dcf6841831819e9933323483aec8ac78a21c01b3", 0x52)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x800001, 0x28011, r1, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'veth1_macvtap\x00'})
io_submit(0x0, 0x0, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
pread64(r0, &(0x7f0000000440)=""/126, 0x7e, 0x0)
close(r0)
ioctl$sock_inet_SIOCSIFADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', {0x2, 0x0, @broadcast}})

13:45:48 executing program 2:
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
syz_genetlink_get_family_id$tipc(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$NFT_BATCH(r1, &(0x7f00000015c0)={&(0x7f0000000300), 0xc, &(0x7f0000001580)={&(0x7f00000014c0)={{0x14}, [@NFT_MSG_NEWRULE={0x28, 0x6, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}]}, @NFT_MSG_DELSETELEM={0x1c, 0xe, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}]}], {0x14}}, 0x6c}, 0x1, 0x0, 0x0, 0x1}, 0x1)
getsockname$packet(0xffffffffffffffff, &(0x7f0000001340), &(0x7f0000001380)=0x14)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r1, 0x0, 0x0)
sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, 0x0, 0x0)
getsockname(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001400)={&(0x7f0000000140), 0xc, &(0x7f0000000340)={&(0x7f0000000f00)=@newqdisc={0x1b8, 0x24, 0x0, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0xc}, {0x10, 0xffff}, {0xf, 0xfff2}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_RATE={0x6, 0x5, {0x8}}, @qdisc_kind_options=@q_choke={{0xa}, {0x18, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x4e0, 0x2, 0x6, 0x0, 0x1e, 0x2}}]}}, @qdisc_kind_options=@q_codel={{0xa}, {0x54, 0x2, [@TCA_CODEL_TARGET={0x8}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x4}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_LIMIT={0x8, 0x2, 0x2}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x80}, @TCA_CODEL_TARGET={0x8, 0x1, 0xb9}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_INTERVAL={0x8, 0x3, 0x7}, @TCA_CODEL_LIMIT={0x8, 0x2, 0x5}]}}, @TCA_STAB={0xf8, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x8, 0xc000, 0x9, 0x1, 0x80000001, 0x4, 0xa}}, {0x18, 0x2, [0x3, 0x4, 0x3, 0xff, 0x200, 0xfe01, 0x7, 0x8, 0x0, 0x2]}}, {{0x1c, 0x1, {0x0, 0x20, 0x1, 0xfc000, 0x1}}, {0x4}}, {{0x1c, 0x1, {0x3, 0x11, 0x100, 0x5, 0x0, 0x2dd, 0x7fff, 0x4}}, {0xc, 0x2, [0x6, 0x100, 0x2, 0x71]}}, {{0x1c, 0x1, {0x0, 0x40, 0x5, 0x3, 0x2}}, {0x4}}, {{0x1c, 0x1, {0x4, 0x8, 0x1ff, 0x3ff, 0x2, 0x5, 0x9, 0x5}}, {0xe, 0x2, [0x1, 0x1, 0xb41, 0x0, 0x8]}}, {{0x1c, 0x1, {0x9, 0x3f, 0x4, 0x3, 0x0, 0x4, 0x9, 0x5}}, {0xe, 0x2, [0x0, 0x0, 0x5ca, 0xfff, 0xfffb]}}]}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x81}]}, 0x1b8}, 0x1, 0x0, 0x0, 0x20000110}, 0x800)
connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10)
writev(r2, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1)
recvmmsg(r2, &(0x7f0000003e40)=[{{0x0, 0x3, 0x0, 0x0, &(0x7f00000035c0)=""/241, 0xf1}}, {{&(0x7f00000036c0)=@un=@abs, 0x80, &(0x7f0000003780)=[{&(0x7f0000003740)=""/4, 0x7ffff}], 0x1, &(0x7f00000037c0)=""/236, 0xec}}, {{0x0, 0x0, &(0x7f0000003bc0)=[{0x0, 0xe00000000000000}, {&(0x7f0000003a00)=""/190, 0xbe}, {&(0x7f0000003ac0)=""/131, 0x83}, {0x0}], 0x4, &(0x7f0000003c00)=""/73, 0x49}}, {{&(0x7f0000003c80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, 0x0, 0x0, &(0x7f0000003e00)=""/48, 0x30}}], 0x4, 0x40000121, 0x0)
shutdown(r2, 0x0)

13:45:49 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r1)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400ee5c99f8435ecde50a0412", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0)
r3 = socket(0x1, 0x803, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="50000000100001040000ff0f0000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e00000000180002800c0002001c0000001b000000060001000100000008000500", @ANYRES32=r4], 0x50}}, 0x0)
r5 = socket(0x1, 0x803, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080))
r7 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x1e}}]}}}, @IFLA_LINK={0x8, 0x5, r6}]}, 0x50}}, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = socket(0x1, 0x803, 0x0)
getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000540)=ANY=[@ANYBLOB="20000000110003040000007bb000000000000000", @ANYRES32=r10], 0x20}}, 0x0)

13:45:49 executing program 5:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000240)={@val={0x0, 0x86dd}, @val={0x5, 0x0, 0x0, 0x0, 0x54}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "000003", 0x4b, 0x3a, 0x0, @empty, @mcast2, {[@routing={0x0, 0x2, 0x0, 0x0, 0x0, [@empty]}], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x0, "ee7b615d"}, {}, {0x2b, 0x3, "6f8c008275021d683910c309293188a7c747eb2278d2794784"}]}}}}}, 0x81)

[ 2264.310780][T22656] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'.
13:45:50 executing program 4:
openat$null(0xffffffffffffff9c, &(0x7f0000000100), 0x373001, 0x0)

13:45:50 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
openat$procfs(0xffffffffffffff9c, &(0x7f000000c380)='/proc/crypto\x00', 0x0, 0x0)
read$FUSE(0xffffffffffffffff, &(0x7f0000000200)={0x2020}, 0x2020)
execve(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000280)=[0x0, 0x0], &(0x7f0000000380)=[&(0x7f00000002c0)='*$%}\xce*\x00', &(0x7f0000000300)='\x00'])

13:45:50 executing program 0:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
mkdir(&(0x7f00000002c0)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0)
r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x8b}, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r1, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10)
setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4)
connect$inet(r1, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10)
sendmmsg$inet(r1, &(0x7f0000002080)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[@ip_retopts={{0x10, 0x60000000}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @empty}}}], 0x30}}], 0x300, 0x0)
rt_sigtimedwait(&(0x7f0000000080)={[0x1]}, &(0x7f0000000340), &(0x7f0000000240)={0x0, 0x3938700}, 0x8)

13:45:50 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r1)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400ee5c99f8435ecde50a0412", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0)
r3 = socket(0x1, 0x803, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="50000000100001040000ff0f0000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e00000000180002800c0002001c0000001b000000060001000100000008000500", @ANYRES32=r4], 0x50}}, 0x0)
r5 = socket(0x1, 0x803, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080))
r7 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x1e}}]}}}, @IFLA_LINK={0x8, 0x5, r6}]}, 0x50}}, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = socket(0x1, 0x803, 0x0)
getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000540)=ANY=[@ANYBLOB="20000000110003040000007bb000000000000000", @ANYRES32=r10], 0x20}}, 0x0)

13:45:50 executing program 5:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000240)={@val={0x0, 0x86dd}, @val={0x5, 0x0, 0x0, 0x0, 0x54}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "000003", 0x4d, 0x3a, 0x0, @empty, @mcast2, {[@routing={0x0, 0x2, 0x0, 0x0, 0x0, [@empty]}], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x0, "ee7b615d"}, {}, {0x2b, 0x3, "6f8c008275021d683910c309293188a7c747eb2278d2794784"}, {}]}}}}}, 0x83)

13:45:50 executing program 2:
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
syz_genetlink_get_family_id$tipc(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$NFT_BATCH(r1, &(0x7f00000015c0)={&(0x7f0000000300), 0xc, &(0x7f0000001580)={&(0x7f00000014c0)={{0x14}, [@NFT_MSG_NEWRULE={0x28, 0x6, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}]}, @NFT_MSG_DELSETELEM={0x1c, 0xe, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}]}], {0x14}}, 0x6c}, 0x1, 0x0, 0x0, 0x1}, 0x1)
getsockname$packet(0xffffffffffffffff, &(0x7f0000001340), &(0x7f0000001380)=0x14)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r1, 0x0, 0x0)
sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, 0x0, 0x0)
getsockname(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001400)={&(0x7f0000000140), 0xc, &(0x7f0000000340)={&(0x7f0000000f00)=@newqdisc={0x1b8, 0x24, 0x0, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0xc}, {0x10, 0xffff}, {0xf, 0xfff2}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_RATE={0x6, 0x5, {0x8}}, @qdisc_kind_options=@q_choke={{0xa}, {0x18, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x4e0, 0x2, 0x6, 0x0, 0x1e, 0x2}}]}}, @qdisc_kind_options=@q_codel={{0xa}, {0x54, 0x2, [@TCA_CODEL_TARGET={0x8}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x4}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_LIMIT={0x8, 0x2, 0x2}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x80}, @TCA_CODEL_TARGET={0x8, 0x1, 0xb9}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_INTERVAL={0x8, 0x3, 0x7}, @TCA_CODEL_LIMIT={0x8, 0x2, 0x5}]}}, @TCA_STAB={0xf8, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x8, 0xc000, 0x9, 0x1, 0x80000001, 0x4, 0xa}}, {0x18, 0x2, [0x3, 0x4, 0x3, 0xff, 0x200, 0xfe01, 0x7, 0x8, 0x0, 0x2]}}, {{0x1c, 0x1, {0x0, 0x20, 0x1, 0xfc000, 0x1}}, {0x4}}, {{0x1c, 0x1, {0x3, 0x11, 0x100, 0x5, 0x0, 0x2dd, 0x7fff, 0x4}}, {0xc, 0x2, [0x6, 0x100, 0x2, 0x71]}}, {{0x1c, 0x1, {0x0, 0x40, 0x5, 0x3, 0x2}}, {0x4}}, {{0x1c, 0x1, {0x4, 0x8, 0x1ff, 0x3ff, 0x2, 0x5, 0x9, 0x5}}, {0xe, 0x2, [0x1, 0x1, 0xb41, 0x0, 0x8]}}, {{0x1c, 0x1, {0x9, 0x3f, 0x4, 0x3, 0x0, 0x4, 0x9, 0x5}}, {0xe, 0x2, [0x0, 0x0, 0x5ca, 0xfff, 0xfffb]}}]}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x81}]}, 0x1b8}, 0x1, 0x0, 0x0, 0x20000110}, 0x800)
connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10)
writev(r2, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1)
recvmmsg(r2, &(0x7f0000003e40)=[{{0x0, 0x3, 0x0, 0x0, &(0x7f00000035c0)=""/241, 0xf1}}, {{&(0x7f00000036c0)=@un=@abs, 0x80, &(0x7f0000003780)=[{&(0x7f0000003740)=""/4, 0x7ffff}], 0x1, &(0x7f00000037c0)=""/236, 0xec}}, {{0x0, 0x0, &(0x7f0000003bc0)=[{0x0, 0xe00000000000000}, {&(0x7f0000003a00)=""/190, 0xbe}, {&(0x7f0000003ac0)=""/131, 0x83}, {0x0}], 0x4, &(0x7f0000003c00)=""/73, 0x49}}, {{&(0x7f0000003c80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, 0x0, 0x0, &(0x7f0000003e00)=""/48, 0x30}}], 0x4, 0x40000121, 0x0)
shutdown(r2, 0x0)

13:45:50 executing program 4:
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/vmstat\x00', 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x4000012, r0, 0x0)

[ 2265.549049][T22667] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'.
13:45:50 executing program 2:
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
syz_genetlink_get_family_id$tipc(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$NFT_BATCH(r1, &(0x7f00000015c0)={&(0x7f0000000300), 0xc, &(0x7f0000001580)={&(0x7f00000014c0)={{0x14}, [@NFT_MSG_NEWRULE={0x28, 0x6, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}]}, @NFT_MSG_DELSETELEM={0x1c, 0xe, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}]}], {0x14}}, 0x6c}, 0x1, 0x0, 0x0, 0x1}, 0x1)
getsockname$packet(0xffffffffffffffff, &(0x7f0000001340), &(0x7f0000001380)=0x14)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r1, 0x0, 0x0)
sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, 0x0, 0x0)
getsockname(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001400)={&(0x7f0000000140), 0xc, &(0x7f0000000340)={&(0x7f0000000f00)=@newqdisc={0x1b8, 0x24, 0x0, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0xc}, {0x10, 0xffff}, {0xf, 0xfff2}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_RATE={0x6, 0x5, {0x8}}, @qdisc_kind_options=@q_choke={{0xa}, {0x18, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x4e0, 0x2, 0x6, 0x0, 0x1e, 0x2}}]}}, @qdisc_kind_options=@q_codel={{0xa}, {0x54, 0x2, [@TCA_CODEL_TARGET={0x8}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x4}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_LIMIT={0x8, 0x2, 0x2}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x80}, @TCA_CODEL_TARGET={0x8, 0x1, 0xb9}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_INTERVAL={0x8, 0x3, 0x7}, @TCA_CODEL_LIMIT={0x8, 0x2, 0x5}]}}, @TCA_STAB={0xf8, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x8, 0xc000, 0x9, 0x1, 0x80000001, 0x4, 0xa}}, {0x18, 0x2, [0x3, 0x4, 0x3, 0xff, 0x200, 0xfe01, 0x7, 0x8, 0x0, 0x2]}}, {{0x1c, 0x1, {0x0, 0x20, 0x1, 0xfc000, 0x1}}, {0x4}}, {{0x1c, 0x1, {0x3, 0x11, 0x100, 0x5, 0x0, 0x2dd, 0x7fff, 0x4}}, {0xc, 0x2, [0x6, 0x100, 0x2, 0x71]}}, {{0x1c, 0x1, {0x0, 0x40, 0x5, 0x3, 0x2}}, {0x4}}, {{0x1c, 0x1, {0x4, 0x8, 0x1ff, 0x3ff, 0x2, 0x5, 0x9, 0x5}}, {0xe, 0x2, [0x1, 0x1, 0xb41, 0x0, 0x8]}}, {{0x1c, 0x1, {0x9, 0x3f, 0x4, 0x3, 0x0, 0x4, 0x9, 0x5}}, {0xe, 0x2, [0x0, 0x0, 0x5ca, 0xfff, 0xfffb]}}]}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x81}]}, 0x1b8}, 0x1, 0x0, 0x0, 0x20000110}, 0x800)
connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10)
writev(r2, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1)
recvmmsg(r2, &(0x7f0000003e40)=[{{0x0, 0x3, 0x0, 0x0, &(0x7f00000035c0)=""/241, 0xf1}}, {{&(0x7f00000036c0)=@un=@abs, 0x80, &(0x7f0000003780)=[{&(0x7f0000003740)=""/4, 0x7ffff}], 0x1, &(0x7f00000037c0)=""/236, 0xec}}, {{0x0, 0x0, &(0x7f0000003bc0)=[{0x0, 0xe00000000000000}, {&(0x7f0000003a00)=""/190, 0xbe}, {&(0x7f0000003ac0)=""/131, 0x83}, {0x0}], 0x4, &(0x7f0000003c00)=""/73, 0x49}}, {{&(0x7f0000003c80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, 0x0, 0x0, &(0x7f0000003e00)=""/48, 0x30}}], 0x4, 0x40000121, 0x0)
shutdown(r2, 0x0)

13:45:50 executing program 4:
semctl$IPC_RMID(0x0, 0x0, 0x3)

13:45:51 executing program 2:
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
syz_genetlink_get_family_id$tipc(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$NFT_BATCH(r1, &(0x7f00000015c0)={&(0x7f0000000300), 0xc, &(0x7f0000001580)={&(0x7f00000014c0)={{0x14}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x4}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}]}, @NFT_MSG_DELSETELEM={0x1c, 0xe, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}]}], {0x14}}, 0x70}, 0x1, 0x0, 0x0, 0x1}, 0x1)
getsockname$packet(0xffffffffffffffff, &(0x7f0000001340), &(0x7f0000001380)=0x14)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r1, 0x0, 0x0)
sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, 0x0, 0x0)
getsockname(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001400)={&(0x7f0000000140), 0xc, &(0x7f0000000340)={&(0x7f0000000f00)=@newqdisc={0x1b8, 0x24, 0x0, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0xc}, {0x10, 0xffff}, {0xf, 0xfff2}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_RATE={0x6, 0x5, {0x8}}, @qdisc_kind_options=@q_choke={{0xa}, {0x18, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x4e0, 0x2, 0x6, 0x0, 0x1e, 0x2}}]}}, @qdisc_kind_options=@q_codel={{0xa}, {0x54, 0x2, [@TCA_CODEL_TARGET={0x8}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x4}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_LIMIT={0x8, 0x2, 0x2}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x80}, @TCA_CODEL_TARGET={0x8, 0x1, 0xb9}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_INTERVAL={0x8, 0x3, 0x7}, @TCA_CODEL_LIMIT={0x8, 0x2, 0x5}]}}, @TCA_STAB={0xf8, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x8, 0xc000, 0x9, 0x1, 0x80000001, 0x4, 0xa}}, {0x18, 0x2, [0x3, 0x4, 0x3, 0xff, 0x200, 0xfe01, 0x7, 0x8, 0x0, 0x2]}}, {{0x1c, 0x1, {0x0, 0x20, 0x1, 0xfc000, 0x1}}, {0x4}}, {{0x1c, 0x1, {0x3, 0x11, 0x100, 0x5, 0x0, 0x2dd, 0x7fff, 0x4}}, {0xc, 0x2, [0x6, 0x100, 0x2, 0x71]}}, {{0x1c, 0x1, {0x0, 0x40, 0x5, 0x3, 0x2}}, {0x4}}, {{0x1c, 0x1, {0x4, 0x8, 0x1ff, 0x3ff, 0x2, 0x5, 0x9, 0x5}}, {0xe, 0x2, [0x1, 0x1, 0xb41, 0x0, 0x8]}}, {{0x1c, 0x1, {0x9, 0x3f, 0x4, 0x3, 0x0, 0x4, 0x9, 0x5}}, {0xe, 0x2, [0x0, 0x0, 0x5ca, 0xfff, 0xfffb]}}]}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x81}]}, 0x1b8}, 0x1, 0x0, 0x0, 0x20000110}, 0x800)
connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10)
writev(r2, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1)
recvmmsg(r2, &(0x7f0000003e40)=[{{0x0, 0x3, 0x0, 0x0, &(0x7f00000035c0)=""/241, 0xf1}}, {{&(0x7f00000036c0)=@un=@abs, 0x80, &(0x7f0000003780)=[{&(0x7f0000003740)=""/4, 0x7ffff}], 0x1, &(0x7f00000037c0)=""/236, 0xec}}, {{0x0, 0x0, &(0x7f0000003bc0)=[{0x0, 0xe00000000000000}, {&(0x7f0000003a00)=""/190, 0xbe}, {&(0x7f0000003ac0)=""/131, 0x83}, {0x0}], 0x4, &(0x7f0000003c00)=""/73, 0x49}}, {{&(0x7f0000003c80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, 0x0, 0x0, &(0x7f0000003e00)=""/48, 0x30}}], 0x4, 0x40000121, 0x0)
shutdown(r2, 0x0)

13:45:51 executing program 2:
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
syz_genetlink_get_family_id$tipc(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$NFT_BATCH(r1, &(0x7f00000015c0)={&(0x7f0000000300), 0xc, &(0x7f0000001580)={&(0x7f00000014c0)={{0x14}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x4}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}]}, @NFT_MSG_DELSETELEM={0x1c, 0xe, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}]}], {0x14}}, 0x70}, 0x1, 0x0, 0x0, 0x1}, 0x1)
getsockname$packet(0xffffffffffffffff, &(0x7f0000001340), &(0x7f0000001380)=0x14)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r1, 0x0, 0x0)
sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, 0x0, 0x0)
getsockname(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001400)={&(0x7f0000000140), 0xc, &(0x7f0000000340)={&(0x7f0000000f00)=@newqdisc={0x1b8, 0x24, 0x0, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0xc}, {0x10, 0xffff}, {0xf, 0xfff2}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_RATE={0x6, 0x5, {0x8}}, @qdisc_kind_options=@q_choke={{0xa}, {0x18, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x4e0, 0x2, 0x6, 0x0, 0x1e, 0x2}}]}}, @qdisc_kind_options=@q_codel={{0xa}, {0x54, 0x2, [@TCA_CODEL_TARGET={0x8}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x4}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_LIMIT={0x8, 0x2, 0x2}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x80}, @TCA_CODEL_TARGET={0x8, 0x1, 0xb9}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_INTERVAL={0x8, 0x3, 0x7}, @TCA_CODEL_LIMIT={0x8, 0x2, 0x5}]}}, @TCA_STAB={0xf8, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x8, 0xc000, 0x9, 0x1, 0x80000001, 0x4, 0xa}}, {0x18, 0x2, [0x3, 0x4, 0x3, 0xff, 0x200, 0xfe01, 0x7, 0x8, 0x0, 0x2]}}, {{0x1c, 0x1, {0x0, 0x20, 0x1, 0xfc000, 0x1}}, {0x4}}, {{0x1c, 0x1, {0x3, 0x11, 0x100, 0x5, 0x0, 0x2dd, 0x7fff, 0x4}}, {0xc, 0x2, [0x6, 0x100, 0x2, 0x71]}}, {{0x1c, 0x1, {0x0, 0x40, 0x5, 0x3, 0x2}}, {0x4}}, {{0x1c, 0x1, {0x4, 0x8, 0x1ff, 0x3ff, 0x2, 0x5, 0x9, 0x5}}, {0xe, 0x2, [0x1, 0x1, 0xb41, 0x0, 0x8]}}, {{0x1c, 0x1, {0x9, 0x3f, 0x4, 0x3, 0x0, 0x4, 0x9, 0x5}}, {0xe, 0x2, [0x0, 0x0, 0x5ca, 0xfff, 0xfffb]}}]}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x81}]}, 0x1b8}, 0x1, 0x0, 0x0, 0x20000110}, 0x800)
connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10)
writev(r2, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1)
recvmmsg(r2, &(0x7f0000003e40)=[{{0x0, 0x3, 0x0, 0x0, &(0x7f00000035c0)=""/241, 0xf1}}, {{&(0x7f00000036c0)=@un=@abs, 0x80, &(0x7f0000003780)=[{&(0x7f0000003740)=""/4, 0x7ffff}], 0x1, &(0x7f00000037c0)=""/236, 0xec}}, {{0x0, 0x0, &(0x7f0000003bc0)=[{0x0, 0xe00000000000000}, {&(0x7f0000003a00)=""/190, 0xbe}, {&(0x7f0000003ac0)=""/131, 0x83}, {0x0}], 0x4, &(0x7f0000003c00)=""/73, 0x49}}, {{&(0x7f0000003c80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, 0x0, 0x0, &(0x7f0000003e00)=""/48, 0x30}}], 0x4, 0x40000121, 0x0)
shutdown(r2, 0x0)

13:45:51 executing program 4:
bpf$BPF_PROG_QUERY(0x9, &(0x7f0000000100)={@ifindex, 0x0, 0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)

13:45:51 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r1)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400ee5c99f8435ecde50a0412", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0)
r3 = socket(0x1, 0x803, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="50000000100001040000ff0f0000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e00000000180002800c0002001c0000001b000000060001000100000008000500", @ANYRES32=r4], 0x50}}, 0x0)
r5 = socket(0x1, 0x803, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080))
r7 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x1e}}]}}}, @IFLA_LINK={0x8, 0x5, r6}]}, 0x50}}, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = socket(0x1, 0x803, 0x0)
getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000540)=ANY=[@ANYBLOB="20000000110003040000007bb000000000000000", @ANYRES32=r10], 0x20}}, 0x0)

[ 2266.768590][T22696] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'.
13:45:52 executing program 5:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000240)={@val={0x0, 0x86dd}, @val={0x5, 0x0, 0x0, 0x0, 0x54}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "000003", 0x4d, 0x3a, 0x0, @empty, @mcast2, {[@routing={0x0, 0x2, 0x0, 0x0, 0x0, [@empty]}], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x0, "ee7b615d"}, {}, {0x2b, 0x3, "6f8c008275021d683910c309293188a7c747eb2278d2794784"}, {}]}}}}}, 0x83)

13:45:52 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="44000000050703"], 0x44}}, 0x0)

13:45:52 executing program 2:
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
syz_genetlink_get_family_id$tipc(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$NFT_BATCH(r1, &(0x7f00000015c0)={&(0x7f0000000300), 0xc, &(0x7f0000001580)={&(0x7f00000014c0)={{0x14}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x4}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}]}, @NFT_MSG_DELSETELEM={0x1c, 0xe, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}]}], {0x14}}, 0x70}, 0x1, 0x0, 0x0, 0x1}, 0x1)
getsockname$packet(0xffffffffffffffff, &(0x7f0000001340), &(0x7f0000001380)=0x14)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r1, 0x0, 0x0)
sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, 0x0, 0x0)
getsockname(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001400)={&(0x7f0000000140), 0xc, &(0x7f0000000340)={&(0x7f0000000f00)=@newqdisc={0x1b8, 0x24, 0x0, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0xc}, {0x10, 0xffff}, {0xf, 0xfff2}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_RATE={0x6, 0x5, {0x8}}, @qdisc_kind_options=@q_choke={{0xa}, {0x18, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x4e0, 0x2, 0x6, 0x0, 0x1e, 0x2}}]}}, @qdisc_kind_options=@q_codel={{0xa}, {0x54, 0x2, [@TCA_CODEL_TARGET={0x8}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x4}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_LIMIT={0x8, 0x2, 0x2}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x80}, @TCA_CODEL_TARGET={0x8, 0x1, 0xb9}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_INTERVAL={0x8, 0x3, 0x7}, @TCA_CODEL_LIMIT={0x8, 0x2, 0x5}]}}, @TCA_STAB={0xf8, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x8, 0xc000, 0x9, 0x1, 0x80000001, 0x4, 0xa}}, {0x18, 0x2, [0x3, 0x4, 0x3, 0xff, 0x200, 0xfe01, 0x7, 0x8, 0x0, 0x2]}}, {{0x1c, 0x1, {0x0, 0x20, 0x1, 0xfc000, 0x1}}, {0x4}}, {{0x1c, 0x1, {0x3, 0x11, 0x100, 0x5, 0x0, 0x2dd, 0x7fff, 0x4}}, {0xc, 0x2, [0x6, 0x100, 0x2, 0x71]}}, {{0x1c, 0x1, {0x0, 0x40, 0x5, 0x3, 0x2}}, {0x4}}, {{0x1c, 0x1, {0x4, 0x8, 0x1ff, 0x3ff, 0x2, 0x5, 0x9, 0x5}}, {0xe, 0x2, [0x1, 0x1, 0xb41, 0x0, 0x8]}}, {{0x1c, 0x1, {0x9, 0x3f, 0x4, 0x3, 0x0, 0x4, 0x9, 0x5}}, {0xe, 0x2, [0x0, 0x0, 0x5ca, 0xfff, 0xfffb]}}]}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x81}]}, 0x1b8}, 0x1, 0x0, 0x0, 0x20000110}, 0x800)
connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10)
writev(r2, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1)
recvmmsg(r2, &(0x7f0000003e40)=[{{0x0, 0x3, 0x0, 0x0, &(0x7f00000035c0)=""/241, 0xf1}}, {{&(0x7f00000036c0)=@un=@abs, 0x80, &(0x7f0000003780)=[{&(0x7f0000003740)=""/4, 0x7ffff}], 0x1, &(0x7f00000037c0)=""/236, 0xec}}, {{0x0, 0x0, &(0x7f0000003bc0)=[{0x0, 0xe00000000000000}, {&(0x7f0000003a00)=""/190, 0xbe}, {&(0x7f0000003ac0)=""/131, 0x83}, {0x0}], 0x4, &(0x7f0000003c00)=""/73, 0x49}}, {{&(0x7f0000003c80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, 0x0, 0x0, &(0x7f0000003e00)=""/48, 0x30}}], 0x4, 0x40000121, 0x0)
shutdown(r2, 0x0)

13:45:52 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB='T'], 0x54}}, 0x0)

13:45:52 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f000000c380)='/proc/crypto\x00', 0x0, 0x0)
read$FUSE(r3, 0x0, 0x0)
execve(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000280)=[0x0, 0x0], &(0x7f0000000380)=[&(0x7f00000002c0)='*$%}\xce*\x00', &(0x7f0000000300)='\x00'])

13:45:52 executing program 3:
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r0)
getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x1, 0x803, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="50000000100001040000ff0f0000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e00000000180002800c0002001c0000001b000000060001000100000008000500", @ANYRES32=r3], 0x50}}, 0x0)
r4 = socket(0x1, 0x803, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080))
r6 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x1e}}]}}}, @IFLA_LINK={0x8, 0x5, r5}]}, 0x50}}, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
r8 = socket(0x1, 0x803, 0x0)
getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000540)=ANY=[@ANYBLOB="20000000110003040000007bb000000000000000", @ANYRES32=r9], 0x20}}, 0x0)

13:45:52 executing program 4:
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x6, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x8}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x90)

13:45:52 executing program 3:
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r0)
getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x1, 0x803, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="50000000100001040000ff0f0000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e00000000180002800c0002001c0000001b000000060001000100000008000500", @ANYRES32=r3], 0x50}}, 0x0)
r4 = socket(0x1, 0x803, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080))
r6 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x1e}}]}}}, @IFLA_LINK={0x8, 0x5, r5}]}, 0x50}}, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
r8 = socket(0x1, 0x803, 0x0)
getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000540)=ANY=[@ANYBLOB="20000000110003040000007bb000000000000000", @ANYRES32=r9], 0x20}}, 0x0)

13:45:52 executing program 2:
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
syz_genetlink_get_family_id$tipc(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$NFT_BATCH(r1, &(0x7f00000015c0)={&(0x7f0000000300), 0xc, &(0x7f0000001580)={&(0x7f00000014c0)={{0x14}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}]}, @NFT_MSG_DELSETELEM={0x1c, 0xe, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}]}], {0x14}}, 0x8c}, 0x1, 0x0, 0x0, 0x1}, 0x1)
getsockname$packet(0xffffffffffffffff, &(0x7f0000001340), &(0x7f0000001380)=0x14)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r1, 0x0, 0x0)
sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, 0x0, 0x0)
getsockname(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001400)={&(0x7f0000000140), 0xc, &(0x7f0000000340)={&(0x7f0000000f00)=@newqdisc={0x1b8, 0x24, 0x0, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0xc}, {0x10, 0xffff}, {0xf, 0xfff2}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_RATE={0x6, 0x5, {0x8}}, @qdisc_kind_options=@q_choke={{0xa}, {0x18, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x4e0, 0x2, 0x6, 0x0, 0x1e, 0x2}}]}}, @qdisc_kind_options=@q_codel={{0xa}, {0x54, 0x2, [@TCA_CODEL_TARGET={0x8}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x4}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_LIMIT={0x8, 0x2, 0x2}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x80}, @TCA_CODEL_TARGET={0x8, 0x1, 0xb9}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_INTERVAL={0x8, 0x3, 0x7}, @TCA_CODEL_LIMIT={0x8, 0x2, 0x5}]}}, @TCA_STAB={0xf8, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x8, 0xc000, 0x9, 0x1, 0x80000001, 0x4, 0xa}}, {0x18, 0x2, [0x3, 0x4, 0x3, 0xff, 0x200, 0xfe01, 0x7, 0x8, 0x0, 0x2]}}, {{0x1c, 0x1, {0x0, 0x20, 0x1, 0xfc000, 0x1}}, {0x4}}, {{0x1c, 0x1, {0x3, 0x11, 0x100, 0x5, 0x0, 0x2dd, 0x7fff, 0x4}}, {0xc, 0x2, [0x6, 0x100, 0x2, 0x71]}}, {{0x1c, 0x1, {0x0, 0x40, 0x5, 0x3, 0x2}}, {0x4}}, {{0x1c, 0x1, {0x4, 0x8, 0x1ff, 0x3ff, 0x2, 0x5, 0x9, 0x5}}, {0xe, 0x2, [0x1, 0x1, 0xb41, 0x0, 0x8]}}, {{0x1c, 0x1, {0x9, 0x3f, 0x4, 0x3, 0x0, 0x4, 0x9, 0x5}}, {0xe, 0x2, [0x0, 0x0, 0x5ca, 0xfff, 0xfffb]}}]}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x81}]}, 0x1b8}, 0x1, 0x0, 0x0, 0x20000110}, 0x800)
connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10)
writev(r2, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1)
recvmmsg(r2, &(0x7f0000003e40)=[{{0x0, 0x3, 0x0, 0x0, &(0x7f00000035c0)=""/241, 0xf1}}, {{&(0x7f00000036c0)=@un=@abs, 0x80, &(0x7f0000003780)=[{&(0x7f0000003740)=""/4, 0x7ffff}], 0x1, &(0x7f00000037c0)=""/236, 0xec}}, {{0x0, 0x0, &(0x7f0000003bc0)=[{0x0, 0xe00000000000000}, {&(0x7f0000003a00)=""/190, 0xbe}, {&(0x7f0000003ac0)=""/131, 0x83}, {0x0}], 0x4, &(0x7f0000003c00)=""/73, 0x49}}, {{&(0x7f0000003c80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, 0x0, 0x0, &(0x7f0000003e00)=""/48, 0x30}}], 0x4, 0x40000121, 0x0)
shutdown(r2, 0x0)

13:45:52 executing program 5:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000240)={@val={0x0, 0x86dd}, @val={0x5, 0x0, 0x0, 0x0, 0x54}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "000003", 0x4d, 0x3a, 0x0, @empty, @mcast2, {[@routing={0x0, 0x2, 0x0, 0x0, 0x0, [@empty]}], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x0, "ee7b615d"}, {}, {0x2b, 0x3, "6f8c008275021d683910c309293188a7c747eb2278d2794784"}, {}]}}}}}, 0x83)

13:45:52 executing program 4:
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
ioctl$SIOCGIFMTU(r0, 0x40047459, 0x0)

13:45:52 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_WOWLAN(r0, &(0x7f00000000c0)={0xfffffffffffffffe, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x28, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void, @val={0xc}}}}, 0x28}}, 0x0)

13:45:52 executing program 2:
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
syz_genetlink_get_family_id$tipc(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$NFT_BATCH(r1, &(0x7f00000015c0)={&(0x7f0000000300), 0xc, &(0x7f0000001580)={&(0x7f00000014c0)={{0x14}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}]}, @NFT_MSG_DELSETELEM={0x1c, 0xe, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}]}], {0x14}}, 0x8c}, 0x1, 0x0, 0x0, 0x1}, 0x1)
getsockname$packet(0xffffffffffffffff, &(0x7f0000001340), &(0x7f0000001380)=0x14)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r1, 0x0, 0x0)
sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, 0x0, 0x0)
getsockname(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001400)={&(0x7f0000000140), 0xc, &(0x7f0000000340)={&(0x7f0000000f00)=@newqdisc={0x1b8, 0x24, 0x0, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0xc}, {0x10, 0xffff}, {0xf, 0xfff2}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_RATE={0x6, 0x5, {0x8}}, @qdisc_kind_options=@q_choke={{0xa}, {0x18, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x4e0, 0x2, 0x6, 0x0, 0x1e, 0x2}}]}}, @qdisc_kind_options=@q_codel={{0xa}, {0x54, 0x2, [@TCA_CODEL_TARGET={0x8}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x4}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_LIMIT={0x8, 0x2, 0x2}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x80}, @TCA_CODEL_TARGET={0x8, 0x1, 0xb9}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_INTERVAL={0x8, 0x3, 0x7}, @TCA_CODEL_LIMIT={0x8, 0x2, 0x5}]}}, @TCA_STAB={0xf8, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x8, 0xc000, 0x9, 0x1, 0x80000001, 0x4, 0xa}}, {0x18, 0x2, [0x3, 0x4, 0x3, 0xff, 0x200, 0xfe01, 0x7, 0x8, 0x0, 0x2]}}, {{0x1c, 0x1, {0x0, 0x20, 0x1, 0xfc000, 0x1}}, {0x4}}, {{0x1c, 0x1, {0x3, 0x11, 0x100, 0x5, 0x0, 0x2dd, 0x7fff, 0x4}}, {0xc, 0x2, [0x6, 0x100, 0x2, 0x71]}}, {{0x1c, 0x1, {0x0, 0x40, 0x5, 0x3, 0x2}}, {0x4}}, {{0x1c, 0x1, {0x4, 0x8, 0x1ff, 0x3ff, 0x2, 0x5, 0x9, 0x5}}, {0xe, 0x2, [0x1, 0x1, 0xb41, 0x0, 0x8]}}, {{0x1c, 0x1, {0x9, 0x3f, 0x4, 0x3, 0x0, 0x4, 0x9, 0x5}}, {0xe, 0x2, [0x0, 0x0, 0x5ca, 0xfff, 0xfffb]}}]}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x81}]}, 0x1b8}, 0x1, 0x0, 0x0, 0x20000110}, 0x800)
connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10)
writev(r2, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1)
recvmmsg(r2, &(0x7f0000003e40)=[{{0x0, 0x3, 0x0, 0x0, &(0x7f00000035c0)=""/241, 0xf1}}, {{&(0x7f00000036c0)=@un=@abs, 0x80, &(0x7f0000003780)=[{&(0x7f0000003740)=""/4, 0x7ffff}], 0x1, &(0x7f00000037c0)=""/236, 0xec}}, {{0x0, 0x0, &(0x7f0000003bc0)=[{0x0, 0xe00000000000000}, {&(0x7f0000003a00)=""/190, 0xbe}, {&(0x7f0000003ac0)=""/131, 0x83}, {0x0}], 0x4, &(0x7f0000003c00)=""/73, 0x49}}, {{&(0x7f0000003c80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, 0x0, 0x0, &(0x7f0000003e00)=""/48, 0x30}}], 0x4, 0x40000121, 0x0)
shutdown(r2, 0x0)

13:45:52 executing program 3:
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r0)
getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x1, 0x803, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="50000000100001040000ff0f0000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e00000000180002800c0002001c0000001b000000060001000100000008000500", @ANYRES32=r3], 0x50}}, 0x0)
r4 = socket(0x1, 0x803, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080))
r6 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x1e}}]}}}, @IFLA_LINK={0x8, 0x5, r5}]}, 0x50}}, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
r8 = socket(0x1, 0x803, 0x0)
getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000540)=ANY=[@ANYBLOB="20000000110003040000007bb000000000000000", @ANYRES32=r9], 0x20}}, 0x0)

13:45:53 executing program 4:
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000100)={@ifindex, 0x26, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)

13:45:53 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f000000c380)='/proc/crypto\x00', 0x0, 0x0)
read$FUSE(r3, 0x0, 0x0)
execve(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000280)=[0x0, 0x0], &(0x7f0000000380)=[&(0x7f00000002c0)='*$%}\xce*\x00', &(0x7f0000000300)='\x00'])

13:45:53 executing program 0:
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x9, 0x3, &(0x7f0000000000)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x90)

13:45:53 executing program 5:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000240)={@val={0x0, 0x86dd}, @val={0x5, 0x0, 0x0, 0x0, 0x54}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "000003", 0xef, 0x3a, 0x0, @empty, @mcast2, {[@routing={0x0, 0x2, 0x0, 0x0, 0x0, [@empty]}], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x0, "ee7b615d"}, {}, {0x2b, 0x3, "6f8c008275021d683910c309293188a7c747eb2278d2794784"}, {0x0, 0x14, "4429118927041312255133e4d2b8b863b5f5b4ace38952e94c581c85d2d86844f548415db4dbf1992868a2e15095b531ce55d4620ec637afdcc990a4d6bfecb289917d24b31a2ddeb64383b176b823cc203ec1927487b7a00d6a3446cf7db79e14b2206d882c28611fa4d8289337cd75b4688120c73a2710947b908fde68a05a0777a170a14e85c7849462b3f5c3152cf0f3d91c5db93dc4d8f9e6b53708650dc375"}]}}}}}, 0x125)

13:45:53 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r1)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400ee5c99f8435ecde50a0412", @ANYRES32, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket(0x1, 0x803, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="50000000100001040000ff0f0000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e00000000180002800c0002001c0000001b000000060001000100000008000500", @ANYRES32=r4], 0x50}}, 0x0)
r5 = socket(0x1, 0x803, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080))
r7 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x1e}}]}}}, @IFLA_LINK={0x8, 0x5, r6}]}, 0x50}}, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = socket(0x1, 0x803, 0x0)
getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000540)=ANY=[@ANYBLOB="20000000110003040000007bb000000000000000", @ANYRES32=r10], 0x20}}, 0x0)

13:45:53 executing program 2:
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
syz_genetlink_get_family_id$tipc(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$NFT_BATCH(r1, &(0x7f00000015c0)={&(0x7f0000000300), 0xc, &(0x7f0000001580)={&(0x7f00000014c0)={{0x14}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}]}, @NFT_MSG_DELSETELEM={0x1c, 0xe, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}]}], {0x14}}, 0x8c}, 0x1, 0x0, 0x0, 0x1}, 0x1)
getsockname$packet(0xffffffffffffffff, &(0x7f0000001340), &(0x7f0000001380)=0x14)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r1, 0x0, 0x0)
sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, 0x0, 0x0)
getsockname(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001400)={&(0x7f0000000140), 0xc, &(0x7f0000000340)={&(0x7f0000000f00)=@newqdisc={0x1b8, 0x24, 0x0, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0xc}, {0x10, 0xffff}, {0xf, 0xfff2}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_RATE={0x6, 0x5, {0x8}}, @qdisc_kind_options=@q_choke={{0xa}, {0x18, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x4e0, 0x2, 0x6, 0x0, 0x1e, 0x2}}]}}, @qdisc_kind_options=@q_codel={{0xa}, {0x54, 0x2, [@TCA_CODEL_TARGET={0x8}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x4}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_LIMIT={0x8, 0x2, 0x2}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x80}, @TCA_CODEL_TARGET={0x8, 0x1, 0xb9}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_INTERVAL={0x8, 0x3, 0x7}, @TCA_CODEL_LIMIT={0x8, 0x2, 0x5}]}}, @TCA_STAB={0xf8, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x8, 0xc000, 0x9, 0x1, 0x80000001, 0x4, 0xa}}, {0x18, 0x2, [0x3, 0x4, 0x3, 0xff, 0x200, 0xfe01, 0x7, 0x8, 0x0, 0x2]}}, {{0x1c, 0x1, {0x0, 0x20, 0x1, 0xfc000, 0x1}}, {0x4}}, {{0x1c, 0x1, {0x3, 0x11, 0x100, 0x5, 0x0, 0x2dd, 0x7fff, 0x4}}, {0xc, 0x2, [0x6, 0x100, 0x2, 0x71]}}, {{0x1c, 0x1, {0x0, 0x40, 0x5, 0x3, 0x2}}, {0x4}}, {{0x1c, 0x1, {0x4, 0x8, 0x1ff, 0x3ff, 0x2, 0x5, 0x9, 0x5}}, {0xe, 0x2, [0x1, 0x1, 0xb41, 0x0, 0x8]}}, {{0x1c, 0x1, {0x9, 0x3f, 0x4, 0x3, 0x0, 0x4, 0x9, 0x5}}, {0xe, 0x2, [0x0, 0x0, 0x5ca, 0xfff, 0xfffb]}}]}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x81}]}, 0x1b8}, 0x1, 0x0, 0x0, 0x20000110}, 0x800)
connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10)
writev(r2, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1)
recvmmsg(r2, &(0x7f0000003e40)=[{{0x0, 0x3, 0x0, 0x0, &(0x7f00000035c0)=""/241, 0xf1}}, {{&(0x7f00000036c0)=@un=@abs, 0x80, &(0x7f0000003780)=[{&(0x7f0000003740)=""/4, 0x7ffff}], 0x1, &(0x7f00000037c0)=""/236, 0xec}}, {{0x0, 0x0, &(0x7f0000003bc0)=[{0x0, 0xe00000000000000}, {&(0x7f0000003a00)=""/190, 0xbe}, {&(0x7f0000003ac0)=""/131, 0x83}, {0x0}], 0x4, &(0x7f0000003c00)=""/73, 0x49}}, {{&(0x7f0000003c80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, 0x0, 0x0, &(0x7f0000003e00)=""/48, 0x30}}], 0x4, 0x40000121, 0x0)
shutdown(r2, 0x0)

13:45:53 executing program 4:
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x4, &(0x7f0000000080)=@framed={{}, [@func]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x8f)

13:45:54 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000007180)={0x0, 0x0, &(0x7f0000007140)={&(0x7f0000004c80)={0xff0, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0xd8, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8}]}, @TIPC_NLA_BEARER_NAME={0xe, 0x1, @l2={'eth', 0x3a, 'vlan1\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {0x14, 0x2, @in={0x2, 0x0, @dev}}}}, @TIPC_NLA_BEARER_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_DOMAIN={0x8}]}, @TIPC_NLA_MEDIA={0x20, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}]}]}, @TIPC_NLA_MEDIA={0x28, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_WIN={0x8}]}]}, @TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc}]}, @TIPC_NLA_MEDIA={0x20, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_LINK={0x54, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_WIN={0x8}]}]}, @TIPC_NLA_MON={0x4}, @TIPC_NLA_NODE={0xf4, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_REKEYING={0x8}, @TIPC_NLA_NODE_KEY={0x41, 0x4, {'gcm(aes)\x00', 0x19, "658a955a3609b0cfd622bc2ba5c4b883273a6da385e22074a9"}}, @TIPC_NLA_NODE_REKEYING={0x8}, @TIPC_NLA_NODE_KEY={0x49, 0x4, {'gcm(aes)\x00', 0x21, "cf38c59d305d2bb7ce3fdbfc4f10dc4bb96af445100e4594edb9239413cf675d46"}}, @TIPC_NLA_NODE_KEY={0x45, 0x4, {'gcm(aes)\x00', 0x1d, "04a363e043f1d6c1bc757e2ecddea13d37e1e511ba0063a32994f906b8"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}, @TIPC_NLA_NODE={0xd40, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0xd35, 0x3, "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"}]}]}, 0xff0}}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000007200), r0)

13:45:54 executing program 2:
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
syz_genetlink_get_family_id$tipc(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$NFT_BATCH(r1, &(0x7f00000015c0)={&(0x7f0000000300), 0xc, &(0x7f0000001580)={&(0x7f00000014c0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_PAYLOAD_CSUM_OFFSET={0x8}]}}}]}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}]}, @NFT_MSG_DELSETELEM={0x1c, 0xe, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}]}], {0x14}}, 0x94}, 0x1, 0x0, 0x0, 0x1}, 0x1)
getsockname$packet(0xffffffffffffffff, &(0x7f0000001340), &(0x7f0000001380)=0x14)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r1, 0x0, 0x0)
sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, 0x0, 0x0)
getsockname(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001400)={&(0x7f0000000140), 0xc, &(0x7f0000000340)={&(0x7f0000000f00)=@newqdisc={0x1b8, 0x24, 0x0, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0xc}, {0x10, 0xffff}, {0xf, 0xfff2}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_RATE={0x6, 0x5, {0x8}}, @qdisc_kind_options=@q_choke={{0xa}, {0x18, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x4e0, 0x2, 0x6, 0x0, 0x1e, 0x2}}]}}, @qdisc_kind_options=@q_codel={{0xa}, {0x54, 0x2, [@TCA_CODEL_TARGET={0x8}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x4}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_LIMIT={0x8, 0x2, 0x2}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x80}, @TCA_CODEL_TARGET={0x8, 0x1, 0xb9}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_INTERVAL={0x8, 0x3, 0x7}, @TCA_CODEL_LIMIT={0x8, 0x2, 0x5}]}}, @TCA_STAB={0xf8, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x8, 0xc000, 0x9, 0x1, 0x80000001, 0x4, 0xa}}, {0x18, 0x2, [0x3, 0x4, 0x3, 0xff, 0x200, 0xfe01, 0x7, 0x8, 0x0, 0x2]}}, {{0x1c, 0x1, {0x0, 0x20, 0x1, 0xfc000, 0x1}}, {0x4}}, {{0x1c, 0x1, {0x3, 0x11, 0x100, 0x5, 0x0, 0x2dd, 0x7fff, 0x4}}, {0xc, 0x2, [0x6, 0x100, 0x2, 0x71]}}, {{0x1c, 0x1, {0x0, 0x40, 0x5, 0x3, 0x2}}, {0x4}}, {{0x1c, 0x1, {0x4, 0x8, 0x1ff, 0x3ff, 0x2, 0x5, 0x9, 0x5}}, {0xe, 0x2, [0x1, 0x1, 0xb41, 0x0, 0x8]}}, {{0x1c, 0x1, {0x9, 0x3f, 0x4, 0x3, 0x0, 0x4, 0x9, 0x5}}, {0xe, 0x2, [0x0, 0x0, 0x5ca, 0xfff, 0xfffb]}}]}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x81}]}, 0x1b8}, 0x1, 0x0, 0x0, 0x20000110}, 0x800)
connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10)
writev(r2, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1)
recvmmsg(r2, &(0x7f0000003e40)=[{{0x0, 0x3, 0x0, 0x0, &(0x7f00000035c0)=""/241, 0xf1}}, {{&(0x7f00000036c0)=@un=@abs, 0x80, &(0x7f0000003780)=[{&(0x7f0000003740)=""/4, 0x7ffff}], 0x1, &(0x7f00000037c0)=""/236, 0xec}}, {{0x0, 0x0, &(0x7f0000003bc0)=[{0x0, 0xe00000000000000}, {&(0x7f0000003a00)=""/190, 0xbe}, {&(0x7f0000003ac0)=""/131, 0x83}, {0x0}], 0x4, &(0x7f0000003c00)=""/73, 0x49}}, {{&(0x7f0000003c80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, 0x0, 0x0, &(0x7f0000003e00)=""/48, 0x30}}], 0x4, 0x40000121, 0x0)
shutdown(r2, 0x0)

13:45:54 executing program 4:
r0 = syz_open_dev$usbfs(&(0x7f0000000200), 0x4, 0x0)
read$usbfs(r0, 0x0, 0x0)

13:45:54 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r1)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400ee5c99f8435ecde50a0412", @ANYRES32, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket(0x1, 0x803, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="50000000100001040000ff0f0000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e00000000180002800c0002001c0000001b000000060001000100000008000500", @ANYRES32=r4], 0x50}}, 0x0)
r5 = socket(0x1, 0x803, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080))
r7 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x1e}}]}}}, @IFLA_LINK={0x8, 0x5, r6}]}, 0x50}}, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = socket(0x1, 0x803, 0x0)
getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000540)=ANY=[@ANYBLOB="20000000110003040000007bb000000000000000", @ANYRES32=r10], 0x20}}, 0x0)

13:45:54 executing program 5:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000240)={@val={0x0, 0x86dd}, @val={0x5, 0x0, 0x0, 0x0, 0x54}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "000003", 0xef, 0x3a, 0x0, @empty, @mcast2, {[@routing={0x0, 0x2, 0x0, 0x0, 0x0, [@empty]}], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x0, "ee7b615d"}, {}, {0x2b, 0x3, "6f8c008275021d683910c309293188a7c747eb2278d2794784"}, {0x0, 0x14, "4429118927041312255133e4d2b8b863b5f5b4ace38952e94c581c85d2d86844f548415db4dbf1992868a2e15095b531ce55d4620ec637afdcc990a4d6bfecb289917d24b31a2ddeb64383b176b823cc203ec1927487b7a00d6a3446cf7db79e14b2206d882c28611fa4d8289337cd75b4688120c73a2710947b908fde68a05a0777a170a14e85c7849462b3f5c3152cf0f3d91c5db93dc4d8f9e6b53708650dc375"}]}}}}}, 0x125)

13:45:54 executing program 0:
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x6, 0x5, &(0x7f00000000c0)=@framed={{}, [@ldst={0x3}, @exit]}, &(0x7f0000000040)='GPL\x00', 0x8, 0xc, &(0x7f00000005c0)=""/12, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x90)

13:45:55 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f000000c380)='/proc/crypto\x00', 0x0, 0x0)
read$FUSE(r3, 0x0, 0x0)
execve(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000280)=[0x0, 0x0], &(0x7f0000000380)=[&(0x7f00000002c0)='*$%}\xce*\x00', &(0x7f0000000300)='\x00'])

13:45:55 executing program 4:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$nci(r0, &(0x7f0000000040)=ANY=[], 0x4)

13:45:55 executing program 2:
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
syz_genetlink_get_family_id$tipc(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$NFT_BATCH(r1, &(0x7f00000015c0)={&(0x7f0000000300), 0xc, &(0x7f0000001580)={&(0x7f00000014c0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_PAYLOAD_CSUM_OFFSET={0x8}]}}}]}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}]}, @NFT_MSG_DELSETELEM={0x1c, 0xe, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}]}], {0x14}}, 0x94}, 0x1, 0x0, 0x0, 0x1}, 0x1)
getsockname$packet(0xffffffffffffffff, &(0x7f0000001340), &(0x7f0000001380)=0x14)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r1, 0x0, 0x0)
sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, 0x0, 0x0)
getsockname(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001400)={&(0x7f0000000140), 0xc, &(0x7f0000000340)={&(0x7f0000000f00)=@newqdisc={0x1b8, 0x24, 0x0, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0xc}, {0x10, 0xffff}, {0xf, 0xfff2}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_RATE={0x6, 0x5, {0x8}}, @qdisc_kind_options=@q_choke={{0xa}, {0x18, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x4e0, 0x2, 0x6, 0x0, 0x1e, 0x2}}]}}, @qdisc_kind_options=@q_codel={{0xa}, {0x54, 0x2, [@TCA_CODEL_TARGET={0x8}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x4}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_LIMIT={0x8, 0x2, 0x2}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x80}, @TCA_CODEL_TARGET={0x8, 0x1, 0xb9}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_INTERVAL={0x8, 0x3, 0x7}, @TCA_CODEL_LIMIT={0x8, 0x2, 0x5}]}}, @TCA_STAB={0xf8, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x8, 0xc000, 0x9, 0x1, 0x80000001, 0x4, 0xa}}, {0x18, 0x2, [0x3, 0x4, 0x3, 0xff, 0x200, 0xfe01, 0x7, 0x8, 0x0, 0x2]}}, {{0x1c, 0x1, {0x0, 0x20, 0x1, 0xfc000, 0x1}}, {0x4}}, {{0x1c, 0x1, {0x3, 0x11, 0x100, 0x5, 0x0, 0x2dd, 0x7fff, 0x4}}, {0xc, 0x2, [0x6, 0x100, 0x2, 0x71]}}, {{0x1c, 0x1, {0x0, 0x40, 0x5, 0x3, 0x2}}, {0x4}}, {{0x1c, 0x1, {0x4, 0x8, 0x1ff, 0x3ff, 0x2, 0x5, 0x9, 0x5}}, {0xe, 0x2, [0x1, 0x1, 0xb41, 0x0, 0x8]}}, {{0x1c, 0x1, {0x9, 0x3f, 0x4, 0x3, 0x0, 0x4, 0x9, 0x5}}, {0xe, 0x2, [0x0, 0x0, 0x5ca, 0xfff, 0xfffb]}}]}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x81}]}, 0x1b8}, 0x1, 0x0, 0x0, 0x20000110}, 0x800)
connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10)
writev(r2, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1)
recvmmsg(r2, &(0x7f0000003e40)=[{{0x0, 0x3, 0x0, 0x0, &(0x7f00000035c0)=""/241, 0xf1}}, {{&(0x7f00000036c0)=@un=@abs, 0x80, &(0x7f0000003780)=[{&(0x7f0000003740)=""/4, 0x7ffff}], 0x1, &(0x7f00000037c0)=""/236, 0xec}}, {{0x0, 0x0, &(0x7f0000003bc0)=[{0x0, 0xe00000000000000}, {&(0x7f0000003a00)=""/190, 0xbe}, {&(0x7f0000003ac0)=""/131, 0x83}, {0x0}], 0x4, &(0x7f0000003c00)=""/73, 0x49}}, {{&(0x7f0000003c80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, 0x0, 0x0, &(0x7f0000003e00)=""/48, 0x30}}], 0x4, 0x40000121, 0x0)
shutdown(r2, 0x0)

13:45:55 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r1)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400ee5c99f8435ecde50a0412", @ANYRES32, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket(0x1, 0x803, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="50000000100001040000ff0f0000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e00000000180002800c0002001c0000001b000000060001000100000008000500", @ANYRES32=r4], 0x50}}, 0x0)
r5 = socket(0x1, 0x803, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080))
r7 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x1e}}]}}}, @IFLA_LINK={0x8, 0x5, r6}]}, 0x50}}, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = socket(0x1, 0x803, 0x0)
getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000540)=ANY=[@ANYBLOB="20000000110003040000007bb000000000000000", @ANYRES32=r10], 0x20}}, 0x0)

13:45:55 executing program 0:
r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0x4b49, 0x0)

13:45:55 executing program 5:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000240)={@val={0x0, 0x86dd}, @val={0x5, 0x0, 0x0, 0x0, 0x54}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "000003", 0xef, 0x3a, 0x0, @empty, @mcast2, {[@routing={0x0, 0x2, 0x0, 0x0, 0x0, [@empty]}], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x0, "ee7b615d"}, {}, {0x2b, 0x3, "6f8c008275021d683910c309293188a7c747eb2278d2794784"}, {0x0, 0x14, "4429118927041312255133e4d2b8b863b5f5b4ace38952e94c581c85d2d86844f548415db4dbf1992868a2e15095b531ce55d4620ec637afdcc990a4d6bfecb289917d24b31a2ddeb64383b176b823cc203ec1927487b7a00d6a3446cf7db79e14b2206d882c28611fa4d8289337cd75b4688120c73a2710947b908fde68a05a0777a170a14e85c7849462b3f5c3152cf0f3d91c5db93dc4d8f9e6b53708650dc375"}]}}}}}, 0x125)

13:45:55 executing program 4:
arch_prctl$ARCH_MAP_VDSO_64(0x5003, 0x0)

13:45:55 executing program 2:
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
syz_genetlink_get_family_id$tipc(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$NFT_BATCH(r1, &(0x7f00000015c0)={&(0x7f0000000300), 0xc, &(0x7f0000001580)={&(0x7f00000014c0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_PAYLOAD_CSUM_OFFSET={0x8}]}}}]}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}]}, @NFT_MSG_DELSETELEM={0x1c, 0xe, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}]}], {0x14}}, 0x94}, 0x1, 0x0, 0x0, 0x1}, 0x1)
getsockname$packet(0xffffffffffffffff, &(0x7f0000001340), &(0x7f0000001380)=0x14)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r1, 0x0, 0x0)
sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, 0x0, 0x0)
getsockname(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001400)={&(0x7f0000000140), 0xc, &(0x7f0000000340)={&(0x7f0000000f00)=@newqdisc={0x1b8, 0x24, 0x0, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0xc}, {0x10, 0xffff}, {0xf, 0xfff2}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_RATE={0x6, 0x5, {0x8}}, @qdisc_kind_options=@q_choke={{0xa}, {0x18, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x4e0, 0x2, 0x6, 0x0, 0x1e, 0x2}}]}}, @qdisc_kind_options=@q_codel={{0xa}, {0x54, 0x2, [@TCA_CODEL_TARGET={0x8}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x4}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_LIMIT={0x8, 0x2, 0x2}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x80}, @TCA_CODEL_TARGET={0x8, 0x1, 0xb9}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_INTERVAL={0x8, 0x3, 0x7}, @TCA_CODEL_LIMIT={0x8, 0x2, 0x5}]}}, @TCA_STAB={0xf8, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x8, 0xc000, 0x9, 0x1, 0x80000001, 0x4, 0xa}}, {0x18, 0x2, [0x3, 0x4, 0x3, 0xff, 0x200, 0xfe01, 0x7, 0x8, 0x0, 0x2]}}, {{0x1c, 0x1, {0x0, 0x20, 0x1, 0xfc000, 0x1}}, {0x4}}, {{0x1c, 0x1, {0x3, 0x11, 0x100, 0x5, 0x0, 0x2dd, 0x7fff, 0x4}}, {0xc, 0x2, [0x6, 0x100, 0x2, 0x71]}}, {{0x1c, 0x1, {0x0, 0x40, 0x5, 0x3, 0x2}}, {0x4}}, {{0x1c, 0x1, {0x4, 0x8, 0x1ff, 0x3ff, 0x2, 0x5, 0x9, 0x5}}, {0xe, 0x2, [0x1, 0x1, 0xb41, 0x0, 0x8]}}, {{0x1c, 0x1, {0x9, 0x3f, 0x4, 0x3, 0x0, 0x4, 0x9, 0x5}}, {0xe, 0x2, [0x0, 0x0, 0x5ca, 0xfff, 0xfffb]}}]}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x81}]}, 0x1b8}, 0x1, 0x0, 0x0, 0x20000110}, 0x800)
connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10)
writev(r2, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1)
recvmmsg(r2, &(0x7f0000003e40)=[{{0x0, 0x3, 0x0, 0x0, &(0x7f00000035c0)=""/241, 0xf1}}, {{&(0x7f00000036c0)=@un=@abs, 0x80, &(0x7f0000003780)=[{&(0x7f0000003740)=""/4, 0x7ffff}], 0x1, &(0x7f00000037c0)=""/236, 0xec}}, {{0x0, 0x0, &(0x7f0000003bc0)=[{0x0, 0xe00000000000000}, {&(0x7f0000003a00)=""/190, 0xbe}, {&(0x7f0000003ac0)=""/131, 0x83}, {0x0}], 0x4, &(0x7f0000003c00)=""/73, 0x49}}, {{&(0x7f0000003c80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, 0x0, 0x0, &(0x7f0000003e00)=""/48, 0x30}}], 0x4, 0x40000121, 0x0)
shutdown(r2, 0x0)

13:45:55 executing program 0:
r0 = socket(0xa, 0x2, 0x0)
sendmsg$rds(r0, &(0x7f0000001140)={&(0x7f0000000040)={0xa, 0x47ee, @loopback}, 0x18, 0x0}, 0x810)

13:45:55 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400ee5c99f8435ecde50a0412", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x1, 0x803, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="50000000100001040000ff0f0000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e00000000180002800c0002001c0000001b000000060001000100000008000500", @ANYRES32=r5], 0x50}}, 0x0)
r6 = socket(0x1, 0x803, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080))
r8 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x1e}}]}}}, @IFLA_LINK={0x8, 0x5, r7}]}, 0x50}}, 0x0)
r9 = socket$nl_route(0x10, 0x3, 0x0)
r10 = socket(0x1, 0x803, 0x0)
getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, <r11=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r9, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000540)=ANY=[@ANYBLOB="20000000110003040000007bb000000000000000", @ANYRES32=r11], 0x20}}, 0x0)

13:45:55 executing program 5:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000240)={@val={0x0, 0x86dd}, @val={0x5, 0x0, 0x0, 0x0, 0x54}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "000003", 0x140, 0x3a, 0x0, @empty, @mcast2, {[@routing={0x0, 0x2, 0x0, 0x0, 0x0, [@empty]}], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x0, "ee7b615d"}, {}, {0x2b, 0x3, "6f8c008275021d683910c309293188a7c747eb2278d2794784"}, {0x0, 0x1e, "4429118927041312255133e4d2b8b863b5f5b4ace38952e94c581c85d2d86844f548415db4dbf1992868a2e15095b531ce55d4620ec637afdcc990a4d6bfecb289917d24b31a2ddeb64383b176b823cc203ec1927487b7a00d6a3446cf7db79e14b2206d882c28611fa4d8289337cd75b4688120c73a2710947b908fde68a05a0777a170a14e85c7849462b3f5c3152cf0f3d91c5db93dc4d8f9e6b53708650dc375e6da3650b5ff4079971f6e3ef363382a16b8ae07b7307b5619092e4669dbca480d25738314135509eda68f712b9b09bdb485ea0914590b7ae01c2e34832f16c23c82b22b6ba550acfcede288a5237a06b3"}]}}}}}, 0x176)

13:45:55 executing program 2:
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
syz_genetlink_get_family_id$tipc(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$NFT_BATCH(r1, &(0x7f00000015c0)={&(0x7f0000000300), 0xc, &(0x7f0000001580)={&(0x7f00000014c0)={{0x14}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_CSUM_OFFSET={0x8, 0x7, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}]}, @NFT_MSG_DELSETELEM={0x1c, 0xe, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}]}], {0x14}}, 0x8c}, 0x1, 0x0, 0x0, 0x1}, 0x1)
getsockname$packet(0xffffffffffffffff, &(0x7f0000001340), &(0x7f0000001380)=0x14)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r1, 0x0, 0x0)
sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, 0x0, 0x0)
getsockname(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001400)={&(0x7f0000000140), 0xc, &(0x7f0000000340)={&(0x7f0000000f00)=@newqdisc={0x1b8, 0x24, 0x0, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0xc}, {0x10, 0xffff}, {0xf, 0xfff2}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_RATE={0x6, 0x5, {0x8}}, @qdisc_kind_options=@q_choke={{0xa}, {0x18, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x4e0, 0x2, 0x6, 0x0, 0x1e, 0x2}}]}}, @qdisc_kind_options=@q_codel={{0xa}, {0x54, 0x2, [@TCA_CODEL_TARGET={0x8}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x4}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_LIMIT={0x8, 0x2, 0x2}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x80}, @TCA_CODEL_TARGET={0x8, 0x1, 0xb9}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_INTERVAL={0x8, 0x3, 0x7}, @TCA_CODEL_LIMIT={0x8, 0x2, 0x5}]}}, @TCA_STAB={0xf8, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x8, 0xc000, 0x9, 0x1, 0x80000001, 0x4, 0xa}}, {0x18, 0x2, [0x3, 0x4, 0x3, 0xff, 0x200, 0xfe01, 0x7, 0x8, 0x0, 0x2]}}, {{0x1c, 0x1, {0x0, 0x20, 0x1, 0xfc000, 0x1}}, {0x4}}, {{0x1c, 0x1, {0x3, 0x11, 0x100, 0x5, 0x0, 0x2dd, 0x7fff, 0x4}}, {0xc, 0x2, [0x6, 0x100, 0x2, 0x71]}}, {{0x1c, 0x1, {0x0, 0x40, 0x5, 0x3, 0x2}}, {0x4}}, {{0x1c, 0x1, {0x4, 0x8, 0x1ff, 0x3ff, 0x2, 0x5, 0x9, 0x5}}, {0xe, 0x2, [0x1, 0x1, 0xb41, 0x0, 0x8]}}, {{0x1c, 0x1, {0x9, 0x3f, 0x4, 0x3, 0x0, 0x4, 0x9, 0x5}}, {0xe, 0x2, [0x0, 0x0, 0x5ca, 0xfff, 0xfffb]}}]}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x81}]}, 0x1b8}, 0x1, 0x0, 0x0, 0x20000110}, 0x800)
connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10)
writev(r2, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1)
recvmmsg(r2, &(0x7f0000003e40)=[{{0x0, 0x3, 0x0, 0x0, &(0x7f00000035c0)=""/241, 0xf1}}, {{&(0x7f00000036c0)=@un=@abs, 0x80, &(0x7f0000003780)=[{&(0x7f0000003740)=""/4, 0x7ffff}], 0x1, &(0x7f00000037c0)=""/236, 0xec}}, {{0x0, 0x0, &(0x7f0000003bc0)=[{0x0, 0xe00000000000000}, {&(0x7f0000003a00)=""/190, 0xbe}, {&(0x7f0000003ac0)=""/131, 0x83}, {0x0}], 0x4, &(0x7f0000003c00)=""/73, 0x49}}, {{&(0x7f0000003c80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, 0x0, 0x0, &(0x7f0000003e00)=""/48, 0x30}}], 0x4, 0x40000121, 0x0)
shutdown(r2, 0x0)

[ 2270.679713][T22776] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'.
13:45:56 executing program 0:
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x1a, 0x3, &(0x7f0000000080)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x90)

13:45:56 executing program 4:
r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000140)={{0x1, 0x1, 0x1018}, './file0\x00'})

13:45:56 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400ee5c99f8435ecde50a0412", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x1, 0x803, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="50000000100001040000ff0f0000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e00000000180002800c0002001c0000001b000000060001000100000008000500", @ANYRES32=r5], 0x50}}, 0x0)
r6 = socket(0x1, 0x803, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080))
r8 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x1e}}]}}}, @IFLA_LINK={0x8, 0x5, r7}]}, 0x50}}, 0x0)
r9 = socket$nl_route(0x10, 0x3, 0x0)
r10 = socket(0x1, 0x803, 0x0)
getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, <r11=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r9, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000540)=ANY=[@ANYBLOB="20000000110003040000007bb000000000000000", @ANYRES32=r11], 0x20}}, 0x0)

13:45:56 executing program 2:
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
syz_genetlink_get_family_id$tipc(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$NFT_BATCH(r1, &(0x7f00000015c0)={&(0x7f0000000300), 0xc, &(0x7f0000001580)={&(0x7f00000014c0)={{0x14}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_CSUM_OFFSET={0x8, 0x7, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}]}, @NFT_MSG_DELSETELEM={0x1c, 0xe, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}]}], {0x14}}, 0x8c}, 0x1, 0x0, 0x0, 0x1}, 0x1)
getsockname$packet(0xffffffffffffffff, &(0x7f0000001340), &(0x7f0000001380)=0x14)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r1, 0x0, 0x0)
sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, 0x0, 0x0)
getsockname(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001400)={&(0x7f0000000140), 0xc, &(0x7f0000000340)={&(0x7f0000000f00)=@newqdisc={0x1b8, 0x24, 0x0, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0xc}, {0x10, 0xffff}, {0xf, 0xfff2}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_RATE={0x6, 0x5, {0x8}}, @qdisc_kind_options=@q_choke={{0xa}, {0x18, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x4e0, 0x2, 0x6, 0x0, 0x1e, 0x2}}]}}, @qdisc_kind_options=@q_codel={{0xa}, {0x54, 0x2, [@TCA_CODEL_TARGET={0x8}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x4}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_LIMIT={0x8, 0x2, 0x2}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x80}, @TCA_CODEL_TARGET={0x8, 0x1, 0xb9}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_INTERVAL={0x8, 0x3, 0x7}, @TCA_CODEL_LIMIT={0x8, 0x2, 0x5}]}}, @TCA_STAB={0xf8, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x8, 0xc000, 0x9, 0x1, 0x80000001, 0x4, 0xa}}, {0x18, 0x2, [0x3, 0x4, 0x3, 0xff, 0x200, 0xfe01, 0x7, 0x8, 0x0, 0x2]}}, {{0x1c, 0x1, {0x0, 0x20, 0x1, 0xfc000, 0x1}}, {0x4}}, {{0x1c, 0x1, {0x3, 0x11, 0x100, 0x5, 0x0, 0x2dd, 0x7fff, 0x4}}, {0xc, 0x2, [0x6, 0x100, 0x2, 0x71]}}, {{0x1c, 0x1, {0x0, 0x40, 0x5, 0x3, 0x2}}, {0x4}}, {{0x1c, 0x1, {0x4, 0x8, 0x1ff, 0x3ff, 0x2, 0x5, 0x9, 0x5}}, {0xe, 0x2, [0x1, 0x1, 0xb41, 0x0, 0x8]}}, {{0x1c, 0x1, {0x9, 0x3f, 0x4, 0x3, 0x0, 0x4, 0x9, 0x5}}, {0xe, 0x2, [0x0, 0x0, 0x5ca, 0xfff, 0xfffb]}}]}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x81}]}, 0x1b8}, 0x1, 0x0, 0x0, 0x20000110}, 0x800)
connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10)
writev(r2, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1)
recvmmsg(r2, &(0x7f0000003e40)=[{{0x0, 0x3, 0x0, 0x0, &(0x7f00000035c0)=""/241, 0xf1}}, {{&(0x7f00000036c0)=@un=@abs, 0x80, &(0x7f0000003780)=[{&(0x7f0000003740)=""/4, 0x7ffff}], 0x1, &(0x7f00000037c0)=""/236, 0xec}}, {{0x0, 0x0, &(0x7f0000003bc0)=[{0x0, 0xe00000000000000}, {&(0x7f0000003a00)=""/190, 0xbe}, {&(0x7f0000003ac0)=""/131, 0x83}, {0x0}], 0x4, &(0x7f0000003c00)=""/73, 0x49}}, {{&(0x7f0000003c80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, 0x0, 0x0, &(0x7f0000003e00)=""/48, 0x30}}], 0x4, 0x40000121, 0x0)
shutdown(r2, 0x0)

13:45:56 executing program 5:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000240)={@val={0x0, 0x86dd}, @val={0x5, 0x0, 0x0, 0x0, 0x54}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "000003", 0x140, 0x3a, 0x0, @empty, @mcast2, {[@routing={0x0, 0x2, 0x0, 0x0, 0x0, [@empty]}], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x0, "ee7b615d"}, {}, {0x2b, 0x3, "6f8c008275021d683910c309293188a7c747eb2278d2794784"}, {0x0, 0x1e, "4429118927041312255133e4d2b8b863b5f5b4ace38952e94c581c85d2d86844f548415db4dbf1992868a2e15095b531ce55d4620ec637afdcc990a4d6bfecb289917d24b31a2ddeb64383b176b823cc203ec1927487b7a00d6a3446cf7db79e14b2206d882c28611fa4d8289337cd75b4688120c73a2710947b908fde68a05a0777a170a14e85c7849462b3f5c3152cf0f3d91c5db93dc4d8f9e6b53708650dc375e6da3650b5ff4079971f6e3ef363382a16b8ae07b7307b5619092e4669dbca480d25738314135509eda68f712b9b09bdb485ea0914590b7ae01c2e34832f16c23c82b22b6ba550acfcede288a5237a06b3"}]}}}}}, 0x176)

13:45:56 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f000000c380)='/proc/crypto\x00', 0x0, 0x0)
read$FUSE(r3, &(0x7f0000000200)={0x2020}, 0x2020)
execve(0x0, &(0x7f0000000280)=[0x0, 0x0], &(0x7f0000000380)=[&(0x7f00000002c0)='*$%}\xce*\x00', &(0x7f0000000300)='\x00'])

[ 2271.872690][T22790] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'.
13:45:57 executing program 2:
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
syz_genetlink_get_family_id$tipc(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$NFT_BATCH(r1, &(0x7f00000015c0)={&(0x7f0000000300), 0xc, &(0x7f0000001580)={&(0x7f00000014c0)={{0x14}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_CSUM_OFFSET={0x8, 0x7, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}]}, @NFT_MSG_DELSETELEM={0x1c, 0xe, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}]}], {0x14}}, 0x8c}, 0x1, 0x0, 0x0, 0x1}, 0x1)
getsockname$packet(0xffffffffffffffff, &(0x7f0000001340), &(0x7f0000001380)=0x14)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r1, 0x0, 0x0)
sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, 0x0, 0x0)
getsockname(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001400)={&(0x7f0000000140), 0xc, &(0x7f0000000340)={&(0x7f0000000f00)=@newqdisc={0x1b8, 0x24, 0x0, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0xc}, {0x10, 0xffff}, {0xf, 0xfff2}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_RATE={0x6, 0x5, {0x8}}, @qdisc_kind_options=@q_choke={{0xa}, {0x18, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x4e0, 0x2, 0x6, 0x0, 0x1e, 0x2}}]}}, @qdisc_kind_options=@q_codel={{0xa}, {0x54, 0x2, [@TCA_CODEL_TARGET={0x8}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x4}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_LIMIT={0x8, 0x2, 0x2}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x80}, @TCA_CODEL_TARGET={0x8, 0x1, 0xb9}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_INTERVAL={0x8, 0x3, 0x7}, @TCA_CODEL_LIMIT={0x8, 0x2, 0x5}]}}, @TCA_STAB={0xf8, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x8, 0xc000, 0x9, 0x1, 0x80000001, 0x4, 0xa}}, {0x18, 0x2, [0x3, 0x4, 0x3, 0xff, 0x200, 0xfe01, 0x7, 0x8, 0x0, 0x2]}}, {{0x1c, 0x1, {0x0, 0x20, 0x1, 0xfc000, 0x1}}, {0x4}}, {{0x1c, 0x1, {0x3, 0x11, 0x100, 0x5, 0x0, 0x2dd, 0x7fff, 0x4}}, {0xc, 0x2, [0x6, 0x100, 0x2, 0x71]}}, {{0x1c, 0x1, {0x0, 0x40, 0x5, 0x3, 0x2}}, {0x4}}, {{0x1c, 0x1, {0x4, 0x8, 0x1ff, 0x3ff, 0x2, 0x5, 0x9, 0x5}}, {0xe, 0x2, [0x1, 0x1, 0xb41, 0x0, 0x8]}}, {{0x1c, 0x1, {0x9, 0x3f, 0x4, 0x3, 0x0, 0x4, 0x9, 0x5}}, {0xe, 0x2, [0x0, 0x0, 0x5ca, 0xfff, 0xfffb]}}]}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x81}]}, 0x1b8}, 0x1, 0x0, 0x0, 0x20000110}, 0x800)
connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10)
writev(r2, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1)
recvmmsg(r2, &(0x7f0000003e40)=[{{0x0, 0x3, 0x0, 0x0, &(0x7f00000035c0)=""/241, 0xf1}}, {{&(0x7f00000036c0)=@un=@abs, 0x80, &(0x7f0000003780)=[{&(0x7f0000003740)=""/4, 0x7ffff}], 0x1, &(0x7f00000037c0)=""/236, 0xec}}, {{0x0, 0x0, &(0x7f0000003bc0)=[{0x0, 0xe00000000000000}, {&(0x7f0000003a00)=""/190, 0xbe}, {&(0x7f0000003ac0)=""/131, 0x83}, {0x0}], 0x4, &(0x7f0000003c00)=""/73, 0x49}}, {{&(0x7f0000003c80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, 0x0, 0x0, &(0x7f0000003e00)=""/48, 0x30}}], 0x4, 0x40000121, 0x0)
shutdown(r2, 0x0)

13:45:57 executing program 4:
socketpair(0x23, 0x0, 0x8, &(0x7f0000000140))

13:45:57 executing program 0:
bpf$BPF_PROG_QUERY(0x7, &(0x7f0000000100)={@map, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x92)

13:45:57 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400ee5c99f8435ecde50a0412", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x1, 0x803, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="50000000100001040000ff0f0000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e00000000180002800c0002001c0000001b000000060001000100000008000500", @ANYRES32=r5], 0x50}}, 0x0)
r6 = socket(0x1, 0x803, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080))
r8 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x1e}}]}}}, @IFLA_LINK={0x8, 0x5, r7}]}, 0x50}}, 0x0)
r9 = socket$nl_route(0x10, 0x3, 0x0)
r10 = socket(0x1, 0x803, 0x0)
getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, <r11=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r9, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000540)=ANY=[@ANYBLOB="20000000110003040000007bb000000000000000", @ANYRES32=r11], 0x20}}, 0x0)

13:45:57 executing program 5:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000240)={@val={0x0, 0x86dd}, @val={0x5, 0x0, 0x0, 0x0, 0x54}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "000003", 0x140, 0x3a, 0x0, @empty, @mcast2, {[@routing={0x0, 0x2, 0x0, 0x0, 0x0, [@empty]}], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x0, "ee7b615d"}, {}, {0x2b, 0x3, "6f8c008275021d683910c309293188a7c747eb2278d2794784"}, {0x0, 0x1e, "4429118927041312255133e4d2b8b863b5f5b4ace38952e94c581c85d2d86844f548415db4dbf1992868a2e15095b531ce55d4620ec637afdcc990a4d6bfecb289917d24b31a2ddeb64383b176b823cc203ec1927487b7a00d6a3446cf7db79e14b2206d882c28611fa4d8289337cd75b4688120c73a2710947b908fde68a05a0777a170a14e85c7849462b3f5c3152cf0f3d91c5db93dc4d8f9e6b53708650dc375e6da3650b5ff4079971f6e3ef363382a16b8ae07b7307b5619092e4669dbca480d25738314135509eda68f712b9b09bdb485ea0914590b7ae01c2e34832f16c23c82b22b6ba550acfcede288a5237a06b3"}]}}}}}, 0x176)

13:45:57 executing program 2:
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
syz_genetlink_get_family_id$tipc(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$NFT_BATCH(r1, &(0x7f00000015c0)={&(0x7f0000000300), 0xc, &(0x7f0000001580)={&(0x7f00000014c0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_OFFSET={0x8}, @NFTA_PAYLOAD_CSUM_OFFSET={0x8, 0x7, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}]}, @NFT_MSG_DELSETELEM={0x1c, 0xe, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}]}], {0x14}}, 0x94}, 0x1, 0x0, 0x0, 0x1}, 0x1)
getsockname$packet(0xffffffffffffffff, &(0x7f0000001340), &(0x7f0000001380)=0x14)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r1, 0x0, 0x0)
sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, 0x0, 0x0)
getsockname(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001400)={&(0x7f0000000140), 0xc, &(0x7f0000000340)={&(0x7f0000000f00)=@newqdisc={0x1b8, 0x24, 0x0, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0xc}, {0x10, 0xffff}, {0xf, 0xfff2}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_RATE={0x6, 0x5, {0x8}}, @qdisc_kind_options=@q_choke={{0xa}, {0x18, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x4e0, 0x2, 0x6, 0x0, 0x1e, 0x2}}]}}, @qdisc_kind_options=@q_codel={{0xa}, {0x54, 0x2, [@TCA_CODEL_TARGET={0x8}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x4}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_LIMIT={0x8, 0x2, 0x2}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x80}, @TCA_CODEL_TARGET={0x8, 0x1, 0xb9}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_INTERVAL={0x8, 0x3, 0x7}, @TCA_CODEL_LIMIT={0x8, 0x2, 0x5}]}}, @TCA_STAB={0xf8, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x8, 0xc000, 0x9, 0x1, 0x80000001, 0x4, 0xa}}, {0x18, 0x2, [0x3, 0x4, 0x3, 0xff, 0x200, 0xfe01, 0x7, 0x8, 0x0, 0x2]}}, {{0x1c, 0x1, {0x0, 0x20, 0x1, 0xfc000, 0x1}}, {0x4}}, {{0x1c, 0x1, {0x3, 0x11, 0x100, 0x5, 0x0, 0x2dd, 0x7fff, 0x4}}, {0xc, 0x2, [0x6, 0x100, 0x2, 0x71]}}, {{0x1c, 0x1, {0x0, 0x40, 0x5, 0x3, 0x2}}, {0x4}}, {{0x1c, 0x1, {0x4, 0x8, 0x1ff, 0x3ff, 0x2, 0x5, 0x9, 0x5}}, {0xe, 0x2, [0x1, 0x1, 0xb41, 0x0, 0x8]}}, {{0x1c, 0x1, {0x9, 0x3f, 0x4, 0x3, 0x0, 0x4, 0x9, 0x5}}, {0xe, 0x2, [0x0, 0x0, 0x5ca, 0xfff, 0xfffb]}}]}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x81}]}, 0x1b8}, 0x1, 0x0, 0x0, 0x20000110}, 0x800)
connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10)
writev(r2, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1)
recvmmsg(r2, &(0x7f0000003e40)=[{{0x0, 0x3, 0x0, 0x0, &(0x7f00000035c0)=""/241, 0xf1}}, {{&(0x7f00000036c0)=@un=@abs, 0x80, &(0x7f0000003780)=[{&(0x7f0000003740)=""/4, 0x7ffff}], 0x1, &(0x7f00000037c0)=""/236, 0xec}}, {{0x0, 0x0, &(0x7f0000003bc0)=[{0x0, 0xe00000000000000}, {&(0x7f0000003a00)=""/190, 0xbe}, {&(0x7f0000003ac0)=""/131, 0x83}, {0x0}], 0x4, &(0x7f0000003c00)=""/73, 0x49}}, {{&(0x7f0000003c80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, 0x0, 0x0, &(0x7f0000003e00)=""/48, 0x30}}], 0x4, 0x40000121, 0x0)
shutdown(r2, 0x0)

13:45:57 executing program 0:
semctl$IPC_RMID(0x0, 0x0, 0xe)

13:45:57 executing program 4:
syz_open_dev$usbfs(&(0x7f00000000c0), 0xa8d0, 0x5040)

[ 2272.293489][T22805] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'.
13:45:57 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$inet_opts(r0, 0x0, 0x4, 0x0, &(0x7f0000000040))

13:45:57 executing program 2:
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
syz_genetlink_get_family_id$tipc(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$NFT_BATCH(r1, &(0x7f00000015c0)={&(0x7f0000000300), 0xc, &(0x7f0000001580)={&(0x7f00000014c0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_OFFSET={0x8}, @NFTA_PAYLOAD_CSUM_OFFSET={0x8, 0x7, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}]}, @NFT_MSG_DELSETELEM={0x1c, 0xe, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}]}], {0x14}}, 0x94}, 0x1, 0x0, 0x0, 0x1}, 0x1)
getsockname$packet(0xffffffffffffffff, &(0x7f0000001340), &(0x7f0000001380)=0x14)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r1, 0x0, 0x0)
sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, 0x0, 0x0)
getsockname(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001400)={&(0x7f0000000140), 0xc, &(0x7f0000000340)={&(0x7f0000000f00)=@newqdisc={0x1b8, 0x24, 0x0, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0xc}, {0x10, 0xffff}, {0xf, 0xfff2}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_RATE={0x6, 0x5, {0x8}}, @qdisc_kind_options=@q_choke={{0xa}, {0x18, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x4e0, 0x2, 0x6, 0x0, 0x1e, 0x2}}]}}, @qdisc_kind_options=@q_codel={{0xa}, {0x54, 0x2, [@TCA_CODEL_TARGET={0x8}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x4}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_LIMIT={0x8, 0x2, 0x2}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x80}, @TCA_CODEL_TARGET={0x8, 0x1, 0xb9}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_INTERVAL={0x8, 0x3, 0x7}, @TCA_CODEL_LIMIT={0x8, 0x2, 0x5}]}}, @TCA_STAB={0xf8, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x8, 0xc000, 0x9, 0x1, 0x80000001, 0x4, 0xa}}, {0x18, 0x2, [0x3, 0x4, 0x3, 0xff, 0x200, 0xfe01, 0x7, 0x8, 0x0, 0x2]}}, {{0x1c, 0x1, {0x0, 0x20, 0x1, 0xfc000, 0x1}}, {0x4}}, {{0x1c, 0x1, {0x3, 0x11, 0x100, 0x5, 0x0, 0x2dd, 0x7fff, 0x4}}, {0xc, 0x2, [0x6, 0x100, 0x2, 0x71]}}, {{0x1c, 0x1, {0x0, 0x40, 0x5, 0x3, 0x2}}, {0x4}}, {{0x1c, 0x1, {0x4, 0x8, 0x1ff, 0x3ff, 0x2, 0x5, 0x9, 0x5}}, {0xe, 0x2, [0x1, 0x1, 0xb41, 0x0, 0x8]}}, {{0x1c, 0x1, {0x9, 0x3f, 0x4, 0x3, 0x0, 0x4, 0x9, 0x5}}, {0xe, 0x2, [0x0, 0x0, 0x5ca, 0xfff, 0xfffb]}}]}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x81}]}, 0x1b8}, 0x1, 0x0, 0x0, 0x20000110}, 0x800)
connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10)
writev(r2, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1)
recvmmsg(r2, &(0x7f0000003e40)=[{{0x0, 0x3, 0x0, 0x0, &(0x7f00000035c0)=""/241, 0xf1}}, {{&(0x7f00000036c0)=@un=@abs, 0x80, &(0x7f0000003780)=[{&(0x7f0000003740)=""/4, 0x7ffff}], 0x1, &(0x7f00000037c0)=""/236, 0xec}}, {{0x0, 0x0, &(0x7f0000003bc0)=[{0x0, 0xe00000000000000}, {&(0x7f0000003a00)=""/190, 0xbe}, {&(0x7f0000003ac0)=""/131, 0x83}, {0x0}], 0x4, &(0x7f0000003c00)=""/73, 0x49}}, {{&(0x7f0000003c80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, 0x0, 0x0, &(0x7f0000003e00)=""/48, 0x30}}], 0x4, 0x40000121, 0x0)
shutdown(r2, 0x0)

13:45:57 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), 0xffffffffffffffff)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400ee5c99f8435ecde50a0412", @ANYRES32=r1, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket(0x1, 0x803, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="50000000100001040000ff0f0000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e00000000180002800c0002001c0000001b000000060001000100000008000500", @ANYRES32=r4], 0x50}}, 0x0)
r5 = socket(0x1, 0x803, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080))
r7 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x1e}}]}}}, @IFLA_LINK={0x8, 0x5, r6}]}, 0x50}}, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = socket(0x1, 0x803, 0x0)
getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000540)=ANY=[@ANYBLOB="20000000110003040000007bb000000000000000", @ANYRES32=r10], 0x20}}, 0x0)

13:45:58 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f000000c380)='/proc/crypto\x00', 0x0, 0x0)
read$FUSE(r3, &(0x7f0000000200)={0x2020}, 0x2020)
execve(0x0, &(0x7f0000000280)=[0x0, 0x0], &(0x7f0000000380)=[&(0x7f00000002c0)='*$%}\xce*\x00', &(0x7f0000000300)='\x00'])

13:45:58 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
dup(0xffffffffffffffff)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000240))
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)

13:45:58 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$DEVLINK_CMD_PORT_SPLIT(r0, &(0x7f0000000540)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000500)={&(0x7f0000000340)={0x14}, 0x14}}, 0x0)

13:45:58 executing program 5:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000240)={@val={0x0, 0x86dd}, @val={0x5, 0x0, 0x0, 0x0, 0x54}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "000003", 0x168, 0x3a, 0x0, @empty, @mcast2, {[@routing={0x0, 0x2, 0x0, 0x0, 0x0, [@empty]}], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x0, "ee7b615d"}, {}, {0x2b, 0x3, "6f8c008275021d683910c309293188a7c747eb2278d2794784"}, {0x0, 0x23, "4429118927041312255133e4d2b8b863b5f5b4ace38952e94c581c85d2d86844f548415db4dbf1992868a2e15095b531ce55d4620ec637afdcc990a4d6bfecb289917d24b31a2ddeb64383b176b823cc203ec1927487b7a00d6a3446cf7db79e14b2206d882c28611fa4d8289337cd75b4688120c73a2710947b908fde68a05a0777a170a14e85c7849462b3f5c3152cf0f3d91c5db93dc4d8f9e6b53708650dc375e6da3650b5ff4079971f6e3ef363382a16b8ae07b7307b5619092e4669dbca480d25738314135509eda68f712b9b09bdb485ea0914590b7ae01c2e34832f16c23c82b22b6ba550acfcede288a5237a06b3f5e09b6e5a0404544efe1474664b985f070121e82070a9f4513c2031a58a3d99e99284b812c0f047"}]}}}}}, 0x19e)

13:45:58 executing program 2:
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
syz_genetlink_get_family_id$tipc(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$NFT_BATCH(r1, &(0x7f00000015c0)={&(0x7f0000000300), 0xc, &(0x7f0000001580)={&(0x7f00000014c0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_OFFSET={0x8}, @NFTA_PAYLOAD_CSUM_OFFSET={0x8, 0x7, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}]}, @NFT_MSG_DELSETELEM={0x1c, 0xe, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}]}], {0x14}}, 0x94}, 0x1, 0x0, 0x0, 0x1}, 0x1)
getsockname$packet(0xffffffffffffffff, &(0x7f0000001340), &(0x7f0000001380)=0x14)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r1, 0x0, 0x0)
sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, 0x0, 0x0)
getsockname(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001400)={&(0x7f0000000140), 0xc, &(0x7f0000000340)={&(0x7f0000000f00)=@newqdisc={0x1b8, 0x24, 0x0, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0xc}, {0x10, 0xffff}, {0xf, 0xfff2}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_RATE={0x6, 0x5, {0x8}}, @qdisc_kind_options=@q_choke={{0xa}, {0x18, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x4e0, 0x2, 0x6, 0x0, 0x1e, 0x2}}]}}, @qdisc_kind_options=@q_codel={{0xa}, {0x54, 0x2, [@TCA_CODEL_TARGET={0x8}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x4}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_LIMIT={0x8, 0x2, 0x2}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x80}, @TCA_CODEL_TARGET={0x8, 0x1, 0xb9}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_INTERVAL={0x8, 0x3, 0x7}, @TCA_CODEL_LIMIT={0x8, 0x2, 0x5}]}}, @TCA_STAB={0xf8, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x8, 0xc000, 0x9, 0x1, 0x80000001, 0x4, 0xa}}, {0x18, 0x2, [0x3, 0x4, 0x3, 0xff, 0x200, 0xfe01, 0x7, 0x8, 0x0, 0x2]}}, {{0x1c, 0x1, {0x0, 0x20, 0x1, 0xfc000, 0x1}}, {0x4}}, {{0x1c, 0x1, {0x3, 0x11, 0x100, 0x5, 0x0, 0x2dd, 0x7fff, 0x4}}, {0xc, 0x2, [0x6, 0x100, 0x2, 0x71]}}, {{0x1c, 0x1, {0x0, 0x40, 0x5, 0x3, 0x2}}, {0x4}}, {{0x1c, 0x1, {0x4, 0x8, 0x1ff, 0x3ff, 0x2, 0x5, 0x9, 0x5}}, {0xe, 0x2, [0x1, 0x1, 0xb41, 0x0, 0x8]}}, {{0x1c, 0x1, {0x9, 0x3f, 0x4, 0x3, 0x0, 0x4, 0x9, 0x5}}, {0xe, 0x2, [0x0, 0x0, 0x5ca, 0xfff, 0xfffb]}}]}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x81}]}, 0x1b8}, 0x1, 0x0, 0x0, 0x20000110}, 0x800)
connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10)
writev(r2, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1)
recvmmsg(r2, &(0x7f0000003e40)=[{{0x0, 0x3, 0x0, 0x0, &(0x7f00000035c0)=""/241, 0xf1}}, {{&(0x7f00000036c0)=@un=@abs, 0x80, &(0x7f0000003780)=[{&(0x7f0000003740)=""/4, 0x7ffff}], 0x1, &(0x7f00000037c0)=""/236, 0xec}}, {{0x0, 0x0, &(0x7f0000003bc0)=[{0x0, 0xe00000000000000}, {&(0x7f0000003a00)=""/190, 0xbe}, {&(0x7f0000003ac0)=""/131, 0x83}, {0x0}], 0x4, &(0x7f0000003c00)=""/73, 0x49}}, {{&(0x7f0000003c80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, 0x0, 0x0, &(0x7f0000003e00)=""/48, 0x30}}], 0x4, 0x40000121, 0x0)
shutdown(r2, 0x0)

13:45:58 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), 0xffffffffffffffff)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400ee5c99f8435ecde50a0412", @ANYRES32=r1, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket(0x1, 0x803, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="50000000100001040000ff0f0000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e00000000180002800c0002001c0000001b000000060001000100000008000500", @ANYRES32=r4], 0x50}}, 0x0)
r5 = socket(0x1, 0x803, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080))
r7 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x1e}}]}}}, @IFLA_LINK={0x8, 0x5, r6}]}, 0x50}}, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = socket(0x1, 0x803, 0x0)
getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000540)=ANY=[@ANYBLOB="20000000110003040000007bb000000000000000", @ANYRES32=r10], 0x20}}, 0x0)

13:45:58 executing program 4:
ioctl$HIDIOCSUSAGE(0xffffffffffffffff, 0x4018480c, 0x0)
syz_open_dev$hiddev(0x0, 0x0, 0x0)
ioctl$F2FS_IOC_SET_PIN_FILE(0xffffffffffffffff, 0x4004f50d, 0x0)
r0 = syz_io_uring_setup(0x5321, 0x0, 0x0, 0x0)
ioctl$INCFS_IOC_PERMIT_FILL(r0, 0x40046721, 0x0)
syz_io_uring_setup(0x7988, &(0x7f0000001440)={0x0, 0x425c}, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000001540)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd_index})
bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0)
r1 = socket$inet6_udplite(0xa, 0x2, 0x88)
sendto(r1, 0x0, 0x0, 0x0, &(0x7f0000001780)=@ll={0x11, 0xf8, 0x0, 0x1, 0x80, 0x6, @broadcast}, 0x80)
ioctl$RNDADDENTROPY(0xffffffffffffffff, 0x40085203, &(0x7f0000001800)={0x80, 0x5f, "535d0c49db9afa237e6975c3abc98877d54ee9392bfab9cc3f4d217d4a06b69e15205ab0a064b01f293b6b4b5cd26e55ae811672a6384a3e12168fa581b48a6aebd176c3296860eb6bbcd93b7711cdae2c70b5c5c17955e55a968c989e1960"})

13:45:58 executing program 0:
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000000)=[@in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in6={0xa, 0x4e23, 0x0, @mcast2}], 0x2c)

13:45:58 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), 0xffffffffffffffff)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400ee5c99f8435ecde50a0412", @ANYRES32=r1, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket(0x1, 0x803, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="50000000100001040000ff0f0000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e00000000180002800c0002001c0000001b000000060001000100000008000500", @ANYRES32=r4], 0x50}}, 0x0)
r5 = socket(0x1, 0x803, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080))
r7 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x1e}}]}}}, @IFLA_LINK={0x8, 0x5, r6}]}, 0x50}}, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = socket(0x1, 0x803, 0x0)
getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000540)=ANY=[@ANYBLOB="20000000110003040000007bb000000000000000", @ANYRES32=r10], 0x20}}, 0x0)

13:45:58 executing program 0:
add_key$fscrypt_v1(&(0x7f0000000340), &(0x7f0000000280)={'fscrypt:', @desc2}, &(0x7f0000000380)={0x0, "f39b8a8023b68fa452b6340ddf18f9ecd36421cc19189f00def11218e3c6f4dde2a53da9f10a5e7d1fd13c004e4f451b03a2d5fe13dbffef6d2cc806b025d31d"}, 0xffffffffffffff87, 0x0)

13:45:58 executing program 4:
keyctl$search(0xa, 0x0, 0x0, 0x0, 0xfffffffffffffff8)

13:45:58 executing program 5:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000240)={@val={0x0, 0x86dd}, @val={0x5, 0x0, 0x0, 0x0, 0x54}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "000003", 0x168, 0x3a, 0x0, @empty, @mcast2, {[@routing={0x0, 0x2, 0x0, 0x0, 0x0, [@empty]}], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x0, "ee7b615d"}, {}, {0x2b, 0x3, "6f8c008275021d683910c309293188a7c747eb2278d2794784"}, {0x0, 0x23, "4429118927041312255133e4d2b8b863b5f5b4ace38952e94c581c85d2d86844f548415db4dbf1992868a2e15095b531ce55d4620ec637afdcc990a4d6bfecb289917d24b31a2ddeb64383b176b823cc203ec1927487b7a00d6a3446cf7db79e14b2206d882c28611fa4d8289337cd75b4688120c73a2710947b908fde68a05a0777a170a14e85c7849462b3f5c3152cf0f3d91c5db93dc4d8f9e6b53708650dc375e6da3650b5ff4079971f6e3ef363382a16b8ae07b7307b5619092e4669dbca480d25738314135509eda68f712b9b09bdb485ea0914590b7ae01c2e34832f16c23c82b22b6ba550acfcede288a5237a06b3f5e09b6e5a0404544efe1474664b985f070121e82070a9f4513c2031a58a3d99e99284b812c0f047"}]}}}}}, 0x19e)

13:45:59 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f000000c380)='/proc/crypto\x00', 0x0, 0x0)
read$FUSE(r3, &(0x7f0000000200)={0x2020}, 0x2020)
execve(0x0, &(0x7f0000000280)=[0x0, 0x0], &(0x7f0000000380)=[&(0x7f00000002c0)='*$%}\xce*\x00', &(0x7f0000000300)='\x00'])

13:45:59 executing program 4:
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000800))

13:45:59 executing program 3:
r0 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r0)
getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400ee5c99f8435ecde50a0412", @ANYRES32=r1, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket(0x1, 0x803, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="50000000100001040000ff0f0000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e00000000180002800c0002001c0000001b000000060001000100000008000500", @ANYRES32=r4], 0x50}}, 0x0)
r5 = socket(0x1, 0x803, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080))
r7 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x1e}}]}}}, @IFLA_LINK={0x8, 0x5, r6}]}, 0x50}}, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = socket(0x1, 0x803, 0x0)
getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000540)=ANY=[@ANYBLOB="20000000110003040000007bb000000000000000", @ANYRES32=r10], 0x20}}, 0x0)

13:45:59 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$EBT_SO_GET_INIT_ENTRIES(r0, 0x0, 0x83, &(0x7f0000000180)={'filter\x00', 0x0, 0x0, 0x0, [], 0x0, 0x0, 0x0}, &(0x7f0000000280)=0x78)

13:45:59 executing program 5:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000240)={@val={0x0, 0x86dd}, @val={0x5, 0x0, 0x0, 0x0, 0x54}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "000003", 0x168, 0x3a, 0x0, @empty, @mcast2, {[@routing={0x0, 0x2, 0x0, 0x0, 0x0, [@empty]}], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x0, "ee7b615d"}, {}, {0x2b, 0x3, "6f8c008275021d683910c309293188a7c747eb2278d2794784"}, {0x0, 0x23, "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"}]}}}}}, 0x19e)

13:45:59 executing program 2:
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
syz_genetlink_get_family_id$tipc(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$NFT_BATCH(r1, &(0x7f00000015c0)={&(0x7f0000000300), 0xc, &(0x7f0000001580)={&(0x7f00000014c0)={{0x14}, [@NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_PAYLOAD_CSUM_OFFSET={0x8, 0x7, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}]}, @NFT_MSG_DELSETELEM={0x1c, 0xe, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}]}], {0x14}}, 0x88}, 0x1, 0x0, 0x0, 0x1}, 0x1)
getsockname$packet(0xffffffffffffffff, &(0x7f0000001340), &(0x7f0000001380)=0x14)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r1, 0x0, 0x0)
sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, 0x0, 0x0)
getsockname(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001400)={&(0x7f0000000140), 0xc, &(0x7f0000000340)={&(0x7f0000000f00)=@newqdisc={0x1b8, 0x24, 0x0, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0xc}, {0x10, 0xffff}, {0xf, 0xfff2}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_RATE={0x6, 0x5, {0x8}}, @qdisc_kind_options=@q_choke={{0xa}, {0x18, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x4e0, 0x2, 0x6, 0x0, 0x1e, 0x2}}]}}, @qdisc_kind_options=@q_codel={{0xa}, {0x54, 0x2, [@TCA_CODEL_TARGET={0x8}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x4}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_LIMIT={0x8, 0x2, 0x2}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x80}, @TCA_CODEL_TARGET={0x8, 0x1, 0xb9}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_INTERVAL={0x8, 0x3, 0x7}, @TCA_CODEL_LIMIT={0x8, 0x2, 0x5}]}}, @TCA_STAB={0xf8, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x8, 0xc000, 0x9, 0x1, 0x80000001, 0x4, 0xa}}, {0x18, 0x2, [0x3, 0x4, 0x3, 0xff, 0x200, 0xfe01, 0x7, 0x8, 0x0, 0x2]}}, {{0x1c, 0x1, {0x0, 0x20, 0x1, 0xfc000, 0x1}}, {0x4}}, {{0x1c, 0x1, {0x3, 0x11, 0x100, 0x5, 0x0, 0x2dd, 0x7fff, 0x4}}, {0xc, 0x2, [0x6, 0x100, 0x2, 0x71]}}, {{0x1c, 0x1, {0x0, 0x40, 0x5, 0x3, 0x2}}, {0x4}}, {{0x1c, 0x1, {0x4, 0x8, 0x1ff, 0x3ff, 0x2, 0x5, 0x9, 0x5}}, {0xe, 0x2, [0x1, 0x1, 0xb41, 0x0, 0x8]}}, {{0x1c, 0x1, {0x9, 0x3f, 0x4, 0x3, 0x0, 0x4, 0x9, 0x5}}, {0xe, 0x2, [0x0, 0x0, 0x5ca, 0xfff, 0xfffb]}}]}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x81}]}, 0x1b8}, 0x1, 0x0, 0x0, 0x20000110}, 0x800)
connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10)
writev(r2, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1)
recvmmsg(r2, &(0x7f0000003e40)=[{{0x0, 0x3, 0x0, 0x0, &(0x7f00000035c0)=""/241, 0xf1}}, {{&(0x7f00000036c0)=@un=@abs, 0x80, &(0x7f0000003780)=[{&(0x7f0000003740)=""/4, 0x7ffff}], 0x1, &(0x7f00000037c0)=""/236, 0xec}}, {{0x0, 0x0, &(0x7f0000003bc0)=[{0x0, 0xe00000000000000}, {&(0x7f0000003a00)=""/190, 0xbe}, {&(0x7f0000003ac0)=""/131, 0x83}, {0x0}], 0x4, &(0x7f0000003c00)=""/73, 0x49}}, {{&(0x7f0000003c80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, 0x0, 0x0, &(0x7f0000003e00)=""/48, 0x30}}], 0x4, 0x40000121, 0x0)
shutdown(r2, 0x0)

13:46:00 executing program 4:
r0 = gettid()
kcmp$KCMP_EPOLL_TFD(0xffffffffffffffff, r0, 0x7, 0xffffffffffffffff, 0x0)

13:46:00 executing program 0:
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000400), 0x20c0, 0x0)

13:46:00 executing program 4:
r0 = epoll_create(0x6)
pipe2$watch_queue(&(0x7f0000000880)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000040)={0xa0002013})

13:46:00 executing program 5:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000240)={@val={0x0, 0x86dd}, @val={0x5, 0x0, 0x0, 0x0, 0x54}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "000003", 0x17c, 0x3a, 0x0, @empty, @mcast2, {[@routing={0x0, 0x2, 0x0, 0x0, 0x0, [@empty]}], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x0, "ee7b615d"}, {}, {0x2b, 0x3, "6f8c008275021d683910c309293188a7c747eb2278d2794784"}, {0x0, 0x26, "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"}]}}}}}, 0x1b2)

13:46:00 executing program 3:
r0 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r0)
getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400ee5c99f8435ecde50a0412", @ANYRES32=r1, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket(0x1, 0x803, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="50000000100001040000ff0f0000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e00000000180002800c0002001c0000001b000000060001000100000008000500", @ANYRES32=r4], 0x50}}, 0x0)
r5 = socket(0x1, 0x803, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080))
r7 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x1e}}]}}}, @IFLA_LINK={0x8, 0x5, r6}]}, 0x50}}, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = socket(0x1, 0x803, 0x0)
getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000540)=ANY=[@ANYBLOB="20000000110003040000007bb000000000000000", @ANYRES32=r10], 0x20}}, 0x0)

13:46:00 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r0)
syz_genetlink_get_family_id$devlink(&(0x7f0000000180), r0)

13:46:01 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f000000c380)='/proc/crypto\x00', 0x0, 0x0)
read$FUSE(r3, &(0x7f0000000200)={0x2020}, 0x2020)
execve(&(0x7f0000000040)='./file0/file0\x00', 0x0, &(0x7f0000000380)=[&(0x7f00000002c0)='*$%}\xce*\x00', &(0x7f0000000300)='\x00'])

13:46:01 executing program 4:
socket$inet_udplite(0x2, 0x2, 0x88)
socket$inet_udplite(0x2, 0x2, 0x88)
r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x500, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)

13:46:01 executing program 3:
r0 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r0)
getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400ee5c99f8435ecde50a0412", @ANYRES32=r1, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket(0x1, 0x803, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="50000000100001040000ff0f0000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e00000000180002800c0002001c0000001b000000060001000100000008000500", @ANYRES32=r4], 0x50}}, 0x0)
r5 = socket(0x1, 0x803, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080))
r7 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x1e}}]}}}, @IFLA_LINK={0x8, 0x5, r6}]}, 0x50}}, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = socket(0x1, 0x803, 0x0)
getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000540)=ANY=[@ANYBLOB="20000000110003040000007bb000000000000000", @ANYRES32=r10], 0x20}}, 0x0)

13:46:01 executing program 0:
syz_open_dev$sndpcmp(&(0x7f0000001640), 0x0, 0x0)

13:46:01 executing program 5:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000240)={@val={0x0, 0x86dd}, @val={0x5, 0x0, 0x0, 0x0, 0x54}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "000003", 0x17c, 0x3a, 0x0, @empty, @mcast2, {[@routing={0x0, 0x2, 0x0, 0x0, 0x0, [@empty]}], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x0, "ee7b615d"}, {}, {0x2b, 0x3, "6f8c008275021d683910c309293188a7c747eb2278d2794784"}, {0x0, 0x26, "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"}]}}}}}, 0x1b2)

13:46:01 executing program 2:
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
syz_genetlink_get_family_id$tipc(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$NFT_BATCH(r1, &(0x7f00000015c0)={&(0x7f0000000300), 0xc, &(0x7f0000001580)={&(0x7f00000014c0)={{0x14}, [@NFT_MSG_NEWRULE={0x20, 0x6, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFTA_RULE_EXPRESSIONS={0x4}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}]}, @NFT_MSG_DELSETELEM={0x1c, 0xe, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}]}], {0x14}}, 0x64}, 0x1, 0x0, 0x0, 0x1}, 0x1)
getsockname$packet(0xffffffffffffffff, &(0x7f0000001340), &(0x7f0000001380)=0x14)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r1, 0x0, 0x0)
sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, 0x0, 0x0)
getsockname(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001400)={&(0x7f0000000140), 0xc, &(0x7f0000000340)={&(0x7f0000000f00)=@newqdisc={0x1b8, 0x24, 0x0, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0xc}, {0x10, 0xffff}, {0xf, 0xfff2}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_RATE={0x6, 0x5, {0x8}}, @qdisc_kind_options=@q_choke={{0xa}, {0x18, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x4e0, 0x2, 0x6, 0x0, 0x1e, 0x2}}]}}, @qdisc_kind_options=@q_codel={{0xa}, {0x54, 0x2, [@TCA_CODEL_TARGET={0x8}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x4}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_LIMIT={0x8, 0x2, 0x2}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x80}, @TCA_CODEL_TARGET={0x8, 0x1, 0xb9}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_INTERVAL={0x8, 0x3, 0x7}, @TCA_CODEL_LIMIT={0x8, 0x2, 0x5}]}}, @TCA_STAB={0xf8, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x8, 0xc000, 0x9, 0x1, 0x80000001, 0x4, 0xa}}, {0x18, 0x2, [0x3, 0x4, 0x3, 0xff, 0x200, 0xfe01, 0x7, 0x8, 0x0, 0x2]}}, {{0x1c, 0x1, {0x0, 0x20, 0x1, 0xfc000, 0x1}}, {0x4}}, {{0x1c, 0x1, {0x3, 0x11, 0x100, 0x5, 0x0, 0x2dd, 0x7fff, 0x4}}, {0xc, 0x2, [0x6, 0x100, 0x2, 0x71]}}, {{0x1c, 0x1, {0x0, 0x40, 0x5, 0x3, 0x2}}, {0x4}}, {{0x1c, 0x1, {0x4, 0x8, 0x1ff, 0x3ff, 0x2, 0x5, 0x9, 0x5}}, {0xe, 0x2, [0x1, 0x1, 0xb41, 0x0, 0x8]}}, {{0x1c, 0x1, {0x9, 0x3f, 0x4, 0x3, 0x0, 0x4, 0x9, 0x5}}, {0xe, 0x2, [0x0, 0x0, 0x5ca, 0xfff, 0xfffb]}}]}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x81}]}, 0x1b8}, 0x1, 0x0, 0x0, 0x20000110}, 0x800)
connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10)
writev(r2, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1)
recvmmsg(r2, &(0x7f0000003e40)=[{{0x0, 0x3, 0x0, 0x0, &(0x7f00000035c0)=""/241, 0xf1}}, {{&(0x7f00000036c0)=@un=@abs, 0x80, &(0x7f0000003780)=[{&(0x7f0000003740)=""/4, 0x7ffff}], 0x1, &(0x7f00000037c0)=""/236, 0xec}}, {{0x0, 0x0, &(0x7f0000003bc0)=[{0x0, 0xe00000000000000}, {&(0x7f0000003a00)=""/190, 0xbe}, {&(0x7f0000003ac0)=""/131, 0x83}, {0x0}], 0x4, &(0x7f0000003c00)=""/73, 0x49}}, {{&(0x7f0000003c80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, 0x0, 0x0, &(0x7f0000003e00)=""/48, 0x30}}], 0x4, 0x40000121, 0x0)
shutdown(r2, 0x0)

13:46:01 executing program 0:
keyctl$restrict_keyring(0x1d, 0xfffffffffffffffd, &(0x7f0000000000)='.dead\x00', &(0x7f0000000140)='\xdb\x15\xb3\xd8\x9fBx]\xaar\x9d6\\5S/+\x00\x02\x9e{I\x87\xc4\x16\r2M8\xc9I\x86\xe6)\xd9\xe3\xc6\xd6\xef}o\x95\x17hM\x7fj\xd5iMA\xff\xfc\xf8\xcb\xbd\x0f\xc4\xa7\x88\xc2\xac\xfd\am\x1aV6\xe1\xc8\xd5\t\x94.VM\xc8\x88\x91\xf8>\x104\x92\fF\x8f\xb0k\x84\x7f \x17\x97/Z\xdd\xf6v\xcc\xb2\x85\x17M9&\xd0\x15\x98\'8\xe7v\x1e&\x85\xef\r`q\xdb\xa2\x03P\x85\x0e\xb5\x9dB1\xf2\xa1\xe9\xaf\x02\x00!5\xb3\xa2@\xb5\xa6\x9c\xd8\xd3\xa9\xaa\xcc{\xdb\xd5p\b\x13r\xb3\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8f\x80\xce\x10\x18a9\x90\x10\xeb\x04I\x8a\xad\x86#\xac\x96\xffz$m\t\xed\x1e\x93\xc8h\f\x986\xe6\x84\xd68)\xc5`\x13\x05\xe7\x10\xd5\x927+`|1>\x05\xe9\x1d\xaa\x12\x8cD\x1d\xde\xdb\xa4\xc6\x12\xcf\xcc`\xbd\x88\xb2\x06\xc2\xea\xda\xe9\x16\xf7\x83\xe1\x9c)\xa4k{\x13[\xc40\x88+Z\xcb\t\xb1]\xa0!D5\xfa\xc8\x8f\xd0\xa4\xca\xc8X\xe6o\x1c\xfa\xb5\a\xad\xb2\x94\xdc\a\x17\xca\x00\xb3zj\n4\xd86\x9b\x8d\xf2\xc7\x1eE\x98\x91V[')

13:46:01 executing program 4:
keyctl$search(0x11, 0x0, 0x0, 0x0, 0xfffffffffffffff8)

13:46:01 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x0, 0x803, 0x0)
syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r1)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400ee5c99f8435ecde50a0412", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x1, 0x803, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="50000000100001040000ff0f0000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e00000000180002800c0002001c0000001b000000060001000100000008000500", @ANYRES32=r5], 0x50}}, 0x0)
r6 = socket(0x1, 0x803, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080))
r8 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x1e}}]}}}, @IFLA_LINK={0x8, 0x5, r7}]}, 0x50}}, 0x0)
r9 = socket$nl_route(0x10, 0x3, 0x0)
r10 = socket(0x1, 0x803, 0x0)
getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, <r11=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r9, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000540)=ANY=[@ANYBLOB="20000000110003040000007bb000000000000000", @ANYRES32=r11], 0x20}}, 0x0)

13:46:01 executing program 0:
keyctl$search(0x1e, 0x0, 0x0, 0x0, 0xfffffffffffffff8)

13:46:01 executing program 5:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000240)={@val={0x0, 0x86dd}, @val={0x5, 0x0, 0x0, 0x0, 0x54}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "000003", 0x17c, 0x3a, 0x0, @empty, @mcast2, {[@routing={0x0, 0x2, 0x0, 0x0, 0x0, [@empty]}], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x0, "ee7b615d"}, {}, {0x2b, 0x3, "6f8c008275021d683910c309293188a7c747eb2278d2794784"}, {0x0, 0x26, "4429118927041312255133e4d2b8b863b5f5b4ace38952e94c581c85d2d86844f548415db4dbf1992868a2e15095b531ce55d4620ec637afdcc990a4d6bfecb289917d24b31a2ddeb64383b176b823cc203ec1927487b7a00d6a3446cf7db79e14b2206d882c28611fa4d8289337cd75b4688120c73a2710947b908fde68a05a0777a170a14e85c7849462b3f5c3152cf0f3d91c5db93dc4d8f9e6b53708650dc375e6da3650b5ff4079971f6e3ef363382a16b8ae07b7307b5619092e4669dbca480d25738314135509eda68f712b9b09bdb485ea0914590b7ae01c2e34832f16c23c82b22b6ba550acfcede288a5237a06b3f5e09b6e5a0404544efe1474664b985f070121e82070a9f4513c2031a58a3d99e99284b812c0f047061139620890416c9defce02fa49cd1dd14b22df"}]}}}}}, 0x1b2)

13:46:01 executing program 4:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$inet6_tcp_int(r0, 0x6, 0x22, 0x0, &(0x7f0000000400))

13:46:03 executing program 4:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x202000, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x7fff}, 0x0)
getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000200)={{{@in6=@mcast1, @in6=@empty}}, {{@in6=@private1}, 0x0, @in=@empty}}, 0x0)
ioctl$VT_RESIZE(0xffffffffffffffff, 0x5609, &(0x7f0000000040)={0x8, 0x12, 0x7})
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xe, 0x16, &(0x7f0000002540)=ANY=[@ANYBLOB="611534000000000061134c0000000000bfa000000000000007000000080000002d0301000000000095000000000000006916000000000000bf67000000000000350607000fff07206706000002000000160300000ee60060bf050000000000000f650000000000006507f9ff01000000070700004ddfffff1e75000000000000bf54000000000000070400000400f9ffad4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f1754558f2278af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd399703cac4f6f3be4b369289aa6812b8e007e733a9a4f1b0af3dda82ee45a010fb94fe9de57b9d8a814261bdb94a05000000c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe0185473d51b546cad3f1d5ab2af27546e7c955ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc8da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e0dee5eb106774a8f3e6916dfec88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc206438b8ef4901fd03c16dfda44221b235c8ac86d8a297dff0445a15f21dce431e56723888fb126a163f16f920ae2fb494059bba8e3b680324a188076eb685d55c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20ceca6b941aed5db84eaba6aa57f1ad2e99e0e67ab93716d20000009f0f53acbb40b4f8e2738270b31562ed834f2af97787f696649a462e7ee4bcf8b07a10d6735154beb4000000000000000000000000004000bc00f674629709e7e78f4ddc211bc3ebe6bd9d42ca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253887a5ad103649afa17690884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc47287cd31cc43ea0ffb567b40407d000000210000000000000000005f37d8703f37ca364a601ae899a56715a0a62a34c6c94cce6994521629ab028acfc1d926a0f6a5480a55c22fe3a5ac000000000000000000000000000000c1eb2d91fb79ea00000000000000000000e4007be511fe32fbc90e2364a55e9bb66ac64423d2d00fea2594e190deae46e26c596f84eba90000000000000000fffb0000000082fb0d3cc3aa39ee4b1386bab561cda886fa642994cacd473b543ccb5f0d7b63924f17c67b13631d22a11dc3c693962895496d4f6e9cc54db6c7205a6b068fff496d2da7d6327f31d7c8cc5d325c5379b0363ce8bd1f61b007e1ff5f1be1969a1ba791ad46d800000000c7f26a0337302f3b41eae59809fd05d12f6106f117b062df67d3a6473265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b3042065acaa10856e858d27adee7daf32903d3fc78700d429a2d4c8b6d803eb83eecfe4c7ff9e6ab5a52e83d089dad7a8710e0254f1b11cced7bc3c8da0c44d2ebf9f6f3ff3be4d1458077c2253b0c7c7a0a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631dbaa74f22bad050e9856b48ae3a03a497c37758537650fe6db89da3c41fdc3d78e046f6160e1741299e8dc29906870e6431ed1eab5d067a183f064b060a8ec12725d42f3a74863d66bee966b1574f8e01b3f34a267ff0afa1e1c758a0079b747067312e9815a21cb3f1f815f8989d78854ca4d3116dbc7e2bf2402a75fd7a55733360040855ed5d1c0d634fc5fb38f84d9d87b27f8a5d91217b728f13e3ee20e69e0ffb2780b1a7af137ff7b4ff139604faf0453bedf0c5d744b5272b44c23488b2bdbff947c4dfa108cbb88202eeb81f428a5b3c299848649e1a57ff52f657a67463d7dbf85ae9321fc2cc17dc4a29b9cba8ded5de8206c812439ab129ae818837ee15620789c524b3baf49a0be9bb7d958d5e87c6c09bf71a894bad62934782cc308e936d7637e07c4a2b4dc87b0da20000d9ef418cf19e7a8c4c328be0ce91798adc2dca87ddd9d064e081383409ed2912c811ae630e3212a5331c2a4ead000000000000000000005574d074fa7e93447a88c0fbab48660aae7cdf367ef0e4538279b6113de5b94e1056f443305145c9"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff9f}, 0x48)

13:46:03 executing program 0:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'\x00', 0x4009})
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="030000000000000008001b"], 0x28}}, 0x0)
write$tun(r0, &(0x7f00000024c0)={@val={0x0, 0x86dd}, @val={0x3, 0x0, 0x0, 0x0, 0x41}, @ipv6=@gre_packet={0x0, 0x6, "111547", 0x44, 0x3a, 0x0, @local, @mcast2}}, 0x7a)

13:46:03 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x0, 0x803, 0x0)
syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r1)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400ee5c99f8435ecde50a0412", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x1, 0x803, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="50000000100001040000ff0f0000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e00000000180002800c0002001c0000001b000000060001000100000008000500", @ANYRES32=r5], 0x50}}, 0x0)
r6 = socket(0x1, 0x803, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080))
r8 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x1e}}]}}}, @IFLA_LINK={0x8, 0x5, r7}]}, 0x50}}, 0x0)
r9 = socket$nl_route(0x10, 0x3, 0x0)
r10 = socket(0x1, 0x803, 0x0)
getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, <r11=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r9, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000540)=ANY=[@ANYBLOB="20000000110003040000007bb000000000000000", @ANYRES32=r11], 0x20}}, 0x0)

13:46:03 executing program 5:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000240)={@val={0x0, 0x86dd}, @val={0x5, 0x0, 0x0, 0x0, 0x54}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "000003", 0x186, 0x3a, 0x0, @empty, @mcast2, {[@routing={0x0, 0x2, 0x0, 0x0, 0x0, [@empty]}], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x0, "ee7b615d"}, {}, {0x2b, 0x3, "6f8c008275021d683910c309293188a7c747eb2278d2794784"}, {0x0, 0x27, "4429118927041312255133e4d2b8b863b5f5b4ace38952e94c581c85d2d86844f548415db4dbf1992868a2e15095b531ce55d4620ec637afdcc990a4d6bfecb289917d24b31a2ddeb64383b176b823cc203ec1927487b7a00d6a3446cf7db79e14b2206d882c28611fa4d8289337cd75b4688120c73a2710947b908fde68a05a0777a170a14e85c7849462b3f5c3152cf0f3d91c5db93dc4d8f9e6b53708650dc375e6da3650b5ff4079971f6e3ef363382a16b8ae07b7307b5619092e4669dbca480d25738314135509eda68f712b9b09bdb485ea0914590b7ae01c2e34832f16c23c82b22b6ba550acfcede288a5237a06b3f5e09b6e5a0404544efe1474664b985f070121e82070a9f4513c2031a58a3d99e99284b812c0f047061139620890416c9defce02fa49cd1dd14b22df7250314ccb3dfd9827f8"}]}}}}}, 0x1bc)

13:46:03 executing program 2:
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
syz_genetlink_get_family_id$tipc(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$NFT_BATCH(r1, &(0x7f00000015c0)={&(0x7f0000000300), 0xc, &(0x7f0000001580)={&(0x7f00000014c0)={{0x14}, [@NFT_MSG_NEWRULE={0x20, 0x6, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFTA_RULE_EXPRESSIONS={0x4}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}]}, @NFT_MSG_DELSETELEM={0x1c, 0xe, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}]}], {0x14}}, 0x64}, 0x1, 0x0, 0x0, 0x1}, 0x1)
getsockname$packet(0xffffffffffffffff, &(0x7f0000001340), &(0x7f0000001380)=0x14)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r1, 0x0, 0x0)
sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, 0x0, 0x0)
getsockname(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001400)={&(0x7f0000000140), 0xc, &(0x7f0000000340)={&(0x7f0000000f00)=@newqdisc={0x1b8, 0x24, 0x0, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0xc}, {0x10, 0xffff}, {0xf, 0xfff2}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_RATE={0x6, 0x5, {0x8}}, @qdisc_kind_options=@q_choke={{0xa}, {0x18, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x4e0, 0x2, 0x6, 0x0, 0x1e, 0x2}}]}}, @qdisc_kind_options=@q_codel={{0xa}, {0x54, 0x2, [@TCA_CODEL_TARGET={0x8}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x4}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_LIMIT={0x8, 0x2, 0x2}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x80}, @TCA_CODEL_TARGET={0x8, 0x1, 0xb9}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_INTERVAL={0x8, 0x3, 0x7}, @TCA_CODEL_LIMIT={0x8, 0x2, 0x5}]}}, @TCA_STAB={0xf8, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x8, 0xc000, 0x9, 0x1, 0x80000001, 0x4, 0xa}}, {0x18, 0x2, [0x3, 0x4, 0x3, 0xff, 0x200, 0xfe01, 0x7, 0x8, 0x0, 0x2]}}, {{0x1c, 0x1, {0x0, 0x20, 0x1, 0xfc000, 0x1}}, {0x4}}, {{0x1c, 0x1, {0x3, 0x11, 0x100, 0x5, 0x0, 0x2dd, 0x7fff, 0x4}}, {0xc, 0x2, [0x6, 0x100, 0x2, 0x71]}}, {{0x1c, 0x1, {0x0, 0x40, 0x5, 0x3, 0x2}}, {0x4}}, {{0x1c, 0x1, {0x4, 0x8, 0x1ff, 0x3ff, 0x2, 0x5, 0x9, 0x5}}, {0xe, 0x2, [0x1, 0x1, 0xb41, 0x0, 0x8]}}, {{0x1c, 0x1, {0x9, 0x3f, 0x4, 0x3, 0x0, 0x4, 0x9, 0x5}}, {0xe, 0x2, [0x0, 0x0, 0x5ca, 0xfff, 0xfffb]}}]}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x81}]}, 0x1b8}, 0x1, 0x0, 0x0, 0x20000110}, 0x800)
connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10)
writev(r2, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1)
recvmmsg(r2, &(0x7f0000003e40)=[{{0x0, 0x3, 0x0, 0x0, &(0x7f00000035c0)=""/241, 0xf1}}, {{&(0x7f00000036c0)=@un=@abs, 0x80, &(0x7f0000003780)=[{&(0x7f0000003740)=""/4, 0x7ffff}], 0x1, &(0x7f00000037c0)=""/236, 0xec}}, {{0x0, 0x0, &(0x7f0000003bc0)=[{0x0, 0xe00000000000000}, {&(0x7f0000003a00)=""/190, 0xbe}, {&(0x7f0000003ac0)=""/131, 0x83}, {0x0}], 0x4, &(0x7f0000003c00)=""/73, 0x49}}, {{&(0x7f0000003c80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, 0x0, 0x0, &(0x7f0000003e00)=""/48, 0x30}}], 0x4, 0x40000121, 0x0)
shutdown(r2, 0x0)

13:46:03 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f000000c380)='/proc/crypto\x00', 0x0, 0x0)
read$FUSE(r3, &(0x7f0000000200)={0x2020}, 0x2020)
execve(&(0x7f0000000040)='./file0/file0\x00', 0x0, &(0x7f0000000380)=[&(0x7f00000002c0)='*$%}\xce*\x00', &(0x7f0000000300)='\x00'])

[ 2278.436285][T22918] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
13:46:03 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$inet6_tcp_int(r0, 0x6, 0x13, 0x0, &(0x7f0000000400))

13:46:03 executing program 5:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000240)={@val={0x0, 0x86dd}, @val={0x5, 0x0, 0x0, 0x0, 0x54}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "000003", 0x186, 0x3a, 0x0, @empty, @mcast2, {[@routing={0x0, 0x2, 0x0, 0x0, 0x0, [@empty]}], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x0, "ee7b615d"}, {}, {0x2b, 0x3, "6f8c008275021d683910c309293188a7c747eb2278d2794784"}, {0x0, 0x27, "4429118927041312255133e4d2b8b863b5f5b4ace38952e94c581c85d2d86844f548415db4dbf1992868a2e15095b531ce55d4620ec637afdcc990a4d6bfecb289917d24b31a2ddeb64383b176b823cc203ec1927487b7a00d6a3446cf7db79e14b2206d882c28611fa4d8289337cd75b4688120c73a2710947b908fde68a05a0777a170a14e85c7849462b3f5c3152cf0f3d91c5db93dc4d8f9e6b53708650dc375e6da3650b5ff4079971f6e3ef363382a16b8ae07b7307b5619092e4669dbca480d25738314135509eda68f712b9b09bdb485ea0914590b7ae01c2e34832f16c23c82b22b6ba550acfcede288a5237a06b3f5e09b6e5a0404544efe1474664b985f070121e82070a9f4513c2031a58a3d99e99284b812c0f047061139620890416c9defce02fa49cd1dd14b22df7250314ccb3dfd9827f8"}]}}}}}, 0x1bc)

13:46:03 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x0, 0x803, 0x0)
syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r1)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400ee5c99f8435ecde50a0412", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x1, 0x803, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="50000000100001040000ff0f0000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e00000000180002800c0002001c0000001b000000060001000100000008000500", @ANYRES32=r5], 0x50}}, 0x0)
r6 = socket(0x1, 0x803, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080))
r8 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x1e}}]}}}, @IFLA_LINK={0x8, 0x5, r7}]}, 0x50}}, 0x0)
r9 = socket$nl_route(0x10, 0x3, 0x0)
r10 = socket(0x1, 0x803, 0x0)
getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, <r11=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r9, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000540)=ANY=[@ANYBLOB="20000000110003040000007bb000000000000000", @ANYRES32=r11], 0x20}}, 0x0)

13:46:04 executing program 0:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff})
recvfrom$unix(r0, 0x0, 0x0, 0x0, 0x0, 0x0)
wait4(0x0, 0x0, 0x0, 0x0)

13:46:04 executing program 2:
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
syz_genetlink_get_family_id$tipc(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$NFT_BATCH(r1, &(0x7f00000015c0)={&(0x7f0000000300), 0xc, &(0x7f0000001580)={&(0x7f00000014c0)={{0x14}, [@NFT_MSG_NEWRULE={0x20, 0x6, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFTA_RULE_EXPRESSIONS={0x4}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}]}, @NFT_MSG_DELSETELEM={0x1c, 0xe, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}]}], {0x14}}, 0x64}, 0x1, 0x0, 0x0, 0x1}, 0x1)
getsockname$packet(0xffffffffffffffff, &(0x7f0000001340), &(0x7f0000001380)=0x14)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r1, 0x0, 0x0)
sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, 0x0, 0x0)
getsockname(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001400)={&(0x7f0000000140), 0xc, &(0x7f0000000340)={&(0x7f0000000f00)=@newqdisc={0x1b8, 0x24, 0x0, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0xc}, {0x10, 0xffff}, {0xf, 0xfff2}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_RATE={0x6, 0x5, {0x8}}, @qdisc_kind_options=@q_choke={{0xa}, {0x18, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x4e0, 0x2, 0x6, 0x0, 0x1e, 0x2}}]}}, @qdisc_kind_options=@q_codel={{0xa}, {0x54, 0x2, [@TCA_CODEL_TARGET={0x8}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x4}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_LIMIT={0x8, 0x2, 0x2}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x80}, @TCA_CODEL_TARGET={0x8, 0x1, 0xb9}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_INTERVAL={0x8, 0x3, 0x7}, @TCA_CODEL_LIMIT={0x8, 0x2, 0x5}]}}, @TCA_STAB={0xf8, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x8, 0xc000, 0x9, 0x1, 0x80000001, 0x4, 0xa}}, {0x18, 0x2, [0x3, 0x4, 0x3, 0xff, 0x200, 0xfe01, 0x7, 0x8, 0x0, 0x2]}}, {{0x1c, 0x1, {0x0, 0x20, 0x1, 0xfc000, 0x1}}, {0x4}}, {{0x1c, 0x1, {0x3, 0x11, 0x100, 0x5, 0x0, 0x2dd, 0x7fff, 0x4}}, {0xc, 0x2, [0x6, 0x100, 0x2, 0x71]}}, {{0x1c, 0x1, {0x0, 0x40, 0x5, 0x3, 0x2}}, {0x4}}, {{0x1c, 0x1, {0x4, 0x8, 0x1ff, 0x3ff, 0x2, 0x5, 0x9, 0x5}}, {0xe, 0x2, [0x1, 0x1, 0xb41, 0x0, 0x8]}}, {{0x1c, 0x1, {0x9, 0x3f, 0x4, 0x3, 0x0, 0x4, 0x9, 0x5}}, {0xe, 0x2, [0x0, 0x0, 0x5ca, 0xfff, 0xfffb]}}]}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x81}]}, 0x1b8}, 0x1, 0x0, 0x0, 0x20000110}, 0x800)
connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10)
writev(r2, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1)
recvmmsg(r2, &(0x7f0000003e40)=[{{0x0, 0x3, 0x0, 0x0, &(0x7f00000035c0)=""/241, 0xf1}}, {{&(0x7f00000036c0)=@un=@abs, 0x80, &(0x7f0000003780)=[{&(0x7f0000003740)=""/4, 0x7ffff}], 0x1, &(0x7f00000037c0)=""/236, 0xec}}, {{0x0, 0x0, &(0x7f0000003bc0)=[{0x0, 0xe00000000000000}, {&(0x7f0000003a00)=""/190, 0xbe}, {&(0x7f0000003ac0)=""/131, 0x83}, {0x0}], 0x4, &(0x7f0000003c00)=""/73, 0x49}}, {{&(0x7f0000003c80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, 0x0, 0x0, &(0x7f0000003e00)=""/48, 0x30}}], 0x4, 0x40000121, 0x0)
shutdown(r2, 0x0)

13:46:04 executing program 5:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000240)={@val={0x0, 0x86dd}, @val={0x5, 0x0, 0x0, 0x0, 0x54}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "000003", 0x186, 0x3a, 0x0, @empty, @mcast2, {[@routing={0x0, 0x2, 0x0, 0x0, 0x0, [@empty]}], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x0, "ee7b615d"}, {}, {0x2b, 0x3, "6f8c008275021d683910c309293188a7c747eb2278d2794784"}, {0x0, 0x27, "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"}]}}}}}, 0x1bc)

13:46:06 executing program 4:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x202000, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x7fff}, 0x0)
getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000200)={{{@in6=@mcast1, @in6=@empty}}, {{@in6=@private1}, 0x0, @in=@empty}}, 0x0)
ioctl$VT_RESIZE(0xffffffffffffffff, 0x5609, &(0x7f0000000040)={0x8, 0x12, 0x7})
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xe, 0x16, &(0x7f0000002540)=ANY=[@ANYBLOB="611534000000000061134c0000000000bfa000000000000007000000080000002d0301000000000095000000000000006916000000000000bf67000000000000350607000fff07206706000002000000160300000ee60060bf050000000000000f650000000000006507f9ff01000000070700004ddfffff1e75000000000000bf54000000000000070400000400f9ffad4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f1754558f2278af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd399703cac4f6f3be4b369289aa6812b8e007e733a9a4f1b0af3dda82ee45a010fb94fe9de57b9d8a814261bdb94a05000000c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe0185473d51b546cad3f1d5ab2af27546e7c955ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc8da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e0dee5eb106774a8f3e6916dfec88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc206438b8ef4901fd03c16dfda44221b235c8ac86d8a297dff0445a15f21dce431e56723888fb126a163f16f920ae2fb494059bba8e3b680324a188076eb685d55c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20ceca6b941aed5db84eaba6aa57f1ad2e99e0e67ab93716d20000009f0f53acbb40b4f8e2738270b31562ed834f2af97787f696649a462e7ee4bcf8b07a10d6735154beb4000000000000000000000000004000bc00f674629709e7e78f4ddc211bc3ebe6bd9d42ca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253887a5ad103649afa17690884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc47287cd31cc43ea0ffb567b40407d000000210000000000000000005f37d8703f37ca364a601ae899a56715a0a62a34c6c94cce6994521629ab028acfc1d926a0f6a5480a55c22fe3a5ac000000000000000000000000000000c1eb2d91fb79ea00000000000000000000e4007be511fe32fbc90e2364a55e9bb66ac64423d2d00fea2594e190deae46e26c596f84eba90000000000000000fffb0000000082fb0d3cc3aa39ee4b1386bab561cda886fa642994cacd473b543ccb5f0d7b63924f17c67b13631d22a11dc3c693962895496d4f6e9cc54db6c7205a6b068fff496d2da7d6327f31d7c8cc5d325c5379b0363ce8bd1f61b007e1ff5f1be1969a1ba791ad46d800000000c7f26a0337302f3b41eae59809fd05d12f6106f117b062df67d3a6473265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b3042065acaa10856e858d27adee7daf32903d3fc78700d429a2d4c8b6d803eb83eecfe4c7ff9e6ab5a52e83d089dad7a8710e0254f1b11cced7bc3c8da0c44d2ebf9f6f3ff3be4d1458077c2253b0c7c7a0a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631dbaa74f22bad050e9856b48ae3a03a497c37758537650fe6db89da3c41fdc3d78e046f6160e1741299e8dc29906870e6431ed1eab5d067a183f064b060a8ec12725d42f3a74863d66bee966b1574f8e01b3f34a267ff0afa1e1c758a0079b747067312e9815a21cb3f1f815f8989d78854ca4d3116dbc7e2bf2402a75fd7a55733360040855ed5d1c0d634fc5fb38f84d9d87b27f8a5d91217b728f13e3ee20e69e0ffb2780b1a7af137ff7b4ff139604faf0453bedf0c5d744b5272b44c23488b2bdbff947c4dfa108cbb88202eeb81f428a5b3c299848649e1a57ff52f657a67463d7dbf85ae9321fc2cc17dc4a29b9cba8ded5de8206c812439ab129ae818837ee15620789c524b3baf49a0be9bb7d958d5e87c6c09bf71a894bad62934782cc308e936d7637e07c4a2b4dc87b0da20000d9ef418cf19e7a8c4c328be0ce91798adc2dca87ddd9d064e081383409ed2912c811ae630e3212a5331c2a4ead000000000000000000005574d074fa7e93447a88c0fbab48660aae7cdf367ef0e4538279b6113de5b94e1056f443305145c9"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff9f}, 0x48)

13:46:06 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x0, 0x0)
syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r1)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400ee5c99f8435ecde50a0412", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x1, 0x803, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="50000000100001040000ff0f0000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e00000000180002800c0002001c0000001b000000060001000100000008000500", @ANYRES32=r5], 0x50}}, 0x0)
r6 = socket(0x1, 0x803, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080))
r8 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x1e}}]}}}, @IFLA_LINK={0x8, 0x5, r7}]}, 0x50}}, 0x0)
r9 = socket$nl_route(0x10, 0x3, 0x0)
r10 = socket(0x1, 0x803, 0x0)
getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, <r11=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r9, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000540)=ANY=[@ANYBLOB="20000000110003040000007bb000000000000000", @ANYRES32=r11], 0x20}}, 0x0)

13:46:06 executing program 0:
bpf$MAP_CREATE(0x18, &(0x7f0000000440)=@bloom_filter={0x1e, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xa4)

13:46:06 executing program 5:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000240)={@val={0x0, 0x86dd}, @val={0x5, 0x0, 0x0, 0x0, 0x54}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "000003", 0x18b, 0x3a, 0x0, @empty, @mcast2, {[@routing={0x0, 0x2, 0x0, 0x0, 0x0, [@empty]}], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x0, "ee7b615d"}, {}, {0x2b, 0x3, "6f8c008275021d683910c309293188a7c747eb2278d2794784"}, {0x0, 0x28, "4429118927041312255133e4d2b8b863b5f5b4ace38952e94c581c85d2d86844f548415db4dbf1992868a2e15095b531ce55d4620ec637afdcc990a4d6bfecb289917d24b31a2ddeb64383b176b823cc203ec1927487b7a00d6a3446cf7db79e14b2206d882c28611fa4d8289337cd75b4688120c73a2710947b908fde68a05a0777a170a14e85c7849462b3f5c3152cf0f3d91c5db93dc4d8f9e6b53708650dc375e6da3650b5ff4079971f6e3ef363382a16b8ae07b7307b5619092e4669dbca480d25738314135509eda68f712b9b09bdb485ea0914590b7ae01c2e34832f16c23c82b22b6ba550acfcede288a5237a06b3f5e09b6e5a0404544efe1474664b985f070121e82070a9f4513c2031a58a3d99e99284b812c0f047061139620890416c9defce02fa49cd1dd14b22df7250314ccb3dfd9827f89265691115"}]}}}}}, 0x1c1)

13:46:06 executing program 2:
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
syz_genetlink_get_family_id$tipc(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$NFT_BATCH(r1, &(0x7f00000015c0)={&(0x7f0000000300), 0xc, &(0x7f0000001580)={&(0x7f00000014c0)={{0x14}, [@NFT_MSG_NEWRULE={0x20, 0x6, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFTA_RULE_EXPRESSIONS={0x4}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}]}, @NFT_MSG_DELSETELEM={0x1c, 0xe, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}]}], {0x14}}, 0x64}}, 0x1)
getsockname$packet(0xffffffffffffffff, &(0x7f0000001340), &(0x7f0000001380)=0x14)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r1, 0x0, 0x0)
sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, 0x0, 0x0)
getsockname(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001400)={&(0x7f0000000140), 0xc, &(0x7f0000000340)={&(0x7f0000000f00)=@newqdisc={0x1b8, 0x24, 0x0, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0xc}, {0x10, 0xffff}, {0xf, 0xfff2}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_RATE={0x6, 0x5, {0x8}}, @qdisc_kind_options=@q_choke={{0xa}, {0x18, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x4e0, 0x2, 0x6, 0x0, 0x1e, 0x2}}]}}, @qdisc_kind_options=@q_codel={{0xa}, {0x54, 0x2, [@TCA_CODEL_TARGET={0x8}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x4}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_LIMIT={0x8, 0x2, 0x2}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x80}, @TCA_CODEL_TARGET={0x8, 0x1, 0xb9}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_INTERVAL={0x8, 0x3, 0x7}, @TCA_CODEL_LIMIT={0x8, 0x2, 0x5}]}}, @TCA_STAB={0xf8, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x8, 0xc000, 0x9, 0x1, 0x80000001, 0x4, 0xa}}, {0x18, 0x2, [0x3, 0x4, 0x3, 0xff, 0x200, 0xfe01, 0x7, 0x8, 0x0, 0x2]}}, {{0x1c, 0x1, {0x0, 0x20, 0x1, 0xfc000, 0x1}}, {0x4}}, {{0x1c, 0x1, {0x3, 0x11, 0x100, 0x5, 0x0, 0x2dd, 0x7fff, 0x4}}, {0xc, 0x2, [0x6, 0x100, 0x2, 0x71]}}, {{0x1c, 0x1, {0x0, 0x40, 0x5, 0x3, 0x2}}, {0x4}}, {{0x1c, 0x1, {0x4, 0x8, 0x1ff, 0x3ff, 0x2, 0x5, 0x9, 0x5}}, {0xe, 0x2, [0x1, 0x1, 0xb41, 0x0, 0x8]}}, {{0x1c, 0x1, {0x9, 0x3f, 0x4, 0x3, 0x0, 0x4, 0x9, 0x5}}, {0xe, 0x2, [0x0, 0x0, 0x5ca, 0xfff, 0xfffb]}}]}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x81}]}, 0x1b8}, 0x1, 0x0, 0x0, 0x20000110}, 0x800)
connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10)
writev(r2, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1)
recvmmsg(r2, &(0x7f0000003e40)=[{{0x0, 0x3, 0x0, 0x0, &(0x7f00000035c0)=""/241, 0xf1}}, {{&(0x7f00000036c0)=@un=@abs, 0x80, &(0x7f0000003780)=[{&(0x7f0000003740)=""/4, 0x7ffff}], 0x1, &(0x7f00000037c0)=""/236, 0xec}}, {{0x0, 0x0, &(0x7f0000003bc0)=[{0x0, 0xe00000000000000}, {&(0x7f0000003a00)=""/190, 0xbe}, {&(0x7f0000003ac0)=""/131, 0x83}, {0x0}], 0x4, &(0x7f0000003c00)=""/73, 0x49}}, {{&(0x7f0000003c80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, 0x0, 0x0, &(0x7f0000003e00)=""/48, 0x30}}], 0x4, 0x40000121, 0x0)
shutdown(r2, 0x0)

13:46:06 executing program 0:
r0 = socket(0xa, 0x2, 0x0)
ioctl$sock_qrtr_TIOCINQ(r0, 0x541b, &(0x7f0000000100))

13:46:06 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f000000c380)='/proc/crypto\x00', 0x0, 0x0)
read$FUSE(r3, &(0x7f0000000200)={0x2020}, 0x2020)
execve(&(0x7f0000000040)='./file0/file0\x00', 0x0, &(0x7f0000000380)=[&(0x7f00000002c0)='*$%}\xce*\x00', &(0x7f0000000300)='\x00'])

13:46:06 executing program 5:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000240)={@val={0x0, 0x86dd}, @val={0x5, 0x0, 0x0, 0x0, 0x54}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "000003", 0x18b, 0x3a, 0x0, @empty, @mcast2, {[@routing={0x0, 0x2, 0x0, 0x0, 0x0, [@empty]}], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x0, "ee7b615d"}, {}, {0x2b, 0x3, "6f8c008275021d683910c309293188a7c747eb2278d2794784"}, {0x0, 0x28, "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"}]}}}}}, 0x1c1)

13:46:06 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x0, 0x0)
syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r1)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400ee5c99f8435ecde50a0412", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x1, 0x803, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="50000000100001040000ff0f0000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e00000000180002800c0002001c0000001b000000060001000100000008000500", @ANYRES32=r5], 0x50}}, 0x0)
r6 = socket(0x1, 0x803, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080))
r8 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x1e}}]}}}, @IFLA_LINK={0x8, 0x5, r7}]}, 0x50}}, 0x0)
r9 = socket$nl_route(0x10, 0x3, 0x0)
r10 = socket(0x1, 0x803, 0x0)
getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, <r11=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r9, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000540)=ANY=[@ANYBLOB="20000000110003040000007bb000000000000000", @ANYRES32=r11], 0x20}}, 0x0)

13:46:06 executing program 0:
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x6, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x6}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)}, 0x90)

13:46:06 executing program 0:
bpf$BPF_PROG_QUERY(0x9, &(0x7f0000000100)={@ifindex, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)

13:46:06 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x0, 0x0)
syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r1)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400ee5c99f8435ecde50a0412", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x1, 0x803, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="50000000100001040000ff0f0000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e00000000180002800c0002001c0000001b000000060001000100000008000500", @ANYRES32=r5], 0x50}}, 0x0)
r6 = socket(0x1, 0x803, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080))
r8 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x1e}}]}}}, @IFLA_LINK={0x8, 0x5, r7}]}, 0x50}}, 0x0)
r9 = socket$nl_route(0x10, 0x3, 0x0)
r10 = socket(0x1, 0x803, 0x0)
getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, <r11=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r9, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000540)=ANY=[@ANYBLOB="20000000110003040000007bb000000000000000", @ANYRES32=r11], 0x20}}, 0x0)

13:46:08 executing program 4:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x202000, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x7fff}, 0x0)
getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000200)={{{@in6=@mcast1, @in6=@empty}}, {{@in6=@private1}, 0x0, @in=@empty}}, 0x0)
ioctl$VT_RESIZE(0xffffffffffffffff, 0x5609, &(0x7f0000000040)={0x8, 0x12, 0x7})
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xe, 0x16, &(0x7f0000002540)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff9f}, 0x48)

13:46:08 executing program 0:
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000100)={@ifindex, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
arch_prctl$ARCH_GET_GS(0x1004, &(0x7f0000000400))

13:46:08 executing program 5:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000240)={@val={0x0, 0x86dd}, @val={0x5, 0x0, 0x0, 0x0, 0x54}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "000003", 0x18b, 0x3a, 0x0, @empty, @mcast2, {[@routing={0x0, 0x2, 0x0, 0x0, 0x0, [@empty]}], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x0, "ee7b615d"}, {}, {0x2b, 0x3, "6f8c008275021d683910c309293188a7c747eb2278d2794784"}, {0x0, 0x28, "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"}]}}}}}, 0x1c1)

13:46:08 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$ipvs(0x0, r1)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400ee5c99f8435ecde50a0412", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x1, 0x803, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="50000000100001040000ff0f0000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e00000000180002800c0002001c0000001b000000060001000100000008000500", @ANYRES32=r5], 0x50}}, 0x0)
r6 = socket(0x1, 0x803, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080))
r8 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x1e}}]}}}, @IFLA_LINK={0x8, 0x5, r7}]}, 0x50}}, 0x0)
r9 = socket$nl_route(0x10, 0x3, 0x0)
r10 = socket(0x1, 0x803, 0x0)
getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, <r11=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r9, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000540)=ANY=[@ANYBLOB="20000000110003040000007bb000000000000000", @ANYRES32=r11], 0x20}}, 0x0)

13:46:08 executing program 2:
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
syz_genetlink_get_family_id$tipc(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$NFT_BATCH(r1, &(0x7f00000015c0)={&(0x7f0000000300), 0xc, &(0x7f0000001580)={&(0x7f00000014c0)={{0x14}, [@NFT_MSG_NEWRULE={0x20, 0x6, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFTA_RULE_EXPRESSIONS={0x4}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}]}, @NFT_MSG_DELSETELEM={0x1c, 0xe, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}]}], {0x14}}, 0x64}}, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000001340), &(0x7f0000001380)=0x14)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r1, 0x0, 0x0)
sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, 0x0, 0x0)
getsockname(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001400)={&(0x7f0000000140), 0xc, &(0x7f0000000340)={&(0x7f0000000f00)=@newqdisc={0x1b8, 0x24, 0x0, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0xc}, {0x10, 0xffff}, {0xf, 0xfff2}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_RATE={0x6, 0x5, {0x8}}, @qdisc_kind_options=@q_choke={{0xa}, {0x18, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x4e0, 0x2, 0x6, 0x0, 0x1e, 0x2}}]}}, @qdisc_kind_options=@q_codel={{0xa}, {0x54, 0x2, [@TCA_CODEL_TARGET={0x8}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x4}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_LIMIT={0x8, 0x2, 0x2}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x80}, @TCA_CODEL_TARGET={0x8, 0x1, 0xb9}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_INTERVAL={0x8, 0x3, 0x7}, @TCA_CODEL_LIMIT={0x8, 0x2, 0x5}]}}, @TCA_STAB={0xf8, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x8, 0xc000, 0x9, 0x1, 0x80000001, 0x4, 0xa}}, {0x18, 0x2, [0x3, 0x4, 0x3, 0xff, 0x200, 0xfe01, 0x7, 0x8, 0x0, 0x2]}}, {{0x1c, 0x1, {0x0, 0x20, 0x1, 0xfc000, 0x1}}, {0x4}}, {{0x1c, 0x1, {0x3, 0x11, 0x100, 0x5, 0x0, 0x2dd, 0x7fff, 0x4}}, {0xc, 0x2, [0x6, 0x100, 0x2, 0x71]}}, {{0x1c, 0x1, {0x0, 0x40, 0x5, 0x3, 0x2}}, {0x4}}, {{0x1c, 0x1, {0x4, 0x8, 0x1ff, 0x3ff, 0x2, 0x5, 0x9, 0x5}}, {0xe, 0x2, [0x1, 0x1, 0xb41, 0x0, 0x8]}}, {{0x1c, 0x1, {0x9, 0x3f, 0x4, 0x3, 0x0, 0x4, 0x9, 0x5}}, {0xe, 0x2, [0x0, 0x0, 0x5ca, 0xfff, 0xfffb]}}]}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x81}]}, 0x1b8}, 0x1, 0x0, 0x0, 0x20000110}, 0x800)
connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10)
writev(r2, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1)
recvmmsg(r2, &(0x7f0000003e40)=[{{0x0, 0x3, 0x0, 0x0, &(0x7f00000035c0)=""/241, 0xf1}}, {{&(0x7f00000036c0)=@un=@abs, 0x80, &(0x7f0000003780)=[{&(0x7f0000003740)=""/4, 0x7ffff}], 0x1, &(0x7f00000037c0)=""/236, 0xec}}, {{0x0, 0x0, &(0x7f0000003bc0)=[{0x0, 0xe00000000000000}, {&(0x7f0000003a00)=""/190, 0xbe}, {&(0x7f0000003ac0)=""/131, 0x83}, {0x0}], 0x4, &(0x7f0000003c00)=""/73, 0x49}}, {{&(0x7f0000003c80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, 0x0, 0x0, &(0x7f0000003e00)=""/48, 0x30}}], 0x4, 0x40000121, 0x0)
shutdown(r2, 0x0)

13:46:08 executing program 0:
r0 = socket(0x25, 0x5, 0x0)
sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x58}}, 0x2c004041)

[ 2283.402795][T22993] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'.
13:46:08 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f000000c380)='/proc/crypto\x00', 0x0, 0x0)
read$FUSE(r3, &(0x7f0000000200)={0x2020}, 0x2020)
execve(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000280)=[0x0], &(0x7f0000000380)=[&(0x7f00000002c0)='*$%}\xce*\x00', &(0x7f0000000300)='\x00'])

13:46:08 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$ipvs(0x0, r1)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400ee5c99f8435ecde50a0412", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x1, 0x803, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="50000000100001040000ff0f0000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e00000000180002800c0002001c0000001b000000060001000100000008000500", @ANYRES32=r5], 0x50}}, 0x0)
r6 = socket(0x1, 0x803, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080))
r8 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x1e}}]}}}, @IFLA_LINK={0x8, 0x5, r7}]}, 0x50}}, 0x0)
r9 = socket$nl_route(0x10, 0x3, 0x0)
r10 = socket(0x1, 0x803, 0x0)
getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, <r11=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r9, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000540)=ANY=[@ANYBLOB="20000000110003040000007bb000000000000000", @ANYRES32=r11], 0x20}}, 0x0)

13:46:08 executing program 0:
fspick(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)=@generic={&(0x7f0000000000)='./file0\x00'}, 0x18)

[ 2283.883774][T23014] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'.
13:46:09 executing program 0:
bpf$BPF_PROG_QUERY(0x9, &(0x7f0000000100)={@ifindex, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)

13:46:09 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$ipvs(0x0, r1)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400ee5c99f8435ecde50a0412", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x1, 0x803, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="50000000100001040000ff0f0000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e00000000180002800c0002001c0000001b000000060001000100000008000500", @ANYRES32=r5], 0x50}}, 0x0)
r6 = socket(0x1, 0x803, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080))
r8 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x1e}}]}}}, @IFLA_LINK={0x8, 0x5, r7}]}, 0x50}}, 0x0)
r9 = socket$nl_route(0x10, 0x3, 0x0)
r10 = socket(0x1, 0x803, 0x0)
getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, <r11=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r9, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000540)=ANY=[@ANYBLOB="20000000110003040000007bb000000000000000", @ANYRES32=r11], 0x20}}, 0x0)

13:46:09 executing program 5:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000240)={@val={0x0, 0x86dd}, @val={0x5, 0x0, 0x0, 0x0, 0x54}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "000003", 0x18e, 0x3a, 0x0, @empty, @mcast2, {[@routing={0x0, 0x2, 0x0, 0x0, 0x0, [@empty]}], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x0, "ee7b615d"}, {}, {0x2b, 0x3, "6f8c008275021d683910c309293188a7c747eb2278d2794784"}, {0x0, 0x28, "4429118927041312255133e4d2b8b863b5f5b4ace38952e94c581c85d2d86844f548415db4dbf1992868a2e15095b531ce55d4620ec637afdcc990a4d6bfecb289917d24b31a2ddeb64383b176b823cc203ec1927487b7a00d6a3446cf7db79e14b2206d882c28611fa4d8289337cd75b4688120c73a2710947b908fde68a05a0777a170a14e85c7849462b3f5c3152cf0f3d91c5db93dc4d8f9e6b53708650dc375e6da3650b5ff4079971f6e3ef363382a16b8ae07b7307b5619092e4669dbca480d25738314135509eda68f712b9b09bdb485ea0914590b7ae01c2e34832f16c23c82b22b6ba550acfcede288a5237a06b3f5e09b6e5a0404544efe1474664b985f070121e82070a9f4513c2031a58a3d99e99284b812c0f047061139620890416c9defce02fa49cd1dd14b22df7250314ccb3dfd9827f892656911150cd9d9"}]}}}}}, 0x1c4)

[ 2284.382878][T23021] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'.
13:46:10 executing program 4:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x202000, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x7fff}, 0x0)
getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000200)={{{@in6=@mcast1, @in6=@empty}}, {{@in6=@private1}, 0x0, @in=@empty}}, 0x0)
ioctl$VT_RESIZE(0xffffffffffffffff, 0x5609, &(0x7f0000000040)={0x8, 0x12, 0x7})
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xe, 0x16, &(0x7f0000002540)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff9f}, 0x48)

13:46:10 executing program 0:
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x1c, 0x3, &(0x7f0000000080)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x90)

13:46:10 executing program 2:
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
syz_genetlink_get_family_id$tipc(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$NFT_BATCH(r1, &(0x7f00000015c0)={&(0x7f0000000300), 0xc, &(0x7f0000001580)={&(0x7f00000014c0)={{0x14}, [@NFT_MSG_NEWRULE={0x20, 0x6, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFTA_RULE_EXPRESSIONS={0x4}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}]}, @NFT_MSG_DELSETELEM={0x1c, 0xe, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}]}], {0x14}}, 0x64}}, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000001380))
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r1, 0x0, 0x0)
sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, 0x0, 0x0)
getsockname(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001400)={&(0x7f0000000140), 0xc, &(0x7f0000000340)={&(0x7f0000000f00)=@newqdisc={0x1b8, 0x24, 0x0, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0xc}, {0x10, 0xffff}, {0xf, 0xfff2}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_RATE={0x6, 0x5, {0x8}}, @qdisc_kind_options=@q_choke={{0xa}, {0x18, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x4e0, 0x2, 0x6, 0x0, 0x1e, 0x2}}]}}, @qdisc_kind_options=@q_codel={{0xa}, {0x54, 0x2, [@TCA_CODEL_TARGET={0x8}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x4}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_LIMIT={0x8, 0x2, 0x2}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x80}, @TCA_CODEL_TARGET={0x8, 0x1, 0xb9}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_INTERVAL={0x8, 0x3, 0x7}, @TCA_CODEL_LIMIT={0x8, 0x2, 0x5}]}}, @TCA_STAB={0xf8, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x8, 0xc000, 0x9, 0x1, 0x80000001, 0x4, 0xa}}, {0x18, 0x2, [0x3, 0x4, 0x3, 0xff, 0x200, 0xfe01, 0x7, 0x8, 0x0, 0x2]}}, {{0x1c, 0x1, {0x0, 0x20, 0x1, 0xfc000, 0x1}}, {0x4}}, {{0x1c, 0x1, {0x3, 0x11, 0x100, 0x5, 0x0, 0x2dd, 0x7fff, 0x4}}, {0xc, 0x2, [0x6, 0x100, 0x2, 0x71]}}, {{0x1c, 0x1, {0x0, 0x40, 0x5, 0x3, 0x2}}, {0x4}}, {{0x1c, 0x1, {0x4, 0x8, 0x1ff, 0x3ff, 0x2, 0x5, 0x9, 0x5}}, {0xe, 0x2, [0x1, 0x1, 0xb41, 0x0, 0x8]}}, {{0x1c, 0x1, {0x9, 0x3f, 0x4, 0x3, 0x0, 0x4, 0x9, 0x5}}, {0xe, 0x2, [0x0, 0x0, 0x5ca, 0xfff, 0xfffb]}}]}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x81}]}, 0x1b8}, 0x1, 0x0, 0x0, 0x20000110}, 0x800)
connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10)
writev(r2, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1)
recvmmsg(r2, &(0x7f0000003e40)=[{{0x0, 0x3, 0x0, 0x0, &(0x7f00000035c0)=""/241, 0xf1}}, {{&(0x7f00000036c0)=@un=@abs, 0x80, &(0x7f0000003780)=[{&(0x7f0000003740)=""/4, 0x7ffff}], 0x1, &(0x7f00000037c0)=""/236, 0xec}}, {{0x0, 0x0, &(0x7f0000003bc0)=[{0x0, 0xe00000000000000}, {&(0x7f0000003a00)=""/190, 0xbe}, {&(0x7f0000003ac0)=""/131, 0x83}, {0x0}], 0x4, &(0x7f0000003c00)=""/73, 0x49}}, {{&(0x7f0000003c80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, 0x0, 0x0, &(0x7f0000003e00)=""/48, 0x30}}], 0x4, 0x40000121, 0x0)
shutdown(r2, 0x0)

13:46:10 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), 0xffffffffffffffff)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400ee5c99f8435ecde50a0412", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x1, 0x803, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="50000000100001040000ff0f0000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e00000000180002800c0002001c0000001b000000060001000100000008000500", @ANYRES32=r5], 0x50}}, 0x0)
r6 = socket(0x1, 0x803, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080))
r8 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x1e}}]}}}, @IFLA_LINK={0x8, 0x5, r7}]}, 0x50}}, 0x0)
r9 = socket$nl_route(0x10, 0x3, 0x0)
r10 = socket(0x1, 0x803, 0x0)
getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, <r11=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r9, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000540)=ANY=[@ANYBLOB="20000000110003040000007bb000000000000000", @ANYRES32=r11], 0x20}}, 0x0)

13:46:10 executing program 5:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000240)={@val={0x0, 0x86dd}, @val={0x5, 0x0, 0x0, 0x0, 0x54}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "000003", 0x18e, 0x3a, 0x0, @empty, @mcast2, {[@routing={0x0, 0x2, 0x0, 0x0, 0x0, [@empty]}], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x0, "ee7b615d"}, {}, {0x2b, 0x3, "6f8c008275021d683910c309293188a7c747eb2278d2794784"}, {0x0, 0x28, "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"}]}}}}}, 0x1c4)

13:46:10 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f000000c380)='/proc/crypto\x00', 0x0, 0x0)
read$FUSE(r3, &(0x7f0000000200)={0x2020}, 0x2020)
execve(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000280)=[0x0], &(0x7f0000000380)=[&(0x7f00000002c0)='*$%}\xce*\x00', &(0x7f0000000300)='\x00'])

13:46:10 executing program 0:
keyctl$set_reqkey_keyring(0x5, 0x0)

[ 2285.825915][T23034] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'.
13:46:11 executing program 0:
bpf$BPF_PROG_QUERY(0x9, &(0x7f0000000100)={@ifindex, 0x0, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)

13:46:11 executing program 5:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000240)={@val={0x0, 0x86dd}, @val={0x5, 0x0, 0x0, 0x0, 0x54}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "000003", 0x18e, 0x3a, 0x0, @empty, @mcast2, {[@routing={0x0, 0x2, 0x0, 0x0, 0x0, [@empty]}], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x0, "ee7b615d"}, {}, {0x2b, 0x3, "6f8c008275021d683910c309293188a7c747eb2278d2794784"}, {0x0, 0x28, "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"}]}}}}}, 0x1c4)

13:46:11 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), 0xffffffffffffffff)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400ee5c99f8435ecde50a0412", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x1, 0x803, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="50000000100001040000ff0f0000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e00000000180002800c0002001c0000001b000000060001000100000008000500", @ANYRES32=r5], 0x50}}, 0x0)
r6 = socket(0x1, 0x803, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080))
r8 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x1e}}]}}}, @IFLA_LINK={0x8, 0x5, r7}]}, 0x50}}, 0x0)
r9 = socket$nl_route(0x10, 0x3, 0x0)
r10 = socket(0x1, 0x803, 0x0)
getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, <r11=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r9, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000540)=ANY=[@ANYBLOB="20000000110003040000007bb000000000000000", @ANYRES32=r11], 0x20}}, 0x0)

13:46:11 executing program 0:
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000580)={@map, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)

[ 2286.442898][T23052] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'.
13:46:11 executing program 0:
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
ioctl$SIOCGIFMTU(r0, 0x8902, &(0x7f0000000000)={'nr0\x00'})

13:46:13 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f000000c380)='/proc/crypto\x00', 0x0, 0x0)
read$FUSE(r3, &(0x7f0000000200)={0x2020}, 0x2020)
execve(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000280)=[0x0], &(0x7f0000000380)=[&(0x7f00000002c0)='*$%}\xce*\x00', &(0x7f0000000300)='\x00'])

13:46:13 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), 0xffffffffffffffff)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400ee5c99f8435ecde50a0412", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x1, 0x803, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="50000000100001040000ff0f0000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e00000000180002800c0002001c0000001b000000060001000100000008000500", @ANYRES32=r5], 0x50}}, 0x0)
r6 = socket(0x1, 0x803, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080))
r8 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x1e}}]}}}, @IFLA_LINK={0x8, 0x5, r7}]}, 0x50}}, 0x0)
r9 = socket$nl_route(0x10, 0x3, 0x0)
r10 = socket(0x1, 0x803, 0x0)
getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, <r11=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r9, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000540)=ANY=[@ANYBLOB="20000000110003040000007bb000000000000000", @ANYRES32=r11], 0x20}}, 0x0)

13:46:13 executing program 0:
r0 = socket(0xa, 0x2, 0x0)
sendmsg$rds(r0, &(0x7f0000001140)={&(0x7f0000000040)={0xa, 0x2, @loopback}, 0x40000, 0x0}, 0x0)

13:46:13 executing program 2:
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
syz_genetlink_get_family_id$tipc(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$NFT_BATCH(r1, &(0x7f00000015c0)={&(0x7f0000000300), 0xc, &(0x7f0000001580)={&(0x7f00000014c0)={{0x14}, [@NFT_MSG_NEWRULE={0x20, 0x6, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFTA_RULE_EXPRESSIONS={0x4}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}]}, @NFT_MSG_DELSETELEM={0x1c, 0xe, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}]}], {0x14}}, 0x64}}, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000001380))
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r1, 0x0, 0x0)
sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, 0x0, 0x0)
getsockname(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001400)={&(0x7f0000000140), 0xc, &(0x7f0000000340)={&(0x7f0000000f00)=@newqdisc={0x1b8, 0x24, 0x0, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0xc}, {0x10, 0xffff}, {0xf, 0xfff2}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_RATE={0x6, 0x5, {0x8}}, @qdisc_kind_options=@q_choke={{0xa}, {0x18, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x4e0, 0x2, 0x6, 0x0, 0x1e, 0x2}}]}}, @qdisc_kind_options=@q_codel={{0xa}, {0x54, 0x2, [@TCA_CODEL_TARGET={0x8}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x4}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_LIMIT={0x8, 0x2, 0x2}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x80}, @TCA_CODEL_TARGET={0x8, 0x1, 0xb9}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_INTERVAL={0x8, 0x3, 0x7}, @TCA_CODEL_LIMIT={0x8, 0x2, 0x5}]}}, @TCA_STAB={0xf8, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x8, 0xc000, 0x9, 0x1, 0x80000001, 0x4, 0xa}}, {0x18, 0x2, [0x3, 0x4, 0x3, 0xff, 0x200, 0xfe01, 0x7, 0x8, 0x0, 0x2]}}, {{0x1c, 0x1, {0x0, 0x20, 0x1, 0xfc000, 0x1}}, {0x4}}, {{0x1c, 0x1, {0x3, 0x11, 0x100, 0x5, 0x0, 0x2dd, 0x7fff, 0x4}}, {0xc, 0x2, [0x6, 0x100, 0x2, 0x71]}}, {{0x1c, 0x1, {0x0, 0x40, 0x5, 0x3, 0x2}}, {0x4}}, {{0x1c, 0x1, {0x4, 0x8, 0x1ff, 0x3ff, 0x2, 0x5, 0x9, 0x5}}, {0xe, 0x2, [0x1, 0x1, 0xb41, 0x0, 0x8]}}, {{0x1c, 0x1, {0x9, 0x3f, 0x4, 0x3, 0x0, 0x4, 0x9, 0x5}}, {0xe, 0x2, [0x0, 0x0, 0x5ca, 0xfff, 0xfffb]}}]}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x81}]}, 0x1b8}, 0x1, 0x0, 0x0, 0x20000110}, 0x800)
connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10)
writev(r2, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1)
recvmmsg(r2, &(0x7f0000003e40)=[{{0x0, 0x3, 0x0, 0x0, &(0x7f00000035c0)=""/241, 0xf1}}, {{&(0x7f00000036c0)=@un=@abs, 0x80, &(0x7f0000003780)=[{&(0x7f0000003740)=""/4, 0x7ffff}], 0x1, &(0x7f00000037c0)=""/236, 0xec}}, {{0x0, 0x0, &(0x7f0000003bc0)=[{0x0, 0xe00000000000000}, {&(0x7f0000003a00)=""/190, 0xbe}, {&(0x7f0000003ac0)=""/131, 0x83}, {0x0}], 0x4, &(0x7f0000003c00)=""/73, 0x49}}, {{&(0x7f0000003c80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, 0x0, 0x0, &(0x7f0000003e00)=""/48, 0x30}}], 0x4, 0x40000121, 0x0)
shutdown(r2, 0x0)

13:46:13 executing program 5:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000240)={@val={0x0, 0x86dd}, @val={0x5, 0x0, 0x0, 0x0, 0x54}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "000003", 0x18f, 0x3a, 0x0, @empty, @mcast2, {[@routing={0x0, 0x2, 0x0, 0x0, 0x0, [@empty]}], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x0, "ee7b615d"}, {}, {0x2b, 0x3, "6f8c008275021d683910c309293188a7c747eb2278d2794784"}, {0x0, 0x28, "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"}]}}}}}, 0x1c5)

13:46:13 executing program 4:
r0 = syz_open_dev$vcsu(&(0x7f0000000040), 0x0, 0x2028c0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x10, r0, 0x0)

[ 2288.149809][T23068] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'.
13:46:13 executing program 0:
bpf$BPF_PROG_QUERY(0x9, &(0x7f0000000100)={@ifindex, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)

13:46:13 executing program 4:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000140)={0x2, 0x18, 0xfa00, {0x0, 0x0}}, 0x20)

13:46:13 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r1)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400ee5c99f8435ecde50a0412", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x1, 0x803, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="50000000100001040000ff0f0000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e00000000180002800c0002001c0000001b000000060001000100000008000500", @ANYRES32=r5], 0x50}}, 0x0)
r6 = socket(0x1, 0x803, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080))
r8 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x1e}}]}}}, @IFLA_LINK={0x8, 0x5, r7}]}, 0x50}}, 0x0)
r9 = socket$nl_route(0x10, 0x3, 0x0)
r10 = socket(0x1, 0x803, 0x0)
getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, <r11=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r9, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000540)=ANY=[@ANYBLOB="20000000110003040000007bb000000000000000", @ANYRES32=r11], 0x20}}, 0x0)

13:46:13 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
sendto$inet(r0, &(0x7f0000000880)="ecc86e2a5a27477cfc76c0ce5489203212f6acef1981e60de2e32cebdd518752", 0x20, 0x0, &(0x7f00000003c0)={0x2, 0x4e22, @local}, 0x10)

13:46:13 executing program 4:
syz_open_dev$vcsu(0xfffffffffffffffc, 0x0, 0x0)

[ 2288.719079][ T1243] ieee802154 phy0 wpan0: encryption failed: -22
[ 2288.729406][ T1243] ieee802154 phy1 wpan1: encryption failed: -22
13:46:13 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r1)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400ee5c99f8435ecde50a0412", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x1, 0x803, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="50000000100001040000ff0f0000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e00000000180002800c0002001c0000001b000000060001000100000008000500", @ANYRES32=r5], 0x50}}, 0x0)
r6 = socket(0x1, 0x803, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080))
r8 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x1e}}]}}}, @IFLA_LINK={0x8, 0x5, r7}]}, 0x50}}, 0x0)
r9 = socket$nl_route(0x10, 0x3, 0x0)
r10 = socket(0x1, 0x803, 0x0)
getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, <r11=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r9, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000540)=ANY=[@ANYBLOB="20000000110003040000007bb000000000000000", @ANYRES32=r11], 0x20}}, 0x0)

13:46:14 executing program 4:
syz_open_dev$dri(&(0x7f0000000480), 0x40, 0x0)
syz_open_dev$dri(&(0x7f0000000a40), 0x0, 0x9a00)

13:46:14 executing program 0:
syz_io_uring_setup(0x5304, &(0x7f0000002f00), &(0x7f0000002f80), &(0x7f0000002fc0))

13:46:14 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r1)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400ee5c99f8435ecde50a0412", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x1, 0x803, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="50000000100001040000ff0f0000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e00000000180002800c0002001c0000001b000000060001000100000008000500", @ANYRES32=r5], 0x50}}, 0x0)
r6 = socket(0x1, 0x803, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080))
r8 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x1e}}]}}}, @IFLA_LINK={0x8, 0x5, r7}]}, 0x50}}, 0x0)
r9 = socket$nl_route(0x10, 0x3, 0x0)
r10 = socket(0x1, 0x803, 0x0)
getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, <r11=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r9, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000540)=ANY=[@ANYBLOB="20000000110003040000007bb000000000000000", @ANYRES32=r11], 0x20}}, 0x0)

13:46:14 executing program 5:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000240)={@val={0x0, 0x86dd}, @val={0x5, 0x0, 0x0, 0x0, 0x54}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "000003", 0x18f, 0x3a, 0x0, @empty, @mcast2, {[@routing={0x0, 0x2, 0x0, 0x0, 0x0, [@empty]}], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x0, "ee7b615d"}, {}, {0x2b, 0x3, "6f8c008275021d683910c309293188a7c747eb2278d2794784"}, {0x0, 0x28, "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"}]}}}}}, 0x1c5)

13:46:14 executing program 2:
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
syz_genetlink_get_family_id$tipc(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$NFT_BATCH(r1, &(0x7f00000015c0)={&(0x7f0000000300), 0xc, &(0x7f0000001580)={&(0x7f00000014c0)={{0x14}, [@NFT_MSG_NEWRULE={0x20, 0x6, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFTA_RULE_EXPRESSIONS={0x4}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}]}, @NFT_MSG_DELSETELEM={0x1c, 0xe, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}]}], {0x14}}, 0x64}}, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r1, 0x0, 0x0)
sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, 0x0, 0x0)
getsockname(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001400)={&(0x7f0000000140), 0xc, &(0x7f0000000340)={&(0x7f0000000f00)=@newqdisc={0x1b8, 0x24, 0x0, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0xc}, {0x10, 0xffff}, {0xf, 0xfff2}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_RATE={0x6, 0x5, {0x8}}, @qdisc_kind_options=@q_choke={{0xa}, {0x18, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x4e0, 0x2, 0x6, 0x0, 0x1e, 0x2}}]}}, @qdisc_kind_options=@q_codel={{0xa}, {0x54, 0x2, [@TCA_CODEL_TARGET={0x8}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x4}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_LIMIT={0x8, 0x2, 0x2}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x80}, @TCA_CODEL_TARGET={0x8, 0x1, 0xb9}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_INTERVAL={0x8, 0x3, 0x7}, @TCA_CODEL_LIMIT={0x8, 0x2, 0x5}]}}, @TCA_STAB={0xf8, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x8, 0xc000, 0x9, 0x1, 0x80000001, 0x4, 0xa}}, {0x18, 0x2, [0x3, 0x4, 0x3, 0xff, 0x200, 0xfe01, 0x7, 0x8, 0x0, 0x2]}}, {{0x1c, 0x1, {0x0, 0x20, 0x1, 0xfc000, 0x1}}, {0x4}}, {{0x1c, 0x1, {0x3, 0x11, 0x100, 0x5, 0x0, 0x2dd, 0x7fff, 0x4}}, {0xc, 0x2, [0x6, 0x100, 0x2, 0x71]}}, {{0x1c, 0x1, {0x0, 0x40, 0x5, 0x3, 0x2}}, {0x4}}, {{0x1c, 0x1, {0x4, 0x8, 0x1ff, 0x3ff, 0x2, 0x5, 0x9, 0x5}}, {0xe, 0x2, [0x1, 0x1, 0xb41, 0x0, 0x8]}}, {{0x1c, 0x1, {0x9, 0x3f, 0x4, 0x3, 0x0, 0x4, 0x9, 0x5}}, {0xe, 0x2, [0x0, 0x0, 0x5ca, 0xfff, 0xfffb]}}]}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x81}]}, 0x1b8}, 0x1, 0x0, 0x0, 0x20000110}, 0x800)
connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10)
writev(r2, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1)
recvmmsg(r2, &(0x7f0000003e40)=[{{0x0, 0x3, 0x0, 0x0, &(0x7f00000035c0)=""/241, 0xf1}}, {{&(0x7f00000036c0)=@un=@abs, 0x80, &(0x7f0000003780)=[{&(0x7f0000003740)=""/4, 0x7ffff}], 0x1, &(0x7f00000037c0)=""/236, 0xec}}, {{0x0, 0x0, &(0x7f0000003bc0)=[{0x0, 0xe00000000000000}, {&(0x7f0000003a00)=""/190, 0xbe}, {&(0x7f0000003ac0)=""/131, 0x83}, {0x0}], 0x4, &(0x7f0000003c00)=""/73, 0x49}}, {{&(0x7f0000003c80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, 0x0, 0x0, &(0x7f0000003e00)=""/48, 0x30}}], 0x4, 0x40000121, 0x0)
shutdown(r2, 0x0)

13:46:14 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f000000c380)='/proc/crypto\x00', 0x0, 0x0)
read$FUSE(r3, &(0x7f0000000200)={0x2020}, 0x2020)
execve(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000280)=[0x0], &(0x7f0000000380)=[&(0x7f00000002c0)='*$%}\xce*\x00', &(0x7f0000000300)='\x00'])

13:46:15 executing program 4:
io_setup(0x1f, &(0x7f0000000000))
io_setup(0x4, &(0x7f0000001100))

13:46:15 executing program 0:
r0 = syz_open_dev$audion(&(0x7f0000000000), 0x0, 0x0)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x541b, &(0x7f0000000040)={'ip_vti0\x00', 0x0})

13:46:15 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r1)
getsockname$packet(r1, 0x0, &(0x7f0000000040))
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400ee5c99f8435ecde50a0412", @ANYRES32, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket(0x1, 0x803, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="50000000100001040000ff0f0000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e00000000180002800c0002001c0000001b000000060001000100000008000500", @ANYRES32=r4], 0x50}}, 0x0)
r5 = socket(0x1, 0x803, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080))
r7 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x1e}}]}}}, @IFLA_LINK={0x8, 0x5, r6}]}, 0x50}}, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = socket(0x1, 0x803, 0x0)
getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000540)=ANY=[@ANYBLOB="20000000110003040000007bb000000000000000", @ANYRES32=r10], 0x20}}, 0x0)

13:46:15 executing program 5:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000240)={@val={0x0, 0x86dd}, @val={0x5, 0x0, 0x0, 0x0, 0x54}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "000003", 0x18f, 0x3a, 0x0, @empty, @mcast2, {[@routing={0x0, 0x2, 0x0, 0x0, 0x0, [@empty]}], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x0, "ee7b615d"}, {}, {0x2b, 0x3, "6f8c008275021d683910c309293188a7c747eb2278d2794784"}, {0x0, 0x28, "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"}]}}}}}, 0x1c5)

13:46:15 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_DEBUG_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="910025bd700027a0fffbdb"], 0x6c}}, 0x0)

13:46:15 executing program 4:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8916, &(0x7f0000000180)={'ip_vti0\x00', 0x0})

13:46:15 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r1)
getsockname$packet(r1, 0x0, &(0x7f0000000040))
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400ee5c99f8435ecde50a0412", @ANYRES32, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket(0x1, 0x803, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="50000000100001040000ff0f0000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e00000000180002800c0002001c0000001b000000060001000100000008000500", @ANYRES32=r4], 0x50}}, 0x0)
r5 = socket(0x1, 0x803, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080))
r7 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x1e}}]}}}, @IFLA_LINK={0x8, 0x5, r6}]}, 0x50}}, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = socket(0x1, 0x803, 0x0)
getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000540)=ANY=[@ANYBLOB="20000000110003040000007bb000000000000000", @ANYRES32=r10], 0x20}}, 0x0)

13:46:15 executing program 0:
r0 = syz_open_dev$audion(&(0x7f0000001040), 0x1, 0x0)
mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0)
mincore(&(0x7f0000ffc000/0x3000)=nil, 0x3000, &(0x7f0000000000)=""/4096)

13:46:15 executing program 4:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8971, &(0x7f0000000180)={'ip_vti0\x00', 0x0})

13:46:15 executing program 5:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000240)={@val={0x0, 0x86dd}, @val={0x5, 0x0, 0x0, 0x0, 0x54}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "000003", 0x175, 0x3a, 0x0, @empty, @mcast2, {[@routing={0x0, 0x2, 0x0, 0x0, 0x0, [@empty]}], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x0, "ee7b615d"}, {}, {0x0, 0x28, "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"}]}}}}}, 0x1ab)

13:46:16 executing program 2:
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
syz_genetlink_get_family_id$tipc(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$NFT_BATCH(r1, &(0x7f00000015c0)={&(0x7f0000000300), 0xc, &(0x7f0000001580)={&(0x7f00000014c0)={{0x14}, [@NFT_MSG_NEWRULE={0x20, 0x6, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFTA_RULE_EXPRESSIONS={0x4}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}]}, @NFT_MSG_DELSETELEM={0x1c, 0xe, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}]}], {0x14}}, 0x64}}, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r1, 0x0, 0x0)
sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, 0x0, 0x0)
getsockname(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001400)={&(0x7f0000000140), 0xc, &(0x7f0000000340)={&(0x7f0000000f00)=@newqdisc={0x1b8, 0x24, 0x0, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0xc}, {0x10, 0xffff}, {0xf, 0xfff2}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_RATE={0x6, 0x5, {0x8}}, @qdisc_kind_options=@q_choke={{0xa}, {0x18, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x4e0, 0x2, 0x6, 0x0, 0x1e, 0x2}}]}}, @qdisc_kind_options=@q_codel={{0xa}, {0x54, 0x2, [@TCA_CODEL_TARGET={0x8}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x4}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_LIMIT={0x8, 0x2, 0x2}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x80}, @TCA_CODEL_TARGET={0x8, 0x1, 0xb9}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_INTERVAL={0x8, 0x3, 0x7}, @TCA_CODEL_LIMIT={0x8, 0x2, 0x5}]}}, @TCA_STAB={0xf8, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x8, 0xc000, 0x9, 0x1, 0x80000001, 0x4, 0xa}}, {0x18, 0x2, [0x3, 0x4, 0x3, 0xff, 0x200, 0xfe01, 0x7, 0x8, 0x0, 0x2]}}, {{0x1c, 0x1, {0x0, 0x20, 0x1, 0xfc000, 0x1}}, {0x4}}, {{0x1c, 0x1, {0x3, 0x11, 0x100, 0x5, 0x0, 0x2dd, 0x7fff, 0x4}}, {0xc, 0x2, [0x6, 0x100, 0x2, 0x71]}}, {{0x1c, 0x1, {0x0, 0x40, 0x5, 0x3, 0x2}}, {0x4}}, {{0x1c, 0x1, {0x4, 0x8, 0x1ff, 0x3ff, 0x2, 0x5, 0x9, 0x5}}, {0xe, 0x2, [0x1, 0x1, 0xb41, 0x0, 0x8]}}, {{0x1c, 0x1, {0x9, 0x3f, 0x4, 0x3, 0x0, 0x4, 0x9, 0x5}}, {0xe, 0x2, [0x0, 0x0, 0x5ca, 0xfff, 0xfffb]}}]}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x81}]}, 0x1b8}, 0x1, 0x0, 0x0, 0x20000110}, 0x800)
connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10)
writev(r2, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1)
recvmmsg(r2, &(0x7f0000003e40)=[{{0x0, 0x3, 0x0, 0x0, &(0x7f00000035c0)=""/241, 0xf1}}, {{&(0x7f00000036c0)=@un=@abs, 0x80, &(0x7f0000003780)=[{&(0x7f0000003740)=""/4, 0x7ffff}], 0x1, &(0x7f00000037c0)=""/236, 0xec}}, {{0x0, 0x0, &(0x7f0000003bc0)=[{0x0, 0xe00000000000000}, {&(0x7f0000003a00)=""/190, 0xbe}, {&(0x7f0000003ac0)=""/131, 0x83}, {0x0}], 0x4, &(0x7f0000003c00)=""/73, 0x49}}, {{&(0x7f0000003c80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, 0x0, 0x0, &(0x7f0000003e00)=""/48, 0x30}}], 0x4, 0x40000121, 0x0)
shutdown(r2, 0x0)

13:46:16 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f000000c380)='/proc/crypto\x00', 0x0, 0x0)
read$FUSE(r3, &(0x7f0000000200)={0x2020}, 0x2020)
execve(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000280)=[0x0], &(0x7f0000000380)=[&(0x7f00000002c0)='*$%}\xce*\x00', &(0x7f0000000300)='\x00'])

13:46:16 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r1)
getsockname$packet(r1, 0x0, &(0x7f0000000040))
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400ee5c99f8435ecde50a0412", @ANYRES32, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket(0x1, 0x803, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="50000000100001040000ff0f0000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e00000000180002800c0002001c0000001b000000060001000100000008000500", @ANYRES32=r4], 0x50}}, 0x0)
r5 = socket(0x1, 0x803, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080))
r7 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x1e}}]}}}, @IFLA_LINK={0x8, 0x5, r6}]}, 0x50}}, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = socket(0x1, 0x803, 0x0)
getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000540)=ANY=[@ANYBLOB="20000000110003040000007bb000000000000000", @ANYRES32=r10], 0x20}}, 0x0)

13:46:16 executing program 0:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f0000000000)=0x120, 0x4)

13:46:16 executing program 4:
io_setup(0x1f, &(0x7f0000000000))
io_setup(0x2, &(0x7f0000000100))
io_setup(0x4, &(0x7f0000001100))

13:46:16 executing program 5:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000240)={@val={0x0, 0x86dd}, @val={0x5, 0x0, 0x0, 0x0, 0x54}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "000003", 0x175, 0x3a, 0x0, @empty, @mcast2, {[@routing={0x0, 0x2, 0x0, 0x0, 0x0, [@empty]}], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x0, "ee7b615d"}, {}, {0x0, 0x28, "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"}]}}}}}, 0x1ab)

13:46:16 executing program 2:
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
syz_genetlink_get_family_id$tipc(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$NFT_BATCH(r1, &(0x7f00000015c0)={&(0x7f0000000300), 0xc, &(0x7f0000001580)={&(0x7f00000014c0)={{0x14}, [@NFT_MSG_NEWRULE={0x20, 0x6, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFTA_RULE_EXPRESSIONS={0x4}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}]}, @NFT_MSG_DELSETELEM={0x1c, 0xe, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}]}], {0x14}}, 0x64}}, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, 0x0, 0x0)
sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, 0x0, 0x0)
getsockname(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001400)={&(0x7f0000000140), 0xc, &(0x7f0000000340)={&(0x7f0000000f00)=@newqdisc={0x1b8, 0x24, 0x0, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0xc}, {0x10, 0xffff}, {0xf, 0xfff2}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_RATE={0x6, 0x5, {0x8}}, @qdisc_kind_options=@q_choke={{0xa}, {0x18, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x4e0, 0x2, 0x6, 0x0, 0x1e, 0x2}}]}}, @qdisc_kind_options=@q_codel={{0xa}, {0x54, 0x2, [@TCA_CODEL_TARGET={0x8}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x4}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_LIMIT={0x8, 0x2, 0x2}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x80}, @TCA_CODEL_TARGET={0x8, 0x1, 0xb9}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_INTERVAL={0x8, 0x3, 0x7}, @TCA_CODEL_LIMIT={0x8, 0x2, 0x5}]}}, @TCA_STAB={0xf8, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x8, 0xc000, 0x9, 0x1, 0x80000001, 0x4, 0xa}}, {0x18, 0x2, [0x3, 0x4, 0x3, 0xff, 0x200, 0xfe01, 0x7, 0x8, 0x0, 0x2]}}, {{0x1c, 0x1, {0x0, 0x20, 0x1, 0xfc000, 0x1}}, {0x4}}, {{0x1c, 0x1, {0x3, 0x11, 0x100, 0x5, 0x0, 0x2dd, 0x7fff, 0x4}}, {0xc, 0x2, [0x6, 0x100, 0x2, 0x71]}}, {{0x1c, 0x1, {0x0, 0x40, 0x5, 0x3, 0x2}}, {0x4}}, {{0x1c, 0x1, {0x4, 0x8, 0x1ff, 0x3ff, 0x2, 0x5, 0x9, 0x5}}, {0xe, 0x2, [0x1, 0x1, 0xb41, 0x0, 0x8]}}, {{0x1c, 0x1, {0x9, 0x3f, 0x4, 0x3, 0x0, 0x4, 0x9, 0x5}}, {0xe, 0x2, [0x0, 0x0, 0x5ca, 0xfff, 0xfffb]}}]}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x81}]}, 0x1b8}, 0x1, 0x0, 0x0, 0x20000110}, 0x800)
connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10)
writev(r2, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1)
recvmmsg(r2, &(0x7f0000003e40)=[{{0x0, 0x3, 0x0, 0x0, &(0x7f00000035c0)=""/241, 0xf1}}, {{&(0x7f00000036c0)=@un=@abs, 0x80, &(0x7f0000003780)=[{&(0x7f0000003740)=""/4, 0x7ffff}], 0x1, &(0x7f00000037c0)=""/236, 0xec}}, {{0x0, 0x0, &(0x7f0000003bc0)=[{0x0, 0xe00000000000000}, {&(0x7f0000003a00)=""/190, 0xbe}, {&(0x7f0000003ac0)=""/131, 0x83}, {0x0}], 0x4, &(0x7f0000003c00)=""/73, 0x49}}, {{&(0x7f0000003c80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, 0x0, 0x0, &(0x7f0000003e00)=""/48, 0x30}}], 0x4, 0x40000121, 0x0)
shutdown(r2, 0x0)

13:46:17 executing program 0:
syz_open_dev$sndpcmp(&(0x7f0000001b80), 0x1, 0x40901)

13:46:17 executing program 4:
prctl$PR_SET_MM(0x2, 0x0, &(0x7f0000ffc000/0x3000)=nil)

13:46:17 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r1)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400ee5c99f8435ecde50a0412", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x1, 0x803, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="50000000100001040000ff0f0000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e00000000180002800c0002001c0000001b000000060001000100000008000500", @ANYRES32=r5], 0x50}}, 0x0)
r6 = socket(0x1, 0x803, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080))
r8 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x1e}}]}}}, @IFLA_LINK={0x8, 0x5, r7}]}, 0x50}}, 0x0)
r9 = socket$nl_route(0x10, 0x3, 0x0)
r10 = socket(0x1, 0x803, 0x0)
getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, <r11=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r9, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000540)=ANY=[@ANYBLOB="20000000110003040000007bb000000000000000", @ANYRES32=r11], 0x20}}, 0x0)

13:46:17 executing program 5:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000240)={@val={0x0, 0x86dd}, @val={0x5, 0x0, 0x0, 0x0, 0x54}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "000003", 0x175, 0x3a, 0x0, @empty, @mcast2, {[@routing={0x0, 0x2, 0x0, 0x0, 0x0, [@empty]}], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x0, "ee7b615d"}, {}, {0x0, 0x28, "4429118927041312255133e4d2b8b863b5f5b4ace38952e94c581c85d2d86844f548415db4dbf1992868a2e15095b531ce55d4620ec637afdcc990a4d6bfecb289917d24b31a2ddeb64383b176b823cc203ec1927487b7a00d6a3446cf7db79e14b2206d882c28611fa4d8289337cd75b4688120c73a2710947b908fde68a05a0777a170a14e85c7849462b3f5c3152cf0f3d91c5db93dc4d8f9e6b53708650dc375e6da3650b5ff4079971f6e3ef363382a16b8ae07b7307b5619092e4669dbca480d25738314135509eda68f712b9b09bdb485ea0914590b7ae01c2e34832f16c23c82b22b6ba550acfcede288a5237a06b3f5e09b6e5a0404544efe1474664b985f070121e82070a9f4513c2031a58a3d99e99284b812c0f047061139620890416c9defce02fa49cd1dd14b22df7250314ccb3dfd9827f892656911150cd9d921a8"}]}}}}}, 0x1ab)

13:46:17 executing program 0:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x541b, &(0x7f0000000180)={'ip_vti0\x00', 0x0})

13:46:17 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="60010000", @ANYRES16=r1, @ANYBLOB="010026bd7000fedbdf25130000000800040070"], 0x160}}, 0x0)

[ 2292.379225][T23160] netlink: 324 bytes leftover after parsing attributes in process `syz-executor.4'.
13:46:18 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f000000c380)='/proc/crypto\x00', 0x0, 0x0)
read$FUSE(r3, &(0x7f0000000200)={0x2020}, 0x2020)
execve(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000280)=[0x0], &(0x7f0000000380)=[&(0x7f00000002c0)='*$%}\xce*\x00', &(0x7f0000000300)='\x00'])

13:46:18 executing program 4:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8940, &(0x7f0000000180)={'ip_vti0\x00', 0x0})

13:46:18 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r1)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400ee5c99f8435ecde50a0412", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x1, 0x803, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="50000000100001040000ff0f0000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e00000000180002800c0002001c0000001b000000060001000100000008000500", @ANYRES32=r5], 0x50}}, 0x0)
r6 = socket(0x1, 0x803, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080))
r8 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x1e}}]}}}, @IFLA_LINK={0x8, 0x5, r7}]}, 0x50}}, 0x0)
r9 = socket$nl_route(0x10, 0x3, 0x0)
r10 = socket(0x1, 0x803, 0x0)
getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, <r11=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r9, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000540)=ANY=[@ANYBLOB="20000000110003040000007bb000000000000000", @ANYRES32=r11], 0x20}}, 0x0)

13:46:18 executing program 0:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89a2, &(0x7f0000000180)={'ip_vti0\x00', 0x0})

13:46:18 executing program 2:
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
syz_genetlink_get_family_id$tipc(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$NFT_BATCH(r1, &(0x7f00000015c0)={&(0x7f0000000300), 0xc, &(0x7f0000001580)={&(0x7f00000014c0)={{0x14}, [@NFT_MSG_NEWRULE={0x20, 0x6, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFTA_RULE_EXPRESSIONS={0x4}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}]}, @NFT_MSG_DELSETELEM={0x1c, 0xe, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}]}], {0x14}}, 0x64}}, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, 0x0, 0x0)
sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, 0x0, 0x0)
getsockname(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001400)={&(0x7f0000000140), 0xc, &(0x7f0000000340)={&(0x7f0000000f00)=@newqdisc={0x1b8, 0x24, 0x0, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0xc}, {0x10, 0xffff}, {0xf, 0xfff2}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_RATE={0x6, 0x5, {0x8}}, @qdisc_kind_options=@q_choke={{0xa}, {0x18, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x4e0, 0x2, 0x6, 0x0, 0x1e, 0x2}}]}}, @qdisc_kind_options=@q_codel={{0xa}, {0x54, 0x2, [@TCA_CODEL_TARGET={0x8}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x4}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_LIMIT={0x8, 0x2, 0x2}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x80}, @TCA_CODEL_TARGET={0x8, 0x1, 0xb9}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_INTERVAL={0x8, 0x3, 0x7}, @TCA_CODEL_LIMIT={0x8, 0x2, 0x5}]}}, @TCA_STAB={0xf8, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x8, 0xc000, 0x9, 0x1, 0x80000001, 0x4, 0xa}}, {0x18, 0x2, [0x3, 0x4, 0x3, 0xff, 0x200, 0xfe01, 0x7, 0x8, 0x0, 0x2]}}, {{0x1c, 0x1, {0x0, 0x20, 0x1, 0xfc000, 0x1}}, {0x4}}, {{0x1c, 0x1, {0x3, 0x11, 0x100, 0x5, 0x0, 0x2dd, 0x7fff, 0x4}}, {0xc, 0x2, [0x6, 0x100, 0x2, 0x71]}}, {{0x1c, 0x1, {0x0, 0x40, 0x5, 0x3, 0x2}}, {0x4}}, {{0x1c, 0x1, {0x4, 0x8, 0x1ff, 0x3ff, 0x2, 0x5, 0x9, 0x5}}, {0xe, 0x2, [0x1, 0x1, 0xb41, 0x0, 0x8]}}, {{0x1c, 0x1, {0x9, 0x3f, 0x4, 0x3, 0x0, 0x4, 0x9, 0x5}}, {0xe, 0x2, [0x0, 0x0, 0x5ca, 0xfff, 0xfffb]}}]}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x81}]}, 0x1b8}, 0x1, 0x0, 0x0, 0x20000110}, 0x800)
connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10)
writev(r2, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1)
recvmmsg(r2, &(0x7f0000003e40)=[{{0x0, 0x3, 0x0, 0x0, &(0x7f00000035c0)=""/241, 0xf1}}, {{&(0x7f00000036c0)=@un=@abs, 0x80, &(0x7f0000003780)=[{&(0x7f0000003740)=""/4, 0x7ffff}], 0x1, &(0x7f00000037c0)=""/236, 0xec}}, {{0x0, 0x0, &(0x7f0000003bc0)=[{0x0, 0xe00000000000000}, {&(0x7f0000003a00)=""/190, 0xbe}, {&(0x7f0000003ac0)=""/131, 0x83}, {0x0}], 0x4, &(0x7f0000003c00)=""/73, 0x49}}, {{&(0x7f0000003c80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, 0x0, 0x0, &(0x7f0000003e00)=""/48, 0x30}}], 0x4, 0x40000121, 0x0)
shutdown(r2, 0x0)

13:46:18 executing program 5:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000240)={@val={0x0, 0x86dd}, @val={0x5, 0x0, 0x0, 0x0, 0x54}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "000003", 0x190, 0x3a, 0x0, @empty, @mcast2, {[@routing={0x0, 0x2, 0x0, 0x0, 0x0, [@empty]}], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x0, "ee7b615d"}, {}, {0x0, 0x3, "6f8c008275021d683910c309293188a7c747eb2278d2794784"}, {0x0, 0x28, "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"}]}}}}}, 0x1c6)

13:46:18 executing program 4:
syz_genetlink_get_family_id$nfc(&(0x7f0000000680), 0xffffffffffffffff)

13:46:18 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_RINGS_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r1, 0xde559609c9ef172b}, 0x14}}, 0x0)

13:46:18 executing program 4:
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1e19c1, 0x0)
statx(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1000, 0x40, &(0x7f0000000400))

13:46:18 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r1)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400ee5c99f8435ecde50a0412", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x1, 0x803, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="50000000100001040000ff0f0000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e00000000180002800c0002001c0000001b000000060001000100000008000500", @ANYRES32=r5], 0x50}}, 0x0)
r6 = socket(0x1, 0x803, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080))
r8 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x1e}}]}}}, @IFLA_LINK={0x8, 0x5, r7}]}, 0x50}}, 0x0)
r9 = socket$nl_route(0x10, 0x3, 0x0)
r10 = socket(0x1, 0x803, 0x0)
getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, <r11=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r9, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000540)=ANY=[@ANYBLOB="20000000110003040000007bb000000000000000", @ANYRES32=r11], 0x20}}, 0x0)

[ 2293.704022][T23185] ------------[ cut here ]------------
[ 2293.710747][T23185] WARNING: CPU: 0 PID: 23185 at net/mac80211/driver-ops.h:797 ieee80211_get_ringparam+0x346/0x400
[ 2293.722930][T23185] Modules linked in:
[ 2293.726900][T23185] CPU: 0 PID: 23185 Comm: syz-executor.0 Not tainted 6.6.0-rc2-next-20230919-syzkaller #0
[ 2293.736990][T23185] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/04/2023
[ 2293.747269][T23185] RIP: 0010:ieee80211_get_ringparam+0x346/0x400
[ 2293.753704][T23185] Code: 60 07 00 00 be ff ff ff ff 48 8d 78 68 e8 62 cc 83 00 31 ff 89 c5 89 c6 e8 37 a3 c7 f7 85 ed 0f 85 b6 fd ff ff e8 ba a7 c7 f7 <0f> 0b e9 aa fd ff ff e8 ae a7 c7 f7 e8 99 0f b0 f7 31 ff 89 c5 89
[ 2293.773988][T23185] RSP: 0018:ffffc90000a2f210 EFLAGS: 00010287
[ 2293.780306][T23185] RAX: 00000000000064c6 RBX: ffff88807ea78700 RCX: ffffc900145d8000
[ 2293.788601][T23185] RDX: 0000000000040000 RSI: ffffffff89c08b66 RDI: 0000000000000005
[ 2293.796792][T23185] RBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000000
[ 2293.804900][T23185] R10: 0000000000000000 R11: 0000000000000000 R12: ffff88807ea78e20
[ 2293.813142][T23185] R13: ffff888077708b98 R14: ffff888077708b9c R15: ffff888077708b8c
[ 2293.822937][T23185] FS:  00007f52702af6c0(0000) GS:ffff8880b9800000(0000) knlGS:0000000000000000
[ 2293.832072][T23185] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 2293.838769][T23185] CR2: 000000002000f030 CR3: 000000007a96e000 CR4: 00000000003506f0
[ 2293.846927][T23185] Call Trace:
[ 2293.850306][T23185]  <TASK>
[ 2293.853284][T23185]  ? show_regs+0x8f/0xa0
[ 2293.857610][T23185]  ? __warn+0xe6/0x380
[ 2293.861931][T23185]  ? ieee80211_get_ringparam+0x346/0x400
[ 2293.867662][T23185]  ? report_bug+0x3bc/0x580
[ 2293.872416][T23185]  ? handle_bug+0x3c/0x70
[ 2293.876846][T23185]  ? exc_invalid_op+0x17/0x40
[ 2293.881689][T23185]  ? asm_exc_invalid_op+0x1a/0x20
[ 2293.886867][T23185]  ? ieee80211_get_ringparam+0x346/0x400
[ 2293.892741][T23185]  ? ieee80211_get_ringparam+0x346/0x400
[ 2293.898462][T23185]  ? ieee80211_set_ringparam+0x510/0x510
13:46:18 executing program 4:
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1e19c1, 0x0)
r0 = inotify_init()
inotify_add_watch(r0, &(0x7f00000000c0)='./file0\x00', 0x40000001)

[ 2293.904294][T23185]  rings_prepare_data+0x17d/0x200
[ 2293.909532][T23185]  ethnl_default_dumpit+0x58c/0x9e0
[ 2293.914885][T23185]  genl_dumpit+0x119/0x220
[ 2293.919470][T23185]  netlink_dump+0x588/0xca0
[ 2293.924840][T23185]  ? netlink_deliver_tap+0xd00/0xd00
[ 2293.930403][T23185]  ? ethnl_default_start+0x2dd/0x410
[ 2293.935780][T23185]  ? kasan_set_track+0x25/0x30
[ 2293.940724][T23185]  ? ethnl_default_parse+0x230/0x230
[ 2293.946090][T23185]  ? genl_start+0x66f/0x940
[ 2293.950803][T23185]  __netlink_dump_start+0x6c8/0x9c0
[ 2293.956092][T23185]  genl_family_rcv_msg_dumpit+0x1e1/0x2d0
[ 2293.962118][T23185]  ? genl_dumpit+0x220/0x220
[ 2293.966801][T23185]  ? genl_cmd_full_to_split+0x630/0x630
[ 2293.972559][T23185]  ? genl_family_rcv_msg_doit+0x2e0/0x2e0
[ 2293.978369][T23185]  ? genl_validate_ops+0x8d0/0x8d0
[ 2293.983794][T23185]  ? genl_rcv_msg+0x800/0x800
[ 2293.988575][T23185]  ? __radix_tree_lookup+0x21f/0x2c0
[ 2293.994143][T23185]  genl_rcv_msg+0x46b/0x800
[ 2293.998741][T23185]  ? genl_family_rcv_msg_dumpit+0x2d0/0x2d0
[ 2294.004817][T23185]  ? __dev_queue_xmit+0xa7b/0x3d60
[ 2294.010183][T23185]  ? ethnl_default_parse+0x230/0x230
[ 2294.015567][T23185]  ? ethnl_fill_reply_header+0x390/0x390
[ 2294.021386][T23185]  ? ethtool_get_phc_vclocks+0x110/0x110
[ 2294.027846][T23185]  netlink_rcv_skb+0x16b/0x440
[ 2294.032943][T23185]  ? genl_family_rcv_msg_dumpit+0x2d0/0x2d0
[ 2294.038951][T23185]  ? netlink_ack+0x1370/0x1370
[ 2294.043971][T23185]  ? down_write_killable+0x250/0x250
[ 2294.049407][T23185]  ? netlink_deliver_tap+0x1a0/0xd00
[ 2294.054912][T23185]  genl_rcv+0x28/0x40
[ 2294.058980][T23185]  netlink_unicast+0x536/0x810
[ 2294.064371][T23185]  ? netlink_attachskb+0x880/0x880
[ 2294.069590][T23185]  ? __sanitizer_cov_trace_switch+0x54/0x90
[ 2294.075691][T23185]  ? __phys_addr_symbol+0x30/0x70
[ 2294.080877][T23185]  ? __check_object_size+0x323/0x730
[ 2294.086299][T23185]  netlink_sendmsg+0x93c/0xe40
[ 2294.091265][T23185]  ? netlink_unicast+0x810/0x810
[ 2294.096303][T23185]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[ 2294.101801][T23185]  ? netlink_unicast+0x810/0x810
[ 2294.106834][T23185]  sock_sendmsg+0xd9/0x180
[ 2294.111559][T23185]  ____sys_sendmsg+0x6ac/0x940
[ 2294.116415][T23185]  ? copy_msghdr_from_user+0x10b/0x160
[ 2294.122065][T23185]  ? kernel_sendmsg+0x50/0x50
[ 2294.126841][T23185]  ? lockdep_hardirqs_on_prepare+0x410/0x410
[ 2294.133935][T23185]  ___sys_sendmsg+0x135/0x1d0
[ 2294.138704][T23185]  ? do_recvmmsg+0x740/0x740
[ 2294.143809][T23185]  ? __fget_light+0xe6/0x260
[ 2294.148495][T23185]  __sys_sendmsg+0x117/0x1e0
[ 2294.153254][T23185]  ? __sys_sendmsg_sock+0x30/0x30
[ 2294.158360][T23185]  ? xfd_validate_state+0x5d/0x180
[ 2294.163690][T23185]  ? syscall_enter_from_user_mode+0x26/0x80
[ 2294.169673][T23185]  do_syscall_64+0x38/0xb0
[ 2294.174396][T23185]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 2294.180485][T23185] RIP: 0033:0x7f526f47cae9
[ 2294.184962][T23185] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48
[ 2294.204819][T23185] RSP: 002b:00007f52702af0c8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 2294.213385][T23185] RAX: ffffffffffffffda RBX: 00007f526f59bf80 RCX: 00007f526f47cae9
[ 2294.221616][T23185] RDX: 0000000000000000 RSI: 0000000020000180 RDI: 0000000000000003
[ 2294.229739][T23185] RBP: 00007f526f4c847a R08: 0000000000000000 R09: 0000000000000000
[ 2294.238888][T23185] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 2294.247099][T23185] R13: 000000000000000b R14: 00007f526f59bf80 R15: 00007ffded5435d8
[ 2294.255231][T23185]  </TASK>
[ 2294.258393][T23185] Kernel panic - not syncing: kernel: panic_on_warn set ...
[ 2294.265713][T23185] CPU: 0 PID: 23185 Comm: syz-executor.0 Not tainted 6.6.0-rc2-next-20230919-syzkaller #0
[ 2294.275649][T23185] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/04/2023
[ 2294.285731][T23185] Call Trace:
[ 2294.289027][T23185]  <TASK>
[ 2294.291993][T23185]  dump_stack_lvl+0xd9/0x1b0
[ 2294.296637][T23185]  panic+0x6dc/0x790
[ 2294.300570][T23185]  ? panic_smp_self_stop+0xa0/0xa0
[ 2294.305804][T23185]  ? show_trace_log_lvl+0x363/0x4f0
[ 2294.311085][T23185]  ? ieee80211_get_ringparam+0x346/0x400
[ 2294.316762][T23185]  check_panic_on_warn+0xab/0xb0
[ 2294.321740][T23185]  __warn+0xf2/0x380
[ 2294.325670][T23185]  ? ieee80211_get_ringparam+0x346/0x400
[ 2294.331347][T23185]  report_bug+0x3bc/0x580
[ 2294.335731][T23185]  handle_bug+0x3c/0x70
[ 2294.339921][T23185]  exc_invalid_op+0x17/0x40
[ 2294.344472][T23185]  asm_exc_invalid_op+0x1a/0x20
[ 2294.349364][T23185] RIP: 0010:ieee80211_get_ringparam+0x346/0x400
[ 2294.355652][T23185] Code: 60 07 00 00 be ff ff ff ff 48 8d 78 68 e8 62 cc 83 00 31 ff 89 c5 89 c6 e8 37 a3 c7 f7 85 ed 0f 85 b6 fd ff ff e8 ba a7 c7 f7 <0f> 0b e9 aa fd ff ff e8 ae a7 c7 f7 e8 99 0f b0 f7 31 ff 89 c5 89
[ 2294.375465][T23185] RSP: 0018:ffffc90000a2f210 EFLAGS: 00010287
[ 2294.381561][T23185] RAX: 00000000000064c6 RBX: ffff88807ea78700 RCX: ffffc900145d8000
[ 2294.389584][T23185] RDX: 0000000000040000 RSI: ffffffff89c08b66 RDI: 0000000000000005
[ 2294.397613][T23185] RBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000000
[ 2294.405707][T23185] R10: 0000000000000000 R11: 0000000000000000 R12: ffff88807ea78e20
[ 2294.413717][T23185] R13: ffff888077708b98 R14: ffff888077708b9c R15: ffff888077708b8c
[ 2294.421745][T23185]  ? ieee80211_get_ringparam+0x346/0x400
[ 2294.427444][T23185]  ? ieee80211_set_ringparam+0x510/0x510
[ 2294.433128][T23185]  rings_prepare_data+0x17d/0x200
[ 2294.438205][T23185]  ethnl_default_dumpit+0x58c/0x9e0
[ 2294.443469][T23185]  genl_dumpit+0x119/0x220
[ 2294.447938][T23185]  netlink_dump+0x588/0xca0
[ 2294.452495][T23185]  ? netlink_deliver_tap+0xd00/0xd00
[ 2294.457840][T23185]  ? ethnl_default_start+0x2dd/0x410
[ 2294.463164][T23185]  ? kasan_set_track+0x25/0x30
[ 2294.467958][T23185]  ? ethnl_default_parse+0x230/0x230
[ 2294.473298][T23185]  ? genl_start+0x66f/0x940
[ 2294.477854][T23185]  __netlink_dump_start+0x6c8/0x9c0
[ 2294.483105][T23185]  genl_family_rcv_msg_dumpit+0x1e1/0x2d0
[ 2294.488874][T23185]  ? genl_dumpit+0x220/0x220
[ 2294.493521][T23185]  ? genl_cmd_full_to_split+0x630/0x630
[ 2294.499111][T23185]  ? genl_family_rcv_msg_doit+0x2e0/0x2e0
[ 2294.504881][T23185]  ? genl_validate_ops+0x8d0/0x8d0
[ 2294.510213][T23185]  ? genl_rcv_msg+0x800/0x800
[ 2294.515027][T23185]  ? __radix_tree_lookup+0x21f/0x2c0
[ 2294.520409][T23185]  genl_rcv_msg+0x46b/0x800
[ 2294.524985][T23185]  ? genl_family_rcv_msg_dumpit+0x2d0/0x2d0
[ 2294.530928][T23185]  ? __dev_queue_xmit+0xa7b/0x3d60
[ 2294.536077][T23185]  ? ethnl_default_parse+0x230/0x230
[ 2294.541421][T23185]  ? ethnl_fill_reply_header+0x390/0x390
[ 2294.547098][T23185]  ? ethtool_get_phc_vclocks+0x110/0x110
[ 2294.552790][T23185]  netlink_rcv_skb+0x16b/0x440
[ 2294.557598][T23185]  ? genl_family_rcv_msg_dumpit+0x2d0/0x2d0
[ 2294.563569][T23185]  ? netlink_ack+0x1370/0x1370
[ 2294.568446][T23185]  ? down_write_killable+0x250/0x250
[ 2294.573793][T23185]  ? netlink_deliver_tap+0x1a0/0xd00
[ 2294.579135][T23185]  genl_rcv+0x28/0x40
[ 2294.583160][T23185]  netlink_unicast+0x536/0x810
[ 2294.588234][T23185]  ? netlink_attachskb+0x880/0x880
[ 2294.593391][T23185]  ? __sanitizer_cov_trace_switch+0x54/0x90
[ 2294.599316][T23185]  ? __phys_addr_symbol+0x30/0x70
[ 2294.604388][T23185]  ? __check_object_size+0x323/0x730
[ 2294.609722][T23185]  netlink_sendmsg+0x93c/0xe40
[ 2294.614540][T23185]  ? netlink_unicast+0x810/0x810
[ 2294.619703][T23185]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[ 2294.625051][T23185]  ? netlink_unicast+0x810/0x810
[ 2294.630169][T23185]  sock_sendmsg+0xd9/0x180
[ 2294.634641][T23185]  ____sys_sendmsg+0x6ac/0x940
[ 2294.639450][T23185]  ? copy_msghdr_from_user+0x10b/0x160
[ 2294.644958][T23185]  ? kernel_sendmsg+0x50/0x50
[ 2294.649694][T23185]  ? lockdep_hardirqs_on_prepare+0x410/0x410
[ 2294.655734][T23185]  ___sys_sendmsg+0x135/0x1d0
[ 2294.660470][T23185]  ? do_recvmmsg+0x740/0x740
[ 2294.665143][T23185]  ? __fget_light+0xe6/0x260
[ 2294.669777][T23185]  __sys_sendmsg+0x117/0x1e0
[ 2294.674443][T23185]  ? __sys_sendmsg_sock+0x30/0x30
[ 2294.679510][T23185]  ? xfd_validate_state+0x5d/0x180
[ 2294.684693][T23185]  ? syscall_enter_from_user_mode+0x26/0x80
[ 2294.690644][T23185]  do_syscall_64+0x38/0xb0
[ 2294.695113][T23185]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 2294.701052][T23185] RIP: 0033:0x7f526f47cae9
[ 2294.705601][T23185] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48
[ 2294.725259][T23185] RSP: 002b:00007f52702af0c8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 2294.733885][T23185] RAX: ffffffffffffffda RBX: 00007f526f59bf80 RCX: 00007f526f47cae9
[ 2294.741920][T23185] RDX: 0000000000000000 RSI: 0000000020000180 RDI: 0000000000000003
[ 2294.749922][T23185] RBP: 00007f526f4c847a R08: 0000000000000000 R09: 0000000000000000
[ 2294.757921][T23185] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 2294.765929][T23185] R13: 000000000000000b R14: 00007f526f59bf80 R15: 00007ffded5435d8
[ 2294.773951][T23185]  </TASK>
[ 2294.777281][T23185] Kernel Offset: disabled
[ 2294.782059][T23185] Rebooting in 86400 seconds..