oup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0xf000) sendfile(r1, r2, 0x0, 0xf03b0000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x13, r0, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x100}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/18, 0x30c000, 0x800}, 0x200d6f) 00:28:05 executing program 1: r0 = socket(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000380)=[{&(0x7f0000000000)="390000001000090868fe07002b00060001000a0021000000010200070305001404001a00120012000e0001000a0000000000000068b620bde2", 0x39}], 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r5 = socket(0x11, 0x800000003, 0x0) bind(r5, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r5, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$BATADV_CMD_GET_GATEWAYS(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000040)={0x24, r2, 0x711, 0x0, 0x0, {0x9}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r6}]}, 0x24}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x400, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0xd, 0xb}, {0x9, 0x1}, {0xffff, 0xc}}, ["", "", "", "", "", "", ""]}, 0x24}}, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r7, 0x0, 0x27, &(0x7f0000000000)={@multicast2, @loopback}, 0xc) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r5, 0x89f0, &(0x7f0000000340)={'gre0\x00', &(0x7f00000002c0)={'gre0\x00', 0x0, 0x1, 0x20, 0xfffffffa, 0xfffffcec, {{0x12, 0x4, 0x3, 0x4, 0x48, 0x68, 0x0, 0x80, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x18}, @multicast2, {[@generic={0x7, 0x3, "a4"}, @timestamp_prespec={0x44, 0x2c, 0x56, 0x3, 0x9, [{@multicast2, 0xe9}, {@remote, 0x2}, {@broadcast, 0x4}, {@rand_addr=0x64010102, 0x1}, {@empty, 0xffff}]}, @ra={0x94, 0x4, 0x1}]}}}}}) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r5, &(0x7f0000000480)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x60, 0x0, 0x8, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x3}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r8}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @remote}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x60000}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x60}}, 0x4000) r9 = socket$netlink(0x10, 0x3, 0x1) writev(r9, &(0x7f0000000080)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000005600000025000000190004000400000007fd17e5ff8e0606040020000000000000", 0x39}], 0x1) r10 = socket$netlink(0x10, 0x3, 0x0) writev(r10, &(0x7f0000000040)=[{&(0x7f0000000100)="390000001300034700bb65e1c3e4ffff060000000100000045000000250000001900040004002d000200000000000006040000d8eaf3fc0000", 0x39}], 0x1) setsockopt$inet_msfilter(r7, 0x0, 0x29, &(0x7f0000000180)={@multicast2, @loopback, 0x1}, 0x10) 00:28:05 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0xf000) sendfile(r1, r2, 0x0, 0xf03b0000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x13, r0, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x100}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/18, 0x30c000, 0x800}, 0x200d6f) [ 183.099103][T10084] netlink: 1 bytes leftover after parsing attributes in process `syz-executor.2'. [ 183.284549][T10088] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 183.310887][T10089] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 183.324529][T10096] netlink: 'syz-executor.1': attribute type 4 has an invalid length. 00:28:05 executing program 0: r0 = socket(0x15, 0x5, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.current\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000400)=ANY=[@ANYRES32], 0x6db6e559) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r1, 0x0) getsockopt(r0, 0x200000000114, 0x8, &(0x7f0000c35fff)=""/1, &(0x7f0000000000)=0xf002) 00:28:05 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth0_macvtap\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000800)=ANY=[@ANYBLOB="500100002400036f78e17e000000000000000000", @ANYRES32=r1, @ANYBLOB="00000000ffffffff00000000080001007265640024010200140001000000fdff0000000005000000000000000800050009000000040102"], 0x150}}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r2, &(0x7f0000000140), 0x4924b68, 0x0) 00:28:05 executing program 1: bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000040)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x8}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r0}, 0x10) socket$packet(0x11, 0x2, 0x300) 00:28:05 executing program 5: sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x404c005}, 0x40) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000140)={0x20}) pwrite64(r1, &(0x7f00000002c0)='_', 0x1, 0x0) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) ioctl$FIBMAP(r1, 0x1, &(0x7f00000000c0)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000380), 0x101bf) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000001300)={0x2880008, r1, 0x0, 0x8}) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x0) socket$can_j1939(0x1d, 0x2, 0x7) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0xb00000000065808, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[], 0x1}}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100000001) 00:28:05 executing program 0: sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x404c005}, 0x40) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000140)={0x20}) pwrite64(r1, &(0x7f00000002c0)='_', 0x1, 0x0) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) ioctl$FIBMAP(r1, 0x1, &(0x7f00000000c0)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000380), 0x101bf) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000001300)={0x2880008, r1, 0x0, 0x8}) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x0) socket$can_j1939(0x1d, 0x2, 0x7) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0xb00000000065808, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[], 0x1}}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100000001) 00:28:05 executing program 1: r0 = syz_genetlink_get_family_id$nl802154(&(0x7f00000020c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_LEVEL(0xffffffffffffffff, &(0x7f0000002180)={&(0x7f0000002080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000002140)={&(0x7f0000002100)={0x30, r0, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x8884}, 0x4041) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL802154_CMD_DEL_SEC_KEY(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x70, r0, 0x8, 0x70bd2b, 0x25dfdbff, {}, [@NL802154_ATTR_SEC_KEY={0x2c, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "3e7aa6be6361b6848987a200f546d4c6"}, @NL802154_KEY_ATTR_ID={0x14, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_MODE={0x8}]}]}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x70}, 0x1, 0x0, 0x0, 0x10}, 0x40000) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) socket$inet_mptcp(0x2, 0x1, 0x106) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'wpan1\x00'}) getsockopt$inet_IP_XFRM_POLICY(r1, 0x6, 0xd, 0x0, 0x0) unshare(0x40060400) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000000)={{{@in6=@mcast1, @in6=@private0}}, {{@in6=@local}, 0x0, @in6=@ipv4={""/10, ""/2, @loopback}}}, &(0x7f0000000100)=0xe8) 00:28:05 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth0_macvtap\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000800)=ANY=[@ANYBLOB="500100002400036f78e17e000000000000000000", @ANYRES32=r1, @ANYBLOB="00000000ffffffff00000000080001007265640024010200140001000000fdff0000000005000000000000000800050009000000040102"], 0x150}}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r2, &(0x7f0000000140), 0x4924b68, 0x0) 00:28:06 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth0_macvtap\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000800)=ANY=[@ANYBLOB="500100002400036f78e17e000000000000000000", @ANYRES32=r1, @ANYBLOB="00000000ffffffff00000000080001007265640024010200140001000000fdff0000000005000000000000000800050009000000040102"], 0x150}}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r2, &(0x7f0000000140), 0x4924b68, 0x0) 00:28:06 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth0_macvtap\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000800)=ANY=[@ANYBLOB="500100002400036f78e17e000000000000000000", @ANYRES32=r1, @ANYBLOB="00000000ffffffff00000000080001007265640024010200140001000000fdff0000000005000000000000000800050009000000040102"], 0x150}}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r2, &(0x7f0000000140), 0x4924b68, 0x0) 00:28:06 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0xf000) sendfile(r1, r2, 0x0, 0xf03b0000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x13, r0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8001}}, &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000240)={{0x7f, 0x45, 0x4c, 0x46, 0x4, 0xf9, 0x7, 0x0, 0x8000, 0x0, 0x6, 0x0, 0x253, 0x40, 0xd1, 0x0, 0x4, 0x38, 0x0, 0x20, 0x7}, [{0x0, 0xc3a9, 0x0, 0xc2, 0x20, 0x0, 0x1f}, {0x0, 0x5, 0x3f02, 0x7ff, 0x9, 0x9, 0x6, 0x4c}], "d61531c53ea096fba45f88e428", ['\x00', '\x00']}, 0x2bd) r3 = socket$xdp(0x2c, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) recvmmsg(r3, 0x0, 0x0, 0x40002003, &(0x7f0000000d80)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="44000000100001042cbd", @ANYRES32=0x0, @ANYRES32], 0x44}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="64000000160002002abd7000fedbdf25023808fe", @ANYRES32=0x0, @ANYBLOB="14000600ff0700000000f7ffffff080008000400000014000600fff1ffff53000001ff010000"], 0x64}, 0x1, 0x0, 0x0, 0x40}, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/18, 0x30c000, 0x800}, 0x200d6f) 00:28:06 executing program 3: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x2e, 0x0, 0x0) 00:28:07 executing program 5: sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x404c005}, 0x40) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000140)={0x20}) pwrite64(r1, &(0x7f00000002c0)='_', 0x1, 0x0) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) ioctl$FIBMAP(r1, 0x1, &(0x7f00000000c0)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000380), 0x101bf) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000001300)={0x2880008, r1, 0x0, 0x8}) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x0) socket$can_j1939(0x1d, 0x2, 0x7) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0xb00000000065808, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[], 0x1}}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100000001) 00:28:07 executing program 3: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) close(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000080)=0x400000001, 0x4) setsockopt$inet6_tcp_int(r1, 0x6, 0x22, &(0x7f0000356000)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x1c) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote}, 0x1c) sendmmsg(r0, &(0x7f0000009e00)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000140)='N', 0x1}], 0x1}}, {{&(0x7f0000000800)=@isdn={0xa}, 0x80, 0x0}}], 0x2, 0x2400c06c) 00:28:07 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0xc, 0x0, &(0x7f0000000600)) 00:28:07 executing program 0: sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x404c005}, 0x40) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000140)={0x20}) pwrite64(r1, &(0x7f00000002c0)='_', 0x1, 0x0) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) ioctl$FIBMAP(r1, 0x1, &(0x7f00000000c0)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000380), 0x101bf) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000001300)={0x2880008, r1, 0x0, 0x8}) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x0) socket$can_j1939(0x1d, 0x2, 0x7) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0xb00000000065808, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[], 0x1}}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100000001) 00:28:07 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000580)=@filter={'filter\x00', 0xe, 0x4, 0x4c8, 0xffffffff, 0x128, 0x128, 0x270, 0xffffffff, 0xffffffff, 0x3f8, 0x3f8, 0x3f8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xf0, 0x128, 0x0, {}, [@common=@dst={{0x48}, {0x23, 0x1, 0x0, [0x1, 0x0, 0x81, 0x8, 0xe13, 0x2, 0x718, 0x30cd, 0x0, 0x8, 0x40, 0x7, 0x800, 0x0, 0xd8, 0xa9], 0x10}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x2, 0x4, 0x8}, {0x1, 0x0, 0x2}, {0x3, 0x0, 0x6}, 0x2, 0x3}}}, {{@uncond, 0x0, 0x120, 0x148, 0x0, {}, [@common=@frag={{0x30}, {[0x4, 0x6], 0x41ea, 0x9, 0x3}}, @common=@hbh={{0x48}, {0x3, 0x1, 0x0, [0x1000, 0x5, 0xbfa1, 0x8, 0x9, 0x4, 0x2, 0x8001, 0x0, 0xad4d, 0x7, 0x20, 0x3, 0x4, 0x1, 0x7], 0x8}}]}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x9, 0xfffffffe}}}, {{@ipv6={@dev, @private0, [0x0, 0x0, 0x0, 0xff000000], [0x0, 0xff, 0x0, 0xff000000], 'veth0_virt_wifi\x00', 'sit0\x00', {}, {}, 0x2f, 0x6, 0x1}, 0x0, 0x160, 0x188, 0x0, {}, [@common=@srh1={{0x90}, {0x2f, 0xff, 0x8, 0x2, 0x5, @empty, @private2={0xfc, 0x2, '\x00', 0x1}, @remote, [0x0, 0xffffffff, 0xffffffff, 0xff000000], [0xffffffff, 0xff, 0xffffffff, 0xff000000], [0xffffffff, 0xffffff00], 0x115, 0x14}}, @common=@mh={{0x28}, {"9f97", 0x1}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x528) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000300)=ANY=[], 0xfffffd9d) sendfile(r0, r1, 0x0, 0x80000000) pipe(&(0x7f0000000180)) 00:28:07 executing program 3: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) close(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000080)=0x400000001, 0x4) setsockopt$inet6_tcp_int(r1, 0x6, 0x22, &(0x7f0000356000)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x1c) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote}, 0x1c) sendmmsg(r0, &(0x7f0000009e00)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000140)='N', 0x1}], 0x1}}, {{&(0x7f0000000800)=@isdn={0xa}, 0x80, 0x0}}], 0x2, 0x2400c06c) 00:28:10 executing program 1: r0 = syz_genetlink_get_family_id$nl802154(&(0x7f00000020c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_LEVEL(0xffffffffffffffff, &(0x7f0000002180)={&(0x7f0000002080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000002140)={&(0x7f0000002100)={0x30, r0, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x8884}, 0x4041) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL802154_CMD_DEL_SEC_KEY(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x70, r0, 0x8, 0x70bd2b, 0x25dfdbff, {}, [@NL802154_ATTR_SEC_KEY={0x2c, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "3e7aa6be6361b6848987a200f546d4c6"}, @NL802154_KEY_ATTR_ID={0x14, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_MODE={0x8}]}]}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x70}, 0x1, 0x0, 0x0, 0x10}, 0x40000) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) socket$inet_mptcp(0x2, 0x1, 0x106) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'wpan1\x00'}) getsockopt$inet_IP_XFRM_POLICY(r1, 0x6, 0xd, 0x0, 0x0) unshare(0x40060400) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000000)={{{@in6=@mcast1, @in6=@private0}}, {{@in6=@local}, 0x0, @in6=@ipv4={""/10, ""/2, @loopback}}}, &(0x7f0000000100)=0xe8) 00:28:10 executing program 5: sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x404c005}, 0x40) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000140)={0x20}) pwrite64(r1, &(0x7f00000002c0)='_', 0x1, 0x0) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) ioctl$FIBMAP(r1, 0x1, &(0x7f00000000c0)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000380), 0x101bf) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000001300)={0x2880008, r1, 0x0, 0x8}) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x0) socket$can_j1939(0x1d, 0x2, 0x7) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0xb00000000065808, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[], 0x1}}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100000001) 00:28:10 executing program 3: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) close(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000080)=0x400000001, 0x4) setsockopt$inet6_tcp_int(r1, 0x6, 0x22, &(0x7f0000356000)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x1c) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote}, 0x1c) sendmmsg(r0, &(0x7f0000009e00)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000140)='N', 0x1}], 0x1}}, {{&(0x7f0000000800)=@isdn={0xa}, 0x80, 0x0}}], 0x2, 0x2400c06c) 00:28:10 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0xf000) sendfile(r1, r2, 0x0, 0xf03b0000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x13, r0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8001}}, &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000240)={{0x7f, 0x45, 0x4c, 0x46, 0x4, 0xf9, 0x7, 0x0, 0x8000, 0x0, 0x6, 0x0, 0x253, 0x40, 0xd1, 0x0, 0x4, 0x38, 0x0, 0x20, 0x7}, [{0x0, 0xc3a9, 0x0, 0xc2, 0x20, 0x0, 0x1f}, {0x0, 0x5, 0x3f02, 0x7ff, 0x9, 0x9, 0x6, 0x4c}], "d61531c53ea096fba45f88e428", ['\x00', '\x00']}, 0x2bd) r3 = socket$xdp(0x2c, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) recvmmsg(r3, 0x0, 0x0, 0x40002003, &(0x7f0000000d80)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="44000000100001042cbd", @ANYRES32=0x0, @ANYRES32], 0x44}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="64000000160002002abd7000fedbdf25023808fe", @ANYRES32=0x0, @ANYBLOB="14000600ff0700000000f7ffffff080008000400000014000600fff1ffff53000001ff010000"], 0x64}, 0x1, 0x0, 0x0, 0x40}, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/18, 0x30c000, 0x800}, 0x200d6f) 00:28:10 executing program 0: sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x404c005}, 0x40) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000140)={0x20}) pwrite64(r1, &(0x7f00000002c0)='_', 0x1, 0x0) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) ioctl$FIBMAP(r1, 0x1, &(0x7f00000000c0)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000380), 0x101bf) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000001300)={0x2880008, r1, 0x0, 0x8}) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x0) socket$can_j1939(0x1d, 0x2, 0x7) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0xb00000000065808, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[], 0x1}}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100000001) 00:28:10 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000580)=@filter={'filter\x00', 0xe, 0x4, 0x4c8, 0xffffffff, 0x128, 0x128, 0x270, 0xffffffff, 0xffffffff, 0x3f8, 0x3f8, 0x3f8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xf0, 0x128, 0x0, {}, [@common=@dst={{0x48}, {0x23, 0x1, 0x0, [0x1, 0x0, 0x81, 0x8, 0xe13, 0x2, 0x718, 0x30cd, 0x0, 0x8, 0x40, 0x7, 0x800, 0x0, 0xd8, 0xa9], 0x10}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x2, 0x4, 0x8}, {0x1, 0x0, 0x2}, {0x3, 0x0, 0x6}, 0x2, 0x3}}}, {{@uncond, 0x0, 0x120, 0x148, 0x0, {}, [@common=@frag={{0x30}, {[0x4, 0x6], 0x41ea, 0x9, 0x3}}, @common=@hbh={{0x48}, {0x3, 0x1, 0x0, [0x1000, 0x5, 0xbfa1, 0x8, 0x9, 0x4, 0x2, 0x8001, 0x0, 0xad4d, 0x7, 0x20, 0x3, 0x4, 0x1, 0x7], 0x8}}]}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x9, 0xfffffffe}}}, {{@ipv6={@dev, @private0, [0x0, 0x0, 0x0, 0xff000000], [0x0, 0xff, 0x0, 0xff000000], 'veth0_virt_wifi\x00', 'sit0\x00', {}, {}, 0x2f, 0x6, 0x1}, 0x0, 0x160, 0x188, 0x0, {}, [@common=@srh1={{0x90}, {0x2f, 0xff, 0x8, 0x2, 0x5, @empty, @private2={0xfc, 0x2, '\x00', 0x1}, @remote, [0x0, 0xffffffff, 0xffffffff, 0xff000000], [0xffffffff, 0xff, 0xffffffff, 0xff000000], [0xffffffff, 0xffffff00], 0x115, 0x14}}, @common=@mh={{0x28}, {"9f97", 0x1}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x528) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000300)=ANY=[], 0xfffffd9d) sendfile(r0, r1, 0x0, 0x80000000) pipe(&(0x7f0000000180)) 00:28:10 executing program 3: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) close(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000080)=0x400000001, 0x4) setsockopt$inet6_tcp_int(r1, 0x6, 0x22, &(0x7f0000356000)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x1c) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote}, 0x1c) sendmmsg(r0, &(0x7f0000009e00)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000140)='N', 0x1}], 0x1}}, {{&(0x7f0000000800)=@isdn={0xa}, 0x80, 0x0}}], 0x2, 0x2400c06c) 00:28:11 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0xf000) sendfile(r1, r2, 0x0, 0xf03b0000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x13, r0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8001}}, &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000240)={{0x7f, 0x45, 0x4c, 0x46, 0x4, 0xf9, 0x7, 0x0, 0x8000, 0x0, 0x6, 0x0, 0x253, 0x40, 0xd1, 0x0, 0x4, 0x38, 0x0, 0x20, 0x7}, [{0x0, 0xc3a9, 0x0, 0xc2, 0x20, 0x0, 0x1f}, {0x0, 0x5, 0x3f02, 0x7ff, 0x9, 0x9, 0x6, 0x4c}], "d61531c53ea096fba45f88e428", ['\x00', '\x00']}, 0x2bd) r3 = socket$xdp(0x2c, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) recvmmsg(r3, 0x0, 0x0, 0x40002003, &(0x7f0000000d80)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="44000000100001042cbd", @ANYRES32=0x0, @ANYRES32], 0x44}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="64000000160002002abd7000fedbdf25023808fe", @ANYRES32=0x0, @ANYBLOB="14000600ff0700000000f7ffffff080008000400000014000600fff1ffff53000001ff010000"], 0x64}, 0x1, 0x0, 0x0, 0x40}, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/18, 0x30c000, 0x800}, 0x200d6f) 00:28:11 executing program 1: r0 = syz_genetlink_get_family_id$nl802154(&(0x7f00000020c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_LEVEL(0xffffffffffffffff, &(0x7f0000002180)={&(0x7f0000002080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000002140)={&(0x7f0000002100)={0x30, r0, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x8884}, 0x4041) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL802154_CMD_DEL_SEC_KEY(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x70, r0, 0x8, 0x70bd2b, 0x25dfdbff, {}, [@NL802154_ATTR_SEC_KEY={0x2c, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "3e7aa6be6361b6848987a200f546d4c6"}, @NL802154_KEY_ATTR_ID={0x14, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_MODE={0x8}]}]}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x70}, 0x1, 0x0, 0x0, 0x10}, 0x40000) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) socket$inet_mptcp(0x2, 0x1, 0x106) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'wpan1\x00'}) getsockopt$inet_IP_XFRM_POLICY(r1, 0x6, 0xd, 0x0, 0x0) unshare(0x40060400) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000000)={{{@in6=@mcast1, @in6=@private0}}, {{@in6=@local}, 0x0, @in6=@ipv4={""/10, ""/2, @loopback}}}, &(0x7f0000000100)=0xe8) 00:28:11 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000580)=@filter={'filter\x00', 0xe, 0x4, 0x4c8, 0xffffffff, 0x128, 0x128, 0x270, 0xffffffff, 0xffffffff, 0x3f8, 0x3f8, 0x3f8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xf0, 0x128, 0x0, {}, [@common=@dst={{0x48}, {0x23, 0x1, 0x0, [0x1, 0x0, 0x81, 0x8, 0xe13, 0x2, 0x718, 0x30cd, 0x0, 0x8, 0x40, 0x7, 0x800, 0x0, 0xd8, 0xa9], 0x10}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x2, 0x4, 0x8}, {0x1, 0x0, 0x2}, {0x3, 0x0, 0x6}, 0x2, 0x3}}}, {{@uncond, 0x0, 0x120, 0x148, 0x0, {}, [@common=@frag={{0x30}, {[0x4, 0x6], 0x41ea, 0x9, 0x3}}, @common=@hbh={{0x48}, {0x3, 0x1, 0x0, [0x1000, 0x5, 0xbfa1, 0x8, 0x9, 0x4, 0x2, 0x8001, 0x0, 0xad4d, 0x7, 0x20, 0x3, 0x4, 0x1, 0x7], 0x8}}]}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x9, 0xfffffffe}}}, {{@ipv6={@dev, @private0, [0x0, 0x0, 0x0, 0xff000000], [0x0, 0xff, 0x0, 0xff000000], 'veth0_virt_wifi\x00', 'sit0\x00', {}, {}, 0x2f, 0x6, 0x1}, 0x0, 0x160, 0x188, 0x0, {}, [@common=@srh1={{0x90}, {0x2f, 0xff, 0x8, 0x2, 0x5, @empty, @private2={0xfc, 0x2, '\x00', 0x1}, @remote, [0x0, 0xffffffff, 0xffffffff, 0xff000000], [0xffffffff, 0xff, 0xffffffff, 0xff000000], [0xffffffff, 0xffffff00], 0x115, 0x14}}, @common=@mh={{0x28}, {"9f97", 0x1}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x528) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000300)=ANY=[], 0xfffffd9d) sendfile(r0, r1, 0x0, 0x80000000) pipe(&(0x7f0000000180)) 00:28:11 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0xf000) sendfile(r1, r2, 0x0, 0xf03b0000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x13, r0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8001}}, &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000240)={{0x7f, 0x45, 0x4c, 0x46, 0x4, 0xf9, 0x7, 0x0, 0x8000, 0x0, 0x6, 0x0, 0x253, 0x40, 0xd1, 0x0, 0x4, 0x38, 0x0, 0x20, 0x7}, [{0x0, 0xc3a9, 0x0, 0xc2, 0x20, 0x0, 0x1f}, {0x0, 0x5, 0x3f02, 0x7ff, 0x9, 0x9, 0x6, 0x4c}], "d61531c53ea096fba45f88e428", ['\x00', '\x00']}, 0x2bd) r3 = socket$xdp(0x2c, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) recvmmsg(r3, 0x0, 0x0, 0x40002003, &(0x7f0000000d80)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="44000000100001042cbd", @ANYRES32=0x0, @ANYRES32], 0x44}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="64000000160002002abd7000fedbdf25023808fe", @ANYRES32=0x0, @ANYBLOB="14000600ff0700000000f7ffffff080008000400000014000600fff1ffff53000001ff010000"], 0x64}, 0x1, 0x0, 0x0, 0x40}, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/18, 0x30c000, 0x800}, 0x200d6f) 00:28:11 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0xf000) sendfile(r1, r2, 0x0, 0xf03b0000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x13, r0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8001}}, &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000240)={{0x7f, 0x45, 0x4c, 0x46, 0x4, 0xf9, 0x7, 0x0, 0x8000, 0x0, 0x6, 0x0, 0x253, 0x40, 0xd1, 0x0, 0x4, 0x38, 0x0, 0x20, 0x7}, [{0x0, 0xc3a9, 0x0, 0xc2, 0x20, 0x0, 0x1f}, {0x0, 0x5, 0x3f02, 0x7ff, 0x9, 0x9, 0x6, 0x4c}], "d61531c53ea096fba45f88e428", ['\x00', '\x00']}, 0x2bd) r3 = socket$xdp(0x2c, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) recvmmsg(r3, 0x0, 0x0, 0x40002003, &(0x7f0000000d80)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="44000000100001042cbd", @ANYRES32=0x0, @ANYRES32], 0x44}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="64000000160002002abd7000fedbdf25023808fe", @ANYRES32=0x0, @ANYBLOB="14000600ff0700000000f7ffffff080008000400000014000600fff1ffff53000001ff010000"], 0x64}, 0x1, 0x0, 0x0, 0x40}, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/18, 0x30c000, 0x800}, 0x200d6f) 00:28:11 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0xf000) sendfile(r1, r2, 0x0, 0xf03b0000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x13, r0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8001}}, &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000240)={{0x7f, 0x45, 0x4c, 0x46, 0x4, 0xf9, 0x7, 0x0, 0x8000, 0x0, 0x6, 0x0, 0x253, 0x40, 0xd1, 0x0, 0x4, 0x38, 0x0, 0x20, 0x7}, [{0x0, 0xc3a9, 0x0, 0xc2, 0x20, 0x0, 0x1f}, {0x0, 0x5, 0x3f02, 0x7ff, 0x9, 0x9, 0x6, 0x4c}], "d61531c53ea096fba45f88e428", ['\x00', '\x00']}, 0x2bd) r3 = socket$xdp(0x2c, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) recvmmsg(r3, 0x0, 0x0, 0x40002003, &(0x7f0000000d80)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="44000000100001042cbd", @ANYRES32=0x0, @ANYRES32], 0x44}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="64000000160002002abd7000fedbdf25023808fe", @ANYRES32=0x0, @ANYBLOB="14000600ff0700000000f7ffffff080008000400000014000600fff1ffff53000001ff010000"], 0x64}, 0x1, 0x0, 0x0, 0x40}, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/18, 0x30c000, 0x800}, 0x200d6f) 00:28:12 executing program 1: r0 = syz_genetlink_get_family_id$nl802154(&(0x7f00000020c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_LEVEL(0xffffffffffffffff, &(0x7f0000002180)={&(0x7f0000002080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000002140)={&(0x7f0000002100)={0x30, r0, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x8884}, 0x4041) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL802154_CMD_DEL_SEC_KEY(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x70, r0, 0x8, 0x70bd2b, 0x25dfdbff, {}, [@NL802154_ATTR_SEC_KEY={0x2c, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "3e7aa6be6361b6848987a200f546d4c6"}, @NL802154_KEY_ATTR_ID={0x14, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_MODE={0x8}]}]}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x70}, 0x1, 0x0, 0x0, 0x10}, 0x40000) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) socket$inet_mptcp(0x2, 0x1, 0x106) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'wpan1\x00'}) getsockopt$inet_IP_XFRM_POLICY(r1, 0x6, 0xd, 0x0, 0x0) unshare(0x40060400) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000000)={{{@in6=@mcast1, @in6=@private0}}, {{@in6=@local}, 0x0, @in6=@ipv4={""/10, ""/2, @loopback}}}, &(0x7f0000000100)=0xe8) 00:28:12 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0xf000) sendfile(r1, r2, 0x0, 0xf03b0000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x13, r0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8001}}, &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000240)={{0x7f, 0x45, 0x4c, 0x46, 0x4, 0xf9, 0x7, 0x0, 0x8000, 0x0, 0x6, 0x0, 0x253, 0x40, 0xd1, 0x0, 0x4, 0x38, 0x0, 0x20, 0x7}, [{0x0, 0xc3a9, 0x0, 0xc2, 0x20, 0x0, 0x1f}, {0x0, 0x5, 0x3f02, 0x7ff, 0x9, 0x9, 0x6, 0x4c}], "d61531c53ea096fba45f88e428", ['\x00', '\x00']}, 0x2bd) r3 = socket$xdp(0x2c, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) recvmmsg(r3, 0x0, 0x0, 0x40002003, &(0x7f0000000d80)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="44000000100001042cbd", @ANYRES32=0x0, @ANYRES32], 0x44}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="64000000160002002abd7000fedbdf25023808fe", @ANYRES32=0x0, @ANYBLOB="14000600ff0700000000f7ffffff080008000400000014000600fff1ffff53000001ff010000"], 0x64}, 0x1, 0x0, 0x0, 0x40}, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/18, 0x30c000, 0x800}, 0x200d6f) 00:28:13 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0xf000) sendfile(r1, r2, 0x0, 0xf03b0000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x13, r0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8001}}, &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000240)={{0x7f, 0x45, 0x4c, 0x46, 0x4, 0xf9, 0x7, 0x0, 0x8000, 0x0, 0x6, 0x0, 0x253, 0x40, 0xd1, 0x0, 0x4, 0x38, 0x0, 0x20, 0x7}, [{0x0, 0xc3a9, 0x0, 0xc2, 0x20, 0x0, 0x1f}, {0x0, 0x5, 0x3f02, 0x7ff, 0x9, 0x9, 0x6, 0x4c}], "d61531c53ea096fba45f88e428", ['\x00', '\x00']}, 0x2bd) r3 = socket$xdp(0x2c, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) recvmmsg(r3, 0x0, 0x0, 0x40002003, &(0x7f0000000d80)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="44000000100001042cbd", @ANYRES32=0x0, @ANYRES32], 0x44}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="64000000160002002abd7000fedbdf25023808fe", @ANYRES32=0x0, @ANYBLOB="14000600ff0700000000f7ffffff080008000400000014000600fff1ffff53000001ff010000"], 0x64}, 0x1, 0x0, 0x0, 0x40}, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/18, 0x30c000, 0x800}, 0x200d6f) 00:28:13 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000580)=@filter={'filter\x00', 0xe, 0x4, 0x4c8, 0xffffffff, 0x128, 0x128, 0x270, 0xffffffff, 0xffffffff, 0x3f8, 0x3f8, 0x3f8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xf0, 0x128, 0x0, {}, [@common=@dst={{0x48}, {0x23, 0x1, 0x0, [0x1, 0x0, 0x81, 0x8, 0xe13, 0x2, 0x718, 0x30cd, 0x0, 0x8, 0x40, 0x7, 0x800, 0x0, 0xd8, 0xa9], 0x10}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x2, 0x4, 0x8}, {0x1, 0x0, 0x2}, {0x3, 0x0, 0x6}, 0x2, 0x3}}}, {{@uncond, 0x0, 0x120, 0x148, 0x0, {}, [@common=@frag={{0x30}, {[0x4, 0x6], 0x41ea, 0x9, 0x3}}, @common=@hbh={{0x48}, {0x3, 0x1, 0x0, [0x1000, 0x5, 0xbfa1, 0x8, 0x9, 0x4, 0x2, 0x8001, 0x0, 0xad4d, 0x7, 0x20, 0x3, 0x4, 0x1, 0x7], 0x8}}]}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x9, 0xfffffffe}}}, {{@ipv6={@dev, @private0, [0x0, 0x0, 0x0, 0xff000000], [0x0, 0xff, 0x0, 0xff000000], 'veth0_virt_wifi\x00', 'sit0\x00', {}, {}, 0x2f, 0x6, 0x1}, 0x0, 0x160, 0x188, 0x0, {}, [@common=@srh1={{0x90}, {0x2f, 0xff, 0x8, 0x2, 0x5, @empty, @private2={0xfc, 0x2, '\x00', 0x1}, @remote, [0x0, 0xffffffff, 0xffffffff, 0xff000000], [0xffffffff, 0xff, 0xffffffff, 0xff000000], [0xffffffff, 0xffffff00], 0x115, 0x14}}, @common=@mh={{0x28}, {"9f97", 0x1}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x528) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000300)=ANY=[], 0xfffffd9d) sendfile(r0, r1, 0x0, 0x80000000) pipe(&(0x7f0000000180)) 00:28:13 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0xf000) sendfile(r1, r2, 0x0, 0xf03b0000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x13, r0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8001}}, &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000240)={{0x7f, 0x45, 0x4c, 0x46, 0x4, 0xf9, 0x7, 0x0, 0x8000, 0x0, 0x6, 0x0, 0x253, 0x40, 0xd1, 0x0, 0x4, 0x38, 0x0, 0x20, 0x7}, [{0x0, 0xc3a9, 0x0, 0xc2, 0x20, 0x0, 0x1f}, {0x0, 0x5, 0x3f02, 0x7ff, 0x9, 0x9, 0x6, 0x4c}], "d61531c53ea096fba45f88e428", ['\x00', '\x00']}, 0x2bd) r3 = socket$xdp(0x2c, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) recvmmsg(r3, 0x0, 0x0, 0x40002003, &(0x7f0000000d80)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="44000000100001042cbd", @ANYRES32=0x0, @ANYRES32], 0x44}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="64000000160002002abd7000fedbdf25023808fe", @ANYRES32=0x0, @ANYBLOB="14000600ff0700000000f7ffffff080008000400000014000600fff1ffff53000001ff010000"], 0x64}, 0x1, 0x0, 0x0, 0x40}, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/18, 0x30c000, 0x800}, 0x200d6f) 00:28:13 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0xf000) sendfile(r1, r2, 0x0, 0xf03b0000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x13, r0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8001}}, &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000240)={{0x7f, 0x45, 0x4c, 0x46, 0x4, 0xf9, 0x7, 0x0, 0x8000, 0x0, 0x6, 0x0, 0x253, 0x40, 0xd1, 0x0, 0x4, 0x38, 0x0, 0x20, 0x7}, [{0x0, 0xc3a9, 0x0, 0xc2, 0x20, 0x0, 0x1f}, {0x0, 0x5, 0x3f02, 0x7ff, 0x9, 0x9, 0x6, 0x4c}], "d61531c53ea096fba45f88e428", ['\x00', '\x00']}, 0x2bd) r3 = socket$xdp(0x2c, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) recvmmsg(r3, 0x0, 0x0, 0x40002003, &(0x7f0000000d80)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="44000000100001042cbd", @ANYRES32=0x0, @ANYRES32], 0x44}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="64000000160002002abd7000fedbdf25023808fe", @ANYRES32=0x0, @ANYBLOB="14000600ff0700000000f7ffffff080008000400000014000600fff1ffff53000001ff010000"], 0x64}, 0x1, 0x0, 0x0, 0x40}, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/18, 0x30c000, 0x800}, 0x200d6f) 00:28:13 executing program 1: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(r1, &(0x7f0000000000), 0x248800) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events\x00', 0x2da8020000100000, 0x500001c) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) [ 191.546774][ T26] audit: type=1804 audit(1634603293.540:2): pid=10339 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir706221036/syzkaller.mXHjpb/45/memory.events" dev="sda1" ino=14085 res=1 errno=0 [ 191.760838][ T26] audit: type=1804 audit(1634603293.590:3): pid=10347 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir706221036/syzkaller.mXHjpb/45/memory.events" dev="sda1" ino=14085 res=1 errno=0 [ 192.143721][T10339] syz-executor.1 (10339) used greatest stack depth: 22656 bytes left [ 192.154458][ T26] audit: type=1804 audit(1634603294.130:4): pid=10354 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir706221036/syzkaller.mXHjpb/45/memory.events" dev="sda1" ino=14085 res=1 errno=0 00:28:14 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) tee(r0, 0xffffffffffffffff, 0x56f, 0x0) [ 192.436355][ T26] audit: type=1804 audit(1634603294.140:5): pid=10339 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir706221036/syzkaller.mXHjpb/45/memory.events" dev="sda1" ino=14085 res=1 errno=0 00:28:14 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0xf000) sendfile(r1, r2, 0x0, 0xf03b0000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x13, r0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8001}}, &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000240)={{0x7f, 0x45, 0x4c, 0x46, 0x4, 0xf9, 0x7, 0x0, 0x8000, 0x0, 0x6, 0x0, 0x253, 0x40, 0xd1, 0x0, 0x4, 0x38, 0x0, 0x20, 0x7}, [{0x0, 0xc3a9, 0x0, 0xc2, 0x20, 0x0, 0x1f}, {0x0, 0x5, 0x3f02, 0x7ff, 0x9, 0x9, 0x6, 0x4c}], "d61531c53ea096fba45f88e428", ['\x00', '\x00']}, 0x2bd) r3 = socket$xdp(0x2c, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) recvmmsg(r3, 0x0, 0x0, 0x40002003, &(0x7f0000000d80)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="44000000100001042cbd", @ANYRES32=0x0, @ANYRES32], 0x44}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="64000000160002002abd7000fedbdf25023808fe", @ANYRES32=0x0, @ANYBLOB="14000600ff0700000000f7ffffff080008000400000014000600fff1ffff53000001ff010000"], 0x64}, 0x1, 0x0, 0x0, 0x40}, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/18, 0x30c000, 0x800}, 0x200d6f) 00:28:14 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0xf000) sendfile(r1, r2, 0x0, 0xf03b0000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x13, r0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8001}}, &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000240)={{0x7f, 0x45, 0x4c, 0x46, 0x4, 0xf9, 0x7, 0x0, 0x8000, 0x0, 0x6, 0x0, 0x253, 0x40, 0xd1, 0x0, 0x4, 0x38, 0x0, 0x20, 0x7}, [{0x0, 0xc3a9, 0x0, 0xc2, 0x20, 0x0, 0x1f}, {0x0, 0x5, 0x3f02, 0x7ff, 0x9, 0x9, 0x6, 0x4c}], "d61531c53ea096fba45f88e428", ['\x00', '\x00']}, 0x2bd) r3 = socket$xdp(0x2c, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) recvmmsg(r3, 0x0, 0x0, 0x40002003, &(0x7f0000000d80)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="44000000100001042cbd", @ANYRES32=0x0, @ANYRES32], 0x44}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="64000000160002002abd7000fedbdf25023808fe", @ANYRES32=0x0, @ANYBLOB="14000600ff0700000000f7ffffff080008000400000014000600fff1ffff53000001ff010000"], 0x64}, 0x1, 0x0, 0x0, 0x40}, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/18, 0x30c000, 0x800}, 0x200d6f) 00:28:14 executing program 1: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'hsr0\x00'}}]}, 0x38}}, 0x0) 00:28:14 executing program 2: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r0, &(0x7f0000001580)={0x23, 0x0, 0x5}, 0x10) 00:28:14 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0xf000) sendfile(r1, r2, 0x0, 0xf03b0000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x13, r0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8001}}, &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000240)={{0x7f, 0x45, 0x4c, 0x46, 0x4, 0xf9, 0x7, 0x0, 0x8000, 0x0, 0x6, 0x0, 0x253, 0x40, 0xd1, 0x0, 0x4, 0x38, 0x0, 0x20, 0x7}, [{0x0, 0xc3a9, 0x0, 0xc2, 0x20, 0x0, 0x1f}, {0x0, 0x5, 0x3f02, 0x7ff, 0x9, 0x9, 0x6, 0x4c}], "d61531c53ea096fba45f88e428", ['\x00', '\x00']}, 0x2bd) r3 = socket$xdp(0x2c, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) recvmmsg(r3, 0x0, 0x0, 0x40002003, &(0x7f0000000d80)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="44000000100001042cbd", @ANYRES32=0x0, @ANYRES32], 0x44}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="64000000160002002abd7000fedbdf25023808fe", @ANYRES32=0x0, @ANYBLOB="14000600ff0700000000f7ffffff080008000400000014000600fff1ffff53000001ff010000"], 0x64}, 0x1, 0x0, 0x0, 0x40}, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/18, 0x30c000, 0x800}, 0x200d6f) 00:28:14 executing program 4: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz1\x00', 0x1ff) r1 = openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000180)=0xffffffffffffffff, 0x12) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r2, 0x84, 0x6e, &(0x7f0000000000)=[@in={0x2, 0x0, @rand_addr=0x64010100}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000100)=ANY=[@ANYBLOB="01000040", @ANYRES32=0x0], &(0x7f0000000140)=0x8) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r2, 0x84, 0x83, &(0x7f0000000300)={r3}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000001c0)={r3, @in6={{0xa, 0x4e23, 0x44, @empty, 0x48}}, 0x5, 0xffff, 0x80000000, 0x10, 0x44, 0x1, 0x4}, 0x9c) write$cgroup_pid(r1, &(0x7f0000000140), 0x12) r4 = openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.threads\x00', 0x2, 0x0) sendfile(r4, r4, &(0x7f0000000080)=0x5, 0x80002) [ 192.959630][T10362] hsr0 speed is unknown, defaulting to 1000 [ 192.998305][T10362] hsr0 speed is unknown, defaulting to 1000 [ 193.051002][T10362] hsr0 speed is unknown, defaulting to 1000 [ 193.130599][T10362] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 193.224155][T10362] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 00:28:15 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x44, 0x6, 0x450, 0x98, 0x2f0, 0x130, 0x130, 0x2f0, 0x3b8, 0x3b8, 0x3b8, 0x3b8, 0x3b8, 0x6, 0x0, {[{{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'geneve1\x00', 'ip6gre0\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x1}}}, {{@ip={@multicast2, @local, 0x0, 0x0, 'vcan0\x00', 'veth0_virt_wifi\x00'}, 0x0, 0x70, 0x98}, @TTL={0x28}}, {{@uncond, 0x0, 0x70, 0xb0}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @remote}}}}, {{@ip={@rand_addr, @multicast2, 0x0, 0x0, 'syzkaller0\x00', 'bond0\x00'}, 0x0, 0xe8, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@osf={{0x50}, {'syz0\x00'}}]}, @unspec=@CHECKSUM={0x28}}, {{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@dccp={{0x30}}]}, @common=@unspec=@NFQUEUE3={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4b0) [ 193.503937][T10362] hsr0 speed is unknown, defaulting to 1000 [ 193.579102][T10362] hsr0 speed is unknown, defaulting to 1000 [ 193.642378][T10362] hsr0 speed is unknown, defaulting to 1000 [ 193.698782][T10362] hsr0 speed is unknown, defaulting to 1000 [ 193.723175][T10362] hsr0 speed is unknown, defaulting to 1000 [ 193.734847][T10381] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 193.754434][T10362] hsr0 speed is unknown, defaulting to 1000 [ 193.772198][T10362] hsr0 speed is unknown, defaulting to 1000 [ 193.808212][T10362] hsr0 speed is unknown, defaulting to 1000 [ 193.839374][T10362] hsr0 speed is unknown, defaulting to 1000 00:28:15 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000000)="290000002000190f0c003fffffffda060200000000e80001dd4e00040d000600ea1102000005000000", 0x29}], 0x1) 00:28:16 executing program 1: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'hsr0\x00'}}]}, 0x38}}, 0x0) [ 194.064113][ T1358] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.070449][ T1358] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.175998][T10390] netlink: 'syz-executor.2': attribute type 6 has an invalid length. 00:28:16 executing program 1: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'hsr0\x00'}}]}, 0x38}}, 0x0) 00:28:16 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f000000e040)={0x0, 0x0, &(0x7f000000e000)={&(0x7f00000000c0)=@newtaction={0x4c, 0x30, 0x1, 0x0, 0x0, {}, [{0x38, 0x1, [@m_tunnel_key={0x34, 0x1, 0x0, 0x0, {{0x30}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x4c}}, 0x0) 00:28:16 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x11, 0x3, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x6}}, &(0x7f0000000200)='syzkaller\x00', 0x2, 0xd7, &(0x7f0000000600)=""/215, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 00:28:16 executing program 4: r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f00000000c0)={0x18, 0x0, {0xb, @broadcast, 'bond_slave_0\x00'}}, 0x1e) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x6b03, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000f000000e8bd6efb250314000e000100240248ff050005001200", 0x2e}], 0x1}, 0x0) connect$pppoe(r0, &(0x7f0000000100)={0x18, 0x0, {0x0, @multicast, 'team_slave_0\x00'}}, 0x1e) 00:28:16 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000000)="290000002000190f0c003fffffffda060200000000e80001dd4e00040d000600ea1102000005000000", 0x29}], 0x1) 00:28:16 executing program 1: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'hsr0\x00'}}]}, 0x38}}, 0x0) 00:28:16 executing program 3: syz_emit_ethernet(0x6a, &(0x7f0000000100)={@link_local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010107, @local}, @parameter_prob={0x5, 0x0, 0x0, 0x0, 0x0, 0x0, {0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @broadcast, @loopback, {[@generic={0x0, 0x3, "e5"}, @ssrr={0x89, 0x1b, 0x0, [@initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @empty, @rand_addr, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @rr={0x7, 0xb, 0x0, [@initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast]}]}}}}}}}, 0x0) 00:28:16 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r1) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x54, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x3}]}]}, 0x54}}, 0x0) splice(r0, 0x0, r1, 0x0, 0x100000000, 0x0) [ 194.642580][T10397] device bond0 entered promiscuous mode [ 194.659988][T10397] device bond_slave_0 entered promiscuous mode [ 194.690846][T10397] device bond_slave_1 entered promiscuous mode 00:28:16 executing program 3: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000340)=@bpf_lsm={0x18, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000040)='syzkaller\x00', 0x3, 0xe0, &(0x7f0000000080)=""/224, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 00:28:16 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=@newpolicy={0xb8, 0x15, 0x301, 0x0, 0x0, {{@in=@private, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}}}, 0xb8}}, 0x0) 00:28:16 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000440)={'batadv_slave_0\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000480)={r2, 0x1, 0x6, @remote}, 0x10) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000440)={'batadv_slave_0\x00', 0x0}) setsockopt$packet_drop_memb(r0, 0x107, 0x2, &(0x7f0000000100)={r4, 0x1, 0x6, @link_local}, 0x10) [ 194.841063][T10401] netlink: 'syz-executor.2': attribute type 6 has an invalid length. 00:28:16 executing program 4: r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f00000000c0)={0x18, 0x0, {0xb, @broadcast, 'bond_slave_0\x00'}}, 0x1e) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x6b03, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000f000000e8bd6efb250314000e000100240248ff050005001200", 0x2e}], 0x1}, 0x0) connect$pppoe(r0, &(0x7f0000000100)={0x18, 0x0, {0x0, @multicast, 'team_slave_0\x00'}}, 0x1e) 00:28:16 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000000)="290000002000190f0c003fffffffda060200000000e80001dd4e00040d000600ea1102000005000000", 0x29}], 0x1) [ 194.945201][T10397] syz-executor.4 (10397) used greatest stack depth: 22000 bytes left 00:28:17 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x8, [@datasec={0x5, 0x1, 0x0, 0xf, 0x3, [{0x3, 0x3}], 'vmx'}, @datasec={0x0, 0x0, 0x0, 0xf, 0x1, [], '2'}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x61, 0x61]}}, &(0x7f0000000240)=""/131, 0x48, 0x83, 0x1}, 0x20) [ 195.001568][T10415] device batadv_slave_0 entered promiscuous mode [ 195.035294][T10412] device batadv_slave_0 left promiscuous mode [ 195.065931][T10415] device batadv_slave_0 entered promiscuous mode [ 195.086374][T10412] device batadv_slave_0 left promiscuous mode 00:28:17 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)={0x17, 0x0, 0x1, 0x18}, 0x40) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x8, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="1803000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000850000000c00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 00:28:17 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000300)=@raw={'raw\x00', 0x2, 0x3, 0x258, 0x0, 0x108, 0x0, 0x0, 0x0, 0x1c0, 0x1c0, 0x1c0, 0x1c0, 0x1c0, 0x3, 0x0, {[{{@ip={@remote, @dev, 0x0, 0x0, '\x00', 'ip_vti0\x00', {}, {}, 0x88}, 0x0, 0xa0, 0x108, 0x0, {}, [@common=@inet=@udplite={{0x30}, {[], [], 0x4}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0x98, 0xb8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2b8) [ 195.129290][T10422] netlink: 'syz-executor.2': attribute type 6 has an invalid length. 00:28:17 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000440)={'batadv_slave_0\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000480)={r2, 0x1, 0x6, @remote}, 0x10) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000440)={'batadv_slave_0\x00', 0x0}) setsockopt$packet_drop_memb(r0, 0x107, 0x2, &(0x7f0000000100)={r4, 0x1, 0x6, @link_local}, 0x10) 00:28:17 executing program 4: r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f00000000c0)={0x18, 0x0, {0xb, @broadcast, 'bond_slave_0\x00'}}, 0x1e) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x6b03, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000f000000e8bd6efb250314000e000100240248ff050005001200", 0x2e}], 0x1}, 0x0) connect$pppoe(r0, &(0x7f0000000100)={0x18, 0x0, {0x0, @multicast, 'team_slave_0\x00'}}, 0x1e) 00:28:17 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000000)="290000002000190f0c003fffffffda060200000000e80001dd4e00040d000600ea1102000005000000", 0x29}], 0x1) 00:28:17 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000001280)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r2, r1, 0x0, 0x100000001) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0xb00000000065808, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r5, 0x8912, 0x400308) ioctl$BTRFS_IOC_DEFRAG(r5, 0x50009402, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r6, r4, 0x0, 0x100000001) preadv(r3, &(0x7f0000001300)=[{&(0x7f0000000200)=""/4096, 0x3ff800}], 0x1, 0x0, 0x0) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(0xffffffffffffffff, 0x80089419, &(0x7f0000000040)) 00:28:17 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x4, &(0x7f0000000080)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x94}]}, &(0x7f0000000380)='GPL\x00', 0x6, 0x8c, &(0x7f00000003c0)=""/140, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) [ 195.340031][T10431] device batadv_slave_0 entered promiscuous mode 00:28:17 executing program 1: sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000), 0xc, 0x0}, 0x4048080) unshare(0x6c060000) r0 = socket(0xa, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000000)=@nat={'nat\x00', 0x3c1, 0x0, 0x90, [0x200001c0], 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000080000000000000000000000ffffffff00000000000000000000000000000000000000000000000000f25f000000000000000000000000000000ffffffff00000000e602a425d7717d75442f2c2aa62387e3b775ae477491e70d0000"]}, 0x120) bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_REG(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="010300000008000000001f"], 0x14}}, 0x0) [ 195.388872][T10435] netlink: 'syz-executor.2': attribute type 6 has an invalid length. [ 195.424161][T10427] device batadv_slave_0 left promiscuous mode 00:28:17 executing program 4: r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f00000000c0)={0x18, 0x0, {0xb, @broadcast, 'bond_slave_0\x00'}}, 0x1e) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x6b03, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000f000000e8bd6efb250314000e000100240248ff050005001200", 0x2e}], 0x1}, 0x0) connect$pppoe(r0, &(0x7f0000000100)={0x18, 0x0, {0x0, @multicast, 'team_slave_0\x00'}}, 0x1e) 00:28:17 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000100)={'ip6tnl0\x00', &(0x7f0000000080)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}, @empty, 0x0, 0x0, 0x0, 0x4}}) 00:28:17 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000440)={'batadv_slave_0\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000480)={r2, 0x1, 0x6, @remote}, 0x10) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000440)={'batadv_slave_0\x00', 0x0}) setsockopt$packet_drop_memb(r0, 0x107, 0x2, &(0x7f0000000100)={r4, 0x1, 0x6, @link_local}, 0x10) [ 195.547237][ T26] audit: type=1804 audit(1634603297.540:6): pid=10436 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir935394635/syzkaller.uhO8Tk/51/cgroup.controllers" dev="sda1" ino=14088 res=1 errno=0 00:28:17 executing program 3: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000007b80)=[{&(0x7f0000000040)={0x20, 0x1d, 0x1, 0x0, 0x0, "", [@nested={0x10, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}]}]}, 0x20}], 0x1}, 0x0) [ 195.720514][ T26] audit: type=1804 audit(1634603297.630:7): pid=10439 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir935394635/syzkaller.uhO8Tk/51/memory.events" dev="sda1" ino=14059 res=1 errno=0 [ 195.732939][T10442] hsr0 speed is unknown, defaulting to 1000 [ 195.800316][T10452] device batadv_slave_0 entered promiscuous mode 00:28:17 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0xf000) sendfile(r1, r0, 0x0, 0xf03affff) sendfile(r1, r0, 0x0, 0x8000000000004) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cgroup.stat\x00', 0x0, 0x0) 00:28:17 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)={0x9, 0x7, 0x6d, 0x7ff}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240), &(0x7f0000000000), 0x80000001, r0}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000006c0)={r0, &(0x7f0000000500)="bf", &(0x7f00000005c0)=""/227}, 0x20) [ 195.904869][T10447] device batadv_slave_0 left promiscuous mode [ 195.930618][ T26] audit: type=1800 audit(1634603297.630:8): pid=10439 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="memory.events" dev="sda1" ino=14059 res=0 errno=0 00:28:18 executing program 3: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="7000000010000104000000000000fea7322778f2", @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800b000100697036746e6c000030000280050009000400000005000600f0000000060012004e200000040013000500040003000010080008001a00000008000a00", @ANYRES32, @ANYBLOB="080004003047ae"], 0x70}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x6, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0) 00:28:18 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000440)={'batadv_slave_0\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000480)={r2, 0x1, 0x6, @remote}, 0x10) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000440)={'batadv_slave_0\x00', 0x0}) setsockopt$packet_drop_memb(r0, 0x107, 0x2, &(0x7f0000000100)={r4, 0x1, 0x6, @link_local}, 0x10) 00:28:18 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000001280)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r2, r1, 0x0, 0x100000001) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0xb00000000065808, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r5, 0x8912, 0x400308) ioctl$BTRFS_IOC_DEFRAG(r5, 0x50009402, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r6, r4, 0x0, 0x100000001) preadv(r3, &(0x7f0000001300)=[{&(0x7f0000000200)=""/4096, 0x3ff800}], 0x1, 0x0, 0x0) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(0xffffffffffffffff, 0x80089419, &(0x7f0000000040)) [ 196.138327][ T26] audit: type=1804 audit(1634603297.630:9): pid=10439 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir935394635/syzkaller.uhO8Tk/51/cgroup.controllers" dev="sda1" ino=14088 res=1 errno=0 00:28:18 executing program 1: sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000), 0xc, 0x0}, 0x4048080) unshare(0x6c060000) r0 = socket(0xa, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000000)=@nat={'nat\x00', 0x3c1, 0x0, 0x90, [0x200001c0], 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000080000000000000000000000ffffffff00000000000000000000000000000000000000000000000000f25f000000000000000000000000000000ffffffff00000000e602a425d7717d75442f2c2aa62387e3b775ae477491e70d0000"]}, 0x120) bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_REG(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="010300000008000000001f"], 0x14}}, 0x0) [ 196.361614][T10491] device batadv_slave_0 entered promiscuous mode [ 196.375012][T10484] device batadv_slave_0 left promiscuous mode 00:28:18 executing program 3: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="7000000010000104000000000000fea7322778f2", @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800b000100697036746e6c000030000280050009000400000005000600f0000000060012004e200000040013000500040003000010080008001a00000008000a00", @ANYRES32, @ANYBLOB="080004003047ae"], 0x70}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x6, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0) 00:28:18 executing program 5: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000001280)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r2, r1, 0x0, 0x100000001) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0xb00000000065808, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r5, 0x8912, 0x400308) ioctl$BTRFS_IOC_DEFRAG(r5, 0x50009402, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r6, r4, 0x0, 0x100000001) preadv(r3, &(0x7f0000001300)=[{&(0x7f0000000200)=""/4096, 0x3ff800}], 0x1, 0x0, 0x0) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(0xffffffffffffffff, 0x80089419, &(0x7f0000000040)) [ 196.524667][T10500] hsr0 speed is unknown, defaulting to 1000 [ 196.627231][ T26] audit: type=1804 audit(1634603298.620:10): pid=10495 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir935394635/syzkaller.uhO8Tk/52/cgroup.controllers" dev="sda1" ino=14126 res=1 errno=0 [ 196.872462][ T26] audit: type=1804 audit(1634603298.750:11): pid=10502 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir935394635/syzkaller.uhO8Tk/52/memory.events" dev="sda1" ino=14119 res=1 errno=0 00:28:19 executing program 3: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="7000000010000104000000000000fea7322778f2", @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800b000100697036746e6c000030000280050009000400000005000600f0000000060012004e200000040013000500040003000010080008001a00000008000a00", @ANYRES32, @ANYBLOB="080004003047ae"], 0x70}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x6, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0) [ 197.116090][ T26] audit: type=1800 audit(1634603298.750:12): pid=10502 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="memory.events" dev="sda1" ino=14119 res=0 errno=0 00:28:19 executing program 5: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000001280)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r2, r1, 0x0, 0x100000001) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0xb00000000065808, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r5, 0x8912, 0x400308) ioctl$BTRFS_IOC_DEFRAG(r5, 0x50009402, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r6, r4, 0x0, 0x100000001) preadv(r3, &(0x7f0000001300)=[{&(0x7f0000000200)=""/4096, 0x3ff800}], 0x1, 0x0, 0x0) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(0xffffffffffffffff, 0x80089419, &(0x7f0000000040)) 00:28:19 executing program 1: sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000), 0xc, 0x0}, 0x4048080) unshare(0x6c060000) r0 = socket(0xa, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000000)=@nat={'nat\x00', 0x3c1, 0x0, 0x90, [0x200001c0], 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000080000000000000000000000ffffffff00000000000000000000000000000000000000000000000000f25f000000000000000000000000000000ffffffff00000000e602a425d7717d75442f2c2aa62387e3b775ae477491e70d0000"]}, 0x120) bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_REG(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="010300000008000000001f"], 0x14}}, 0x0) 00:28:19 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000001280)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r2, r1, 0x0, 0x100000001) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0xb00000000065808, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r5, 0x8912, 0x400308) ioctl$BTRFS_IOC_DEFRAG(r5, 0x50009402, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r6, r4, 0x0, 0x100000001) preadv(r3, &(0x7f0000001300)=[{&(0x7f0000000200)=""/4096, 0x3ff800}], 0x1, 0x0, 0x0) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(0xffffffffffffffff, 0x80089419, &(0x7f0000000040)) [ 197.299413][ T26] audit: type=1804 audit(1634603298.750:13): pid=10502 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir935394635/syzkaller.uhO8Tk/52/cgroup.controllers" dev="sda1" ino=14126 res=1 errno=0 00:28:19 executing program 3: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="7000000010000104000000000000fea7322778f2", @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800b000100697036746e6c000030000280050009000400000005000600f0000000060012004e200000040013000500040003000010080008001a00000008000a00", @ANYRES32, @ANYBLOB="080004003047ae"], 0x70}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x6, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0) [ 197.521618][ T26] audit: type=1804 audit(1634603298.900:14): pid=10524 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir797867137/syzkaller.HzK1XH/57/cgroup.controllers" dev="sda1" ino=14130 res=1 errno=0 [ 197.568728][T10550] hsr0 speed is unknown, defaulting to 1000 [ 197.748655][ T26] audit: type=1800 audit(1634603298.900:15): pid=10524 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name="cgroup.controllers" dev="sda1" ino=14130 res=0 errno=0 [ 197.935319][ T26] audit: type=1804 audit(1634603298.900:16): pid=10530 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir797867137/syzkaller.HzK1XH/57/cgroup.controllers" dev="sda1" ino=14130 res=1 errno=0 [ 198.187727][ T26] audit: type=1804 audit(1634603298.980:17): pid=10524 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir797867137/syzkaller.HzK1XH/57/memory.events" dev="sda1" ino=14129 res=1 errno=0 [ 198.379740][ T26] audit: type=1800 audit(1634603298.980:18): pid=10524 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name="memory.events" dev="sda1" ino=14129 res=0 errno=0 [ 198.491891][ T26] audit: type=1804 audit(1634603298.990:19): pid=10524 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir797867137/syzkaller.HzK1XH/57/cgroup.controllers" dev="sda1" ino=14130 res=1 errno=0 00:28:22 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)={0x9, 0x7, 0x6d, 0x7ff}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240), &(0x7f0000000000), 0x80000001, r0}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000006c0)={r0, &(0x7f0000000500)="bf", &(0x7f00000005c0)=""/227}, 0x20) 00:28:22 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000001280)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r2, r1, 0x0, 0x100000001) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0xb00000000065808, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r5, 0x8912, 0x400308) ioctl$BTRFS_IOC_DEFRAG(r5, 0x50009402, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r6, r4, 0x0, 0x100000001) preadv(r3, &(0x7f0000001300)=[{&(0x7f0000000200)=""/4096, 0x3ff800}], 0x1, 0x0, 0x0) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(0xffffffffffffffff, 0x80089419, &(0x7f0000000040)) 00:28:22 executing program 1: sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000), 0xc, 0x0}, 0x4048080) unshare(0x6c060000) r0 = socket(0xa, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000000)=@nat={'nat\x00', 0x3c1, 0x0, 0x90, [0x200001c0], 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000080000000000000000000000ffffffff00000000000000000000000000000000000000000000000000f25f000000000000000000000000000000ffffffff00000000e602a425d7717d75442f2c2aa62387e3b775ae477491e70d0000"]}, 0x120) bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_REG(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="010300000008000000001f"], 0x14}}, 0x0) 00:28:22 executing program 3: sendmmsg(0xffffffffffffffff, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0) r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) sendmmsg(r0, &(0x7f0000005c00), 0x40000000000037b, 0x0) 00:28:22 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000001280)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r2, r1, 0x0, 0x100000001) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0xb00000000065808, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r5, 0x8912, 0x400308) ioctl$BTRFS_IOC_DEFRAG(r5, 0x50009402, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r6, r4, 0x0, 0x100000001) preadv(r3, &(0x7f0000001300)=[{&(0x7f0000000200)=""/4096, 0x3ff800}], 0x1, 0x0, 0x0) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(0xffffffffffffffff, 0x80089419, &(0x7f0000000040)) 00:28:22 executing program 5: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000001280)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r2, r1, 0x0, 0x100000001) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0xb00000000065808, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r5, 0x8912, 0x400308) ioctl$BTRFS_IOC_DEFRAG(r5, 0x50009402, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r6, r4, 0x0, 0x100000001) preadv(r3, &(0x7f0000001300)=[{&(0x7f0000000200)=""/4096, 0x3ff800}], 0x1, 0x0, 0x0) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(0xffffffffffffffff, 0x80089419, &(0x7f0000000040)) [ 200.879776][T10604] hsr0 speed is unknown, defaulting to 1000 00:28:22 executing program 3: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000140)=@bpf_lsm={0x1d, 0x2, &(0x7f0000000000)=@raw=[@map={0x18, 0x0, 0x1, 0x0, 0x1}], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 00:28:23 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)={0x9, 0x7, 0x6d, 0x7ff}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240), &(0x7f0000000000), 0x80000001, r0}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000006c0)={r0, &(0x7f0000000500)="bf", &(0x7f00000005c0)=""/227}, 0x20) 00:28:23 executing program 3: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)={0x64, 0x19, 0x205, 0x0, 0x0, {0x1d, 0xd601, 0x9}, [@nested={0x4d, 0xf, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0x8, 0x0, 0x0, 0x0, @uid}, @generic="6f1e1291304c966f9ad11163a63b42f435dd933100b58a841fc0c8437de9fc44791ad89386ae58417e96430bec429e9ddb12a9471d"]}]}, 0x64}}, 0x0) 00:28:23 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)={0x9, 0x7, 0x6d, 0x7ff}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240), &(0x7f0000000000), 0x80000001, r0}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000006c0)={r0, &(0x7f0000000500)="bf", &(0x7f00000005c0)=""/227}, 0x20) 00:28:23 executing program 3: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_ENCAP(r0, 0x113, 0x1, &(0x7f0000000080)=0x1, 0x4) 00:28:23 executing program 1: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)={0x20, 0x1411, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}]}, 0x20}}, 0x0) [ 201.715881][T10654] __nla_validate_parse: 2 callbacks suppressed [ 201.715899][T10654] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. 00:28:23 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000017c0)={0x0, 0x0, &(0x7f0000001780)={&(0x7f00000016c0)=@ipv4_newroute={0x38, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, [@RTA_METRICS={0x8, 0x8, 0x0, 0x1, "90d41d26"}, @RTA_FLOW={0x8, 0xb, 0x1}, @RTA_MULTIPATH={0xc, 0x9, {0x8}}]}, 0x38}}, 0x0) 00:28:24 executing program 3: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_ENCAP(r0, 0x113, 0x1, &(0x7f0000000080)=0x1, 0x4) 00:28:24 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000001280)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r2, r1, 0x0, 0x100000001) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0xb00000000065808, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r5, 0x8912, 0x400308) ioctl$BTRFS_IOC_DEFRAG(r5, 0x50009402, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r6, r4, 0x0, 0x100000001) preadv(r3, &(0x7f0000001300)=[{&(0x7f0000000200)=""/4096, 0x3ff800}], 0x1, 0x0, 0x0) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(0xffffffffffffffff, 0x80089419, &(0x7f0000000040)) 00:28:24 executing program 4: r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f00000006c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r1 = socket$unix(0x1, 0x2, 0x0) connect$unix(r1, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) recvmsg$unix(r0, &(0x7f0000003180)={0x0, 0x0, 0x0}, 0x0) sendmmsg(r1, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x0) connect$unix(r1, &(0x7f0000000100)=@abs, 0x6e) close(r0) 00:28:24 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000001280)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r2, r1, 0x0, 0x100000001) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0xb00000000065808, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r5, 0x8912, 0x400308) ioctl$BTRFS_IOC_DEFRAG(r5, 0x50009402, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r6, r4, 0x0, 0x100000001) preadv(r3, &(0x7f0000001300)=[{&(0x7f0000000200)=""/4096, 0x3ff800}], 0x1, 0x0, 0x0) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(0xffffffffffffffff, 0x80089419, &(0x7f0000000040)) 00:28:24 executing program 5: r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000140)=0x6f, 0x4) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe1}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0x1881, 0x4) write$binfmt_elf64(r0, &(0x7f0000000140)=ANY=[], 0x858) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfffffd88) sendto$inet(r0, &(0x7f00000012c0)="0a268a927f", 0xad11, 0x11, 0x0, 0x80cf) 00:28:24 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000140)=@nat={'nat\x00', 0x19, 0x2, 0x268, [0x20000540, 0x0, 0x0, 0x20000748, 0x20000778], 0x90, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="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"]}, 0x2e0) 00:28:24 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x16, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x6, 0x0, 0x1}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x23) 00:28:24 executing program 3: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_ENCAP(r0, 0x113, 0x1, &(0x7f0000000080)=0x1, 0x4) [ 202.486282][ T26] kauditd_printk_skb: 20 callbacks suppressed [ 202.486300][ T26] audit: type=1804 audit(1634603304.480:40): pid=10687 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir935394635/syzkaller.uhO8Tk/54/cgroup.controllers" dev="sda1" ino=13920 res=1 errno=0 00:28:24 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=@can_newroute={0x14, 0x18, 0xe11, 0x0, 0x0, {0x1d, 0x0}}, 0x14}}, 0x0) 00:28:24 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000bc0)={0x11, 0x5, &(0x7f00000002c0)=@framed={{}, [@map_val={0x18, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) [ 202.722149][ T26] audit: type=1804 audit(1634603304.580:41): pid=10684 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir711539129/syzkaller.91D5fF/65/memory.events" dev="sda1" ino=14167 res=1 errno=0 [ 202.864989][ T26] audit: type=1800 audit(1634603304.580:42): pid=10684 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="memory.events" dev="sda1" ino=14167 res=0 errno=0 00:28:24 executing program 3: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_ENCAP(r0, 0x113, 0x1, &(0x7f0000000080)=0x1, 0x4) 00:28:25 executing program 5: r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000140)=0x6f, 0x4) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe1}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0x1881, 0x4) write$binfmt_elf64(r0, &(0x7f0000000140)=ANY=[], 0x858) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfffffd88) sendto$inet(r0, &(0x7f00000012c0)="0a268a927f", 0xad11, 0x11, 0x0, 0x80cf) [ 203.055146][ T26] audit: type=1804 audit(1634603304.590:43): pid=10684 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir711539129/syzkaller.91D5fF/65/cgroup.controllers" dev="sda1" ino=14170 res=1 errno=0 [ 203.244484][ T26] audit: type=1804 audit(1634603304.590:44): pid=10691 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir935394635/syzkaller.uhO8Tk/54/memory.events" dev="sda1" ino=14171 res=1 errno=0 00:28:25 executing program 1: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d00000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x9a, &(0x7f0000000000)=""/154, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000640)={&(0x7f0000000600)='tlb_flush\x00', r0}, 0x10) 00:28:25 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='dctcp\x00', 0x6) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xe7}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000140)='cubic\x00', 0x6) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b93e480941ba3860ac5cf65ac618ded8974895abeaf4b4835ef922b3f1e0b02bd60da03059bcecc7a95425a3a07e758044ab4ea6f7ae56d88fecf9141a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) 00:28:25 executing program 2: r0 = epoll_create(0xe1) readv(r0, 0x0, 0x0) 00:28:25 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'wlan0\x00'}) ioctl(r0, 0x8b1a, &(0x7f0000000040)) [ 203.426858][ T26] audit: type=1800 audit(1634603304.590:45): pid=10691 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="memory.events" dev="sda1" ino=14171 res=0 errno=0 00:28:25 executing program 3: r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x6, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0xc}, [@ldst={0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2}, 0x48) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000000f195"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) close(r0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r1, 0x30, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000540)={r0, 0x0, 0x0}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f00000000c0)=ANY=[], 0x6db6e559) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r2, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x0}, 0x10) 00:28:25 executing program 1: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000200), 0x806000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) [ 203.545244][ T26] audit: type=1804 audit(1634603304.600:46): pid=10691 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir935394635/syzkaller.uhO8Tk/54/cgroup.controllers" dev="sda1" ino=13920 res=1 errno=0 00:28:25 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000ff0f00000000000020000015850000006d00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='timer_start\x00', r1}, 0x10) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000380)={'ip6gre0\x00', &(0x7f0000000300)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @loopback}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f2, &(0x7f0000000380)={'ip6gre0\x00', &(0x7f0000000300)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @loopback}}) 00:28:25 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'wlan0\x00'}) ioctl(r0, 0x8b1a, &(0x7f0000000040)) 00:28:25 executing program 3: r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000000)=@ethtool_sfeatures={0x8}}) 00:28:26 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000ff0f00000000000020000015850000006d00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='timer_start\x00', r1}, 0x10) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000380)={'ip6gre0\x00', &(0x7f0000000300)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @loopback}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f2, &(0x7f0000000380)={'ip6gre0\x00', &(0x7f0000000300)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @loopback}}) [ 203.970940][ T26] audit: type=1800 audit(1634603305.961:47): pid=10750 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.1" name="memory.events" dev="sda1" ino=14172 res=0 errno=0 00:28:26 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'wlan0\x00'}) ioctl(r0, 0x8b1a, &(0x7f0000000040)) 00:28:26 executing program 5: r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000140)=0x6f, 0x4) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe1}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0x1881, 0x4) write$binfmt_elf64(r0, &(0x7f0000000140)=ANY=[], 0x858) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfffffd88) sendto$inet(r0, &(0x7f00000012c0)="0a268a927f", 0xad11, 0x11, 0x0, 0x80cf) 00:28:26 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000c80)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x7}, 0x48) r2 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000180)={r0, r1}) sendmsg$rds(r2, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002800)=[{&(0x7f0000002980)=""/4112, 0xfffffde7}], 0x1}, 0x0) write(r2, 0x0, 0x0) recvmsg(r2, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) [ 204.250594][T10771] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 00:28:26 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000200), 0x806000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) 00:28:26 executing program 1: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000200), 0x806000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) 00:28:26 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'wlan0\x00'}) ioctl(r0, 0x8b1a, &(0x7f0000000040)) 00:28:26 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000ff0f00000000000020000015850000006d00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='timer_start\x00', r1}, 0x10) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000380)={'ip6gre0\x00', &(0x7f0000000300)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @loopback}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f2, &(0x7f0000000380)={'ip6gre0\x00', &(0x7f0000000300)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @loopback}}) 00:28:26 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000c80)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x7}, 0x48) r2 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000180)={r0, r1}) sendmsg$rds(r2, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002800)=[{&(0x7f0000002980)=""/4112, 0xfffffde7}], 0x1}, 0x0) write(r2, 0x0, 0x0) recvmsg(r2, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) 00:28:26 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000c80)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x7}, 0x48) r2 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000180)={r0, r1}) sendmsg$rds(r2, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002800)=[{&(0x7f0000002980)=""/4112, 0xfffffde7}], 0x1}, 0x0) write(r2, 0x0, 0x0) recvmsg(r2, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) [ 204.805297][ T26] audit: type=1800 audit(1634603306.801:48): pid=10783 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.1" name="memory.events" dev="sda1" ino=14157 res=0 errno=0 00:28:26 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000ff0f00000000000020000015850000006d00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='timer_start\x00', r1}, 0x10) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000380)={'ip6gre0\x00', &(0x7f0000000300)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @loopback}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f2, &(0x7f0000000380)={'ip6gre0\x00', &(0x7f0000000300)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @loopback}}) [ 204.963156][ T26] audit: type=1800 audit(1634603306.961:49): pid=10791 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.4" name="memory.events" dev="sda1" ino=14174 res=0 errno=0 00:28:27 executing program 1: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000200), 0x806000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) 00:28:27 executing program 5: r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000140)=0x6f, 0x4) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe1}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0x1881, 0x4) write$binfmt_elf64(r0, &(0x7f0000000140)=ANY=[], 0x858) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfffffd88) sendto$inet(r0, &(0x7f00000012c0)="0a268a927f", 0xad11, 0x11, 0x0, 0x80cf) 00:28:27 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000200), 0x806000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) 00:28:27 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000c80)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x7}, 0x48) r2 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000180)={r0, r1}) sendmsg$rds(r2, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002800)=[{&(0x7f0000002980)=""/4112, 0xfffffde7}], 0x1}, 0x0) write(r2, 0x0, 0x0) recvmsg(r2, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) 00:28:27 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000c80)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x7}, 0x48) r2 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000180)={r0, r1}) sendmsg$rds(r2, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002800)=[{&(0x7f0000002980)=""/4112, 0xfffffde7}], 0x1}, 0x0) write(r2, 0x0, 0x0) recvmsg(r2, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) 00:28:27 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000200), 0x806000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) 00:28:27 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000c80)=ANY=[@ANYBLOB="18000000030000000000000026d0000095002b000000000093adffa82255f674412d020000000000005ab527ee3697f1ed4436dd11646e29d4218fd0599e26996a3cfee33025a30b45bdcf1d273683626e00dc254d570dca6b78ad833488cfe4105dcff189dd0d69613d38d62f00158e6eee8501000000520a0000151d0100000001000000dcbf00000000cc00010000000000003bbd424caba218a52001a3cd000041f0db74596fd72c002a60c1bc7dc8c38b7d2e13c50424b9dd1145d03ff45f70685c6bd9ff41c69b7de4758c1096a1dc52f29e470a000517ebc406e89dcbb7677e6528b0856e31ed9474ac24cf609068f645ce971fc0480737a55ebb0bd701f7ff21e88b3cfc22df01e4bac9d97328fa2a82b5e8741e35056d933bed359ff232cebc68b91af50479387467824262852c7939db5672d07cdbe8e14abf56497e5d56d06c7551b870b2851c3f0a0aab71587a21c8f1b336a5bfcba105a6ccdd01b0f04edb257c604f068773f6db9d661bd7f0e2536ffbfe5ca31b4083145531458b7d1e341c6f864f98c3055f5865aad41d290daae7602a2d6cd415e8351ebc4223f54d6bec664709ff03f1aa3dc7f1580aec655516d28d7157e67fb98d121ad2eb372713255012e028cb2654d493a0b4b35faae176a69b745eda2967199cc936859a537e8e4871d4acf3e3dc10e13ef227f627a40200ad1fa253d33fa74f172d3407ae4e1e347c0cff28235a6bb7aa3804b907a8f2880c586272c3f4d79bc36305745cb1cb385e6add14652003c7cdd33a4f07d134d3ed07f1c10947d16378af21b1c400000009dd872ec64fa6c718bbd1aa591140cff0be4c6f8df084c5e9734ae30aa9afdc7125f01ab03a9b1074407136b4506000f0916a39d3057d50183612b39e73aeeb6eaf14652dda68c98ef938e6515a94a71836469efe51d9b7eb85f3f2d5ae2c51944da8d7391d6d6b97419a3b7660df4c5124ca425d374b371867a79b31c6617fc332710000000000000000d1d60be2168fffc2f3dccd599a2cb77f124e22f87621f39b50d938d5fd8c6b2a3a324c257bc9110971b749ccd7c089ed6b86f81ca3d247d8f71d290ed1b1a11f7a67125170c88c3b6a50696332226401b110da9c786eeca22debc99335583b54c13c3130978fa069af8223b38ced735c2d905f51ca85ffa4add564aa89b3960127696cf2f16625c0c102000000000000009ef52134842e64171f3963841086e3797a4825d081f2d987f05c534187738655d7dc958fd235d66a1619a6554b82d9c162f3556076b80550d961ca74f1ffdaccf0ea5f02e0fca8b27ff3983ab74fd3d505366d1eab44e77e312b3b129a000302d613916c9bcf9f0000fac73a5b6bfb27f88dba816020be760f7b45e001efada800000000000000fdaf4660402f7b3b79a433e08074ea2462974ab2cbd247eb18fa2638f56daee57ed14bc74de0fd87a9ce638190f3570e0b4c80ef682df22237270955afb6008846557ee3bc09fda6dbb6550d5973665b98ca2002c804c22ff2634b7bfbf5c0d586cda5b45f500dede1e88a4d41dee7cc76f822278d124638fec58faeb44158bb440df2a694f4cdcaa4f65c22f00000000000000000000000000002000000000000000000001ffff0ef89b2a68d2bb2dd163e863315e84498dfb52bb93f6c9084659ce777ddac563c859656a357770289a61faa95a8b2e52bf1cfb7f2fd7252e9322abe282c3344fc6738b4467893b9bf0d1c8130ae6b226900110435376413c29f7c6f7b7e2900f4bddd5e328661f4c06e01f7d7dc22174e5e627a6f608ad53a4168d4d8f7fbc71104512efe8e5d7d934aa289b4bd2b870000000000000000000000000000000000000000009b777883a02f0593dfc4cb4114b9f9cf4ad155110cd3ace2b322ac31bfa27847c799c8869a1ea5b98e525e4583ad7fd97951f0e7b11e247603c2ff49a11459c7f607d729d3979676bffb3049166ab84a0f061991bd57c2566c10c282352a5105b6164e3f2491e4793e590dcc366c40dd44a2c9882d3aa0f8a797b8fea6efcfb5276b7679f15559cdaa977504cc0b2f777acb907ebf5fc14add71d0bca37405ded68b77ab4a3d7487fd50c5e22ade17556abb722d9c085b189b5fd1f30e8dc813f60870fde10001000000000000e8e7262f299ed7923bfbe00ad88be179e56b41ff3792cee2fc37eee739c3e36aa35a6ff713986b1c8c8b1d52205edbdc8e58c4cd5d042553382902cb9a6d3c10602b27e306a5e7badf38ad65683a38714e08759416a397c184357f87f62250792ee2a4f359a2a9b0ab948abcf6b5bb8430ed5fc02162e353e2b1ba1c7ed001dfb267dcff9e48a01ffaba52ec4c55be6f8201e54d939bb9b1516ea1a683b7a46f81b5c71644c149ab7809c989645273d4323e8602f61188f65ce9f520d4e8458cc4119fbfa4c4d22e669b2c07dfeea1d2c1db30ee179237877f2f212777cdd90ef27e251e275cbdbbe32eea62a3f25a2ff4729a97b57157cf2f24d0747d5f9fceff0d3254ae33e43e14088f8c790f875b1fd1b0070a560c94d46ec13c7ac94d2143d1d63a56317a02f8afa0e73ca1ed07d4beec9499cce4e76b0636f8dda2090c23dea18e4df77b4ee04f726f731bbfb818672385a5fd23d9e31445c19514fa5ea47fc00f922c1d6422cf41649be06ba986d442f0b8d833f90217d1d110cede9b11f8386bb086420150bf19d55977cdbcfebfe93052db114474b56dc73815cf033219e9505183f18bb8c22f36d6d78ec9f9763a223c144d9d0b344353d036bfe6acc8c07a1da4396227c4e3fd09e4bdc817d1e7769e80a34f2d996b635023bf5cc406582db1ddf4884329333967b64e5a153abab2a0477d97e85c82492a833f486a500070d9c8a1cd8443b45f07a29f4d09ebe784490acde39a870988d98e3a81659c7c6bccd52444c8fa9b0bc4766adbfa0ecc3e85c04923687bd7f3f05279f2f59bdf861cab68921537c96c1a97f74e0db8a7a0836a72623e3e7787708bce34e708aa51be07f72111751268b37ef9ef313f6842a2639eb3b0130f38153e54496e0eb7d05b13f407c3b0c9df15fe8786dcb30d0bbd9f4fd80a37aef978881e43c5f463548e478cd2d92ba152dafc6aa1e2d1ce8267a49d34c6858cce7468571d7e5a9c91c5181402e5e624dd8f97a4eb85f573b950ed7dd95b6e84eab1daea8cb2a4e64f5ea42b66a4ca75b023f5d316309b110fc1a024b7e1a4c1e2eb513cd3337f0ab6a0d3962674d59119258ea76797a43f5b6c316d42ef2a889ae7698a969634698a2c9dbd6f6824bdf4c5c62464cf6fa1be89b49c3102f35ed0356c90d4f140f1e991a17e36b82b3dd7b7eba04eff145d373c74c6d02b1708bb5d5668168b7e2f6cdaf23417e161dcc722f19ff168e25739b4ee5409f868ef3f23990864b024f55b9fda8633b232c0c6b2ee776e4e289f3e1d7b91e5be727989cdd95facbad436998f7022214affadd3d9d2108f264a7b13399be4f15a03476747f3f89fd3cdce4b32c02413eb3e5e2946d0156a6178644fcccedfb34502882991840dc16280dc7d0335712ba41b00ab0d67403add298302ec7772aed5e47adb8dc769fa66dec509fa8d4729b8b67e00c4af4d69ead0bdaeafb74ecdd6266eec92e7d2a1a933eb1da64162c33d9264d4c31e06aff4ddf85dc6b472ae258013483880a7fb56ad7b127e7f0c823ec2fb835ca82c552e12d6fcb84ebfea46c6dda4676dffa50d079b18aee886b059a2c2d330683784036923a20b84e3db7149e725b9fa2daf08eca9567ed097cc70be26fb3ad4a85c600b4249"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x7}, 0x48) r2 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000180)={r0, r1}) sendmsg$rds(r2, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002800)=[{&(0x7f0000002980)=""/4112, 0xfffffde7}], 0x1}, 0x0) write(r2, 0x0, 0x0) recvmsg(r2, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) 00:28:27 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000c80)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x7}, 0x48) r2 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000180)={r0, r1}) sendmsg$rds(r2, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002800)=[{&(0x7f0000002980)=""/4112, 0xfffffde7}], 0x1}, 0x0) write(r2, 0x0, 0x0) recvmsg(r2, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) 00:28:28 executing program 1: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000200), 0x806000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) 00:28:28 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000200), 0x806000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) 00:28:28 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000200), 0x806000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) 00:28:28 executing program 5: r0 = socket$inet(0x2, 0x1, 0x0) sendto$inet(r0, 0x0, 0x0, 0x20000000, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) 00:28:28 executing program 3: r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x20, r0, 0x733ab21b27e40327, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}}, 0x0) 00:28:28 executing program 0: syz_emit_ethernet(0x4a, &(0x7f0000000540)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x6, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0xa, 0x0, 0x0, 0x0, 0x0, {[@md5sig={0x13, 0x12, "d3fcdaf05d4f4a37eaf67c6244b9f7cf"}]}}}}}}}, 0x0) 00:28:28 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-sse2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000005680)=[{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000005c0)="23b70ca11b7613528b79b3588d8913e904e2a2219ad0b9d54f4308e412ae5217d1d9ed71171f0085aaba52bdd6e43c1d1a8043c3285aca6da1e1d0706b7aaa2dc665feffcdfab204787fd392259f0b3a2b6c5d9fc2d30afea853ddb81cc2d8cf47359c398aee3c8b08929d369ba7ce6be01878874222e4df6ab53579e541c19002241f851088bc612b77970e28f0103965d82b543f09d912fb128b50a1f2cf3b3da1519481392e43e67a739b1cbd99fbecf06ad0f2faf037b413f6e6691ca91fee8cb9894484b1f709a5f149555fba1fd3a7125adaed50ec44ff6363e1fd1d52381d61c233f8994cccd23297fd", 0xed}, {&(0x7f0000000000)="fe65f6c18b31e0e7fe4959c2a4d76d64c1edb6", 0x13}], 0x2}], 0x1, 0x0) recvmmsg(r1, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000001240)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) write$binfmt_elf64(r1, &(0x7f0000000700)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x78) 00:28:28 executing program 3: r0 = accept4(0xffffffffffffffff, &(0x7f00000000c0)=@isdn, 0x0, 0x0) syz_emit_ethernet(0x7a, &(0x7f0000000040)={@local, @multicast, @val={@void}, {@ipv4={0x800, @gre={{0x9, 0x4, 0x0, 0x0, 0x68, 0x0, 0x0, 0x0, 0x2f, 0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp_addr={0x7, 0xc, 0x4, 0x3, 0x0, [{@local}]}, @timestamp={0x7, 0x4}]}}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6558}}}}}}, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_GET(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(r0, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x0, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket(0x11, 0x2, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_GET(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000380)={0x2c, r4, 0x1, 0x0, 0x0, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}]}]}, 0x2c}}, 0x0) accept(r3, &(0x7f0000000240)=@caif=@dbg, &(0x7f00000002c0)=0x80) getsockname$packet(r2, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$ETHTOOL_MSG_DEBUG_GET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000380)={0x2c, 0x0, 0x1, 0x0, 0x0, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}]}]}, 0x2c}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'netdevsim0\x00'}) syz_emit_ethernet(0x1e, &(0x7f0000000180)=ANY=[@ANYBLOB="ffffffffffffffffffffffff000c010000c007020000b037e45138960220"], &(0x7f0000000200)={0x0, 0x4, [0xd33, 0x31f, 0x457, 0x5b3]}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYRES32=r5, @ANYBLOB="0f43e697413251af47"], 0x24}}, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000000)={@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xa}}, 0x39, r5}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) 00:28:28 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000600)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x5c, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_SEC_KEY={0x40, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "f06cc2a714dfb38b1e7026cc89105bdf"}, @NL802154_KEY_ATTR_ID={0x20, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc}, @NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}]}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x8000) 00:28:28 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmmsg$inet(r0, &(0x7f0000002cc0), 0x0, 0x0) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), r0) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x4c, r1, 0x1, 0x0, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) 00:28:28 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000100)=@req3={0x100000, 0x7fff, 0x100000}, 0x1c) 00:28:28 executing program 3: r0 = accept4(0xffffffffffffffff, &(0x7f00000000c0)=@isdn, 0x0, 0x0) syz_emit_ethernet(0x7a, &(0x7f0000000040)={@local, @multicast, @val={@void}, {@ipv4={0x800, @gre={{0x9, 0x4, 0x0, 0x0, 0x68, 0x0, 0x0, 0x0, 0x2f, 0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp_addr={0x7, 0xc, 0x4, 0x3, 0x0, [{@local}]}, @timestamp={0x7, 0x4}]}}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6558}}}}}}, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_GET(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(r0, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x0, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket(0x11, 0x2, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_GET(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000380)={0x2c, r4, 0x1, 0x0, 0x0, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}]}]}, 0x2c}}, 0x0) accept(r3, &(0x7f0000000240)=@caif=@dbg, &(0x7f00000002c0)=0x80) getsockname$packet(r2, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$ETHTOOL_MSG_DEBUG_GET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000380)={0x2c, 0x0, 0x1, 0x0, 0x0, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}]}]}, 0x2c}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'netdevsim0\x00'}) syz_emit_ethernet(0x1e, &(0x7f0000000180)=ANY=[@ANYBLOB="ffffffffffffffffffffffff000c010000c007020000b037e45138960220"], &(0x7f0000000200)={0x0, 0x4, [0xd33, 0x31f, 0x457, 0x5b3]}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYRES32=r5, @ANYBLOB="0f43e697413251af47"], 0x24}}, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000000)={@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xa}}, 0x39, r5}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) 00:28:29 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b18, &(0x7f0000000000)={'wlan1\x00'}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000001c0)=ANY=[@ANYBLOB="a8000000", @ANYRES16=r2, @ANYBLOB="010000000000000007443b00000008000300", @ANYRES32=r3, @ANYBLOB="8900330080800000080211000001080211"], 0xa8}}, 0x0) 00:28:29 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000200), 0x806000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) 00:28:29 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_drop_memb(r0, 0x107, 0xe, 0x0, 0x0) 00:28:29 executing program 4: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000140)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}}, 0x84) 00:28:29 executing program 1: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB='L\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r3, @ANYBLOB="0000000000000000040000000b000100666c6f77657200001c0002000600080088a80000060017"], 0x4c}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 00:28:29 executing program 3: r0 = accept4(0xffffffffffffffff, &(0x7f00000000c0)=@isdn, 0x0, 0x0) syz_emit_ethernet(0x7a, &(0x7f0000000040)={@local, @multicast, @val={@void}, {@ipv4={0x800, @gre={{0x9, 0x4, 0x0, 0x0, 0x68, 0x0, 0x0, 0x0, 0x2f, 0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp_addr={0x7, 0xc, 0x4, 0x3, 0x0, [{@local}]}, @timestamp={0x7, 0x4}]}}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6558}}}}}}, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_GET(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(r0, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x0, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket(0x11, 0x2, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_GET(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000380)={0x2c, r4, 0x1, 0x0, 0x0, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}]}]}, 0x2c}}, 0x0) accept(r3, &(0x7f0000000240)=@caif=@dbg, &(0x7f00000002c0)=0x80) getsockname$packet(r2, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$ETHTOOL_MSG_DEBUG_GET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000380)={0x2c, 0x0, 0x1, 0x0, 0x0, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}]}]}, 0x2c}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'netdevsim0\x00'}) syz_emit_ethernet(0x1e, &(0x7f0000000180)=ANY=[@ANYBLOB="ffffffffffffffffffffffff000c010000c007020000b037e45138960220"], &(0x7f0000000200)={0x0, 0x4, [0xd33, 0x31f, 0x457, 0x5b3]}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYRES32=r5, @ANYBLOB="0f43e697413251af47"], 0x24}}, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000000)={@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xa}}, 0x39, r5}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) 00:28:29 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000600)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x5c, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_SEC_KEY={0x40, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "f06cc2a714dfb38b1e7026cc89105bdf"}, @NL802154_KEY_ATTR_ID={0x20, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc}, @NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}]}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x8000) 00:28:29 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b18, &(0x7f0000000000)={'wlan1\x00'}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000001c0)=ANY=[@ANYBLOB="a8000000", @ANYRES16=r2, @ANYBLOB="010000000000000007443b00000008000300", @ANYRES32=r3, @ANYBLOB="8900330080800000080211000001080211"], 0xa8}}, 0x0) 00:28:29 executing program 4: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x63, 0x11, 0x28}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0xac, &(0x7f0000000200)=""/4096, 0x0, 0x0, '\x00', 0x0, 0xe, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) [ 207.533894][T10908] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 207.610531][T10920] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 00:28:29 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000600)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x5c, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_SEC_KEY={0x40, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "f06cc2a714dfb38b1e7026cc89105bdf"}, @NL802154_KEY_ATTR_ID={0x20, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc}, @NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}]}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x8000) [ 207.672878][T10908] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 207.709264][T10926] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 00:28:29 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b18, &(0x7f0000000000)={'wlan1\x00'}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000001c0)=ANY=[@ANYBLOB="a8000000", @ANYRES16=r2, @ANYBLOB="010000000000000007443b00000008000300", @ANYRES32=r3, @ANYBLOB="8900330080800000080211000001080211"], 0xa8}}, 0x0) 00:28:29 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f00000001c0)={0x0, {0x2, 0x0, @dev}, {0x2, 0x0, @broadcast}, {0x2, 0x0, @empty}, 0x147}) 00:28:29 executing program 3: r0 = accept4(0xffffffffffffffff, &(0x7f00000000c0)=@isdn, 0x0, 0x0) syz_emit_ethernet(0x7a, &(0x7f0000000040)={@local, @multicast, @val={@void}, {@ipv4={0x800, @gre={{0x9, 0x4, 0x0, 0x0, 0x68, 0x0, 0x0, 0x0, 0x2f, 0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp_addr={0x7, 0xc, 0x4, 0x3, 0x0, [{@local}]}, @timestamp={0x7, 0x4}]}}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6558}}}}}}, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_GET(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(r0, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x0, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket(0x11, 0x2, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_GET(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000380)={0x2c, r4, 0x1, 0x0, 0x0, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}]}]}, 0x2c}}, 0x0) accept(r3, &(0x7f0000000240)=@caif=@dbg, &(0x7f00000002c0)=0x80) getsockname$packet(r2, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$ETHTOOL_MSG_DEBUG_GET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000380)={0x2c, 0x0, 0x1, 0x0, 0x0, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}]}]}, 0x2c}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'netdevsim0\x00'}) syz_emit_ethernet(0x1e, &(0x7f0000000180)=ANY=[@ANYBLOB="ffffffffffffffffffffffff000c010000c007020000b037e45138960220"], &(0x7f0000000200)={0x0, 0x4, [0xd33, 0x31f, 0x457, 0x5b3]}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYRES32=r5, @ANYBLOB="0f43e697413251af47"], 0x24}}, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000000)={@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xa}}, 0x39, r5}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) 00:28:29 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) setsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0x8, &(0x7f0000000100)=0x798a, 0x4) 00:28:29 executing program 1: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB='L\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r3, @ANYBLOB="0000000000000000040000000b000100666c6f77657200001c0002000600080088a80000060017"], 0x4c}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 00:28:30 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000600)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x5c, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_SEC_KEY={0x40, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "f06cc2a714dfb38b1e7026cc89105bdf"}, @NL802154_KEY_ATTR_ID={0x20, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc}, @NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}]}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x8000) 00:28:30 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) recvmsg(r0, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="2000000012001101000000000000000007"], 0x20}}, 0x0) 00:28:30 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b18, &(0x7f0000000000)={'wlan1\x00'}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000001c0)=ANY=[@ANYBLOB="a8000000", @ANYRES16=r2, @ANYBLOB="010000000000000007443b00000008000300", @ANYRES32=r3, @ANYBLOB="8900330080800000080211000001080211"], 0xa8}}, 0x0) [ 208.039553][T10941] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 00:28:30 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="07000000000000000000140000000800100001000000200001800800030001000000140002006e657464657673696d30"], 0x3c}}, 0x0) 00:28:30 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$EBT_SO_GET_ENTRIES(r0, 0x0, 0x81, &(0x7f0000000100)={'filter\x00', 0x0, 0x0, 0x0, [], 0x0, 0x0, 0x0}, &(0x7f0000000180)=0x108) [ 208.167259][T10944] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 00:28:30 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0xb, 0x800, 0x8, 0x0, 0x1}, 0x3c) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001180)={r0, &(0x7f0000000040), &(0x7f00000021c0)=""/4096}, 0x18) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001080)={r0, &(0x7f0000000040), &(0x7f0000000080)=""/4096}, 0x20) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001380)=ANY=[@ANYBLOB="1c0000000201ebff1783000000000000000000000600ebffffff0016718402535176d32149ac8f8a2078c960dc7913866af4990e9c2b361aa46efc3480f9d3d2752612e3adea8202d37ef6dae954bc0c2a4ad5b6da8a3de00ab1f28d08a7db6b47fa1e6eb7b4076ecf183528faba36d7070185f684c6c72407fd4b0f6c60855ef02061cd"], 0x1c}}, 0x0) splice(r0, &(0x7f0000000040)=0x42, r1, &(0x7f00000010c0)=0x1, 0x7f, 0x7) r2 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001200)={0x1d, 0x4, 0x4, 0x7fff, 0x1086, 0x1, 0xd1, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x3, 0x4}, 0x40) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) socketpair(0x2, 0x3, 0x2, &(0x7f0000000240)) r4 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000001240)='cpuacct.usage_all\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, r5, 0x0) write$cgroup_devices(r5, &(0x7f0000001280)=ANY=[@ANYBLOB="020000c000000000b0bceecb878ea6d980d04e96b40b8464ce1d6e9fa9ea79cded88ce6f8669fb41dfbb2aa4ddc7304e4122a54f74ed3f41561d539d3e23594b7ccfe1b0483715953fe406ae29c3f144a3ae29f087f4d397fde15f6f675c57fbe8c33979a0484b07c6464e7ae845b9228e38d42df402e78254e64a6ccd2cbff832f2f6faad74b1c4ddc2132fdafe205273953fbe202e36b41e68108f36dcf2cb294c71ce60a2c2054dbc98106599b23acf02278b707c83d4a2e17e66ba0a1c27e79d19ac31867e865782d1de8f689404a1ec90"], 0x9) setsockopt$rose(r4, 0x104, 0x3, &(0x7f0000000000), 0x4) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r4, 0x8982, &(0x7f0000001100)={0x8, 'veth1\x00', {'veth0_vlan\x00'}, 0x3}) ioctl$PPPIOCSFLAGS1(r5, 0x40047459, &(0x7f00000011c0)=0x4102bcc) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000800)=@newlink={0x4c, 0x10, 0x401, 0xfffffffd, 0x0, {0x0, 0x0, 0x0, 0x0, 0x462b}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_UDP_CSUM={0x5, 0x8, 0x1}]}}}, @IFLA_OPERSTATE={0x5, 0x10, 0x3}, @IFLA_MASTER={0x8}]}, 0x4c}}, 0x0) 00:28:30 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000cc0)=@raw={'raw\x00', 0x3c1, 0x3, 0x3c8, 0x228, 0x0, 0x200, 0x228, 0x0, 0x2f8, 0x2e8, 0x2e8, 0x2f8, 0x2e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x1c0, 0x228, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "cfcaf80c672f61cd17ae5119b5135c2aee000100005cd431e1ecef50c3234e082555f67222476147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea3350300d000002061c96baebc975f1f34a214e6726401fe4b124e0f7323a587d2a1fcfe36bbf12eca0a7b66c60c527bac2b5", 0x1, 0x2}}, @common=@inet=@hashlimit1={{0x58}, {'bridge_slave_0\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE1={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x428) 00:28:30 executing program 1: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB='L\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r3, @ANYBLOB="0000000000000000040000000b000100666c6f77657200001c0002000600080088a80000060017"], 0x4c}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 00:28:30 executing program 5: r0 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, 0x0, 0x0) 00:28:30 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0xf000) sendfile(r1, r2, 0x0, 0xf03b0000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x13, r0, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="44000000100001", @ANYRES32=0x0, @ANYBLOB], 0x44}}, 0x0) sendmsg$ETHTOOL_MSG_PAUSE_GET(r2, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f0000000240)={0x100, 0x0, 0x200, 0x0, 0x25dfdbfc, {}, [@HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}]}, @HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}]}, @HEADER={0x4}, @HEADER={0x4}]}, 0x100}, 0x1, 0x0, 0x0, 0x4c000}, 0x4008001) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/18, 0x30c000, 0x800}, 0x200d20) sendfile(r2, r2, 0x0, 0xb5) 00:28:30 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000700)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@delchain={0x24, 0x66, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x0, 0xffff}}}, 0x24}}, 0x0) 00:28:30 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000080)={'ip6gre0\x00', &(0x7f0000000000)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @local, 0x700}}) [ 208.516232][T10974] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 00:28:30 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x3d, 0xa}, [@ldst={0x3, 0x0, 0x6, 0xa, 0x0, 0xff00}]}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51}, 0x48) [ 208.641311][T10979] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 208.673151][T10990] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 00:28:30 executing program 1: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB='L\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r3, @ANYBLOB="0000000000000000040000000b000100666c6f77657200001c0002000600080088a80000060017"], 0x4c}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) [ 208.776906][T11001] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 00:28:30 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e0000004a008102e00f80ecdb4cb9020a", 0x11}], 0x1, 0x0, 0x0, 0x10}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) ioctl$TUNSETVNETLE(r0, 0x800454e0, 0x0) 00:28:30 executing program 5: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000600)=ANY=[@ANYBLOB="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"/535], &(0x7f0000000340)='syzkaller\x00'}, 0x48) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000001400)=ANY=[@ANYBLOB="726177000000000000000000000000000000000000000000000000000000000008f80000030000003003000098020000000000000000000000000000000000009802000098020000980200009802000098020000030080000000000000000000ffffffffe00000010000000000000000e4000000010000000000bd00000000007465616d5f736c6176655f310000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c001080200000000000000000000000000000000000000005001686173686c696d6974000000000000000000000000000000000000000002726f736530000000000000000000000000000000000000000000000000000000000000e4ff0800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffffffffffff00000000000000000000000003000000070000000000000000000000000000004800435400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000400000000000000000000000000000070009000000000000000000000000000000000000000000020004e4f545241434b0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r0, 0x20e, 0x69, 0x20000000, &(0x7f00000004c0)="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", 0x0, 0xfd, 0x6000000000000000, 0xfffffffffffffe7e, 0x1d4}, 0x28) 00:28:30 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001240)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000001c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$inet6(0xa, 0x80005, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r2, 0x84, 0x25, &(0x7f0000001280)=""/4065, &(0x7f00000000c0)=0xfe1) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r1, 0x0, 0x100000001) 00:28:30 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWSETELEM={0x2c, 0xe, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0xb0}}, 0x0) [ 209.165833][ T26] kauditd_printk_skb: 7 callbacks suppressed [ 209.165849][ T26] audit: type=1804 audit(1634603311.161:57): pid=11027 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir935394635/syzkaller.uhO8Tk/69/cgroup.controllers" dev="sda1" ino=14199 res=1 errno=0 00:28:31 executing program 4: socket$alg(0x26, 0x5, 0x0) socket(0x11, 0x800000003, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)) pipe(&(0x7f0000000400)) socket$netlink(0x10, 0x3, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) pipe(&(0x7f0000000000)) socket(0x10, 0x803, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000180)={0x34, 0x13, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd=r0}, @typed={0x8, 0x0, 0x0, 0x0, @ipv4=@loopback}, @typed={0x14, 0x4, 0x0, 0x0, @ipv6=@dev}]}, 0x34}], 0x1}, 0x0) 00:28:31 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000340)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@newlink={0x2c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_ADDRESS={0xa}]}, 0x2c}}, 0x0) [ 209.518156][T11055] netlink: 'syz-executor.4': attribute type 4 has an invalid length. 00:28:31 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x60, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8}}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x60}}, 0x0) [ 209.663211][T11062] netlink: 'syz-executor.4': attribute type 4 has an invalid length. 00:28:31 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0xf000) sendfile(r1, r2, 0x0, 0xf03b0000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x13, r0, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="44000000100001", @ANYRES32=0x0, @ANYBLOB], 0x44}}, 0x0) sendmsg$ETHTOOL_MSG_PAUSE_GET(r2, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f0000000240)={0x100, 0x0, 0x200, 0x0, 0x25dfdbfc, {}, [@HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}]}, @HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}]}, @HEADER={0x4}, @HEADER={0x4}]}, 0x100}, 0x1, 0x0, 0x0, 0x4c000}, 0x4008001) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/18, 0x30c000, 0x800}, 0x200d20) sendfile(r2, r2, 0x0, 0xb5) 00:28:31 executing program 1: syz_emit_ethernet(0x3e, &(0x7f0000000c00)={@local, @link_local, @void, {@ipv4={0x800, @icmp={{0xa, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010102, {[@ssrr={0x89, 0xf, 0x96, [@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty]}, @rr={0x7, 0x3}]}}, @address_reply}}}}, 0x0) 00:28:31 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0xf000) sendfile(r1, r2, 0x0, 0xf03b0000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x13, r0, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="44000000100001", @ANYRES32=0x0, @ANYBLOB], 0x44}}, 0x0) sendmsg$ETHTOOL_MSG_PAUSE_GET(r2, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f0000000240)={0x100, 0x0, 0x200, 0x0, 0x25dfdbfc, {}, [@HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}]}, @HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}]}, @HEADER={0x4}, @HEADER={0x4}]}, 0x100}, 0x1, 0x0, 0x0, 0x4c000}, 0x4008001) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/18, 0x30c000, 0x800}, 0x200d20) sendfile(r2, r2, 0x0, 0xb5) 00:28:31 executing program 4: syz_emit_ethernet(0x16, &(0x7f0000000300)={@local, @random="bcdd5766b970", @val={@void}, {@generic={0x88a8, "dd6788f7"}}}, 0x0) 00:28:31 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001240)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000001c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$inet6(0xa, 0x80005, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r2, 0x84, 0x25, &(0x7f0000001280)=""/4065, &(0x7f00000000c0)=0xfe1) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r1, 0x0, 0x100000001) 00:28:32 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_int(r0, 0x29, 0x40, &(0x7f0000000000), 0x4) [ 210.291355][ T26] audit: type=1804 audit(1634603312.281:58): pid=11081 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir935394635/syzkaller.uhO8Tk/70/cgroup.controllers" dev="sda1" ino=14213 res=1 errno=0 00:28:34 executing program 5: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000600)=ANY=[@ANYBLOB="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"/535], &(0x7f0000000340)='syzkaller\x00'}, 0x48) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000001400)=ANY=[@ANYBLOB="726177000000000000000000000000000000000000000000000000000000000008f80000030000003003000098020000000000000000000000000000000000009802000098020000980200009802000098020000030080000000000000000000ffffffffe00000010000000000000000e4000000010000000000bd00000000007465616d5f736c6176655f310000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c001080200000000000000000000000000000000000000005001686173686c696d6974000000000000000000000000000000000000000002726f736530000000000000000000000000000000000000000000000000000000000000e4ff0800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffffffffffff00000000000000000000000003000000070000000000000000000000000000004800435400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000400000000000000000000000000000070009000000000000000000000000000000000000000000020004e4f545241434b0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r0, 0x20e, 0x69, 0x20000000, &(0x7f00000004c0)="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", 0x0, 0xfd, 0x6000000000000000, 0xfffffffffffffe7e, 0x1d4}, 0x28) 00:28:34 executing program 4: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) accept$netrom(r0, 0x0, 0x0) 00:28:34 executing program 1: syz_emit_ethernet(0x3e, &(0x7f00000001c0)={@multicast, @random, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "10d573", 0x8, 0x0, 0x0, @private0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, {[@fragment={0x0, 0x0, 0x0, 0x0, 0x0, 0x6}]}}}}}, 0x0) 00:28:34 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0xf000) sendfile(r1, r2, 0x0, 0xf03b0000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x13, r0, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="44000000100001", @ANYRES32=0x0, @ANYBLOB], 0x44}}, 0x0) sendmsg$ETHTOOL_MSG_PAUSE_GET(r2, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f0000000240)={0x100, 0x0, 0x200, 0x0, 0x25dfdbfc, {}, [@HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}]}, @HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}]}, @HEADER={0x4}, @HEADER={0x4}]}, 0x100}, 0x1, 0x0, 0x0, 0x4c000}, 0x4008001) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/18, 0x30c000, 0x800}, 0x200d20) sendfile(r2, r2, 0x0, 0xb5) 00:28:34 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0xf000) sendfile(r1, r2, 0x0, 0xf03b0000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x13, r0, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="44000000100001", @ANYRES32=0x0, @ANYBLOB], 0x44}}, 0x0) sendmsg$ETHTOOL_MSG_PAUSE_GET(r2, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f0000000240)={0x100, 0x0, 0x200, 0x0, 0x25dfdbfc, {}, [@HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}]}, @HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}]}, @HEADER={0x4}, @HEADER={0x4}]}, 0x100}, 0x1, 0x0, 0x0, 0x4c000}, 0x4008001) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/18, 0x30c000, 0x800}, 0x200d20) sendfile(r2, r2, 0x0, 0xb5) 00:28:34 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001240)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000001c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$inet6(0xa, 0x80005, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r2, 0x84, 0x25, &(0x7f0000001280)=""/4065, &(0x7f00000000c0)=0xfe1) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r1, 0x0, 0x100000001) 00:28:35 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r1, &(0x7f0000000100)=0xffffffffffffffff, 0x12) ioctl$sock_inet_sctp_SIOCINQ(r0, 0x541b, &(0x7f00000000c0)) 00:28:35 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=ANY=[@ANYBLOB="4400000024000b0f001000"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000009000100677265640000000014000200100003000a"], 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000001940)=@newqdisc={0x170, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_STAB={0x104, 0x2, "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"}, @TCA_GRED_PARMS={0x38, 0x1, {0x0, 0x0, 0x80000001}}]}}]}, 0x170}}, 0x0) [ 213.235466][T11123] __nla_validate_parse: 5 callbacks suppressed [ 213.235486][T11123] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.3'. [ 213.240238][ T26] audit: type=1804 audit(1634603315.231:59): pid=11125 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir935394635/syzkaller.uhO8Tk/71/cgroup.controllers" dev="sda1" ino=14231 res=1 errno=0 [ 213.278713][T11126] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.2'. [ 213.465637][T11131] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 00:28:35 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0xa, 0x4, &(0x7f0000000080)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x8b}]}, &(0x7f0000000380)='GPL\x00', 0x6, 0x8c, &(0x7f00000003c0)=""/140, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) [ 213.761239][T11134] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 00:28:36 executing program 1: r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x43}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000000)={0x43, 0x0, 0x3}, 0x10) accept$alg(0xffffffffffffffff, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r3, &(0x7f0000000200), 0xf000) sendfile(r3, r2, 0x0, 0x800000000000c) setsockopt$TIPC_GROUP_LEAVE(r3, 0x10f, 0x88) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-avx\x00'}, 0x63) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000001280)="b7f2288a911993f08d3aaea2bc0000de", 0x10) accept$alg(r4, 0x0, 0x0) bind$tipc(r1, 0xffffffffffffffff, 0x0) 00:28:36 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r2, &(0x7f0000000200), 0x806000) close(r1) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, 0x0, 0x0) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendfile(r1, r0, 0x0, 0x32f00) 00:28:36 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0xf000) sendfile(r1, r2, 0x0, 0xf03b0000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x13, r0, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="44000000100001", @ANYRES32=0x0, @ANYBLOB], 0x44}}, 0x0) sendmsg$ETHTOOL_MSG_PAUSE_GET(r2, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f0000000240)={0x100, 0x0, 0x200, 0x0, 0x25dfdbfc, {}, [@HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}]}, @HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}]}, @HEADER={0x4}, @HEADER={0x4}]}, 0x100}, 0x1, 0x0, 0x0, 0x4c000}, 0x4008001) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/18, 0x30c000, 0x800}, 0x200d20) sendfile(r2, r2, 0x0, 0xb5) [ 214.689854][ T26] audit: type=1800 audit(1634603316.681:60): pid=11155 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.4" name="memory.events" dev="sda1" ino=14225 res=0 errno=0 [ 214.817774][T11169] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.3'. 00:28:38 executing program 5: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000600)=ANY=[@ANYBLOB="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"/535], &(0x7f0000000340)='syzkaller\x00'}, 0x48) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000001400)=ANY=[@ANYBLOB="726177000000000000000000000000000000000000000000000000000000000008f80000030000003003000098020000000000000000000000000000000000009802000098020000980200009802000098020000030080000000000000000000ffffffffe00000010000000000000000e4000000010000000000bd00000000007465616d5f736c6176655f310000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c001080200000000000000000000000000000000000000005001686173686c696d6974000000000000000000000000000000000000000002726f736530000000000000000000000000000000000000000000000000000000000000e4ff0800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffffffffffff00000000000000000000000003000000070000000000000000000000000000004800435400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000400000000000000000000000000000070009000000000000000000000000000000000000000000020004e4f545241434b0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r0, 0x20e, 0x69, 0x20000000, &(0x7f00000004c0)="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", 0x0, 0xfd, 0x6000000000000000, 0xfffffffffffffe7e, 0x1d4}, 0x28) 00:28:38 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0xf000) sendfile(r1, r2, 0x0, 0xf03b0000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x13, r0, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="44000000100001", @ANYRES32=0x0, @ANYBLOB], 0x44}}, 0x0) sendmsg$ETHTOOL_MSG_PAUSE_GET(r2, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f0000000240)={0x100, 0x0, 0x200, 0x0, 0x25dfdbfc, {}, [@HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}]}, @HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}]}, @HEADER={0x4}, @HEADER={0x4}]}, 0x100}, 0x1, 0x0, 0x0, 0x4c000}, 0x4008001) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/18, 0x30c000, 0x800}, 0x200d20) sendfile(r2, r2, 0x0, 0xb5) 00:28:38 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001240)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000001c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$inet6(0xa, 0x80005, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r2, 0x84, 0x25, &(0x7f0000001280)=""/4065, &(0x7f00000000c0)=0xfe1) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r1, 0x0, 0x100000001) 00:28:38 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r2, &(0x7f0000000200), 0x806000) close(r1) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, 0x0, 0x0) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendfile(r1, r0, 0x0, 0x32f00) 00:28:38 executing program 1: r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x43}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000000)={0x43, 0x0, 0x3}, 0x10) accept$alg(0xffffffffffffffff, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r3, &(0x7f0000000200), 0xf000) sendfile(r3, r2, 0x0, 0x800000000000c) setsockopt$TIPC_GROUP_LEAVE(r3, 0x10f, 0x88) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-avx\x00'}, 0x63) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000001280)="b7f2288a911993f08d3aaea2bc0000de", 0x10) accept$alg(r4, 0x0, 0x0) bind$tipc(r1, 0xffffffffffffffff, 0x0) 00:28:38 executing program 3: r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x43}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000000)={0x43, 0x0, 0x3}, 0x10) accept$alg(0xffffffffffffffff, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r3, &(0x7f0000000200), 0xf000) sendfile(r3, r2, 0x0, 0x800000000000c) setsockopt$TIPC_GROUP_LEAVE(r3, 0x10f, 0x88) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-avx\x00'}, 0x63) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000001280)="b7f2288a911993f08d3aaea2bc0000de", 0x10) accept$alg(r4, 0x0, 0x0) bind$tipc(r1, 0xffffffffffffffff, 0x0) [ 217.107277][T11212] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.2'. [ 217.143628][ T26] audit: type=1804 audit(1634603319.141:61): pid=11206 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir935394635/syzkaller.uhO8Tk/72/cgroup.controllers" dev="sda1" ino=14253 res=1 errno=0 00:28:39 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r2, &(0x7f0000000200), 0x806000) close(r1) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, 0x0, 0x0) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendfile(r1, r0, 0x0, 0x32f00) 00:28:39 executing program 1: r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x43}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000000)={0x43, 0x0, 0x3}, 0x10) accept$alg(0xffffffffffffffff, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r3, &(0x7f0000000200), 0xf000) sendfile(r3, r2, 0x0, 0x800000000000c) setsockopt$TIPC_GROUP_LEAVE(r3, 0x10f, 0x88) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-avx\x00'}, 0x63) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000001280)="b7f2288a911993f08d3aaea2bc0000de", 0x10) accept$alg(r4, 0x0, 0x0) bind$tipc(r1, 0xffffffffffffffff, 0x0) 00:28:40 executing program 3: r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x43}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000000)={0x43, 0x0, 0x3}, 0x10) accept$alg(0xffffffffffffffff, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r3, &(0x7f0000000200), 0xf000) sendfile(r3, r2, 0x0, 0x800000000000c) setsockopt$TIPC_GROUP_LEAVE(r3, 0x10f, 0x88) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-avx\x00'}, 0x63) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000001280)="b7f2288a911993f08d3aaea2bc0000de", 0x10) accept$alg(r4, 0x0, 0x0) bind$tipc(r1, 0xffffffffffffffff, 0x0) 00:28:40 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r2, &(0x7f0000000200), 0x806000) close(r1) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, 0x0, 0x0) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendfile(r1, r0, 0x0, 0x32f00) 00:28:40 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000040)=@updsa={0x104, 0x1a, 0xc01, 0x0, 0x0, {{@in=@local, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, 0x0, 0x3c}, @in6=@local, {}, {}, {}, 0x0, 0x0, 0xa, 0x2}, [@coaddr={0x14, 0xe, @in=@broadcast}]}, 0x104}}, 0x0) 00:28:40 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r2, &(0x7f0000000200), 0x806000) close(r1) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, 0x0, 0x0) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendfile(r1, r0, 0x0, 0x32f00) 00:28:42 executing program 5: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000600)=ANY=[@ANYBLOB="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"/535], &(0x7f0000000340)='syzkaller\x00'}, 0x48) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000001400)=ANY=[@ANYBLOB="726177000000000000000000000000000000000000000000000000000000000008f80000030000003003000098020000000000000000000000000000000000009802000098020000980200009802000098020000030080000000000000000000ffffffffe00000010000000000000000e4000000010000000000bd00000000007465616d5f736c6176655f310000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c001080200000000000000000000000000000000000000005001686173686c696d6974000000000000000000000000000000000000000002726f736530000000000000000000000000000000000000000000000000000000000000e4ff0800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffffffffffff00000000000000000000000003000000070000000000000000000000000000004800435400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000400000000000000000000000000000070009000000000000000000000000000000000000000000020004e4f545241434b0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r0, 0x20e, 0x69, 0x20000000, &(0x7f00000004c0)="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", 0x0, 0xfd, 0x6000000000000000, 0xfffffffffffffe7e, 0x1d4}, 0x28) 00:28:42 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000040)=@updsa={0x104, 0x1a, 0xc01, 0x0, 0x0, {{@in=@local, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, 0x0, 0x3c}, @in6=@local, {}, {}, {}, 0x0, 0x0, 0xa, 0x2}, [@coaddr={0x14, 0xe, @in=@broadcast}]}, 0x104}}, 0x0) 00:28:42 executing program 1: r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x43}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000000)={0x43, 0x0, 0x3}, 0x10) accept$alg(0xffffffffffffffff, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r3, &(0x7f0000000200), 0xf000) sendfile(r3, r2, 0x0, 0x800000000000c) setsockopt$TIPC_GROUP_LEAVE(r3, 0x10f, 0x88) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-avx\x00'}, 0x63) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000001280)="b7f2288a911993f08d3aaea2bc0000de", 0x10) accept$alg(r4, 0x0, 0x0) bind$tipc(r1, 0xffffffffffffffff, 0x0) 00:28:42 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r2, &(0x7f0000000200), 0x806000) close(r1) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, 0x0, 0x0) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendfile(r1, r0, 0x0, 0x32f00) 00:28:42 executing program 3: r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x43}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000000)={0x43, 0x0, 0x3}, 0x10) accept$alg(0xffffffffffffffff, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r3, &(0x7f0000000200), 0xf000) sendfile(r3, r2, 0x0, 0x800000000000c) setsockopt$TIPC_GROUP_LEAVE(r3, 0x10f, 0x88) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-avx\x00'}, 0x63) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000001280)="b7f2288a911993f08d3aaea2bc0000de", 0x10) accept$alg(r4, 0x0, 0x0) bind$tipc(r1, 0xffffffffffffffff, 0x0) 00:28:42 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r0, 0x8931, &(0x7f0000000000)={'team0\x00', @ifru_hwaddr=@link_local}) 00:28:42 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0xe, 0x0, 0x0) 00:28:42 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000040)=@updsa={0x104, 0x1a, 0xc01, 0x0, 0x0, {{@in=@local, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, 0x0, 0x3c}, @in6=@local, {}, {}, {}, 0x0, 0x0, 0xa, 0x2}, [@coaddr={0x14, 0xe, @in=@broadcast}]}, 0x104}}, 0x0) 00:28:42 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000040)=@updsa={0x104, 0x1a, 0xc01, 0x0, 0x0, {{@in=@local, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, 0x0, 0x3c}, @in6=@local, {}, {}, {}, 0x0, 0x0, 0xa, 0x2}, [@coaddr={0x14, 0xe, @in=@broadcast}]}, 0x104}}, 0x0) 00:28:42 executing program 4: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r0, &(0x7f0000000480)={0x2, @long}, 0x14) 00:28:43 executing program 4: sendmsg$IEEE802154_LLSEC_ADD_KEY(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, 0x0, 0x400, 0x70bd29, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x9b}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x5}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x40081}, 0xd1) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000002d40)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5}, 0x48) bind(0xffffffffffffffff, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000380)=ANY=[@ANYBLOB="020101090800000000170006ffffff00030006001000000002000000e0000009f9ff0f0000000000030005007217440502000000e0000001"], 0x40}}, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$key(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x3, 0x0, 0x9, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @loopback}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x50}}, 0x0) 00:28:43 executing program 2: r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r0, &(0x7f0000000880)=[{{&(0x7f0000000080)={0x2, 0x0, @rand_addr=0x3}, 0x10, &(0x7f0000000100)=[{&(0x7f0000001bc0)='Q', 0x1}], 0x1}}], 0x1, 0x0) sendmmsg$inet_sctp(r0, &(0x7f0000001a40)=[{&(0x7f0000000000)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000300)="a0", 0x1}], 0x1}], 0x1, 0x0) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f00000000c0)={r2}, 0x8) 00:28:44 executing program 4: sendmsg$IEEE802154_LLSEC_ADD_KEY(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, 0x0, 0x400, 0x70bd29, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x9b}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x5}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x40081}, 0xd1) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000002d40)=ANY=[@ANYBLOB="61128c000000000061138c0000000000bf2000000000000015000000080000002d0301000000000095000000000000006916000000000000bf670000000000004506000023ff07006706000002000000070300000ee60060bf050000000000000f650000000000006507f9ff01000000070700004c0000001f75000000000000bf54000000000000070400000400f9ffad4301000000000095000000000000000500000000000000950000000000000032ed3c5be95e5db67754bb12dc8c27df8ecf264e0f84f9f17d3c30e3c7bdd2d17f2f1754558f2278af0100008000000000b1d8a5d4601d295c45a6a0b9bdb7dd399703d6c4f6f3be4b369289aa6812b8e007e733a9a4f16d0a3e1282ee45a010fb94fe9de56c9d8a814261bdb94a05000000c6c60bf70d742a8100000000000000810b5b40d893ea8fe0185473d51b546cad3f1d5af65727546e7c955ccefa1f6ab689fde4de4e63ede20271a51445dc8da39e5b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e0dee5eb106774a8f3e6916dfec88158f0200000000c8fb735fd552bdc206004aeb0743eb2dc819b6cf5c8ac86d8a297dff0445a13d0045fb3cda32a673a6bb55d8c85f21dce431e56723888f00000000000000049bc1172ba7cbebe174aba210d739a018f9bbec63222d20cecac4d03723f1c932b3a6aa57f1ad2e99e0e67a993716dbf580469f0f53acbb40b401e3738270b315d362ed834f2af97787f696649a462e7ee4bcf8b07a10d6735154beb4000000000000000000000000000000bc00f674629709e7e78f4ddc211bc3ebf0bd9d42ca019dd5d022cf74686e9fbe2562671cd47840a7afaab43176e65ec1118d46d1e827f3472f4445d253887a5ad103649afa17690884f800031e03a651bb96589a7eab04871bc47287cd31cc43ea0ffb567b40407d000000000000000000000000005f37d83f84e98a523d80bd0d0d703f37ca363f601ae899a53f6715a0a62a34b0c94cce6994521629ab028acfc1d926a0f6a5480a55c22fe394ac000000000000000000000000000000437d57defb79ea"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5}, 0x48) bind(0xffffffffffffffff, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000380)=ANY=[@ANYBLOB="020101090800000000170006ffffff00030006001000000002000000e0000009f9ff0f0000000000030005007217440502000000e0000001"], 0x40}}, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$key(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x3, 0x0, 0x9, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @loopback}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x50}}, 0x0) 00:28:44 executing program 1: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f00000003c0)={0x2c, 0x1d, 0x1, 0x0, 0x0, "", [@nested={0x4, 0x0, 0x0, 0x1, [@typed={0xc, 0x1, 0x0, 0x0, @u64}, @typed={0xc, 0xa, 0x0, 0x0, @u64}]}]}, 0x2c}], 0x1}, 0x0) 00:28:44 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r2, &(0x7f0000000200), 0x806000) close(r1) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, 0x0, 0x0) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendfile(r1, r0, 0x0, 0x32f00) 00:28:44 executing program 3: clock_gettime(0x5, &(0x7f0000000000)) 00:28:44 executing program 2: r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r0, &(0x7f0000000880)=[{{&(0x7f0000000080)={0x2, 0x0, @rand_addr=0x3}, 0x10, &(0x7f0000000100)=[{&(0x7f0000001bc0)='Q', 0x1}], 0x1}}], 0x1, 0x0) sendmmsg$inet_sctp(r0, &(0x7f0000001a40)=[{&(0x7f0000000000)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000300)="a0", 0x1}], 0x1}], 0x1, 0x0) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f00000000c0)={r2}, 0x8) 00:28:44 executing program 5: sendmsg$IEEE802154_LLSEC_ADD_KEY(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, 0x0, 0x400, 0x70bd29, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x9b}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x5}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x40081}, 0xd1) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000002d40)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5}, 0x48) bind(0xffffffffffffffff, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000380)=ANY=[@ANYBLOB="020101090800000000170006ffffff00030006001000000002000000e0000009f9ff0f0000000000030005007217440502000000e0000001"], 0x40}}, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$key(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x3, 0x0, 0x9, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @loopback}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x50}}, 0x0) [ 222.801204][T11292] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 222.823315][T11292] netlink: 'syz-executor.1': attribute type 10 has an invalid length. 00:28:44 executing program 1: r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r0, &(0x7f0000000880)=[{{&(0x7f0000000080)={0x2, 0x0, @rand_addr=0x3}, 0x10, &(0x7f0000000100)=[{&(0x7f0000001bc0)='Q', 0x1}], 0x1}}], 0x1, 0x0) sendmmsg$inet_sctp(r0, &(0x7f0000001a40)=[{&(0x7f0000000000)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000300)="a0", 0x1}], 0x1}], 0x1, 0x0) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f00000000c0)={r2}, 0x8) 00:28:44 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB="2c0000001300290a000000000000000007000000", @ANYRES32=r1, @ANYBLOB="00000000000000000c001a80080005"], 0x2c}}, 0x0) 00:28:45 executing program 2: r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r0, &(0x7f0000000880)=[{{&(0x7f0000000080)={0x2, 0x0, @rand_addr=0x3}, 0x10, &(0x7f0000000100)=[{&(0x7f0000001bc0)='Q', 0x1}], 0x1}}], 0x1, 0x0) sendmmsg$inet_sctp(r0, &(0x7f0000001a40)=[{&(0x7f0000000000)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000300)="a0", 0x1}], 0x1}], 0x1, 0x0) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f00000000c0)={r2}, 0x8) 00:28:45 executing program 3: getsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, &(0x7f0000000000), &(0x7f0000000080)=0x4) r0 = socket$inet6(0xa, 0x80003, 0x7) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) setsockopt$sock_int(r0, 0x1, 0x28, &(0x7f00000000c0)=0xd44, 0x4) recvmmsg(r0, &(0x7f00000010c0)=[{{0x0, 0x4, 0x0}}], 0x300, 0x0, 0x0) 00:28:45 executing program 1: r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r0, &(0x7f0000000880)=[{{&(0x7f0000000080)={0x2, 0x0, @rand_addr=0x3}, 0x10, &(0x7f0000000100)=[{&(0x7f0000001bc0)='Q', 0x1}], 0x1}}], 0x1, 0x0) sendmmsg$inet_sctp(r0, &(0x7f0000001a40)=[{&(0x7f0000000000)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000300)="a0", 0x1}], 0x1}], 0x1, 0x0) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f00000000c0)={r2}, 0x8) 00:28:45 executing program 2: r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r0, &(0x7f0000000880)=[{{&(0x7f0000000080)={0x2, 0x0, @rand_addr=0x3}, 0x10, &(0x7f0000000100)=[{&(0x7f0000001bc0)='Q', 0x1}], 0x1}}], 0x1, 0x0) sendmmsg$inet_sctp(r0, &(0x7f0000001a40)=[{&(0x7f0000000000)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000300)="a0", 0x1}], 0x1}], 0x1, 0x0) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f00000000c0)={r2}, 0x8) 00:28:45 executing program 4: sendmsg$IEEE802154_LLSEC_ADD_KEY(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, 0x0, 0x400, 0x70bd29, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x9b}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x5}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x40081}, 0xd1) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000002d40)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5}, 0x48) bind(0xffffffffffffffff, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000380)=ANY=[@ANYBLOB="020101090800000000170006ffffff00030006001000000002000000e0000009f9ff0f0000000000030005007217440502000000e0000001"], 0x40}}, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$key(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x3, 0x0, 0x9, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @loopback}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x50}}, 0x0) 00:28:45 executing program 5: sendmsg$IEEE802154_LLSEC_ADD_KEY(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, 0x0, 0x400, 0x70bd29, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x9b}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x5}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x40081}, 0xd1) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000002d40)=ANY=[@ANYBLOB="61128c000000000061138c0000000000bf2000000000000015000000080000002d0301000000000095000000000000006916000000000000bf670000000000004506000023ff07006706000002000000070300000ee60060bf050000000000000f650000000000006507f9ff01000000070700004c0000001f75000000000000bf54000000000000070400000400f9ffad4301000000000095000000000000000500000000000000950000000000000032ed3c5be95e5db67754bb12dc8c27df8ecf264e0f84f9f17d3c30e3c7bdd2d17f2f1754558f2278af0100008000000000b1d8a5d4601d295c45a6a0b9bdb7dd399703d6c4f6f3be4b369289aa6812b8e007e733a9a4f16d0a3e1282ee45a010fb94fe9de56c9d8a814261bdb94a05000000c6c60bf70d742a8100000000000000810b5b40d893ea8fe0185473d51b546cad3f1d5af65727546e7c955ccefa1f6ab689fde4de4e63ede20271a51445dc8da39e5b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e0dee5eb106774a8f3e6916dfec88158f0200000000c8fb735fd552bdc206004aeb0743eb2dc819b6cf5c8ac86d8a297dff0445a13d0045fb3cda32a673a6bb55d8c85f21dce431e56723888f00000000000000049bc1172ba7cbebe174aba210d739a018f9bbec63222d20cecac4d03723f1c932b3a6aa57f1ad2e99e0e67a993716dbf580469f0f53acbb40b401e3738270b315d362ed834f2af97787f696649a462e7ee4bcf8b07a10d6735154beb4000000000000000000000000000000bc00f674629709e7e78f4ddc211bc3ebf0bd9d42ca019dd5d022cf74686e9fbe2562671cd47840a7afaab43176e65ec1118d46d1e827f3472f4445d253887a5ad103649afa17690884f800031e03a651bb96589a7eab04871bc47287cd31cc43ea0ffb567b40407d000000000000000000000000005f37d83f84e98a523d80bd0d0d703f37ca363f601ae899a53f6715a0a62a34b0c94cce6994521629ab028acfc1d926a0f6a5480a55c22fe394ac000000000000000000000000000000437d57defb79ea"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5}, 0x48) bind(0xffffffffffffffff, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000380)=ANY=[@ANYBLOB="020101090800000000170006ffffff00030006001000000002000000e0000009f9ff0f0000000000030005007217440502000000e0000001"], 0x40}}, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$key(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x3, 0x0, 0x9, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @loopback}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x50}}, 0x0) 00:28:45 executing program 1: r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r0, &(0x7f0000000880)=[{{&(0x7f0000000080)={0x2, 0x0, @rand_addr=0x3}, 0x10, &(0x7f0000000100)=[{&(0x7f0000001bc0)='Q', 0x1}], 0x1}}], 0x1, 0x0) sendmmsg$inet_sctp(r0, &(0x7f0000001a40)=[{&(0x7f0000000000)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000300)="a0", 0x1}], 0x1}], 0x1, 0x0) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f00000000c0)={r2}, 0x8) 00:28:45 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0xe}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0x0, 0x9}}]}}]}, 0x3c}}, 0x0) r3 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000200), 0x4924924924926d3, 0x0) [ 223.868077][T11329] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 00:28:45 executing program 0: r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r0, 0x114, 0xa, &(0x7f0000000040)={0x3, "00e2c2"}, 0x4) [ 224.006877][T11331] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 00:28:46 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x21, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 00:28:46 executing program 4: sendmsg$IEEE802154_LLSEC_ADD_KEY(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, 0x0, 0x400, 0x70bd29, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x9b}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x5}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x40081}, 0xd1) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000002d40)=ANY=[@ANYBLOB="61128c000000000061138c0000000000bf2000000000000015000000080000002d0301000000000095000000000000006916000000000000bf670000000000004506000023ff07006706000002000000070300000ee60060bf050000000000000f650000000000006507f9ff01000000070700004c0000001f75000000000000bf54000000000000070400000400f9ffad4301000000000095000000000000000500000000000000950000000000000032ed3c5be95e5db67754bb12dc8c27df8ecf264e0f84f9f17d3c30e3c7bdd2d17f2f1754558f2278af0100008000000000b1d8a5d4601d295c45a6a0b9bdb7dd399703d6c4f6f3be4b369289aa6812b8e007e733a9a4f16d0a3e1282ee45a010fb94fe9de56c9d8a814261bdb94a05000000c6c60bf70d742a8100000000000000810b5b40d893ea8fe0185473d51b546cad3f1d5af65727546e7c955ccefa1f6ab689fde4de4e63ede20271a51445dc8da39e5b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e0dee5eb106774a8f3e6916dfec88158f0200000000c8fb735fd552bdc206004aeb0743eb2dc819b6cf5c8ac86d8a297dff0445a13d0045fb3cda32a673a6bb55d8c85f21dce431e56723888f00000000000000049bc1172ba7cbebe174aba210d739a018f9bbec63222d20cecac4d03723f1c932b3a6aa57f1ad2e99e0e67a993716dbf580469f0f53acbb40b401e3738270b315d362ed834f2af97787f696649a462e7ee4bcf8b07a10d6735154beb4000000000000000000000000000000bc00f674629709e7e78f4ddc211bc3ebf0bd9d42ca019dd5d022cf74686e9fbe2562671cd47840a7afaab43176e65ec1118d46d1e827f3472f4445d253887a5ad103649afa17690884f800031e03a651bb96589a7eab04871bc47287cd31cc43ea0ffb567b40407d000000000000000000000000005f37d83f84e98a523d80bd0d0d703f37ca363f601ae899a53f6715a0a62a34b0c94cce6994521629ab028acfc1d926a0f6a5480a55c22fe394ac000000000000000000000000000000437d57defb79ea"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5}, 0x48) bind(0xffffffffffffffff, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000380)=ANY=[@ANYBLOB="020101090800000000170006ffffff00030006001000000002000000e0000009f9ff0f0000000000030005007217440502000000e0000001"], 0x40}}, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$key(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x3, 0x0, 0x9, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @loopback}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x50}}, 0x0) 00:28:46 executing program 5: sendmsg$IEEE802154_LLSEC_ADD_KEY(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, 0x0, 0x400, 0x70bd29, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x9b}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x5}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x40081}, 0xd1) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000002d40)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5}, 0x48) bind(0xffffffffffffffff, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000380)=ANY=[@ANYBLOB="020101090800000000170006ffffff00030006001000000002000000e0000009f9ff0f0000000000030005007217440502000000e0000001"], 0x40}}, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$key(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x3, 0x0, 0x9, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @loopback}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x50}}, 0x0) 00:28:46 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) shutdown(r0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000075c0)=[{{0x0, 0x0, &(0x7f0000004200)}, 0x5}], 0x1, 0x0, 0x0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000001b00)={0x30, 0x1d, 0x1, 0x0, 0x0, "", [@nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x1, 0x0, 0x0, @u32=0x37}]}, @typed={0x14, 0x10, 0x0, 0x0, @ipv6=@dev={0xfe, 0x80, '\x00', 0x41}}]}, 0x30}], 0x1}, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000001b00)={0x34, 0x1d, 0x1, 0x0, 0x0, "", [@nested={0x10, 0x0, 0x0, 0x1, [@typed={0xc, 0x1, 0x0, 0x0, @u64}]}, @typed={0x14, 0x10, 0x0, 0x0, @ipv6=@mcast1}]}, 0x34}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000000080), 0x72a, 0x0, 0x0) [ 224.359564][T11356] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 224.398661][T11356] netlink: 'syz-executor.2': attribute type 16 has an invalid length. 00:28:46 executing program 0: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x12, 0x4, 0x8, 0x9fb}, 0x40) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f00000006c0)=0x2000000000000001, 0x4) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000001c0)='macvlan1\x00', 0x10) connect$inet(r1, &(0x7f0000000140)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000), 0x4) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r0, &(0x7f0000000340), &(0x7f0000000100)=@tcp=r1}, 0x20) shutdown(r1, 0x0) recvmmsg(r1, &(0x7f0000000540)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}}], 0x422, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) 00:28:46 executing program 1: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_int(r0, 0x1, 0x23, &(0x7f0000000000)=0x2, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) recvmmsg(r0, &(0x7f0000008740)=[{{0x0, 0x4, &(0x7f0000001780)=[{&(0x7f0000000780)=""/4096, 0x1000}], 0x1}}], 0x500, 0x0, 0x0) 00:28:46 executing program 3: getsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, &(0x7f0000000000), &(0x7f0000000080)=0x4) r0 = socket$inet6(0xa, 0x80003, 0x7) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) setsockopt$sock_int(r0, 0x1, 0x28, &(0x7f00000000c0)=0xd44, 0x4) recvmmsg(r0, &(0x7f00000010c0)=[{{0x0, 0x4, 0x0}}], 0x300, 0x0, 0x0) [ 224.518668][T11356] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 224.537391][T11356] netlink: 'syz-executor.2': attribute type 16 has an invalid length. 00:28:46 executing program 2: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null-generic\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) splice(r2, 0x0, r0, 0x0, 0x810020000000003, 0x0) 00:28:46 executing program 4: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000680)=@mangle={'mangle\x00', 0x64, 0x6, 0x5f0, 0x400, 0x0, 0x218, 0x218, 0x400, 0x520, 0x520, 0x520, 0x520, 0x520, 0x6, 0x0, {[{{@ipv6={@loopback, @mcast1, [], [], 'syzkaller1\x00', 'veth0_to_bridge\x00', {}, {}, 0x11, 0x0, 0x1}, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CHECKSUM={0x28}}, {{@ipv6={@dev, @local, [], [], 'veth1\x00', 'ip6tnl0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@ipv6header={{0x28}}]}, @HL={0x28}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @dev, [], [], 'gretap0\x00', 'veth0\x00'}, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@private2, @ipv6=@private1}}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}}]}, @common=@unspec=@CLASSIFY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x650) 00:28:46 executing program 0: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x12, 0x4, 0x8, 0x9fb}, 0x40) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f00000006c0)=0x2000000000000001, 0x4) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000001c0)='macvlan1\x00', 0x10) connect$inet(r1, &(0x7f0000000140)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000), 0x4) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r0, &(0x7f0000000340), &(0x7f0000000100)=@tcp=r1}, 0x20) shutdown(r1, 0x0) recvmmsg(r1, &(0x7f0000000540)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}}], 0x422, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) 00:28:46 executing program 1: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_int(r0, 0x1, 0x23, &(0x7f0000000000)=0x2, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) recvmmsg(r0, &(0x7f0000008740)=[{{0x0, 0x4, &(0x7f0000001780)=[{&(0x7f0000000780)=""/4096, 0x1000}], 0x1}}], 0x500, 0x0, 0x0) 00:28:47 executing program 2: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_int(r0, 0x1, 0x23, &(0x7f0000000000)=0x2, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) recvmmsg(r0, &(0x7f0000008740)=[{{0x0, 0x4, &(0x7f0000001780)=[{&(0x7f0000000780)=""/4096, 0x1000}], 0x1}}], 0x500, 0x0, 0x0) 00:28:47 executing program 5: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_int(r0, 0x1, 0x23, &(0x7f0000000000)=0x2, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) recvmmsg(r0, &(0x7f0000008740)=[{{0x0, 0x4, &(0x7f0000001780)=[{&(0x7f0000000780)=""/4096, 0x1000}], 0x1}}], 0x500, 0x0, 0x0) [ 224.994357][T11376] x_tables: ip6_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING 00:28:47 executing program 4: socket(0x0, 0x0, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, 0x0, 0x0) unshare(0x40000000) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000000)=0x2, 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6, 0xffffffff}, 0x1c) r1 = socket$inet6(0xa, 0x803, 0x6) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r1, &(0x7f0000008440)=[{{0x0, 0x536, 0x0}, 0xff00}], 0x400000000000107, 0x0) 00:28:47 executing program 0: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x12, 0x4, 0x8, 0x9fb}, 0x40) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f00000006c0)=0x2000000000000001, 0x4) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000001c0)='macvlan1\x00', 0x10) connect$inet(r1, &(0x7f0000000140)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000), 0x4) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r0, &(0x7f0000000340), &(0x7f0000000100)=@tcp=r1}, 0x20) shutdown(r1, 0x0) recvmmsg(r1, &(0x7f0000000540)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}}], 0x422, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) 00:28:47 executing program 5: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_int(r0, 0x1, 0x23, &(0x7f0000000000)=0x2, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) recvmmsg(r0, &(0x7f0000008740)=[{{0x0, 0x4, &(0x7f0000001780)=[{&(0x7f0000000780)=""/4096, 0x1000}], 0x1}}], 0x500, 0x0, 0x0) 00:28:47 executing program 2: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_int(r0, 0x1, 0x23, &(0x7f0000000000)=0x2, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) recvmmsg(r0, &(0x7f0000008740)=[{{0x0, 0x4, &(0x7f0000001780)=[{&(0x7f0000000780)=""/4096, 0x1000}], 0x1}}], 0x500, 0x0, 0x0) 00:28:47 executing program 1: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_int(r0, 0x1, 0x23, &(0x7f0000000000)=0x2, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) recvmmsg(r0, &(0x7f0000008740)=[{{0x0, 0x4, &(0x7f0000001780)=[{&(0x7f0000000780)=""/4096, 0x1000}], 0x1}}], 0x500, 0x0, 0x0) [ 225.476894][T11391] hsr0 speed is unknown, defaulting to 1000 00:28:47 executing program 3: getsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, &(0x7f0000000000), &(0x7f0000000080)=0x4) r0 = socket$inet6(0xa, 0x80003, 0x7) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) setsockopt$sock_int(r0, 0x1, 0x28, &(0x7f00000000c0)=0xd44, 0x4) recvmmsg(r0, &(0x7f00000010c0)=[{{0x0, 0x4, 0x0}}], 0x300, 0x0, 0x0) 00:28:47 executing program 0: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x12, 0x4, 0x8, 0x9fb}, 0x40) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f00000006c0)=0x2000000000000001, 0x4) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000001c0)='macvlan1\x00', 0x10) connect$inet(r1, &(0x7f0000000140)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000), 0x4) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r0, &(0x7f0000000340), &(0x7f0000000100)=@tcp=r1}, 0x20) shutdown(r1, 0x0) recvmmsg(r1, &(0x7f0000000540)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}}], 0x422, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) 00:28:47 executing program 5: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_int(r0, 0x1, 0x23, &(0x7f0000000000)=0x2, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) recvmmsg(r0, &(0x7f0000008740)=[{{0x0, 0x4, &(0x7f0000001780)=[{&(0x7f0000000780)=""/4096, 0x1000}], 0x1}}], 0x500, 0x0, 0x0) 00:28:47 executing program 2: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_int(r0, 0x1, 0x23, &(0x7f0000000000)=0x2, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) recvmmsg(r0, &(0x7f0000008740)=[{{0x0, 0x4, &(0x7f0000001780)=[{&(0x7f0000000780)=""/4096, 0x1000}], 0x1}}], 0x500, 0x0, 0x0) 00:28:47 executing program 1: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_int(r0, 0x1, 0x23, &(0x7f0000000000)=0x2, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) recvmmsg(r0, &(0x7f0000008740)=[{{0x0, 0x4, &(0x7f0000001780)=[{&(0x7f0000000780)=""/4096, 0x1000}], 0x1}}], 0x500, 0x0, 0x0) [ 225.904501][T11391] hsr0 speed is unknown, defaulting to 1000 00:28:48 executing program 5: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba72e2aba000000012e0b3836005404b0e0301a08000000e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c000100000000000000497400000000000000065ecc326d3a09ffc2c65400"}, 0x80) sendmmsg$sock(r0, &(0x7f0000001300)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000180)="db40714d531db941d0f13c715c31", 0xe}], 0x1}}, {{0x0, 0x0, &(0x7f0000000580)}}], 0x2, 0x0) 00:28:48 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0xb00000000065808, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000140)) write$cgroup_type(r1, &(0x7f0000000000), 0xb1d000) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000180)={0xffffffffffffffff}) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$BTRFS_IOC_START_SYNC(r3, 0x80089418, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000800)={{}, 0x0, 0x0, @inherit={0x50, &(0x7f0000000400)=ANY=[@ANYBLOB="0197e4e99ce18667a401fcb7cae688390000000000000001000000000000000500000000000000ffffffffffffffff9600"/61]}, @subvolid=0x1f}) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x8, 0x5, &(0x7f00000002c0)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) r5 = epoll_create(0x80) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r4, 0x50009417, &(0x7f0000000800)={{r5}, 0x0, 0x0, @unused=[0x0, 0x6, 0x7, 0x8], @subvolid=0x1f}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r5, 0xc0c89425, &(0x7f0000001880)={"c63d7ac62f0a2d13c642b4920b18c172", 0x0, 0x0, {0x6, 0x8}, {0x6, 0xee45}, 0x656, [0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0x7, 0x4, 0x0, 0xbd4a, 0x4e, 0x0, 0x1000, 0x0, 0x4, 0x9]}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r2, 0xc0c89425, &(0x7f00000001c0)={"dffe0ede08b26338c4f49c8936661244", 0x0, 0x0, {0x0, 0x9}, {0x0, 0xd4}, 0x29e0, [0x4, 0x2, 0x5, 0x0, 0x3, 0x2, 0x7, 0x1d, 0x10001, 0x0, 0x44f680000, 0x7, 0x1ff, 0x200, 0x5, 0x8]}) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f00000001c0)=0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000800)={{}, r6, 0x12, @inherit={0x50, &(0x7f0000001800)={0x1, 0x1, 0x5, 0x0, {0x8, 0x0, 0x5, 0x7, 0x8770}, [0x20]}}, @subvolid=0x1f}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f0000000440)) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r3, 0xc0c89425, &(0x7f0000000640)={"4083722fb514eb56fbf049af372eaf18", r6, 0x0, {0x7c1a}, {0x8, 0x9}, 0x3ff, [0x3, 0x7f, 0x0, 0x200f, 0xfffffffffffffffd, 0x100000001, 0x7ff, 0x7, 0xffff, 0x6, 0xd9, 0x81, 0x902c, 0x0, 0x5, 0x5]}) preadv(r0, &(0x7f0000000040)=[{0x0}, {&(0x7f0000001200)=""/102388, 0xffffff9f}, {&(0x7f000001a200)=""/4096, 0xdf4}], 0x3, 0x0, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) 00:28:48 executing program 4: socket(0x0, 0x0, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, 0x0, 0x0) unshare(0x40000000) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000000)=0x2, 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6, 0xffffffff}, 0x1c) r1 = socket$inet6(0xa, 0x803, 0x6) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r1, &(0x7f0000008440)=[{{0x0, 0x536, 0x0}, 0xff00}], 0x400000000000107, 0x0) 00:28:48 executing program 0: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000700)={0x41, 0x0, 0x96689ce3cf48aba5}, 0x10) 00:28:48 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x1f) setsockopt$inet6_int(r0, 0x29, 0x4e, &(0x7f0000000000)=0x5, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @private1}, 0x53) [ 226.393092][ T26] audit: type=1804 audit(1634603328.392:62): pid=11463 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir711539129/syzkaller.91D5fF/96/memory.events" dev="sda1" ino=14288 res=1 errno=0 [ 226.458105][T11461] hsr0 speed is unknown, defaulting to 1000 00:28:48 executing program 0: r0 = socket$inet_sctp(0x2, 0x800000000000001, 0x84) sendto$inet(r0, &(0x7f0000000100)="f4", 0x1, 0x0, &(0x7f0000000180)={0x2, 0x0, @rand_addr=0x7}, 0x10) sendto$inet(r0, &(0x7f0000000380)='\x00', 0x1, 0x0, &(0x7f00000000c0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) shutdown(r0, 0x1) setsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000200)={0x0, 0x0, 0xfff}, 0x10) [ 226.558597][ T26] audit: type=1800 audit(1634603328.422:63): pid=11463 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="memory.events" dev="sda1" ino=14288 res=0 errno=0 00:28:48 executing program 1: r0 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_FILTER(r0, 0x6b, 0x1, &(0x7f0000000040)=[{}], 0x4000) [ 226.717949][ T26] audit: type=1804 audit(1634603328.432:64): pid=11463 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir711539129/syzkaller.91D5fF/96/memory.events" dev="sda1" ino=14288 res=1 errno=0 [ 226.770809][T11478] hsr0 speed is unknown, defaulting to 1000 00:28:49 executing program 3: getsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, &(0x7f0000000000), &(0x7f0000000080)=0x4) r0 = socket$inet6(0xa, 0x80003, 0x7) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) setsockopt$sock_int(r0, 0x1, 0x28, &(0x7f00000000c0)=0xd44, 0x4) recvmmsg(r0, &(0x7f00000010c0)=[{{0x0, 0x4, 0x0}}], 0x300, 0x0, 0x0) 00:28:49 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="01002e2f66"], 0xa) [ 227.234848][ T26] audit: type=1804 audit(1634603329.232:65): pid=11471 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir711539129/syzkaller.91D5fF/96/memory.events" dev="sda1" ino=14288 res=1 errno=0 00:28:49 executing program 4: socket(0x0, 0x0, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, 0x0, 0x0) unshare(0x40000000) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000000)=0x2, 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6, 0xffffffff}, 0x1c) r1 = socket$inet6(0xa, 0x803, 0x6) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r1, &(0x7f0000008440)=[{{0x0, 0x536, 0x0}, 0xff00}], 0x400000000000107, 0x0) 00:28:49 executing program 1: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x42, &(0x7f00000002c0)='syzkaller1\x00', 0x10) [ 227.414429][ T26] audit: type=1800 audit(1634603329.232:66): pid=11471 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="memory.events" dev="sda1" ino=14288 res=0 errno=0 [ 227.522619][ T26] audit: type=1804 audit(1634603329.232:67): pid=11523 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir711539129/syzkaller.91D5fF/96/memory.events" dev="sda1" ino=14288 res=1 errno=0 00:28:49 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)={0x1c4, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_MESH_ID={0xa}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}], @NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_4ADDR={0x5}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "98ed1c59a3311196b6c0cdf42295c9991eaea31f3d107c44"}], @NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_4ADDR={0x5}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MNTR_FLAGS={0x1c, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "1b7546eaade8b287abf28276e70cfc7be1fc018f21c47127"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "33c7113e4645e7faaec83a3aa684a404fe4acb23f3bd58ff"}, @NL80211_ATTR_MNTR_FLAGS={0x20, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "e0ffafe89fe93aec63f5f61736182d2d364fd45b99a39351"}], @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "8be5bfc05e3614fd999428bffc66de18dddbe0652e3eff4e"}, @NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "b1c7ce33b059e2451ce536b3b1ba468d2d47278da8c633b5"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MNTR_FLAGS={0xc, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0xc, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "31da329f4c7e663587662def94457e24255bc6ab966b1d67"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}]]}, 0x1c4}}, 0x0) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="32003300d0800000ffffffffffff0802110000015050505050500000000000000004"], 0x50}}, 0x0) [ 227.708202][T11534] hsr0 speed is unknown, defaulting to 1000 00:28:50 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_sco(r0, &(0x7f0000000040), 0x3) listen(r0, 0x0) close(r0) 00:28:50 executing program 5: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba72e2aba000000012e0b3836005404b0e0301a08000000e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c000100000000000000497400000000000000065ecc326d3a09ffc2c65400"}, 0x80) sendmmsg$sock(r0, &(0x7f0000001300)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000180)="db40714d531db941d0f13c715c31", 0xe}], 0x1}}, {{0x0, 0x0, &(0x7f0000000580)}}], 0x2, 0x0) 00:28:50 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)={0x1c4, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_MESH_ID={0xa}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}], @NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_4ADDR={0x5}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "98ed1c59a3311196b6c0cdf42295c9991eaea31f3d107c44"}], @NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_4ADDR={0x5}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MNTR_FLAGS={0x1c, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "1b7546eaade8b287abf28276e70cfc7be1fc018f21c47127"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "33c7113e4645e7faaec83a3aa684a404fe4acb23f3bd58ff"}, @NL80211_ATTR_MNTR_FLAGS={0x20, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "e0ffafe89fe93aec63f5f61736182d2d364fd45b99a39351"}], @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "8be5bfc05e3614fd999428bffc66de18dddbe0652e3eff4e"}, @NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "b1c7ce33b059e2451ce536b3b1ba468d2d47278da8c633b5"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MNTR_FLAGS={0xc, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0xc, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "31da329f4c7e663587662def94457e24255bc6ab966b1d67"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}]]}, 0x1c4}}, 0x0) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="32003300d0800000ffffffffffff0802110000015050505050500000000000000004"], 0x50}}, 0x0) 00:28:50 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0xb00000000065808, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000140)) write$cgroup_type(r1, &(0x7f0000000000), 0xb1d000) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000180)={0xffffffffffffffff}) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$BTRFS_IOC_START_SYNC(r3, 0x80089418, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000800)={{}, 0x0, 0x0, @inherit={0x50, &(0x7f0000000400)=ANY=[@ANYBLOB="0197e4e99ce18667a401fcb7cae688390000000000000001000000000000000500000000000000ffffffffffffffff9600"/61]}, @subvolid=0x1f}) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x8, 0x5, &(0x7f00000002c0)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) r5 = epoll_create(0x80) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r4, 0x50009417, &(0x7f0000000800)={{r5}, 0x0, 0x0, @unused=[0x0, 0x6, 0x7, 0x8], @subvolid=0x1f}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r5, 0xc0c89425, &(0x7f0000001880)={"c63d7ac62f0a2d13c642b4920b18c172", 0x0, 0x0, {0x6, 0x8}, {0x6, 0xee45}, 0x656, [0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0x7, 0x4, 0x0, 0xbd4a, 0x4e, 0x0, 0x1000, 0x0, 0x4, 0x9]}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r2, 0xc0c89425, &(0x7f00000001c0)={"dffe0ede08b26338c4f49c8936661244", 0x0, 0x0, {0x0, 0x9}, {0x0, 0xd4}, 0x29e0, [0x4, 0x2, 0x5, 0x0, 0x3, 0x2, 0x7, 0x1d, 0x10001, 0x0, 0x44f680000, 0x7, 0x1ff, 0x200, 0x5, 0x8]}) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f00000001c0)=0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000800)={{}, r6, 0x12, @inherit={0x50, &(0x7f0000001800)={0x1, 0x1, 0x5, 0x0, {0x8, 0x0, 0x5, 0x7, 0x8770}, [0x20]}}, @subvolid=0x1f}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f0000000440)) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r3, 0xc0c89425, &(0x7f0000000640)={"4083722fb514eb56fbf049af372eaf18", r6, 0x0, {0x7c1a}, {0x8, 0x9}, 0x3ff, [0x3, 0x7f, 0x0, 0x200f, 0xfffffffffffffffd, 0x100000001, 0x7ff, 0x7, 0xffff, 0x6, 0xd9, 0x81, 0x902c, 0x0, 0x5, 0x5]}) preadv(r0, &(0x7f0000000040)=[{0x0}, {&(0x7f0000001200)=""/102388, 0xffffff9f}, {&(0x7f000001a200)=""/4096, 0xdf4}], 0x3, 0x0, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) 00:28:50 executing program 4: socket(0x0, 0x0, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, 0x0, 0x0) unshare(0x40000000) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000000)=0x2, 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6, 0xffffffff}, 0x1c) r1 = socket$inet6(0xa, 0x803, 0x6) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r1, &(0x7f0000008440)=[{{0x0, 0x536, 0x0}, 0xff00}], 0x400000000000107, 0x0) [ 228.450572][ T26] audit: type=1804 audit(1634603330.442:68): pid=11572 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir711539129/syzkaller.91D5fF/97/memory.events" dev="sda1" ino=14310 res=1 errno=0 00:28:50 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)={0x1c4, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_MESH_ID={0xa}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}], @NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_4ADDR={0x5}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "98ed1c59a3311196b6c0cdf42295c9991eaea31f3d107c44"}], @NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_4ADDR={0x5}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MNTR_FLAGS={0x1c, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "1b7546eaade8b287abf28276e70cfc7be1fc018f21c47127"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "33c7113e4645e7faaec83a3aa684a404fe4acb23f3bd58ff"}, @NL80211_ATTR_MNTR_FLAGS={0x20, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "e0ffafe89fe93aec63f5f61736182d2d364fd45b99a39351"}], @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "8be5bfc05e3614fd999428bffc66de18dddbe0652e3eff4e"}, @NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "b1c7ce33b059e2451ce536b3b1ba468d2d47278da8c633b5"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MNTR_FLAGS={0xc, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0xc, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "31da329f4c7e663587662def94457e24255bc6ab966b1d67"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}]]}, 0x1c4}}, 0x0) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="32003300d0800000ffffffffffff0802110000015050505050500000000000000004"], 0x50}}, 0x0) 00:28:50 executing program 0: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba72e2aba000000012e0b3836005404b0e0301a08000000e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c000100000000000000497400000000000000065ecc326d3a09ffc2c65400"}, 0x80) sendmmsg$sock(r0, &(0x7f0000001300)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000180)="db40714d531db941d0f13c715c31", 0xe}], 0x1}}, {{0x0, 0x0, &(0x7f0000000580)}}], 0x2, 0x0) 00:28:50 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x201a7fa6, 0x9, 0x1, 0x68}]}, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xdba3dd835d632db6}, 0x48) [ 228.668385][T11576] hsr0 speed is unknown, defaulting to 1000 [ 228.683147][ T26] audit: type=1800 audit(1634603330.482:69): pid=11572 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="memory.events" dev="sda1" ino=14310 res=0 errno=0 [ 228.753909][T11575] hsr0 speed is unknown, defaulting to 1000 [ 228.870520][ T26] audit: type=1804 audit(1634603330.482:70): pid=11572 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir711539129/syzkaller.91D5fF/97/memory.events" dev="sda1" ino=14310 res=1 errno=0 [ 228.990626][T11587] hsr0 speed is unknown, defaulting to 1000 00:28:51 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'geneve1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_ID={0x8}]}}}]}, 0x3c}}, 0x0) 00:28:51 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)={0x1c4, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_MESH_ID={0xa}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}], @NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_4ADDR={0x5}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "98ed1c59a3311196b6c0cdf42295c9991eaea31f3d107c44"}], @NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_4ADDR={0x5}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MNTR_FLAGS={0x1c, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "1b7546eaade8b287abf28276e70cfc7be1fc018f21c47127"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "33c7113e4645e7faaec83a3aa684a404fe4acb23f3bd58ff"}, @NL80211_ATTR_MNTR_FLAGS={0x20, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "e0ffafe89fe93aec63f5f61736182d2d364fd45b99a39351"}], @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "8be5bfc05e3614fd999428bffc66de18dddbe0652e3eff4e"}, @NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "b1c7ce33b059e2451ce536b3b1ba468d2d47278da8c633b5"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MNTR_FLAGS={0xc, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0xc, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "31da329f4c7e663587662def94457e24255bc6ab966b1d67"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}]]}, 0x1c4}}, 0x0) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="32003300d0800000ffffffffffff0802110000015050505050500000000000000004"], 0x50}}, 0x0) 00:28:51 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000540)={'batadv0\x00', 0x0}) bind$packet(r0, &(0x7f0000000000)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @dev}, 0x14) sendto(r0, &(0x7f0000000040)="dc9fd7b32ffcdeff5ad16d3d0806", 0x2a, 0x0, 0x0, 0x0) 00:28:51 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000006c0)=@newtaction={0x78, 0x30, 0x17b, 0x0, 0x0, {}, [{0x64, 0x1, [@m_bpf={0x60, 0x1, 0x0, 0x0, {{0x8}, {0x38, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x2}, @TCA_ACT_BPF_PARMS={0x18}, @TCA_ACT_BPF_OPS={0x14, 0x4, [{}, {0x1d}]}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x78}}, 0x0) 00:28:52 executing program 5: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba72e2aba000000012e0b3836005404b0e0301a08000000e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c000100000000000000497400000000000000065ecc326d3a09ffc2c65400"}, 0x80) sendmmsg$sock(r0, &(0x7f0000001300)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000180)="db40714d531db941d0f13c715c31", 0xe}], 0x1}}, {{0x0, 0x0, &(0x7f0000000580)}}], 0x2, 0x0) 00:28:52 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f00000004c0), 0xffffffffffffffff) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000680)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_IFINDEX={0x8, 0x1, r3}]}, 0x1c}}, 0x0) 00:28:52 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0xb00000000065808, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000140)) write$cgroup_type(r1, &(0x7f0000000000), 0xb1d000) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000180)={0xffffffffffffffff}) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$BTRFS_IOC_START_SYNC(r3, 0x80089418, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000800)={{}, 0x0, 0x0, @inherit={0x50, &(0x7f0000000400)=ANY=[@ANYBLOB="0197e4e99ce18667a401fcb7cae688390000000000000001000000000000000500000000000000ffffffffffffffff9600"/61]}, @subvolid=0x1f}) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x8, 0x5, &(0x7f00000002c0)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) r5 = epoll_create(0x80) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r4, 0x50009417, &(0x7f0000000800)={{r5}, 0x0, 0x0, @unused=[0x0, 0x6, 0x7, 0x8], @subvolid=0x1f}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r5, 0xc0c89425, &(0x7f0000001880)={"c63d7ac62f0a2d13c642b4920b18c172", 0x0, 0x0, {0x6, 0x8}, {0x6, 0xee45}, 0x656, [0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0x7, 0x4, 0x0, 0xbd4a, 0x4e, 0x0, 0x1000, 0x0, 0x4, 0x9]}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r2, 0xc0c89425, &(0x7f00000001c0)={"dffe0ede08b26338c4f49c8936661244", 0x0, 0x0, {0x0, 0x9}, {0x0, 0xd4}, 0x29e0, [0x4, 0x2, 0x5, 0x0, 0x3, 0x2, 0x7, 0x1d, 0x10001, 0x0, 0x44f680000, 0x7, 0x1ff, 0x200, 0x5, 0x8]}) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f00000001c0)=0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000800)={{}, r6, 0x12, @inherit={0x50, &(0x7f0000001800)={0x1, 0x1, 0x5, 0x0, {0x8, 0x0, 0x5, 0x7, 0x8770}, [0x20]}}, @subvolid=0x1f}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f0000000440)) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r3, 0xc0c89425, &(0x7f0000000640)={"4083722fb514eb56fbf049af372eaf18", r6, 0x0, {0x7c1a}, {0x8, 0x9}, 0x3ff, [0x3, 0x7f, 0x0, 0x200f, 0xfffffffffffffffd, 0x100000001, 0x7ff, 0x7, 0xffff, 0x6, 0xd9, 0x81, 0x902c, 0x0, 0x5, 0x5]}) preadv(r0, &(0x7f0000000040)=[{0x0}, {&(0x7f0000001200)=""/102388, 0xffffff9f}, {&(0x7f000001a200)=""/4096, 0xdf4}], 0x3, 0x0, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) 00:28:52 executing program 4: sendmsg$DEVLINK_CMD_TRAP_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)={0x54, 0x0, 0x0, 0x0, 0x0, {}, [{@pci={{0x8}, {0x11}}, {0x1c}, {0x5}}]}, 0xffffffffffffffd8}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) ioctl$BTRFS_IOC_ADD_DEV(0xffffffffffffffff, 0x5000940a, &(0x7f0000000540)={{}, "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"}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000070601801fdb59cce59ba2700100e90005"], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='cpuacct.usage_all\x00', 0x0, 0x0) sendfile(r2, r1, 0x0, 0x100000001) bpf$ITER_CREATE(0x21, &(0x7f0000000180), 0x8) 00:28:52 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'macvlan0\x00'}) ioctl$sock_ifreq(r0, 0x89a2, &(0x7f0000000000)={'bridge0\x00', @ifru_settings={0x0, 0x0, @fr=0x0}}) ioctl$sock_ifreq(r0, 0x89a3, &(0x7f0000000000)={'bridge0\x00', @ifru_settings={0x0, 0x0, @fr=0x0}}) 00:28:52 executing program 0: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba72e2aba000000012e0b3836005404b0e0301a08000000e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c000100000000000000497400000000000000065ecc326d3a09ffc2c65400"}, 0x80) sendmmsg$sock(r0, &(0x7f0000001300)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000180)="db40714d531db941d0f13c715c31", 0xe}], 0x1}}, {{0x0, 0x0, &(0x7f0000000580)}}], 0x2, 0x0) [ 230.249857][ T26] audit: type=1804 audit(1634603332.243:71): pid=11669 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir711539129/syzkaller.91D5fF/98/memory.events" dev="sda1" ino=14322 res=1 errno=0 [ 230.309319][T11668] bridge0: port 3(macvlan0) entered blocking state [ 230.330285][T11668] bridge0: port 3(macvlan0) entered disabled state 00:28:52 executing program 4: unshare(0x4020000) unshare(0x20000) [ 230.393822][T11668] device macvlan0 entered promiscuous mode 00:28:52 executing program 1: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup.procs\x00', 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$cgroup_procs(r0, &(0x7f0000000080)='cgroup.threads\x00', 0x2, 0x0) select(0x40, &(0x7f0000000240), 0x0, &(0x7f00000001c0)={0x401}, 0x0) [ 230.437402][T11668] bridge0: port 3(macvlan0) entered blocking state [ 230.444492][T11668] bridge0: port 3(macvlan0) entered forwarding state [ 230.547158][T11675] hsr0 speed is unknown, defaulting to 1000 [ 230.558881][T11674] device macvlan0 left promiscuous mode [ 230.567099][T11674] bridge0: port 3(macvlan0) entered disabled state [ 230.721273][T11680] hsr0 speed is unknown, defaulting to 1000 00:28:52 executing program 4: unshare(0x4020000) unshare(0x20000) 00:28:52 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'macvlan0\x00'}) ioctl$sock_ifreq(r0, 0x89a2, &(0x7f0000000000)={'bridge0\x00', @ifru_settings={0x0, 0x0, @fr=0x0}}) ioctl$sock_ifreq(r0, 0x89a3, &(0x7f0000000000)={'bridge0\x00', @ifru_settings={0x0, 0x0, @fr=0x0}}) 00:28:52 executing program 1: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup.procs\x00', 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$cgroup_procs(r0, &(0x7f0000000080)='cgroup.threads\x00', 0x2, 0x0) select(0x40, &(0x7f0000000240), 0x0, &(0x7f00000001c0)={0x401}, 0x0) 00:28:53 executing program 4: unshare(0x4020000) unshare(0x20000) [ 231.119267][T11733] bridge0: port 3(macvlan0) entered blocking state [ 231.146470][T11733] bridge0: port 3(macvlan0) entered disabled state [ 231.196411][T11733] device macvlan0 entered promiscuous mode [ 231.234111][T11733] bridge0: port 3(macvlan0) entered blocking state [ 231.240780][T11733] bridge0: port 3(macvlan0) entered forwarding state [ 231.310732][T11736] device macvlan0 left promiscuous mode [ 231.326500][T11736] bridge0: port 3(macvlan0) entered disabled state 00:28:53 executing program 5: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba72e2aba000000012e0b3836005404b0e0301a08000000e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c000100000000000000497400000000000000065ecc326d3a09ffc2c65400"}, 0x80) sendmmsg$sock(r0, &(0x7f0000001300)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000180)="db40714d531db941d0f13c715c31", 0xe}], 0x1}}, {{0x0, 0x0, &(0x7f0000000580)}}], 0x2, 0x0) 00:28:53 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0xb00000000065808, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000140)) write$cgroup_type(r1, &(0x7f0000000000), 0xb1d000) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000180)={0xffffffffffffffff}) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$BTRFS_IOC_START_SYNC(r3, 0x80089418, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000800)={{}, 0x0, 0x0, @inherit={0x50, &(0x7f0000000400)=ANY=[@ANYBLOB="0197e4e99ce18667a401fcb7cae688390000000000000001000000000000000500000000000000ffffffffffffffff9600"/61]}, @subvolid=0x1f}) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x8, 0x5, &(0x7f00000002c0)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) r5 = epoll_create(0x80) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r4, 0x50009417, &(0x7f0000000800)={{r5}, 0x0, 0x0, @unused=[0x0, 0x6, 0x7, 0x8], @subvolid=0x1f}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r5, 0xc0c89425, &(0x7f0000001880)={"c63d7ac62f0a2d13c642b4920b18c172", 0x0, 0x0, {0x6, 0x8}, {0x6, 0xee45}, 0x656, [0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0x7, 0x4, 0x0, 0xbd4a, 0x4e, 0x0, 0x1000, 0x0, 0x4, 0x9]}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r2, 0xc0c89425, &(0x7f00000001c0)={"dffe0ede08b26338c4f49c8936661244", 0x0, 0x0, {0x0, 0x9}, {0x0, 0xd4}, 0x29e0, [0x4, 0x2, 0x5, 0x0, 0x3, 0x2, 0x7, 0x1d, 0x10001, 0x0, 0x44f680000, 0x7, 0x1ff, 0x200, 0x5, 0x8]}) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f00000001c0)=0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000800)={{}, r6, 0x12, @inherit={0x50, &(0x7f0000001800)={0x1, 0x1, 0x5, 0x0, {0x8, 0x0, 0x5, 0x7, 0x8770}, [0x20]}}, @subvolid=0x1f}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f0000000440)) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r3, 0xc0c89425, &(0x7f0000000640)={"4083722fb514eb56fbf049af372eaf18", r6, 0x0, {0x7c1a}, {0x8, 0x9}, 0x3ff, [0x3, 0x7f, 0x0, 0x200f, 0xfffffffffffffffd, 0x100000001, 0x7ff, 0x7, 0xffff, 0x6, 0xd9, 0x81, 0x902c, 0x0, 0x5, 0x5]}) preadv(r0, &(0x7f0000000040)=[{0x0}, {&(0x7f0000001200)=""/102388, 0xffffff9f}, {&(0x7f000001a200)=""/4096, 0xdf4}], 0x3, 0x0, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) 00:28:53 executing program 4: unshare(0x4020000) unshare(0x20000) 00:28:53 executing program 1: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup.procs\x00', 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$cgroup_procs(r0, &(0x7f0000000080)='cgroup.threads\x00', 0x2, 0x0) select(0x40, &(0x7f0000000240), 0x0, &(0x7f00000001c0)={0x401}, 0x0) 00:28:53 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'macvlan0\x00'}) ioctl$sock_ifreq(r0, 0x89a2, &(0x7f0000000000)={'bridge0\x00', @ifru_settings={0x0, 0x0, @fr=0x0}}) ioctl$sock_ifreq(r0, 0x89a3, &(0x7f0000000000)={'bridge0\x00', @ifru_settings={0x0, 0x0, @fr=0x0}}) 00:28:53 executing program 0: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba72e2aba000000012e0b3836005404b0e0301a08000000e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c000100000000000000497400000000000000065ecc326d3a09ffc2c65400"}, 0x80) sendmmsg$sock(r0, &(0x7f0000001300)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000180)="db40714d531db941d0f13c715c31", 0xe}], 0x1}}, {{0x0, 0x0, &(0x7f0000000580)}}], 0x2, 0x0) [ 232.055792][T11751] bridge0: port 3(macvlan0) entered blocking state [ 232.098544][T11751] bridge0: port 3(macvlan0) entered disabled state [ 232.139028][ T26] kauditd_printk_skb: 3 callbacks suppressed [ 232.139045][ T26] audit: type=1804 audit(1634603334.133:75): pid=11755 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir711539129/syzkaller.91D5fF/99/memory.events" dev="sda1" ino=14351 res=1 errno=0 [ 232.179596][T11751] device macvlan0 entered promiscuous mode 00:28:54 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'macvlan0\x00'}) ioctl$sock_ifreq(r0, 0x89a2, &(0x7f0000000000)={'bridge0\x00', @ifru_settings={0x0, 0x0, @fr=0x0}}) ioctl$sock_ifreq(r0, 0x89a3, &(0x7f0000000000)={'bridge0\x00', @ifru_settings={0x0, 0x0, @fr=0x0}}) [ 232.203592][T11751] bridge0: port 3(macvlan0) entered blocking state [ 232.210226][T11751] bridge0: port 3(macvlan0) entered forwarding state [ 232.309997][T11759] hsr0 speed is unknown, defaulting to 1000 [ 232.316356][T11758] device macvlan0 left promiscuous mode [ 232.322744][T11758] bridge0: port 3(macvlan0) entered disabled state [ 232.338651][ T26] audit: type=1800 audit(1634603334.133:76): pid=11755 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="memory.events" dev="sda1" ino=14351 res=0 errno=0 00:28:54 executing program 1: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup.procs\x00', 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$cgroup_procs(r0, &(0x7f0000000080)='cgroup.threads\x00', 0x2, 0x0) select(0x40, &(0x7f0000000240), 0x0, &(0x7f00000001c0)={0x401}, 0x0) [ 232.400731][T11752] hsr0 speed is unknown, defaulting to 1000 [ 232.523853][T11773] bridge0: port 3(macvlan0) entered blocking state [ 232.536713][ T26] audit: type=1804 audit(1634603334.153:77): pid=11755 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir711539129/syzkaller.91D5fF/99/memory.events" dev="sda1" ino=14351 res=1 errno=0 [ 232.544815][T11773] bridge0: port 3(macvlan0) entered disabled state 00:28:54 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'macvlan0\x00'}) ioctl$sock_ifreq(r0, 0x89a2, &(0x7f0000000000)={'bridge0\x00', @ifru_settings={0x0, 0x0, @fr=0x0}}) ioctl$sock_ifreq(r0, 0x89a3, &(0x7f0000000000)={'bridge0\x00', @ifru_settings={0x0, 0x0, @fr=0x0}}) [ 232.637217][T11773] device macvlan0 entered promiscuous mode [ 232.682347][T11773] bridge0: port 3(macvlan0) entered blocking state [ 232.688976][T11773] bridge0: port 3(macvlan0) entered forwarding state [ 232.782538][T11785] device macvlan0 left promiscuous mode [ 232.788745][T11785] bridge0: port 3(macvlan0) entered disabled state [ 232.852627][T11799] bridge0: port 3(macvlan0) entered blocking state [ 232.877777][T11799] bridge0: port 3(macvlan0) entered disabled state 00:28:54 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newtaction={0x68, 0x30, 0x3ef, 0x0, 0x0, {}, [{0x54, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x4}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) [ 232.913093][T11799] device macvlan0 entered promiscuous mode [ 232.960001][T11799] bridge0: port 3(macvlan0) entered blocking state [ 232.966738][T11799] bridge0: port 3(macvlan0) entered forwarding state 00:28:55 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'macvlan0\x00'}) ioctl$sock_ifreq(r0, 0x89a2, &(0x7f0000000000)={'bridge0\x00', @ifru_settings={0x0, 0x0, @fr=0x0}}) ioctl$sock_ifreq(r0, 0x89a3, &(0x7f0000000000)={'bridge0\x00', @ifru_settings={0x0, 0x0, @fr=0x0}}) [ 233.099728][T11804] device macvlan0 left promiscuous mode [ 233.108249][T11804] bridge0: port 3(macvlan0) entered disabled state 00:28:55 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'team0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000200ec00000000000000", @ANYRES32=r6, @ANYBLOB="00000000000000001c0012000b00010062726964676500000c0002000500070005"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000010000104fd0004000000008000000000", @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r6], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c00, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0xc, r6}}, 0x20}}, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1800000010000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) [ 233.299089][T11815] bridge0: port 3(macvlan0) entered blocking state [ 233.350449][T11815] bridge0: port 3(macvlan0) entered disabled state [ 233.400728][T11815] device macvlan0 entered promiscuous mode [ 233.444669][T11815] bridge0: port 3(macvlan0) entered blocking state [ 233.451335][T11815] bridge0: port 3(macvlan0) entered forwarding state [ 233.489171][T11818] device macvlan0 left promiscuous mode [ 233.503554][T11818] bridge0: port 3(macvlan0) entered disabled state [ 233.527596][T11822] bridge1: port 1(team0) entered blocking state [ 233.535389][T11822] bridge1: port 1(team0) entered disabled state [ 233.566518][T11822] device team_slave_0 entered promiscuous mode [ 233.573155][T11822] device team_slave_1 entered promiscuous mode [ 233.650804][T11820] device team_slave_0 left promiscuous mode [ 233.656844][T11820] device team_slave_1 left promiscuous mode [ 233.699117][T11820] bridge1: port 1(team0) entered disabled state 00:28:55 executing program 3: getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@empty, 0x0, 0x2}, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000500)=[@in6={0xa, 0x0, 0x0, @private0}]}, &(0x7f0000000180)=0x10) 00:28:55 executing program 2: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(0xffffffffffffffff, 0x800448d3, &(0x7f0000000100)="e7969f05fe7793054a341e0c907b6b684774d3a241aa6ca2a5525915d35699bf9ea60aed14f794adbdcf74b543cf51c8d90acf03a1ba188f3c350b02fb1384cfa3aceb2afe02a3cc2a8c1a9d01aebf3fb5cf80b55ee41bcd55b5dd6cad6bc51672b4e8488e474d7f4b597fcf656d38e296db8429dc9f33736f02d87631cc3d48540085130373a4e2cc3d50a480b04f7695a05fb3e5f26744cf33944634cf261b5b95ec0f6c516725bdcec3689e41") r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) 00:28:55 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'macvlan0\x00'}) ioctl$sock_ifreq(r0, 0x89a2, &(0x7f0000000000)={'bridge0\x00', @ifru_settings={0x0, 0x0, @fr=0x0}}) ioctl$sock_ifreq(r0, 0x89a3, &(0x7f0000000000)={'bridge0\x00', @ifru_settings={0x0, 0x0, @fr=0x0}}) 00:28:55 executing program 5: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0x8, 0x0, &(0x7f0000000300)) 00:28:56 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'team0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000200ec00000000000000", @ANYRES32=r6, @ANYBLOB="00000000000000001c0012000b00010062726964676500000c0002000500070005"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000010000104fd0004000000008000000000", @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r6], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c00, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0xc, r6}}, 0x20}}, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1800000010000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) [ 234.059139][T11843] bridge0: port 3(macvlan0) entered blocking state [ 234.094269][T11843] bridge0: port 3(macvlan0) entered disabled state 00:28:56 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'team0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000200ec00000000000000", @ANYRES32=r6, @ANYBLOB="00000000000000001c0012000b00010062726964676500000c0002000500070005"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000010000104fd0004000000008000000000", @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r6], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c00, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0xc, r6}}, 0x20}}, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1800000010000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) 00:28:56 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r1, &(0x7f0000000180), 0x9) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x541b, 0x0) 00:28:56 executing program 3: getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@empty, 0x0, 0x2}, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000500)=[@in6={0xa, 0x0, 0x0, @private0}]}, &(0x7f0000000180)=0x10) [ 234.153704][T11843] device macvlan0 entered promiscuous mode 00:28:56 executing program 5: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000003000)=@abs={0x1}, 0x6e) listen(r2, 0x0) shutdown(r2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000)={0xe0000004}) shutdown(r2, 0x1) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000040)) epoll_wait(r1, &(0x7f0000000000)=[{}], 0x1, 0x0) [ 234.205046][T11843] bridge0: port 3(macvlan0) entered blocking state [ 234.211731][T11843] bridge0: port 3(macvlan0) entered forwarding state [ 234.304911][T11845] device macvlan0 left promiscuous mode [ 234.313191][T11845] bridge0: port 3(macvlan0) entered disabled state [ 234.358144][T11850] bridge1: port 1(team0) entered blocking state [ 234.367355][T11850] bridge1: port 1(team0) entered disabled state [ 234.386137][T11850] device team_slave_0 entered promiscuous mode [ 234.392492][T11850] device team_slave_1 entered promiscuous mode 00:28:56 executing program 3: getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@empty, 0x0, 0x2}, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000500)=[@in6={0xa, 0x0, 0x0, @private0}]}, &(0x7f0000000180)=0x10) [ 234.434769][T11859] bridge1: port 1(team0) entered blocking state [ 234.474256][T11859] bridge1: port 1(team0) entered disabled state 00:28:56 executing program 0: r0 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8914, &(0x7f0000000000)) [ 234.501039][T11859] device team_slave_0 entered promiscuous mode [ 234.507359][T11859] device team_slave_1 entered promiscuous mode [ 234.538364][T11861] device team_slave_0 left promiscuous mode [ 234.544411][T11861] device team_slave_1 left promiscuous mode 00:28:56 executing program 5: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000003000)=@abs={0x1}, 0x6e) listen(r2, 0x0) shutdown(r2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000)={0xe0000004}) shutdown(r2, 0x1) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000040)) epoll_wait(r1, &(0x7f0000000000)=[{}], 0x1, 0x0) [ 234.577051][T11861] bridge1: port 1(team0) entered disabled state [ 234.676518][T11852] device team_slave_0 left promiscuous mode [ 234.682596][T11852] device team_slave_1 left promiscuous mode [ 234.690003][T11852] bridge1: port 1(team0) entered disabled state 00:28:56 executing program 3: getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@empty, 0x0, 0x2}, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000500)=[@in6={0xa, 0x0, 0x0, @private0}]}, &(0x7f0000000180)=0x10) 00:28:56 executing program 5: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000003000)=@abs={0x1}, 0x6e) listen(r2, 0x0) shutdown(r2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000)={0xe0000004}) shutdown(r2, 0x1) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000040)) epoll_wait(r1, &(0x7f0000000000)=[{}], 0x1, 0x0) 00:28:57 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) setsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, 0x0, 0x0) 00:28:57 executing program 0: r0 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8914, &(0x7f0000000000)) 00:28:57 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'team0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000200ec00000000000000", @ANYRES32=r6, @ANYBLOB="00000000000000001c0012000b00010062726964676500000c0002000500070005"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000010000104fd0004000000008000000000", @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r6], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c00, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0xc, r6}}, 0x20}}, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1800000010000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) 00:28:57 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'team0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000200ec00000000000000", @ANYRES32=r6, @ANYBLOB="00000000000000001c0012000b00010062726964676500000c0002000500070005"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000010000104fd0004000000008000000000", @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r6], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c00, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0xc, r6}}, 0x20}}, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1800000010000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) 00:28:57 executing program 5: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000003000)=@abs={0x1}, 0x6e) listen(r2, 0x0) shutdown(r2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000)={0xe0000004}) shutdown(r2, 0x1) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000040)) epoll_wait(r1, &(0x7f0000000000)=[{}], 0x1, 0x0) 00:28:57 executing program 3: r0 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8914, &(0x7f0000000000)) 00:28:57 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) setsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, 0x0, 0x0) 00:28:57 executing program 0: r0 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8914, &(0x7f0000000000)) 00:28:57 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) setsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, 0x0, 0x0) 00:28:57 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) setsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, 0x0, 0x0) [ 235.534978][T11922] bridge1: port 1(team0) entered blocking state [ 235.542541][T11922] bridge1: port 1(team0) entered disabled state [ 235.558507][T11922] device team_slave_0 entered promiscuous mode [ 235.564892][T11922] device team_slave_1 entered promiscuous mode [ 235.605143][T11926] bridge1: port 1(team0) entered blocking state [ 235.626534][T11926] bridge1: port 1(team0) entered disabled state 00:28:57 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) setsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, 0x0, 0x0) 00:28:57 executing program 3: r0 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8914, &(0x7f0000000000)) [ 235.667228][T11926] device team_slave_0 entered promiscuous mode [ 235.673650][T11926] device team_slave_1 entered promiscuous mode [ 235.725646][T11929] device team_slave_0 left promiscuous mode [ 235.731763][T11929] device team_slave_1 left promiscuous mode [ 235.762451][T11929] bridge1: port 1(team0) entered disabled state 00:28:57 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) setsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, 0x0, 0x0) 00:28:57 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) setsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, 0x0, 0x0) [ 235.912927][T11933] device team_slave_0 left promiscuous mode [ 235.919026][T11933] device team_slave_1 left promiscuous mode [ 235.940410][T11933] bridge1: port 1(team0) entered disabled state 00:28:58 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'team0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000200ec00000000000000", @ANYRES32=r6, @ANYBLOB="00000000000000001c0012000b00010062726964676500000c0002000500070005"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000010000104fd0004000000008000000000", @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r6], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c00, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0xc, r6}}, 0x20}}, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1800000010000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) 00:28:58 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'team0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000200ec00000000000000", @ANYRES32=r6, @ANYBLOB="00000000000000001c0012000b00010062726964676500000c0002000500070005"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000010000104fd0004000000008000000000", @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r6], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x4c00, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0xc, r6}}, 0x20}}, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1800000010000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) 00:28:58 executing program 5: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000005c0)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000001c0)='cgroup.procs\x00', 0x2, 0x0) preadv(r1, &(0x7f0000000540)=[{&(0x7f0000000040)=""/186, 0x2}], 0x1, 0x0, 0x0) close(r1) 00:28:58 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000003580)={{0x14}, [@NFT_MSG_NEWSETELEM={0x18, 0xc, 0xa, 0x101, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}, @NFT_MSG_DELFLOWTABLE={0x2c, 0x18, 0xa, 0x101, 0x0, 0x0, {}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}]}, @NFT_MSG_NEWSETELEM={0x14, 0xc, 0xa, 0x201}], {0x14}}, 0x80}}, 0x0) 00:28:58 executing program 0: r0 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8914, &(0x7f0000000000)) 00:28:58 executing program 3: r0 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8914, &(0x7f0000000000)) 00:28:58 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="140000002200055bd25a80648c63940d012484d9", 0x14}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000006440)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) 00:28:58 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x5, 0x8001d, 0x7, 0x3}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480), &(0x7f0000000280), 0x4, r0}, 0x38) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000640), 0x0, 0x1, r0}, 0x38) recvmsg(0xffffffffffffffff, 0x0, 0x0) [ 236.435320][T11976] bridge1: port 1(team0) entered blocking state [ 236.470912][T11976] bridge1: port 1(team0) entered disabled state 00:28:58 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x54, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x3}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x54}}, 0x0) 00:28:58 executing program 3: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f0000000140)={0x84a5, 0x15}) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)={0x3c, 0x0, 0x0, 0x70bd2a, 0x0, {}, [@FOU_ATTR_IPPROTO={0x5}, @FOU_ATTR_PEER_V4={0x8, 0x8, @initdev={0xac, 0x1e, 0x0, 0x0}}, @FOU_ATTR_PORT={0x6}, @FOU_ATTR_PEER_PORT={0x6}, @FOU_ATTR_TYPE={0x5}]}, 0x3c}}, 0x0) close(r2) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'veth1_virt_wifi\x00', 0x0}) bind$packet(r3, &(0x7f0000000240)={0x11, 0x0, r4}, 0x14) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f00000000c0)=0x8000005, 0x4) splice(r0, 0x0, r2, 0x0, 0x422, 0x0) [ 236.501928][T11976] device team_slave_0 entered promiscuous mode [ 236.508225][T11976] device team_slave_1 entered promiscuous mode [ 236.551876][T11977] bridge1: port 1(team0) entered blocking state [ 236.561944][T11977] bridge1: port 1(team0) entered disabled state [ 236.591572][T11977] device team_slave_0 entered promiscuous mode [ 236.598036][T11977] device team_slave_1 entered promiscuous mode [ 236.647201][T11973] device team_slave_0 left promiscuous mode [ 236.653252][T11973] device team_slave_1 left promiscuous mode [ 236.681812][T11973] bridge1: port 1(team0) entered disabled state 00:28:58 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000000)={r2, 0x3, 0x6, @dev}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) setsockopt$packet_drop_memb(r0, 0x107, 0x2, &(0x7f0000000040)={r4, 0x1, 0x6, @remote}, 0x10) 00:28:58 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x5, 0x8001d, 0x7, 0x3}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480), &(0x7f0000000280), 0x4, r0}, 0x38) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000640), 0x0, 0x1, r0}, 0x38) recvmsg(0xffffffffffffffff, 0x0, 0x0) [ 236.783808][T11974] device team_slave_0 left promiscuous mode [ 236.789961][T11974] device team_slave_1 left promiscuous mode [ 236.807182][T11974] bridge1: port 1(team0) entered disabled state [ 236.922984][T12000] device batadv0 entered promiscuous mode [ 236.951812][T11998] device batadv0 left promiscuous mode 00:28:59 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x5, 0x8001d, 0x7, 0x3}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480), &(0x7f0000000280), 0x4, r0}, 0x38) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000640), 0x0, 0x1, r0}, 0x38) recvmsg(0xffffffffffffffff, 0x0, 0x0) 00:28:59 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="140000002200055bd25a80648c63940d012484d9", 0x14}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000006440)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) 00:28:59 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x5, &(0x7f0000000080)=0x4, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) recvmmsg(r0, &(0x7f0000008880), 0x45b, 0x44000102, 0x0) 00:28:59 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="140000002200055bd25a80648c63940d012484d9", 0x14}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000006440)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) [ 237.174914][T12000] device batadv0 entered promiscuous mode [ 237.182265][T12000] device batadv0 left promiscuous mode 00:28:59 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="140000002200055bd25a80648c63940d012484d9", 0x14}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000006440)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) 00:28:59 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="140000002200055bd25a80648c63940d012484d9", 0x14}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000006440)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) [ 237.255176][T12015] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 00:28:59 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000000)={r2, 0x3, 0x6, @dev}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) setsockopt$packet_drop_memb(r0, 0x107, 0x2, &(0x7f0000000040)={r4, 0x1, 0x6, @remote}, 0x10) 00:28:59 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x5, 0x8001d, 0x7, 0x3}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480), &(0x7f0000000280), 0x4, r0}, 0x38) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000640), 0x0, 0x1, r0}, 0x38) recvmsg(0xffffffffffffffff, 0x0, 0x0) 00:28:59 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x5, &(0x7f0000000080)=0x4, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) recvmmsg(r0, &(0x7f0000008880), 0x45b, 0x44000102, 0x0) 00:28:59 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$sock_SIOCADDRT(r0, 0x400454ca, &(0x7f00000000c0)={0xfa2e, @nfc={0x27, 0x0, 0x2}, @xdp, @phonet}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$sock_SIOCADDRT(r1, 0x400454ca, &(0x7f00000000c0)={0xfa2e, @nfc={0x27, 0x0, 0x2}, @xdp, @phonet}) [ 237.512865][T12024] device batadv0 entered promiscuous mode [ 237.528037][T12020] device batadv0 left promiscuous mode 00:28:59 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="140000002200055bd25a80648c63940d012484d9", 0x14}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000006440)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) 00:28:59 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="140000002200055bd25a80648c63940d012484d9", 0x14}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000006440)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) 00:28:59 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000000)={r2, 0x3, 0x6, @dev}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) setsockopt$packet_drop_memb(r0, 0x107, 0x2, &(0x7f0000000040)={r4, 0x1, 0x6, @remote}, 0x10) 00:28:59 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000200), r0) sendmsg$IEEE802154_ASSOCIATE_RESP(r1, &(0x7f00000002c0)={&(0x7f00000001c0), 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x28, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_COORD_HW_ADDR={0xc}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6}]}, 0x28}}, 0x0) 00:28:59 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xdb) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010008506000000000000000000002000", @ANYRES32=r3, @ANYBLOB="5977f29225186fb21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) 00:28:59 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x5, &(0x7f0000000080)=0x4, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) recvmmsg(r0, &(0x7f0000008880), 0x45b, 0x44000102, 0x0) 00:28:59 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000140)={0x20}) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000380), 0x101bf) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c) socket$nl_route(0x10, 0x3, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000001300)={0x2880008, r1, 0x0, 0x8}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f00000000c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r3, &(0x7f0000000180)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(0xffffffffffffffff, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) 00:28:59 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x3, &(0x7f00000001c0)=@framed, &(0x7f0000000180)='syzkaller\x00', 0x2, 0xe5, &(0x7f0000000000)=""/229, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d00)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff0000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) [ 238.016734][T12042] device batadv0 entered promiscuous mode [ 238.025749][T12049] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 238.110913][T12049] 8021q: adding VLAN 0 to HW filter on device bond1 [ 238.118292][T12035] device batadv0 left promiscuous mode [ 238.181112][T12052] bond1: (slave bridge1): making interface the new active one 00:29:00 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000000)={r2, 0x3, 0x6, @dev}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) setsockopt$packet_drop_memb(r0, 0x107, 0x2, &(0x7f0000000040)={r4, 0x1, 0x6, @remote}, 0x10) [ 238.253468][T12052] bond1: (slave bridge1): Enslaving as an active interface with an up link 00:29:00 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) sendto$inet6(r0, &(0x7f0000000080)='N', 0xfffffdef, 0x0, 0x0, 0xe001900) [ 238.323921][T11935] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready 00:29:00 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x5, &(0x7f0000000080)=0x4, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) recvmmsg(r0, &(0x7f0000008880), 0x45b, 0x44000102, 0x0) [ 238.378833][T12049] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 238.435594][T12052] bond1: (slave bridge2): Enslaving as a backup interface with an up link [ 238.471102][T12103] device batadv0 entered promiscuous mode 00:29:00 executing program 3: ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000040)={'sit0\x00', &(0x7f00000000c0)={'ip6tnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @private0}}) bpf$MAP_CREATE(0x0, &(0x7f0000000080), 0x61) 00:29:00 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000140)={0x20}) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000380), 0x101bf) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c) socket$nl_route(0x10, 0x3, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000001300)={0x2880008, r1, 0x0, 0x8}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f00000000c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r3, &(0x7f0000000180)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(0xffffffffffffffff, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) 00:29:00 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xdb) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010008506000000000000000000002000", @ANYRES32=r3, @ANYBLOB="5977f29225186fb21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) 00:29:00 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000080)={{{@in=@loopback, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x32}, 0x0, @in=@broadcast, 0x0, 0x4, 0x0, 0xb7}}, 0xe8) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) [ 238.736910][T12097] device batadv0 left promiscuous mode 00:29:00 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000080)=@nat={'nat\x00', 0x19, 0x1, 0x238, [0x200003c0, 0x0, 0x0, 0x200003f0, 0x20000420], 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"]}, 0x2b0) 00:29:00 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000001000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='sys_enter\x00', r0}, 0x10) r1 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @loopback}, 0x4}}, 0x2e) syz_emit_ethernet(0x4c, &(0x7f0000000140)={@link_local, @random="ece65fbcee55", @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x16, 0x11, 0x0, @remote, @local, {[], {0x0, 0xe22, 0x16, 0x0, @gue={{0x2, 0x0, 0x0, 0x3}, "30b00afe4e70"}}}}}}}, 0x0) readv(r2, 0x0, 0x0) [ 239.032763][T12113] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 00:29:01 executing program 0: syz_genetlink_get_family_id$l2tp(&(0x7f0000000100), 0xffffffffffffffff) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='memory.stat\x00', 0xb00000000065808, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r1, r0, 0x0, 0x6) sendfile(r1, r0, &(0x7f0000000040)=0x4, 0x100000001) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000140)={0x20}) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x40800}, 0x400c4) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x275a, 0x0) ioctl$sock_ax25_SIOCADDRT(r2, 0x890b, &(0x7f0000000480)={@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x3, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) sendmsg$IPSET_CMD_SAVE(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000300)={&(0x7f00000006c0)=ANY=[], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x81) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r5 = socket$key(0xf, 0x3, 0x2) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000003c0)='cpuacct.usage_percpu\x00', 0x0, 0x0) sendmsg$key(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="02040209080000000000000000000000010015004e21000002000100fffffffe00010202000000c0030005000000010002000000e00000010000000000000080"], 0x40}}, 0x4000050) r6 = socket(0x15, 0x2, 0x0) getsockopt$IPT_SO_GET_ENTRIES(r6, 0x0, 0xc, 0x0, &(0x7f0000000040)) ioctl(r0, 0x6, &(0x7f0000000640)="f80a93b0e65c04652bca81a04d52556a8ddbeadea19555a6f9cdffa665c858fd3d9de438872edd9ff3e4e3ad42dd8998eb1c205f47c4f863fde007a9d2061c85744bc6e4cd0459916a0fb7d1e26bc5e3e3864935930b2058c6cc65e8436b10f81ac83fea470135227a") ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000280)=0x20) ioctl$FITRIM(r3, 0x6611, 0x0) [ 239.317188][T12113] 8021q: adding VLAN 0 to HW filter on device bond2 00:29:01 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000001000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='sys_enter\x00', r0}, 0x10) r1 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @loopback}, 0x4}}, 0x2e) syz_emit_ethernet(0x4c, &(0x7f0000000140)={@link_local, @random="ece65fbcee55", @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x16, 0x11, 0x0, @remote, @local, {[], {0x0, 0xe22, 0x16, 0x0, @gue={{0x2, 0x0, 0x0, 0x3}, "30b00afe4e70"}}}}}}}, 0x0) readv(r2, 0x0, 0x0) [ 239.394049][T12117] bond2: (slave bridge3): making interface the new active one 00:29:01 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000140)={0x20}) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000380), 0x101bf) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c) socket$nl_route(0x10, 0x3, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000001300)={0x2880008, r1, 0x0, 0x8}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f00000000c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r3, &(0x7f0000000180)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(0xffffffffffffffff, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) 00:29:01 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) sendto$inet6(r0, &(0x7f0000000080)='N', 0xfffffdef, 0x0, 0x0, 0xe001900) [ 239.486971][T12117] bond2: (slave bridge3): Enslaving as an active interface with an up link [ 239.534607][T11904] IPv6: ADDRCONF(NETDEV_CHANGE): bond2: link becomes ready 00:29:01 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000001000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='sys_enter\x00', r0}, 0x10) r1 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @loopback}, 0x4}}, 0x2e) syz_emit_ethernet(0x4c, &(0x7f0000000140)={@link_local, @random="ece65fbcee55", @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x16, 0x11, 0x0, @remote, @local, {[], {0x0, 0xe22, 0x16, 0x0, @gue={{0x2, 0x0, 0x0, 0x3}, "30b00afe4e70"}}}}}}}, 0x0) readv(r2, 0x0, 0x0) 00:29:01 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xdb) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010008506000000000000000000002000", @ANYRES32=r3, @ANYBLOB="5977f29225186fb21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) 00:29:01 executing program 0: syz_genetlink_get_family_id$l2tp(&(0x7f0000000100), 0xffffffffffffffff) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='memory.stat\x00', 0xb00000000065808, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r1, r0, 0x0, 0x6) sendfile(r1, r0, &(0x7f0000000040)=0x4, 0x100000001) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000140)={0x20}) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x40800}, 0x400c4) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x275a, 0x0) ioctl$sock_ax25_SIOCADDRT(r2, 0x890b, &(0x7f0000000480)={@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x3, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) sendmsg$IPSET_CMD_SAVE(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000300)={&(0x7f00000006c0)=ANY=[], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x81) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r5 = socket$key(0xf, 0x3, 0x2) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000003c0)='cpuacct.usage_percpu\x00', 0x0, 0x0) sendmsg$key(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="02040209080000000000000000000000010015004e21000002000100fffffffe00010202000000c0030005000000010002000000e00000010000000000000080"], 0x40}}, 0x4000050) r6 = socket(0x15, 0x2, 0x0) getsockopt$IPT_SO_GET_ENTRIES(r6, 0x0, 0xc, 0x0, &(0x7f0000000040)) ioctl(r0, 0x6, &(0x7f0000000640)="f80a93b0e65c04652bca81a04d52556a8ddbeadea19555a6f9cdffa665c858fd3d9de438872edd9ff3e4e3ad42dd8998eb1c205f47c4f863fde007a9d2061c85744bc6e4cd0459916a0fb7d1e26bc5e3e3864935930b2058c6cc65e8436b10f81ac83fea470135227a") ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000280)=0x20) ioctl$FITRIM(r3, 0x6611, 0x0) 00:29:01 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000001000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='sys_enter\x00', r0}, 0x10) r1 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @loopback}, 0x4}}, 0x2e) syz_emit_ethernet(0x4c, &(0x7f0000000140)={@link_local, @random="ece65fbcee55", @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x16, 0x11, 0x0, @remote, @local, {[], {0x0, 0xe22, 0x16, 0x0, @gue={{0x2, 0x0, 0x0, 0x3}, "30b00afe4e70"}}}}}}}, 0x0) readv(r2, 0x0, 0x0) [ 240.011703][T12177] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 240.174753][T12177] 8021q: adding VLAN 0 to HW filter on device bond3 [ 240.223162][T12179] bond3: (slave bridge4): making interface the new active one [ 240.264183][T12179] bond3: (slave bridge4): Enslaving as an active interface with an up link [ 240.305106][ T2976] IPv6: ADDRCONF(NETDEV_CHANGE): bond3: link becomes ready 00:29:02 executing program 0: syz_genetlink_get_family_id$l2tp(&(0x7f0000000100), 0xffffffffffffffff) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='memory.stat\x00', 0xb00000000065808, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r1, r0, 0x0, 0x6) sendfile(r1, r0, &(0x7f0000000040)=0x4, 0x100000001) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000140)={0x20}) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x40800}, 0x400c4) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x275a, 0x0) ioctl$sock_ax25_SIOCADDRT(r2, 0x890b, &(0x7f0000000480)={@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x3, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) sendmsg$IPSET_CMD_SAVE(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000300)={&(0x7f00000006c0)=ANY=[], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x81) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r5 = socket$key(0xf, 0x3, 0x2) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000003c0)='cpuacct.usage_percpu\x00', 0x0, 0x0) sendmsg$key(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="02040209080000000000000000000000010015004e21000002000100fffffffe00010202000000c0030005000000010002000000e00000010000000000000080"], 0x40}}, 0x4000050) r6 = socket(0x15, 0x2, 0x0) getsockopt$IPT_SO_GET_ENTRIES(r6, 0x0, 0xc, 0x0, &(0x7f0000000040)) ioctl(r0, 0x6, &(0x7f0000000640)="f80a93b0e65c04652bca81a04d52556a8ddbeadea19555a6f9cdffa665c858fd3d9de438872edd9ff3e4e3ad42dd8998eb1c205f47c4f863fde007a9d2061c85744bc6e4cd0459916a0fb7d1e26bc5e3e3864935930b2058c6cc65e8436b10f81ac83fea470135227a") ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000280)=0x20) ioctl$FITRIM(r3, 0x6611, 0x0) 00:29:02 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000080)={{{@in=@loopback, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x32}, 0x0, @in=@broadcast, 0x0, 0x4, 0x0, 0xb7}}, 0xe8) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 00:29:02 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xdb) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010008506000000000000000000002000", @ANYRES32=r3, @ANYBLOB="5977f29225186fb21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) 00:29:02 executing program 3: r0 = socket$qrtr(0x2a, 0x2, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), r0) 00:29:02 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000140)={0x20}) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000380), 0x101bf) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c) socket$nl_route(0x10, 0x3, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000001300)={0x2880008, r1, 0x0, 0x8}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f00000000c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r3, &(0x7f0000000180)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(0xffffffffffffffff, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) 00:29:02 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) sendto$inet6(r0, &(0x7f0000000080)='N', 0xfffffdef, 0x0, 0x0, 0xe001900) [ 240.906834][T12225] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 00:29:03 executing program 3: unshare(0x40000000) r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=@newqdisc={0x50, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x1c, 0x2, [@TCA_FQ_CODEL_QUANTUM={0x8}, @TCA_FQ_CODEL_LIMIT={0x8}, @TCA_FQ_CODEL_DROP_BATCH_SIZE={0x8}]}}]}, 0x50}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000000080)="580000001400379b9fb61b", 0xb}], 0x1) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$nl_route(0x10, 0x3, 0x0) unshare(0x100) r3 = socket$inet6(0xa, 0x80003, 0x7) connect$inet6(r3, &(0x7f0000000040), 0x1c) sendmmsg(r3, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) [ 241.113866][T12225] 8021q: adding VLAN 0 to HW filter on device bond4 00:29:03 executing program 0: syz_genetlink_get_family_id$l2tp(&(0x7f0000000100), 0xffffffffffffffff) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='memory.stat\x00', 0xb00000000065808, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r1, r0, 0x0, 0x6) sendfile(r1, r0, &(0x7f0000000040)=0x4, 0x100000001) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000140)={0x20}) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x40800}, 0x400c4) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x275a, 0x0) ioctl$sock_ax25_SIOCADDRT(r2, 0x890b, &(0x7f0000000480)={@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x3, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) sendmsg$IPSET_CMD_SAVE(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000300)={&(0x7f00000006c0)=ANY=[], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x81) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r5 = socket$key(0xf, 0x3, 0x2) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000003c0)='cpuacct.usage_percpu\x00', 0x0, 0x0) sendmsg$key(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="02040209080000000000000000000000010015004e21000002000100fffffffe00010202000000c0030005000000010002000000e00000010000000000000080"], 0x40}}, 0x4000050) r6 = socket(0x15, 0x2, 0x0) getsockopt$IPT_SO_GET_ENTRIES(r6, 0x0, 0xc, 0x0, &(0x7f0000000040)) ioctl(r0, 0x6, &(0x7f0000000640)="f80a93b0e65c04652bca81a04d52556a8ddbeadea19555a6f9cdffa665c858fd3d9de438872edd9ff3e4e3ad42dd8998eb1c205f47c4f863fde007a9d2061c85744bc6e4cd0459916a0fb7d1e26bc5e3e3864935930b2058c6cc65e8436b10f81ac83fea470135227a") ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000280)=0x20) ioctl$FITRIM(r3, 0x6611, 0x0) [ 241.182740][T12229] bond4: (slave bridge5): making interface the new active one [ 241.258088][T12229] bond4: (slave bridge5): Enslaving as an active interface with an up link [ 241.326901][ T2976] IPv6: ADDRCONF(NETDEV_CHANGE): bond4: link becomes ready [ 241.447809][T12273] hsr0 speed is unknown, defaulting to 1000 00:29:03 executing program 5: r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r0, 0x114, 0xa, &(0x7f0000000100)={0x2}, 0x4) 00:29:03 executing program 1: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$nl_netfilter(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[], 0x20002154}}, 0x0) 00:29:03 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000940)={'wpan1\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_DEV(r0, &(0x7f0000000040)={0x0, 0x600, &(0x7f0000000200)={&(0x7f0000000080)={0x50, r1, 0x852dd6c070cd7e4d, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_DEV_KEY_MODE={0x5}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8}, @IEEE802154_ATTR_SHORT_ADDR={0x6}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r3}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x900}]}, 0x50}, 0x6}, 0x0) 00:29:04 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000240)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="2400d2b2", @ANYRES16, @ANYBLOB="010090c9000000000000c3adc04c08000300", @ANYRES32], 0x24}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r3, @ANYBLOB="43afe1e8000000000000", @ANYRES32=r4], 0x4}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) 00:29:04 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000080)={{{@in=@loopback, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x32}, 0x0, @in=@broadcast, 0x0, 0x4, 0x0, 0xb7}}, 0xe8) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) [ 242.188602][T12273] hsr0 speed is unknown, defaulting to 1000 00:29:04 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) sendto$inet6(r0, &(0x7f0000000080)='N', 0xfffffdef, 0x0, 0x0, 0xe001900) 00:29:04 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r0, &(0x7f00000039c0)=[{{&(0x7f0000000000)={0xa, 0x4e24, 0x0, @loopback}, 0x1c, 0x0}}, {{&(0x7f0000000440)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1c, 0x0}}], 0x2, 0xfc00) [ 242.346318][ T26] audit: type=1804 audit(1634603344.344:78): pid=12317 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir797867137/syzkaller.HzK1XH/104/cgroup.controllers" dev="sda1" ino=14402 res=1 errno=0 00:29:04 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000009c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}, {0x0, [], 0xe}}, &(0x7f00000001c0)=""/181, 0x1a, 0xb5, 0x1}, 0x20) 00:29:04 executing program 5: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001300)={0xffffffffffffffff}) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000001340)=0xffffffffffffffff) 00:29:04 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000000340)=[{{&(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10, 0x0}}], 0x1, 0x0) 00:29:05 executing program 3: unshare(0x40000000) r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=@newqdisc={0x50, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x1c, 0x2, [@TCA_FQ_CODEL_QUANTUM={0x8}, @TCA_FQ_CODEL_LIMIT={0x8}, @TCA_FQ_CODEL_DROP_BATCH_SIZE={0x8}]}}]}, 0x50}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000000080)="580000001400379b9fb61b", 0xb}], 0x1) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$nl_route(0x10, 0x3, 0x0) unshare(0x100) r3 = socket$inet6(0xa, 0x80003, 0x7) connect$inet6(r3, &(0x7f0000000040), 0x1c) sendmmsg(r3, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) 00:29:05 executing program 1: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$nl_netfilter(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[], 0x20002154}}, 0x0) 00:29:05 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000013c0)={0x2c, 0xd, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x2c}}, 0x0) 00:29:05 executing program 0: socketpair$unix(0x1, 0x80000000001, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffb, 0x10, 0xffffffffffffffff, 0x0) write$binfmt_elf64(r0, &(0x7f0000000380)=ANY=[], 0x8724) write$binfmt_misc(r0, &(0x7f00000000c0)=ANY=[], 0x7fffffff) recvfrom(r1, &(0x7f0000000100)=""/184, 0xffffffe8, 0x40012500, 0x0, 0xffffffffffffff49) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0}, 0x70) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) 00:29:05 executing program 5: unshare(0x40000000) r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=@newqdisc={0x50, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x1c, 0x2, [@TCA_FQ_CODEL_QUANTUM={0x8}, @TCA_FQ_CODEL_LIMIT={0x8}, @TCA_FQ_CODEL_DROP_BATCH_SIZE={0x8}]}}]}, 0x50}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000000080)="580000001400379b9fb61b", 0xb}], 0x1) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$nl_route(0x10, 0x3, 0x0) unshare(0x100) r3 = socket$inet6(0xa, 0x80003, 0x7) connect$inet6(r3, &(0x7f0000000040), 0x1c) sendmmsg(r3, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) 00:29:05 executing program 4: unshare(0x40000000) socket$packet(0x11, 0x0, 0x300) socket(0x10, 0x2, 0x0) r0 = socket(0x11, 0x800000003, 0x0) syz_emit_ethernet(0x1246, &(0x7f0000000300)=ANY=[], 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r1 = socket$inet6(0xa, 0x803, 0x6) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r1, &(0x7f0000008440)=[{{0x0, 0x536, 0x0}, 0xff00}], 0x400000000000107, 0x4) [ 243.663837][T12356] hsr0 speed is unknown, defaulting to 1000 00:29:05 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000080)={{{@in=@loopback, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x32}, 0x0, @in=@broadcast, 0x0, 0x4, 0x0, 0xb7}}, 0xe8) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) [ 243.870262][T12369] hsr0 speed is unknown, defaulting to 1000 [ 243.938713][T12373] hsr0 speed is unknown, defaulting to 1000 00:29:06 executing program 0: socketpair$unix(0x1, 0x80000000001, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffb, 0x10, 0xffffffffffffffff, 0x0) write$binfmt_elf64(r0, &(0x7f0000000380)=ANY=[], 0x8724) write$binfmt_misc(r0, &(0x7f00000000c0)=ANY=[], 0x7fffffff) recvfrom(r1, &(0x7f0000000100)=""/184, 0xffffffe8, 0x40012500, 0x0, 0xffffffffffffff49) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0}, 0x70) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) [ 244.350629][T12373] hsr0 speed is unknown, defaulting to 1000 00:29:06 executing program 1: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$nl_netfilter(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[], 0x20002154}}, 0x0) 00:29:06 executing program 4: unshare(0x40000000) socket$packet(0x11, 0x0, 0x300) socket(0x10, 0x2, 0x0) r0 = socket(0x11, 0x800000003, 0x0) syz_emit_ethernet(0x1246, &(0x7f0000000300)=ANY=[], 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r1 = socket$inet6(0xa, 0x803, 0x6) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r1, &(0x7f0000008440)=[{{0x0, 0x536, 0x0}, 0xff00}], 0x400000000000107, 0x4) 00:29:06 executing program 3: unshare(0x40000000) r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=@newqdisc={0x50, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x1c, 0x2, [@TCA_FQ_CODEL_QUANTUM={0x8}, @TCA_FQ_CODEL_LIMIT={0x8}, @TCA_FQ_CODEL_DROP_BATCH_SIZE={0x8}]}}]}, 0x50}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000000080)="580000001400379b9fb61b", 0xb}], 0x1) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$nl_route(0x10, 0x3, 0x0) unshare(0x100) r3 = socket$inet6(0xa, 0x80003, 0x7) connect$inet6(r3, &(0x7f0000000040), 0x1c) sendmmsg(r3, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) 00:29:06 executing program 5: unshare(0x40000000) r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=@newqdisc={0x50, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x1c, 0x2, [@TCA_FQ_CODEL_QUANTUM={0x8}, @TCA_FQ_CODEL_LIMIT={0x8}, @TCA_FQ_CODEL_DROP_BATCH_SIZE={0x8}]}}]}, 0x50}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000000080)="580000001400379b9fb61b", 0xb}], 0x1) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$nl_route(0x10, 0x3, 0x0) unshare(0x100) r3 = socket$inet6(0xa, 0x80003, 0x7) connect$inet6(r3, &(0x7f0000000040), 0x1c) sendmmsg(r3, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) [ 245.053096][T12462] hsr0 speed is unknown, defaulting to 1000 [ 245.148166][T12461] hsr0 speed is unknown, defaulting to 1000 [ 245.250875][T12470] hsr0 speed is unknown, defaulting to 1000 00:29:07 executing program 2: unshare(0x40000000) socket$packet(0x11, 0x0, 0x300) socket(0x10, 0x2, 0x0) r0 = socket(0x11, 0x800000003, 0x0) syz_emit_ethernet(0x1246, &(0x7f0000000300)=ANY=[], 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r1 = socket$inet6(0xa, 0x803, 0x6) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r1, &(0x7f0000008440)=[{{0x0, 0x536, 0x0}, 0xff00}], 0x400000000000107, 0x4) 00:29:07 executing program 0: socketpair$unix(0x1, 0x80000000001, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffb, 0x10, 0xffffffffffffffff, 0x0) write$binfmt_elf64(r0, &(0x7f0000000380)=ANY=[], 0x8724) write$binfmt_misc(r0, &(0x7f00000000c0)=ANY=[], 0x7fffffff) recvfrom(r1, &(0x7f0000000100)=""/184, 0xffffffe8, 0x40012500, 0x0, 0xffffffffffffff49) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000640)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000500000095000000000000009500a505000000007751e8ba639a6788a341cca59d5bdbe9d8f8b423cdac522be18bd10a48b043ccc42646d25dfd73a015e0ca7fc2506a0f68a7d06d7535f7866907dc6751dfb265a0e3ccae669e173a649c1cfd6587d452d64e7cc957d77578f4c35235138d5521f9453559c35da860e8efbc6f2b2a3e3173d5661cfeec79c66c54c33367d2eabe07f4d16fee40000000a14076dd26053a755b8fe46a0bd3871b8acf00d4fc8c313c07f72ead0e85cf8dc24c2c17be5b6ce40fb88824431a0d0055e6e21837b68c575485c29582a6134fd2aea2fef1cc42049d7d6b362c500f0000c802afab791b91c597d8779da9281d30369381ba6f13e3b3c189f7346fde70d13a058856d7772bcbedcd16515a40140000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0}, 0x70) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) 00:29:07 executing program 1: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$nl_netfilter(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[], 0x20002154}}, 0x0) 00:29:07 executing program 4: unshare(0x40000000) socket$packet(0x11, 0x0, 0x300) socket(0x10, 0x2, 0x0) r0 = socket(0x11, 0x800000003, 0x0) syz_emit_ethernet(0x1246, &(0x7f0000000300)=ANY=[], 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r1 = socket$inet6(0xa, 0x803, 0x6) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r1, &(0x7f0000008440)=[{{0x0, 0x536, 0x0}, 0xff00}], 0x400000000000107, 0x4) [ 245.860316][T12535] hsr0 speed is unknown, defaulting to 1000 [ 246.063824][T12542] hsr0 speed is unknown, defaulting to 1000 00:29:08 executing program 3: unshare(0x40000000) r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=@newqdisc={0x50, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x1c, 0x2, [@TCA_FQ_CODEL_QUANTUM={0x8}, @TCA_FQ_CODEL_LIMIT={0x8}, @TCA_FQ_CODEL_DROP_BATCH_SIZE={0x8}]}}]}, 0x50}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000000080)="580000001400379b9fb61b", 0xb}], 0x1) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$nl_route(0x10, 0x3, 0x0) unshare(0x100) r3 = socket$inet6(0xa, 0x80003, 0x7) connect$inet6(r3, &(0x7f0000000040), 0x1c) sendmmsg(r3, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) 00:29:08 executing program 5: unshare(0x40000000) r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=@newqdisc={0x50, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x1c, 0x2, [@TCA_FQ_CODEL_QUANTUM={0x8}, @TCA_FQ_CODEL_LIMIT={0x8}, @TCA_FQ_CODEL_DROP_BATCH_SIZE={0x8}]}}]}, 0x50}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000000080)="580000001400379b9fb61b", 0xb}], 0x1) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$nl_route(0x10, 0x3, 0x0) unshare(0x100) r3 = socket$inet6(0xa, 0x80003, 0x7) connect$inet6(r3, &(0x7f0000000040), 0x1c) sendmmsg(r3, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) [ 246.431931][T12586] hsr0 speed is unknown, defaulting to 1000 00:29:08 executing program 2: unshare(0x40000000) socket$packet(0x11, 0x0, 0x300) socket(0x10, 0x2, 0x0) r0 = socket(0x11, 0x800000003, 0x0) syz_emit_ethernet(0x1246, &(0x7f0000000300)=ANY=[], 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r1 = socket$inet6(0xa, 0x803, 0x6) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r1, &(0x7f0000008440)=[{{0x0, 0x536, 0x0}, 0xff00}], 0x400000000000107, 0x4) 00:29:08 executing program 4: unshare(0x40000000) socket$packet(0x11, 0x0, 0x300) socket(0x10, 0x2, 0x0) r0 = socket(0x11, 0x800000003, 0x0) syz_emit_ethernet(0x1246, &(0x7f0000000300)=ANY=[], 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r1 = socket$inet6(0xa, 0x803, 0x6) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r1, &(0x7f0000008440)=[{{0x0, 0x536, 0x0}, 0xff00}], 0x400000000000107, 0x4) 00:29:08 executing program 0: socketpair$unix(0x1, 0x80000000001, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffb, 0x10, 0xffffffffffffffff, 0x0) write$binfmt_elf64(r0, &(0x7f0000000380)=ANY=[], 0x8724) write$binfmt_misc(r0, &(0x7f00000000c0)=ANY=[], 0x7fffffff) recvfrom(r1, &(0x7f0000000100)=""/184, 0xffffffe8, 0x40012500, 0x0, 0xffffffffffffff49) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000640)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000500000095000000000000009500a505000000007751e8ba639a6788a341cca59d5bdbe9d8f8b423cdac522be18bd10a48b043ccc42646d25dfd73a015e0ca7fc2506a0f68a7d06d7535f7866907dc6751dfb265a0e3ccae669e173a649c1cfd6587d452d64e7cc957d77578f4c35235138d5521f9453559c35da860e8efbc6f2b2a3e3173d5661cfeec79c66c54c33367d2eabe07f4d16fee40000000a14076dd26053a755b8fe46a0bd3871b8acf00d4fc8c313c07f72ead0e85cf8dc24c2c17be5b6ce40fb88824431a0d0055e6e21837b68c575485c29582a6134fd2aea2fef1cc42049d7d6b362c500f0000c802afab791b91c597d8779da9281d30369381ba6f13e3b3c189f7346fde70d13a058856d7772bcbedcd16515a40140000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0}, 0x70) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) [ 246.653944][T12593] hsr0 speed is unknown, defaulting to 1000 00:29:08 executing program 1: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6(0xa, 0x3, 0x2c) sendmmsg(r2, &(0x7f0000000800)=[{{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0}}], 0x1, 0x8804) connect$inet6(r2, &(0x7f0000000140)={0xa, 0x0, 0x0, @empty}, 0x1c) sendto$inet6(r2, &(0x7f0000000000)="5f8a19", 0x3, 0x8000, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000600)=ANY=[], 0x2bb98205) splice(r0, 0x0, r2, 0x0, 0x4ff99, 0x0) [ 246.858592][T12615] hsr0 speed is unknown, defaulting to 1000 [ 246.997743][T12622] hsr0 speed is unknown, defaulting to 1000 00:29:09 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xf, 0x4, 0x4, 0x8001, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x21}, 0x40) 00:29:09 executing program 2: unshare(0x40000000) socket$packet(0x11, 0x0, 0x300) socket(0x10, 0x2, 0x0) r0 = socket(0x11, 0x800000003, 0x0) syz_emit_ethernet(0x1246, &(0x7f0000000300)=ANY=[], 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r1 = socket$inet6(0xa, 0x803, 0x6) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r1, &(0x7f0000008440)=[{{0x0, 0x536, 0x0}, 0xff00}], 0x400000000000107, 0x4) 00:29:09 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x38}, @NFTA_SET_OBJ_TYPE={0x8}, @NFTA_SET_FLAGS={0x8}]}], {0x14, 0x10}}, 0x74}}, 0x0) 00:29:09 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x70, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x34, 0x11, 0x0, 0x1, @hash={{0x9}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_HASH_LEN={0x8, 0x3, 0x1, 0x0, 0x2e}, @NFTA_HASH_MODULUS={0x8}, @NFTA_HASH_DREG={0x8}, @NFTA_HASH_SREG={0x8, 0x1, 0x1, 0x0, 0x8}]}}}]}], {0x14, 0x10}}, 0xb8}}, 0x0) 00:29:09 executing program 1: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6(0xa, 0x3, 0x2c) sendmmsg(r2, &(0x7f0000000800)=[{{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0}}], 0x1, 0x8804) connect$inet6(r2, &(0x7f0000000140)={0xa, 0x0, 0x0, @empty}, 0x1c) sendto$inet6(r2, &(0x7f0000000000)="5f8a19", 0x3, 0x8000, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000600)=ANY=[], 0x2bb98205) splice(r0, 0x0, r2, 0x0, 0x4ff99, 0x0) [ 247.849206][T12690] hsr0 speed is unknown, defaulting to 1000 00:29:09 executing program 0: pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x233) setsockopt$sock_timeval(r2, 0x1, 0x15, &(0x7f0000000040)={0x0, 0x2710}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x10) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000100)={0x0, 0x81, 0x200}, 0x14) write$binfmt_misc(r1, &(0x7f0000000080)=ANY=[], 0xff01) splice(r0, 0x0, r2, 0x0, 0x10003, 0x0) 00:29:09 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xf, 0x4, 0x4, 0x8001, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x21}, 0x40) 00:29:10 executing program 5: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, &(0x7f0000000000)={0x1f, @fixed}, 0x8) listen(r0, 0x0) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000000040)=0x1, 0x4) 00:29:10 executing program 3: r0 = socket(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pfifo={{0xa}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f00000007c0)=@newqdisc={0x30, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8, 0x8}, {0x4}}]}, 0x30}}, 0x0) 00:29:10 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x16, 0x0, 0x0) [ 248.250892][T12729] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 00:29:10 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xf, 0x4, 0x4, 0x8001, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x21}, 0x40) 00:29:10 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x9, 0x2000000000000187, &(0x7f0000000000)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xc}], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) [ 248.370982][T12731] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 00:29:10 executing program 0: pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x233) setsockopt$sock_timeval(r2, 0x1, 0x15, &(0x7f0000000040)={0x0, 0x2710}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x10) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000100)={0x0, 0x81, 0x200}, 0x14) write$binfmt_misc(r1, &(0x7f0000000080)=ANY=[], 0xff01) splice(r0, 0x0, r2, 0x0, 0x10003, 0x0) 00:29:10 executing program 3: r0 = socket(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pfifo={{0xa}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f00000007c0)=@newqdisc={0x30, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8, 0x8}, {0x4}}]}, 0x30}}, 0x0) 00:29:10 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xf, 0x4, 0x4, 0x8001, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x21}, 0x40) 00:29:10 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x29, 0x30, 0x0, 0x700) [ 248.647121][T12754] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 00:29:11 executing program 1: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6(0xa, 0x3, 0x2c) sendmmsg(r2, &(0x7f0000000800)=[{{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0}}], 0x1, 0x8804) connect$inet6(r2, &(0x7f0000000140)={0xa, 0x0, 0x0, @empty}, 0x1c) sendto$inet6(r2, &(0x7f0000000000)="5f8a19", 0x3, 0x8000, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000600)=ANY=[], 0x2bb98205) splice(r0, 0x0, r2, 0x0, 0x4ff99, 0x0) 00:29:11 executing program 2: r0 = socket(0x23, 0x2, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000200), r0) 00:29:11 executing program 0: pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x233) setsockopt$sock_timeval(r2, 0x1, 0x15, &(0x7f0000000040)={0x0, 0x2710}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x10) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000100)={0x0, 0x81, 0x200}, 0x14) write$binfmt_misc(r1, &(0x7f0000000080)=ANY=[], 0xff01) splice(r0, 0x0, r2, 0x0, 0x10003, 0x0) 00:29:11 executing program 4: socket$inet6(0xa, 0x80003, 0x6b) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r0, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000e00)={0x0, 0xf00}}, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) socket$inet(0x10, 0x800, 0x1) sendmsg(0xffffffffffffffff, 0x0, 0x0) epoll_create(0x0) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x20000004e20, @local}, 0x10) bpf$BPF_PROG_GET_NEXT_ID(0xb, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) socket(0x0, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x100000000000000, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) bpf$OBJ_PIN_PROG(0x6, 0x0, 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, 0x0, 0x0) sendto$inet(r1, 0x0, 0x0, 0x24000000, &(0x7f0000000040)={0x2, 0x4e20, @local}, 0x10) sendto$inet(r1, &(0x7f00000001c0)="83", 0x1, 0x4081, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000200)="14", 0x1, 0x0, 0x0, 0xfffffffffffffea8) recvfrom$inet(r1, 0x0, 0x78, 0x0, 0x0, 0x0) ioctl$sock_TIOCINQ(r1, 0x541b, &(0x7f0000000040)) 00:29:11 executing program 3: r0 = socket(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pfifo={{0xa}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f00000007c0)=@newqdisc={0x30, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8, 0x8}, {0x4}}]}, 0x30}}, 0x0) 00:29:11 executing program 5: r0 = socket$phonet(0x23, 0x2, 0x1) sendto(r0, 0x0, 0x400300, 0x0, &(0x7f00000002c0)=@can={0x23}, 0x80) [ 249.122776][T12782] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 00:29:11 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x15, 0x4, &(0x7f0000000000)=@framed={{}, [@call]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) [ 249.180577][T12781] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 00:29:11 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)={0x1c, 0x0, 0x1, 0x101, 0x0, 0x0, {}, [@CTA_TIMEOUT={0x8}]}, 0x1c}}, 0x0) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000080)='macsec0\x00') getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x56, &(0x7f0000000000), &(0x7f0000000040)=0x10) 00:29:11 executing program 0: pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x233) setsockopt$sock_timeval(r2, 0x1, 0x15, &(0x7f0000000040)={0x0, 0x2710}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x10) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000100)={0x0, 0x81, 0x200}, 0x14) write$binfmt_misc(r1, &(0x7f0000000080)=ANY=[], 0xff01) splice(r0, 0x0, r2, 0x0, 0x10003, 0x0) 00:29:11 executing program 4: socket$inet6(0xa, 0x80003, 0x6b) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r0, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000e00)={0x0, 0xf00}}, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) socket$inet(0x10, 0x800, 0x1) sendmsg(0xffffffffffffffff, 0x0, 0x0) epoll_create(0x0) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x20000004e20, @local}, 0x10) bpf$BPF_PROG_GET_NEXT_ID(0xb, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) socket(0x0, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x100000000000000, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) bpf$OBJ_PIN_PROG(0x6, 0x0, 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, 0x0, 0x0) sendto$inet(r1, 0x0, 0x0, 0x24000000, &(0x7f0000000040)={0x2, 0x4e20, @local}, 0x10) sendto$inet(r1, &(0x7f00000001c0)="83", 0x1, 0x4081, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000200)="14", 0x1, 0x0, 0x0, 0xfffffffffffffea8) recvfrom$inet(r1, 0x0, 0x78, 0x0, 0x0, 0x0) ioctl$sock_TIOCINQ(r1, 0x541b, &(0x7f0000000040)) 00:29:11 executing program 3: r0 = socket(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pfifo={{0xa}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f00000007c0)=@newqdisc={0x30, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8, 0x8}, {0x4}}]}, 0x30}}, 0x0) 00:29:11 executing program 2: socket$inet6(0xa, 0x80003, 0x6b) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r0, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000e00)={0x0, 0xf00}}, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) socket$inet(0x10, 0x800, 0x1) sendmsg(0xffffffffffffffff, 0x0, 0x0) epoll_create(0x0) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x20000004e20, @local}, 0x10) bpf$BPF_PROG_GET_NEXT_ID(0xb, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) socket(0x0, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x100000000000000, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) bpf$OBJ_PIN_PROG(0x6, 0x0, 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, 0x0, 0x0) sendto$inet(r1, 0x0, 0x0, 0x24000000, &(0x7f0000000040)={0x2, 0x4e20, @local}, 0x10) sendto$inet(r1, &(0x7f00000001c0)="83", 0x1, 0x4081, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000200)="14", 0x1, 0x0, 0x0, 0xfffffffffffffea8) recvfrom$inet(r1, 0x0, 0x78, 0x0, 0x0, 0x0) ioctl$sock_TIOCINQ(r1, 0x541b, &(0x7f0000000040)) [ 249.583932][T12819] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 00:29:12 executing program 1: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6(0xa, 0x3, 0x2c) sendmmsg(r2, &(0x7f0000000800)=[{{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0}}], 0x1, 0x8804) connect$inet6(r2, &(0x7f0000000140)={0xa, 0x0, 0x0, @empty}, 0x1c) sendto$inet6(r2, &(0x7f0000000000)="5f8a19", 0x3, 0x8000, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000600)=ANY=[], 0x2bb98205) splice(r0, 0x0, r2, 0x0, 0x4ff99, 0x0) 00:29:12 executing program 5: socket$inet6(0xa, 0x80003, 0x6b) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r0, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000e00)={0x0, 0xf00}}, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) socket$inet(0x10, 0x800, 0x1) sendmsg(0xffffffffffffffff, 0x0, 0x0) epoll_create(0x0) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x20000004e20, @local}, 0x10) bpf$BPF_PROG_GET_NEXT_ID(0xb, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) socket(0x0, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x100000000000000, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) bpf$OBJ_PIN_PROG(0x6, 0x0, 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, 0x0, 0x0) sendto$inet(r1, 0x0, 0x0, 0x24000000, &(0x7f0000000040)={0x2, 0x4e20, @local}, 0x10) sendto$inet(r1, &(0x7f00000001c0)="83", 0x1, 0x4081, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000200)="14", 0x1, 0x0, 0x0, 0xfffffffffffffea8) recvfrom$inet(r1, 0x0, 0x78, 0x0, 0x0, 0x0) ioctl$sock_TIOCINQ(r1, 0x541b, &(0x7f0000000040)) 00:29:12 executing program 0: r0 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'vlan0\x00', &(0x7f0000000000)=@ethtool_rxfh={0x4a, 0x0, 0x0, 0x0, 0x0, 'ec|'}}) 00:29:12 executing program 4: socket$inet6(0xa, 0x80003, 0x6b) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r0, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000e00)={0x0, 0xf00}}, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) socket$inet(0x10, 0x800, 0x1) sendmsg(0xffffffffffffffff, 0x0, 0x0) epoll_create(0x0) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x20000004e20, @local}, 0x10) bpf$BPF_PROG_GET_NEXT_ID(0xb, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) socket(0x0, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x100000000000000, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) bpf$OBJ_PIN_PROG(0x6, 0x0, 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, 0x0, 0x0) sendto$inet(r1, 0x0, 0x0, 0x24000000, &(0x7f0000000040)={0x2, 0x4e20, @local}, 0x10) sendto$inet(r1, &(0x7f00000001c0)="83", 0x1, 0x4081, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000200)="14", 0x1, 0x0, 0x0, 0xfffffffffffffea8) recvfrom$inet(r1, 0x0, 0x78, 0x0, 0x0, 0x0) ioctl$sock_TIOCINQ(r1, 0x541b, &(0x7f0000000040)) 00:29:12 executing program 2: socket$inet6(0xa, 0x80003, 0x6b) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r0, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000e00)={0x0, 0xf00}}, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) socket$inet(0x10, 0x800, 0x1) sendmsg(0xffffffffffffffff, 0x0, 0x0) epoll_create(0x0) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x20000004e20, @local}, 0x10) bpf$BPF_PROG_GET_NEXT_ID(0xb, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) socket(0x0, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x100000000000000, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) bpf$OBJ_PIN_PROG(0x6, 0x0, 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, 0x0, 0x0) sendto$inet(r1, 0x0, 0x0, 0x24000000, &(0x7f0000000040)={0x2, 0x4e20, @local}, 0x10) sendto$inet(r1, &(0x7f00000001c0)="83", 0x1, 0x4081, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000200)="14", 0x1, 0x0, 0x0, 0xfffffffffffffea8) recvfrom$inet(r1, 0x0, 0x78, 0x0, 0x0, 0x0) ioctl$sock_TIOCINQ(r1, 0x541b, &(0x7f0000000040)) 00:29:12 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)=@polexpire={0xcc, 0x1b, 0x1, 0x0, 0x0, {{{@in=@loopback, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {}, {}, 0x0, 0x6e6bb3}}, [@policy_type={0xa}]}, 0xcc}}, 0x0) 00:29:12 executing program 3: pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, 0x0) 00:29:12 executing program 0: r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x2c, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r2}]}}}]}, 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x3}]}}}]}, 0x3c}}, 0x0) 00:29:12 executing program 4: socket$inet6(0xa, 0x80003, 0x6b) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r0, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000e00)={0x0, 0xf00}}, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) socket$inet(0x10, 0x800, 0x1) sendmsg(0xffffffffffffffff, 0x0, 0x0) epoll_create(0x0) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x20000004e20, @local}, 0x10) bpf$BPF_PROG_GET_NEXT_ID(0xb, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) socket(0x0, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x100000000000000, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) bpf$OBJ_PIN_PROG(0x6, 0x0, 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, 0x0, 0x0) sendto$inet(r1, 0x0, 0x0, 0x24000000, &(0x7f0000000040)={0x2, 0x4e20, @local}, 0x10) sendto$inet(r1, &(0x7f00000001c0)="83", 0x1, 0x4081, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000200)="14", 0x1, 0x0, 0x0, 0xfffffffffffffea8) recvfrom$inet(r1, 0x0, 0x78, 0x0, 0x0, 0x0) ioctl$sock_TIOCINQ(r1, 0x541b, &(0x7f0000000040)) 00:29:12 executing program 2: socket$inet6(0xa, 0x80003, 0x6b) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r0, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000e00)={0x0, 0xf00}}, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) socket$inet(0x10, 0x800, 0x1) sendmsg(0xffffffffffffffff, 0x0, 0x0) epoll_create(0x0) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x20000004e20, @local}, 0x10) bpf$BPF_PROG_GET_NEXT_ID(0xb, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) socket(0x0, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x100000000000000, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) bpf$OBJ_PIN_PROG(0x6, 0x0, 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, 0x0, 0x0) sendto$inet(r1, 0x0, 0x0, 0x24000000, &(0x7f0000000040)={0x2, 0x4e20, @local}, 0x10) sendto$inet(r1, &(0x7f00000001c0)="83", 0x1, 0x4081, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000200)="14", 0x1, 0x0, 0x0, 0xfffffffffffffea8) recvfrom$inet(r1, 0x0, 0x78, 0x0, 0x0, 0x0) ioctl$sock_TIOCINQ(r1, 0x541b, &(0x7f0000000040)) 00:29:12 executing program 3: r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendmmsg$inet_sctp(r0, &(0x7f0000001500)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000001440)=[{&(0x7f0000000100)="d233a06228b1fdb77d4de628c4556a59b95839db441bd26a707c2726c2ea5bc46e4520822eb4cd0c39c885dde065abb143a25828f688c0e0c485d9e1", 0x3c}, {&(0x7f0000000140)="5487f935b427c381cb7af3e91d4c1c257af47c7523c747f4bb0d33776b4f8734fcd460cab5db681e925541db7e487c4183d26017a59e733b85c8e0d0c18c29dc7febf76fc8c6518280286b969c90e66b78b80d1c891956a874eb18439e257da387ea31b0e4645fcfc3ec618be815adffdaf35ab52b9f7ec09bb5f08c5fea352f1aa9cac5501f63d3f2e62855d7cfadaf32bfebceff496bca249968f9a2fe93058648d47379bcb5f53230b1856f6085089041185ebd99732f5b5a75a812b8288b5ab98eeb", 0xc4}, {&(0x7f0000000240)="d9b6fc43da3e1c05394e885ec973a4dc236fc984875264af24d90510217e490c67849c074a156b8145515530a35b4cb76029e9090477c855b28edbc4e491601c48f70df948bebf3af5d80ed6d735c2f61c292b46331bbb96873f01956a7a620adc4a6e8f08fe7e66464e72fad90434cbd1f0c4b2003bf8ca62a34bfda48574b2b154e31c05fda18cf3b04ae6ec0311680cd984677c9910361f82c147da26135243bd86fac5374bec50d20713ee796c28445b88844b3b65aa3a57f2ba29360ea33f4919c65c7ffc404fed3de163ed20fc6d07c0479b", 0xd5}, {&(0x7f0000000340)="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", 0x30f}], 0x4, &(0x7f00000014c0)=ANY=[@ANYBLOB='0'], 0x30}], 0x1, 0x20040040) 00:29:12 executing program 3: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x64, r2, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @private0}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @remote}, @L2TP_ATTR_UDP_SPORT={0x6}]}, 0x64}}, 0x0) 00:29:13 executing program 4: syz_emit_ethernet(0xaa, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa3d81000d0093"], 0x0) 00:29:13 executing program 0: r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x2c, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r2}]}}}]}, 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x3}]}}}]}, 0x3c}}, 0x0) 00:29:13 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x17, 0x3, &(0x7f0000000280)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x50, 0x57}}, &(0x7f0000000140)='GPL\x00', 0x1, 0xfc76, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffe77}, 0x48) 00:29:13 executing program 3: r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r0, &(0x7f0000000140)={&(0x7f0000000040)=@nl=@unspec={0x0, 0x0, 0xff00, 0x80fe}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000180)="f4001100002b2c25e99cef54a3f5ffffff02e0aef9e1657bb66e2b0021010000539cc2ec3f32b1bce0d8c23a52d44a0456cac1687f8f344f06000000000000004c9ec10012010400007080fafde23940f12c36a0", 0x54}], 0x1}, 0x0) 00:29:13 executing program 5: socket$inet6(0xa, 0x80003, 0x6b) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r0, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000e00)={0x0, 0xf00}}, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) socket$inet(0x10, 0x800, 0x1) sendmsg(0xffffffffffffffff, 0x0, 0x0) epoll_create(0x0) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x20000004e20, @local}, 0x10) bpf$BPF_PROG_GET_NEXT_ID(0xb, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) socket(0x0, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x100000000000000, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) bpf$OBJ_PIN_PROG(0x6, 0x0, 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, 0x0, 0x0) sendto$inet(r1, 0x0, 0x0, 0x24000000, &(0x7f0000000040)={0x2, 0x4e20, @local}, 0x10) sendto$inet(r1, &(0x7f00000001c0)="83", 0x1, 0x4081, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000200)="14", 0x1, 0x0, 0x0, 0xfffffffffffffea8) recvfrom$inet(r1, 0x0, 0x78, 0x0, 0x0, 0x0) ioctl$sock_TIOCINQ(r1, 0x541b, &(0x7f0000000040)) 00:29:13 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) close(0xffffffffffffffff) r3 = socket$packet(0x11, 0x3, 0x300) write(r1, &(0x7f0000000340)="240000002100255107000165ff00fc020a0066c400000000", 0x18) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x50, 0x0, 0x1, 0x0, 0x0, 0x0, {}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8}, {0x8}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}]}]}, 0x50}}, 0x0) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000240)={'veth0_to_hsr\x00', 0x0}) bind$packet(r3, &(0x7f00000000c0)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @random="000000002001"}, 0x14) sendto$inet6(0xffffffffffffffff, &(0x7f0000000180)="2603", 0x2, 0x0, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000180)=ANY=[], 0xfffffed2) splice(r0, 0x0, r2, 0x0, 0x4ffe3, 0x0) 00:29:13 executing program 4: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000089a173d2000000", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xb6ea6f9b087d72b3}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x3, 0x0, 0x0, 0x10000}]}}]}}]}, 0x44}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 00:29:13 executing program 0: r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x2c, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r2}]}}}]}, 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x3}]}}}]}, 0x3c}}, 0x0) 00:29:13 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@delchain={0x23, 0x66, 0xf31}, 0x24}}, 0x0) 00:29:13 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x17, 0x3, &(0x7f0000000280)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x50, 0x57}}, &(0x7f0000000140)='GPL\x00', 0x1, 0xfc76, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffe77}, 0x48) [ 251.343877][T12929] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 251.414159][T12929] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 00:29:13 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0xf000) sendfile(r1, r2, 0x0, 0xf03b0000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x13, r0, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) sendmsg$NFNL_MSG_CTHELPER_GET(0xffffffffffffffff, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_cpus\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r4, 0x40305828, &(0x7f00000004c0)={0x0, 0x0, 0x61bd, 0x1c2dc0000}) write$cgroup_int(r4, 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0xa) getsockopt$netrom_NETROM_T2(0xffffffffffffffff, 0x103, 0x2, 0x0, &(0x7f0000000100)) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='cgroup.controllers\x00', 0x26e1, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000001300)={0xffffffffffffffff, r5, 0x25, 0x8}, 0x10) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/18, 0x30c000, 0x800}, 0x200d20) 00:29:13 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x17, 0x3, &(0x7f0000000280)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x50, 0x57}}, &(0x7f0000000140)='GPL\x00', 0x1, 0xfc76, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffe77}, 0x48) 00:29:13 executing program 0: r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x2c, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r2}]}}}]}, 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x3}]}}}]}, 0x3c}}, 0x0) 00:29:13 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg(r2, &(0x7f0000004bc0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x3fffffffffffe9e, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000004bc0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x3fffffffffffe9e, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[@ANYRESHEX, @ANYRESDEC=r1], 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r0, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r3, &(0x7f0000000100)=ANY=[], 0x6) recvmmsg(r3, &(0x7f0000000600), 0x204083acb88ff8b, 0x2, 0x0) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000040), &(0x7f00000001c0)=0x4) 00:29:13 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x17, 0x3, &(0x7f0000000280)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x50, 0x57}}, &(0x7f0000000140)='GPL\x00', 0x1, 0xfc76, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffe77}, 0x48) 00:29:14 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000200)=0xf9, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'macvtap0\x00', 0x0}) bind$packet(r0, &(0x7f0000000100)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendto$inet6(r0, &(0x7f0000000080)="03042a01071d60004003002cfff57b016d2763bd56373780398d530000002b67000003c92ad462218d9045a7ffe4ec55e0654786a70100935ba514d40808efa000801600002fd08d49770afd6e9ef5837dbd00000000c000"/108, 0x3287, 0x42, 0x0, 0x331) 00:29:14 executing program 5: socket$inet6(0xa, 0x80003, 0x6b) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r0, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000e00)={0x0, 0xf00}}, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) socket$inet(0x10, 0x800, 0x1) sendmsg(0xffffffffffffffff, 0x0, 0x0) epoll_create(0x0) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x20000004e20, @local}, 0x10) bpf$BPF_PROG_GET_NEXT_ID(0xb, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) socket(0x0, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x100000000000000, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) bpf$OBJ_PIN_PROG(0x6, 0x0, 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, 0x0, 0x0) sendto$inet(r1, 0x0, 0x0, 0x24000000, &(0x7f0000000040)={0x2, 0x4e20, @local}, 0x10) sendto$inet(r1, &(0x7f00000001c0)="83", 0x1, 0x4081, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000200)="14", 0x1, 0x0, 0x0, 0xfffffffffffffea8) recvfrom$inet(r1, 0x0, 0x78, 0x0, 0x0, 0x0) ioctl$sock_TIOCINQ(r1, 0x541b, &(0x7f0000000040)) 00:29:14 executing program 1: r0 = socket$inet6(0xa, 0x80003, 0xff) close(r0) 00:29:14 executing program 0: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000006c80)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000880)=""/174, 0xae}, {&(0x7f0000000940)=""/168, 0xa8}, {&(0x7f0000000a00)=""/226, 0xe2}], 0x3}}, {{0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f0000000b00)=""/48, 0x30}], 0x1}}], 0x2, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f00000000c0)=@alg, 0x80, 0x0, 0x0, &(0x7f0000000300)=""/53, 0x35}, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x374, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0xbe9}, {&(0x7f0000000140)=""/85, 0x230}, {&(0x7f0000000fc0)=""/4096, 0xf2}, {&(0x7f0000000400)=""/106, 0x643}, {&(0x7f0000000740)=""/73, 0x59}, {&(0x7f0000000200)=""/77, 0x21a}, {&(0x7f00000007c0)=""/154, 0x42c}, {&(0x7f0000000000)=""/22, 0x10}], 0x81, &(0x7f0000000600)=""/191, 0x41}}], 0x800000000000197, 0x0, &(0x7f0000003700)={0x77359400}) 00:29:14 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000200)=0xf9, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'macvtap0\x00', 0x0}) bind$packet(r0, &(0x7f0000000100)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendto$inet6(r0, &(0x7f0000000080)="03042a01071d60004003002cfff57b016d2763bd56373780398d530000002b67000003c92ad462218d9045a7ffe4ec55e0654786a70100935ba514d40808efa000801600002fd08d49770afd6e9ef5837dbd00000000c000"/108, 0x3287, 0x42, 0x0, 0x331) 00:29:14 executing program 1: r0 = socket$inet6(0xa, 0x80003, 0xff) close(r0) 00:29:14 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg(r2, &(0x7f0000004bc0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x3fffffffffffe9e, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000004bc0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x3fffffffffffe9e, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[@ANYRESHEX, @ANYRESDEC=r1], 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r0, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r3, &(0x7f0000000100)=ANY=[], 0x6) recvmmsg(r3, &(0x7f0000000600), 0x204083acb88ff8b, 0x2, 0x0) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000040), &(0x7f00000001c0)=0x4) 00:29:14 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0xf000) sendfile(r1, r2, 0x0, 0xf03b0000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x13, r0, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) sendmsg$NFNL_MSG_CTHELPER_GET(0xffffffffffffffff, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_cpus\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r4, 0x40305828, &(0x7f00000004c0)={0x0, 0x0, 0x61bd, 0x1c2dc0000}) write$cgroup_int(r4, 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0xa) getsockopt$netrom_NETROM_T2(0xffffffffffffffff, 0x103, 0x2, 0x0, &(0x7f0000000100)) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='cgroup.controllers\x00', 0x26e1, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000001300)={0xffffffffffffffff, r5, 0x25, 0x8}, 0x10) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/18, 0x30c000, 0x800}, 0x200d20) 00:29:14 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000200)=0xf9, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'macvtap0\x00', 0x0}) bind$packet(r0, &(0x7f0000000100)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendto$inet6(r0, &(0x7f0000000080)="03042a01071d60004003002cfff57b016d2763bd56373780398d530000002b67000003c92ad462218d9045a7ffe4ec55e0654786a70100935ba514d40808efa000801600002fd08d49770afd6e9ef5837dbd00000000c000"/108, 0x3287, 0x42, 0x0, 0x331) 00:29:14 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0xf000) sendfile(r1, r2, 0x0, 0xf03b0000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x13, r0, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) sendmsg$NFNL_MSG_CTHELPER_GET(0xffffffffffffffff, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_cpus\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r4, 0x40305828, &(0x7f00000004c0)={0x0, 0x0, 0x61bd, 0x1c2dc0000}) write$cgroup_int(r4, 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0xa) getsockopt$netrom_NETROM_T2(0xffffffffffffffff, 0x103, 0x2, 0x0, &(0x7f0000000100)) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='cgroup.controllers\x00', 0x26e1, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000001300)={0xffffffffffffffff, r5, 0x25, 0x8}, 0x10) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/18, 0x30c000, 0x800}, 0x200d20) 00:29:14 executing program 1: r0 = socket$inet6(0xa, 0x80003, 0xff) close(r0) 00:29:14 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000200)=0xf9, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'macvtap0\x00', 0x0}) bind$packet(r0, &(0x7f0000000100)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendto$inet6(r0, &(0x7f0000000080)="03042a01071d60004003002cfff57b016d2763bd56373780398d530000002b67000003c92ad462218d9045a7ffe4ec55e0654786a70100935ba514d40808efa000801600002fd08d49770afd6e9ef5837dbd00000000c000"/108, 0x3287, 0x42, 0x0, 0x331) 00:29:15 executing program 1: r0 = socket$inet6(0xa, 0x80003, 0xff) close(r0) 00:29:15 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0xf000) sendfile(r1, r2, 0x0, 0xf03b0000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x13, r0, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) sendmsg$NFNL_MSG_CTHELPER_GET(0xffffffffffffffff, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_cpus\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r4, 0x40305828, &(0x7f00000004c0)={0x0, 0x0, 0x61bd, 0x1c2dc0000}) write$cgroup_int(r4, 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0xa) getsockopt$netrom_NETROM_T2(0xffffffffffffffff, 0x103, 0x2, 0x0, &(0x7f0000000100)) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='cgroup.controllers\x00', 0x26e1, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000001300)={0xffffffffffffffff, r5, 0x25, 0x8}, 0x10) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/18, 0x30c000, 0x800}, 0x200d20) 00:29:15 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0xf000) sendfile(r1, r2, 0x0, 0xf03b0000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x13, r0, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) sendmsg$NFNL_MSG_CTHELPER_GET(0xffffffffffffffff, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_cpus\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r4, 0x40305828, &(0x7f00000004c0)={0x0, 0x0, 0x61bd, 0x1c2dc0000}) write$cgroup_int(r4, 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0xa) getsockopt$netrom_NETROM_T2(0xffffffffffffffff, 0x103, 0x2, 0x0, &(0x7f0000000100)) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='cgroup.controllers\x00', 0x26e1, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000001300)={0xffffffffffffffff, r5, 0x25, 0x8}, 0x10) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/18, 0x30c000, 0x800}, 0x200d20) 00:29:15 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003c000505d25a80648c63940d0324fc60100000000a000a00053582c137153e37000a018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 00:29:15 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0xf000) sendfile(r1, r2, 0x0, 0xf03b0000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x13, r0, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) sendmsg$NFNL_MSG_CTHELPER_GET(0xffffffffffffffff, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_cpus\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r4, 0x40305828, &(0x7f00000004c0)={0x0, 0x0, 0x61bd, 0x1c2dc0000}) write$cgroup_int(r4, 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0xa) getsockopt$netrom_NETROM_T2(0xffffffffffffffff, 0x103, 0x2, 0x0, &(0x7f0000000100)) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='cgroup.controllers\x00', 0x26e1, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000001300)={0xffffffffffffffff, r5, 0x25, 0x8}, 0x10) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/18, 0x30c000, 0x800}, 0x200d20) 00:29:15 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0xf000) sendfile(r1, r2, 0x0, 0xf03b0000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x13, r0, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) sendmsg$NFNL_MSG_CTHELPER_GET(0xffffffffffffffff, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_cpus\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r4, 0x40305828, &(0x7f00000004c0)={0x0, 0x0, 0x61bd, 0x1c2dc0000}) write$cgroup_int(r4, 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0xa) getsockopt$netrom_NETROM_T2(0xffffffffffffffff, 0x103, 0x2, 0x0, &(0x7f0000000100)) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='cgroup.controllers\x00', 0x26e1, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000001300)={0xffffffffffffffff, r5, 0x25, 0x8}, 0x10) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/18, 0x30c000, 0x800}, 0x200d20) [ 253.801153][T13024] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 00:29:15 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg(r2, &(0x7f0000004bc0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x3fffffffffffe9e, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000004bc0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x3fffffffffffe9e, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[@ANYRESHEX, @ANYRESDEC=r1], 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r0, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r3, &(0x7f0000000100)=ANY=[], 0x6) recvmmsg(r3, &(0x7f0000000600), 0x204083acb88ff8b, 0x2, 0x0) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000040), &(0x7f00000001c0)=0x4) 00:29:15 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0xf000) sendfile(r1, r2, 0x0, 0xf03b0000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x13, r0, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) sendmsg$NFNL_MSG_CTHELPER_GET(0xffffffffffffffff, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_cpus\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r4, 0x40305828, &(0x7f00000004c0)={0x0, 0x0, 0x61bd, 0x1c2dc0000}) write$cgroup_int(r4, 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0xa) getsockopt$netrom_NETROM_T2(0xffffffffffffffff, 0x103, 0x2, 0x0, &(0x7f0000000100)) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='cgroup.controllers\x00', 0x26e1, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000001300)={0xffffffffffffffff, r5, 0x25, 0x8}, 0x10) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/18, 0x30c000, 0x800}, 0x200d20) [ 253.855822][T13024] netlink: 210364 bytes leftover after parsing attributes in process `syz-executor.1'. 00:29:16 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0xf000) sendfile(r1, r2, 0x0, 0xf03b0000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x13, r0, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) sendmsg$NFNL_MSG_CTHELPER_GET(0xffffffffffffffff, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_cpus\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r4, 0x40305828, &(0x7f00000004c0)={0x0, 0x0, 0x61bd, 0x1c2dc0000}) write$cgroup_int(r4, 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0xa) getsockopt$netrom_NETROM_T2(0xffffffffffffffff, 0x103, 0x2, 0x0, &(0x7f0000000100)) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='cgroup.controllers\x00', 0x26e1, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000001300)={0xffffffffffffffff, r5, 0x25, 0x8}, 0x10) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/18, 0x30c000, 0x800}, 0x200d20) 00:29:16 executing program 1: r0 = socket$rds(0x15, 0x5, 0x0) getsockopt$sock_cred(r0, 0x1, 0xd, 0x0, &(0x7f0000000500)) 00:29:16 executing program 1: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000280)=ANY=[@ANYBLOB='-0'], 0x6) 00:29:16 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0xf000) sendfile(r1, r2, 0x0, 0xf03b0000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x13, r0, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) sendmsg$NFNL_MSG_CTHELPER_GET(0xffffffffffffffff, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_cpus\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r4, 0x40305828, &(0x7f00000004c0)={0x0, 0x0, 0x61bd, 0x1c2dc0000}) write$cgroup_int(r4, 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0xa) getsockopt$netrom_NETROM_T2(0xffffffffffffffff, 0x103, 0x2, 0x0, &(0x7f0000000100)) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='cgroup.controllers\x00', 0x26e1, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000001300)={0xffffffffffffffff, r5, 0x25, 0x8}, 0x10) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/18, 0x30c000, 0x800}, 0x200d20) 00:29:16 executing program 1: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000280)=ANY=[@ANYBLOB='-0'], 0x6) 00:29:17 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0xf000) sendfile(r1, r2, 0x0, 0xf03b0000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x13, r0, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) sendmsg$NFNL_MSG_CTHELPER_GET(0xffffffffffffffff, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_cpus\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r4, 0x40305828, &(0x7f00000004c0)={0x0, 0x0, 0x61bd, 0x1c2dc0000}) write$cgroup_int(r4, 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0xa) getsockopt$netrom_NETROM_T2(0xffffffffffffffff, 0x103, 0x2, 0x0, &(0x7f0000000100)) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='cgroup.controllers\x00', 0x26e1, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000001300)={0xffffffffffffffff, r5, 0x25, 0x8}, 0x10) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/18, 0x30c000, 0x800}, 0x200d20) 00:29:17 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg(r2, &(0x7f0000004bc0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x3fffffffffffe9e, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000004bc0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x3fffffffffffe9e, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[@ANYRESHEX, @ANYRESDEC=r1], 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r0, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r3, &(0x7f0000000100)=ANY=[], 0x6) recvmmsg(r3, &(0x7f0000000600), 0x204083acb88ff8b, 0x2, 0x0) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000040), &(0x7f00000001c0)=0x4) 00:29:17 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0xf000) sendfile(r1, r2, 0x0, 0xf03b0000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x13, r0, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) sendmsg$NFNL_MSG_CTHELPER_GET(0xffffffffffffffff, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_cpus\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r4, 0x40305828, &(0x7f00000004c0)={0x0, 0x0, 0x61bd, 0x1c2dc0000}) write$cgroup_int(r4, 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0xa) getsockopt$netrom_NETROM_T2(0xffffffffffffffff, 0x103, 0x2, 0x0, &(0x7f0000000100)) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='cgroup.controllers\x00', 0x26e1, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000001300)={0xffffffffffffffff, r5, 0x25, 0x8}, 0x10) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/18, 0x30c000, 0x800}, 0x200d20) 00:29:17 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0xf000) sendfile(r1, r2, 0x0, 0xf03b0000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x13, r0, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) sendmsg$NFNL_MSG_CTHELPER_GET(0xffffffffffffffff, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_cpus\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r4, 0x40305828, &(0x7f00000004c0)={0x0, 0x0, 0x61bd, 0x1c2dc0000}) write$cgroup_int(r4, 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0xa) getsockopt$netrom_NETROM_T2(0xffffffffffffffff, 0x103, 0x2, 0x0, &(0x7f0000000100)) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='cgroup.controllers\x00', 0x26e1, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000001300)={0xffffffffffffffff, r5, 0x25, 0x8}, 0x10) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/18, 0x30c000, 0x800}, 0x200d20) 00:29:17 executing program 1: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000280)=ANY=[@ANYBLOB='-0'], 0x6) 00:29:17 executing program 3: syz_emit_ethernet(0x66, &(0x7f0000000200)={@local, @remote, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @private, @private}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x1, 0x0, 0x4}}}}}}, 0x0) [ 255.506988][ T1358] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.513380][ T1358] ieee802154 phy1 wpan1: encryption failed: -22 00:29:17 executing program 1: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000280)=ANY=[@ANYBLOB='-0'], 0x6) 00:29:17 executing program 2: r0 = socket(0x200000100000011, 0x803, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) bind$packet(r0, &(0x7f0000000000)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @random="00000090fd39"}, 0x14) write$binfmt_aout(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="80000000000000200000ffff81000001"], 0x120) 00:29:17 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19}, 0x42) 00:29:17 executing program 5: r0 = socket(0xa, 0x6, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x8001000000000000, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x8, 0x3, 0x3b0, 0x160, 0x11, 0x148, 0x160, 0x38c, 0x318, 0x2a8, 0x2a8, 0x318, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x100, 0x160, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'veth1_to_batadv\x00', {0x0, 0x0, 0x9, 0x0, 0x0, 0x3, 0x7}}}, @common=@unspec=@devgroup={{0x38}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@multicast2, [], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}}}, {{@ip={@loopback, @multicast2, 0x0, 0x0, 'vlan0\x00', 'dummy0\x00', {}, {}, 0x2}, 0x0, 0x150, 0x1b8, 0x0, {}, [@common=@unspec=@conntrack1={{0xb8}, {{@ipv6=@local, [], @ipv4=@multicast2, [], @ipv4=@empty, [], @ipv4=@empty}}}, @common=@ttl={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x410) [ 255.959997][T13084] batman_adv: batadv0: adding TT local entry 00:20:00:00:ff:ff to non-existent VLAN 1 [ 256.026701][T13086] No such timeout policy "syz0" [ 256.038959][T13088] batman_adv: batadv0: adding TT local entry 00:20:00:00:ff:ff to non-existent VLAN 1 00:29:18 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@bridge_setlink={0x3c, 0x13, 0xa29, 0x0, 0x0, {0x7, 0x0, 0x0, r1}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET={0x18, 0x4, 0x0, 0x1, {0x14, 0x9, 0x0, 0x1, [{0x8, 0x1}, {0x8, 0x2}]}}]}]}, 0x3c}}, 0x0) 00:29:18 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="4800000010000d07cdd87d345d28000000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="740000002400070500"/20, @ANYRES32=r3, @ANYBLOB="00000200ffffffff0000000008000100736671"], 0x74}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="34000000660007c8370000000000810000000000", @ANYRES32=r3, @ANYBLOB="00000000110a02"], 0x34}}, 0x0) r4 = socket(0x10, 0x400000100080003, 0x0) sendmmsg$alg(r4, &(0x7f0000000140), 0x2e7, 0x0) 00:29:18 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000980)={0x6c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x47, 0x33, @beacon={@with_ht={{{}, {}, @device_a, @device_a, @random="44a802bbaad9"}}, 0x0, @default, 0x0, @val, @void, @val={0x3, 0x1}, @void, @void, @val={0x5, 0x3}, @void, @void, @void, @void, @val={0x72, 0x6}, @val={0x71, 0x7}, @void}}, @NL80211_ATTR_DURATION={0x8, 0x57, 0xfffffffc}]}, 0x6c}}, 0x0) 00:29:18 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x12, 0x8000, 0x4, 0x40, 0x0, 0x1}, 0x40) 00:29:18 executing program 5: r0 = socket(0xa, 0x6, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x8001000000000000, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x8, 0x3, 0x3b0, 0x160, 0x11, 0x148, 0x160, 0x38c, 0x318, 0x2a8, 0x2a8, 0x318, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x100, 0x160, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'veth1_to_batadv\x00', {0x0, 0x0, 0x9, 0x0, 0x0, 0x3, 0x7}}}, @common=@unspec=@devgroup={{0x38}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@multicast2, [], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}}}, {{@ip={@loopback, @multicast2, 0x0, 0x0, 'vlan0\x00', 'dummy0\x00', {}, {}, 0x2}, 0x0, 0x150, 0x1b8, 0x0, {}, [@common=@unspec=@conntrack1={{0xb8}, {{@ipv6=@local, [], @ipv4=@multicast2, [], @ipv4=@empty, [], @ipv4=@empty}}}, @common=@ttl={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x410) 00:29:18 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CALIPSO_C_LIST(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000980)=ANY=[@ANYRES64, @ANYRES16=0x0, @ANYRESDEC], 0x1c}, 0x1, 0x0, 0x0, 0x40040}, 0x890) sendmsg$NLBL_CALIPSO_C_REMOVE(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="2c000e21162175b07f6dc2e5a6a6b7538a0000", @ANYRES16=0x0, @ANYBLOB="00012abd7000fedbdf250200000008000100000000000800010000000000080002000200"], 0x2c}, 0x1, 0x0, 0x0, 0x44004}, 0x4004000) sendmsg$NLBL_CALIPSO_C_REMOVE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000480), 0xffffffffffffffff) 00:29:18 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000000ec00000000000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x272, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x44}}, 0x0) 00:29:18 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYNAME(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000400)={0x1c, 0xe, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x10}]}, 0x1c}}, 0x0) [ 256.511382][T13099] No such timeout policy "syz0" [ 256.572576][T13105] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 00:29:18 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_SETPARAMS(r0, &(0x7f00000003c0)={&(0x7f0000000140), 0x7, &(0x7f0000000380)={&(0x7f0000000340)={0x40, 0x0, 0x0, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5}, @IEEE802154_ATTR_LLSEC_ENABLED={0x5}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc}, @IEEE802154_ATTR_LLSEC_SECLEVEL={0x5}]}, 0x40}}, 0x0) 00:29:18 executing program 5: r0 = socket(0xa, 0x6, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x8001000000000000, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x8, 0x3, 0x3b0, 0x160, 0x11, 0x148, 0x160, 0x38c, 0x318, 0x2a8, 0x2a8, 0x318, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x100, 0x160, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'veth1_to_batadv\x00', {0x0, 0x0, 0x9, 0x0, 0x0, 0x3, 0x7}}}, @common=@unspec=@devgroup={{0x38}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@multicast2, [], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}}}, {{@ip={@loopback, @multicast2, 0x0, 0x0, 'vlan0\x00', 'dummy0\x00', {}, {}, 0x2}, 0x0, 0x150, 0x1b8, 0x0, {}, [@common=@unspec=@conntrack1={{0xb8}, {{@ipv6=@local, [], @ipv4=@multicast2, [], @ipv4=@empty, [], @ipv4=@empty}}}, @common=@ttl={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x410) 00:29:18 executing program 1: bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) sendfile(r2, r3, 0x0, 0xf03b0000) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000180)) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmmsg(r4, 0x0, 0x0, 0x0) sendfile(r1, r0, 0x0, 0x8000000000004) [ 256.701420][T13107] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. 00:29:18 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000500)=@ipv4_delroute={0x24, 0x19, 0x1, 0x0, 0x0, {}, [@RTA_GATEWAY={0x8, 0x5, @private}]}, 0x24}}, 0x0) [ 256.761048][T13109] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.0'. [ 256.805389][T13116] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. [ 256.833495][T13119] bridge1: port 1(macvlan2) entered blocking state [ 256.856622][T13119] bridge1: port 1(macvlan2) entered disabled state [ 256.893504][T13119] device macvlan2 entered promiscuous mode 00:29:18 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x46, &(0x7f0000000200), 0x4) [ 256.921517][T13136] No such timeout policy "syz0" [ 256.955329][T13116] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.0'. [ 256.978228][T13109] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.0'. [ 256.998204][T13105] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 257.107452][T13119] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 257.160479][T13139] bridge1: port 2(macvlan3) entered blocking state 00:29:19 executing program 0: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000001840)={0x20, 0x1d, 0x1, 0x0, 0x0, "", [@nested={0x3, 0x0, 0x0, 0x1, [@typed={0xc, 0x1, 0x0, 0x0, @u64=0x2}]}]}, 0x20}], 0x1}, 0x0) 00:29:19 executing program 5: r0 = socket(0xa, 0x6, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x8001000000000000, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x8, 0x3, 0x3b0, 0x160, 0x11, 0x148, 0x160, 0x38c, 0x318, 0x2a8, 0x2a8, 0x318, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x100, 0x160, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'veth1_to_batadv\x00', {0x0, 0x0, 0x9, 0x0, 0x0, 0x3, 0x7}}}, @common=@unspec=@devgroup={{0x38}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@multicast2, [], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}}}, {{@ip={@loopback, @multicast2, 0x0, 0x0, 'vlan0\x00', 'dummy0\x00', {}, {}, 0x2}, 0x0, 0x150, 0x1b8, 0x0, {}, [@common=@unspec=@conntrack1={{0xb8}, {{@ipv6=@local, [], @ipv4=@multicast2, [], @ipv4=@empty, [], @ipv4=@empty}}}, @common=@ttl={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x410) 00:29:19 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000085000000a000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000500)='ext4_mballoc_alloc\x00', r1}, 0x10) write$cgroup_type(r0, &(0x7f0000000000), 0x248800) [ 257.208520][T13139] bridge1: port 2(macvlan3) entered disabled state [ 257.216302][T13139] device macvlan3 entered promiscuous mode [ 257.342876][T13158] No such timeout policy "syz0" 00:29:19 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) shutdown(r0, 0x0) recvfrom(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 00:29:19 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000000ec00000000000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x272, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x44}}, 0x0) [ 257.453678][T13162] netlink: 'syz-executor.0': attribute type 1 has an invalid length. 00:29:19 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000000ec00000000000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x272, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x44}}, 0x0) 00:29:19 executing program 0: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000001840)={0x20, 0x1d, 0x1, 0x0, 0x0, "", [@nested={0x3, 0x0, 0x0, 0x1, [@typed={0xc, 0x1, 0x0, 0x0, @u64=0x2}]}]}, 0x20}], 0x1}, 0x0) [ 257.629456][T13169] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. 00:29:19 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x3}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @xfrm={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_XFRM_KEY={0x8}, @NFTA_XFRM_DIR={0x5}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 00:29:19 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) bind$unix(r0, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e24}, 0x6e) r1 = socket$unix(0x1, 0x5, 0x0) bind$unix(r1, &(0x7f0000000040)=@abs={0x1, 0x0, 0x4e20}, 0x6e) [ 257.732112][T13171] bridge2: port 1(macvlan4) entered blocking state [ 257.787739][T13171] bridge2: port 1(macvlan4) entered disabled state [ 257.840251][T13171] device macvlan4 entered promiscuous mode [ 257.856321][T13184] netlink: 'syz-executor.0': attribute type 1 has an invalid length. 00:29:19 executing program 1: bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) sendfile(r2, r3, 0x0, 0xf03b0000) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000180)) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmmsg(r4, 0x0, 0x0, 0x0) sendfile(r1, r0, 0x0, 0x8000000000004) 00:29:19 executing program 3: bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) sendfile(r2, r3, 0x0, 0xf03b0000) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000180)) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmmsg(r4, 0x0, 0x0, 0x0) sendfile(r1, r0, 0x0, 0x8000000000004) [ 257.902060][T13180] bridge6: port 1(macvlan2) entered blocking state [ 257.933881][T13180] bridge6: port 1(macvlan2) entered disabled state 00:29:20 executing program 0: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000001840)={0x20, 0x1d, 0x1, 0x0, 0x0, "", [@nested={0x3, 0x0, 0x0, 0x1, [@typed={0xc, 0x1, 0x0, 0x0, @u64=0x2}]}]}, 0x20}], 0x1}, 0x0) 00:29:20 executing program 4: r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001540)={&(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x0, 0x26}, 0x20) r1 = bpf$MAP_CREATE(0x1000000000000, &(0x7f0000000040)={0x5, 0x2, 0x2, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r0, 0x1, 0x1}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000140)={&(0x7f00000001c0), 0x0, 0x0, 0x0, 0x0, r1, 0x369960c4998ff30a}, 0x38) 00:29:20 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000000ec00000000000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x272, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x44}}, 0x0) [ 258.004574][T13180] device macvlan2 entered promiscuous mode 00:29:20 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000000ec00000000000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x272, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x44}}, 0x0) [ 258.157608][T13198] netlink: 'syz-executor.0': attribute type 1 has an invalid length. 00:29:20 executing program 0: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000001840)={0x20, 0x1d, 0x1, 0x0, 0x0, "", [@nested={0x3, 0x0, 0x0, 0x1, [@typed={0xc, 0x1, 0x0, 0x0, @u64=0x2}]}]}, 0x20}], 0x1}, 0x0) [ 258.277795][T13202] bridge3: port 1(macvlan5) entered blocking state 00:29:20 executing program 4: syz_emit_ethernet(0x66, &(0x7f0000000140)={@broadcast, @broadcast, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @rand_addr, @multicast1}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8100}}}}}}, 0x0) [ 258.320262][T13202] bridge3: port 1(macvlan5) entered disabled state [ 258.354855][T13202] device macvlan5 entered promiscuous mode [ 258.428017][T13208] bridge7: port 1(macvlan3) entered blocking state [ 258.428341][T13208] bridge7: port 1(macvlan3) entered disabled state 00:29:20 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000000ec00000000000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x272, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x44}}, 0x0) [ 258.534520][T13218] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 258.542702][T13208] device macvlan3 entered promiscuous mode 00:29:20 executing program 4: syz_emit_ethernet(0x66, &(0x7f0000000140)={@broadcast, @broadcast, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @rand_addr, @multicast1}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8100}}}}}}, 0x0) 00:29:20 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000000ec00000000000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x272, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x44}}, 0x0) 00:29:20 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_SPLIT(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x44, r1, 0x1, 0x0, 0x0, {0x4c}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8}}]}, 0x44}}, 0x0) [ 258.835266][T13221] bridge4: port 1(macvlan6) entered blocking state [ 258.902960][T13221] bridge4: port 1(macvlan6) entered disabled state [ 258.977537][T13221] device macvlan6 entered promiscuous mode [ 259.055805][T13230] __nla_validate_parse: 4 callbacks suppressed [ 259.055823][T13230] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 259.204669][T13233] bridge8: port 1(macvlan4) entered blocking state 00:29:21 executing program 1: bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) sendfile(r2, r3, 0x0, 0xf03b0000) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000180)) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmmsg(r4, 0x0, 0x0, 0x0) sendfile(r1, r0, 0x0, 0x8000000000004) 00:29:21 executing program 4: syz_emit_ethernet(0x66, &(0x7f0000000140)={@broadcast, @broadcast, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @rand_addr, @multicast1}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8100}}}}}}, 0x0) 00:29:21 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_SPLIT(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x44, r1, 0x1, 0x0, 0x0, {0x4c}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8}}]}, 0x44}}, 0x0) 00:29:21 executing program 3: bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) sendfile(r2, r3, 0x0, 0xf03b0000) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000180)) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmmsg(r4, 0x0, 0x0, 0x0) sendfile(r1, r0, 0x0, 0x8000000000004) [ 259.247059][T13233] bridge8: port 1(macvlan4) entered disabled state 00:29:21 executing program 2: r0 = socket$netlink(0x10, 0x3, 0xc) syz_genetlink_get_family_id$tipc2(&(0x7f0000000440), r0) [ 259.292497][T13233] device macvlan4 entered promiscuous mode 00:29:21 executing program 4: syz_emit_ethernet(0x66, &(0x7f0000000140)={@broadcast, @broadcast, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @rand_addr, @multicast1}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8100}}}}}}, 0x0) 00:29:21 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_SPLIT(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x44, r1, 0x1, 0x0, 0x0, {0x4c}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8}}]}, 0x44}}, 0x0) 00:29:21 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@local, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x6}}, {{@in6=@empty, 0x0, 0x2b}, 0x0, @in6=@private1}}, 0xe8) syz_emit_ethernet(0x36, &(0x7f00000000c0)={@local, @local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @empty}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) 00:29:21 executing program 5: r0 = socket(0x1, 0x5, 0x0) sendto$l2tp(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 00:29:21 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x18, r1, 0xf01, 0x0, 0x0, {}, [@TIPC_NLA_MON={0x4}]}, 0x18}}, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r3, r2, 0x0, 0x10000a006) 00:29:21 executing program 5: r0 = socket$unix(0x1, 0x5, 0x0) sendmmsg$inet(r0, &(0x7f0000003740), 0x0, 0x0) 00:29:21 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_SPLIT(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x44, r1, 0x1, 0x0, 0x0, {0x4c}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8}}]}, 0x44}}, 0x0) [ 260.057622][ T26] audit: type=1804 audit(1634603362.055:79): pid=13266 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir516473655/syzkaller.aQ1LtY/137/cgroup.controllers" dev="sda1" ino=14484 res=1 errno=0 00:29:22 executing program 1: bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) sendfile(r2, r3, 0x0, 0xf03b0000) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000180)) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmmsg(r4, 0x0, 0x0, 0x0) sendfile(r1, r0, 0x0, 0x8000000000004) 00:29:22 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'virt_wifi0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r4, @ANYBLOB="0000000007000000140012000c000100627269646765"], 0x34}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_MASTER={0x8, 0xa, r4}]}, 0x28}}, 0x0) 00:29:22 executing program 5: r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f0000000140)=0x1, 0x4) 00:29:22 executing program 0: r0 = socket$inet6(0xa, 0x3, 0xff) setsockopt$inet6_group_source_req(r0, 0x29, 0x16, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @dev}}, {{0xa, 0x0, 0x0, @private2}}}, 0x108) setsockopt$inet6_int(r0, 0x29, 0x16, &(0x7f0000000000), 0x4) 00:29:22 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x18, r1, 0xf01, 0x0, 0x0, {}, [@TIPC_NLA_MON={0x4}]}, 0x18}}, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r3, r2, 0x0, 0x10000a006) 00:29:22 executing program 3: bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) sendfile(r2, r3, 0x0, 0xf03b0000) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000180)) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmmsg(r4, 0x0, 0x0, 0x0) sendfile(r1, r0, 0x0, 0x8000000000004) [ 260.677025][T13279] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. 00:29:22 executing program 5: r0 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r0, &(0x7f0000000200)={0x10, 0x2}, 0xa) 00:29:22 executing program 0: syz_emit_ethernet(0x62, &(0x7f0000000200)={@broadcast, @multicast, @val={@void}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "3c159b", 0x7, 0x2b, 0x0, @dev, @local, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @dev, @private0}}}}}}, 0x0) [ 260.778283][T13284] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. 00:29:22 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'virt_wifi0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r4, @ANYBLOB="0000000007000000140012000c000100627269646765"], 0x34}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_MASTER={0x8, 0xa, r4}]}, 0x28}}, 0x0) [ 261.002101][ T26] audit: type=1804 audit(1634603363.005:80): pid=13282 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir516473655/syzkaller.aQ1LtY/138/cgroup.controllers" dev="sda1" ino=14515 res=1 errno=0 00:29:23 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22, 0x0, @mcast2, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev}, 0x1c) syz_emit_ethernet(0x46, &(0x7f0000000440)={@local, @remote, @val={@void}, {@ipv6={0x86dd, @udp={0x0, 0x6, '\x00', 0xc, 0x11, 0x0, @dev, @mcast2, {[], {0x2, 0xe22, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}}, 0x0) 00:29:23 executing program 5: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000100)={0x1d, r1, 0x2}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000080)={&(0x7f0000000b40)={0x1d, 0x0, 0x0, {0x0, 0x1ee}}, 0x18, &(0x7f0000000b80)={&(0x7f0000000000)="02", 0x8}}, 0x0) [ 261.228137][T13299] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 261.380518][T13306] vcan0: tx address claim with dest, not broadcast 00:29:23 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'virt_wifi0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r4, @ANYBLOB="0000000007000000140012000c000100627269646765"], 0x34}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_MASTER={0x8, 0xa, r4}]}, 0x28}}, 0x0) [ 261.742968][T13312] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. 00:29:24 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22, 0x0, @mcast2, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev}, 0x1c) syz_emit_ethernet(0x46, &(0x7f0000000440)={@local, @remote, @val={@void}, {@ipv6={0x86dd, @udp={0x0, 0x6, '\x00', 0xc, 0x11, 0x0, @dev, @mcast2, {[], {0x2, 0xe22, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}}, 0x0) 00:29:24 executing program 5: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000100)={0x1d, r1, 0x2}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000080)={&(0x7f0000000b40)={0x1d, 0x0, 0x0, {0x0, 0x1ee}}, 0x18, &(0x7f0000000b80)={&(0x7f0000000000)="02", 0x8}}, 0x0) 00:29:24 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x18, r1, 0xf01, 0x0, 0x0, {}, [@TIPC_NLA_MON={0x4}]}, 0x18}}, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r3, r2, 0x0, 0x10000a006) 00:29:24 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'virt_wifi0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r4, @ANYBLOB="0000000007000000140012000c000100627269646765"], 0x34}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_MASTER={0x8, 0xa, r4}]}, 0x28}}, 0x0) 00:29:24 executing program 3: getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x2c, &(0x7f0000000180)=[@in={0x2, 0x0, @private}, @in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000180)=ANY=[], 0x208e2ab) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000080)={0xfffffffffffffffe, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000000406011c000000008700827c00000900050001"], 0x1c}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000500) 00:29:24 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)=@newsa={0x154, 0x10, 0x713, 0x0, 0x0, {{@in=@local, @in6=@dev}, {@in6=@empty, 0x0, 0x32}, @in6=@empty, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @encap={0x1c, 0x1c, {0x2, 0x0, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}}]}, 0x154}}, 0x0) [ 262.194570][T13322] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 262.205529][T13326] vcan0: tx address claim with dest, not broadcast [ 262.288768][ T26] audit: type=1804 audit(1634603364.296:81): pid=13323 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir833406043/syzkaller.TotoXj/151/cgroup.controllers" dev="sda1" ino=14519 res=1 errno=0 00:29:24 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22, 0x0, @mcast2, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev}, 0x1c) syz_emit_ethernet(0x46, &(0x7f0000000440)={@local, @remote, @val={@void}, {@ipv6={0x86dd, @udp={0x0, 0x6, '\x00', 0xc, 0x11, 0x0, @dev, @mcast2, {[], {0x2, 0xe22, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}}, 0x0) 00:29:24 executing program 2: syz_emit_ethernet(0x46, &(0x7f00000007c0)={@local, @remote, @val={@void}, {@ipv4={0x800, @icmp={{0x6, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, {[@lsrr={0x83, 0x3}]}}, @source_quench={0x38, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback}}}}}}, 0x0) 00:29:24 executing program 5: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000100)={0x1d, r1, 0x2}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000080)={&(0x7f0000000b40)={0x1d, 0x0, 0x0, {0x0, 0x1ee}}, 0x18, &(0x7f0000000b80)={&(0x7f0000000000)="02", 0x8}}, 0x0) [ 262.543068][ T26] audit: type=1804 audit(1634603364.546:82): pid=13325 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir516473655/syzkaller.aQ1LtY/139/cgroup.controllers" dev="sda1" ino=14118 res=1 errno=0 [ 262.697965][T12900] Bluetooth: hci0: command 0x0406 tx timeout [ 262.704279][T12900] Bluetooth: hci2: command 0x0406 tx timeout [ 262.723844][T13343] vcan0: tx address claim with dest, not broadcast 00:29:24 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22, 0x0, @mcast2, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev}, 0x1c) syz_emit_ethernet(0x46, &(0x7f0000000440)={@local, @remote, @val={@void}, {@ipv6={0x86dd, @udp={0x0, 0x6, '\x00', 0xc, 0x11, 0x0, @dev, @mcast2, {[], {0x2, 0xe22, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}}, 0x0) 00:29:24 executing program 1: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) sendmmsg(r0, &(0x7f000000c480)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="2c456cbdddf8da195296bdc188f7", 0x1000e}], 0x1}}], 0x1, 0x0) 00:29:24 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f0000000300)=@get={0x1, &(0x7f00000002c0)=""/53, 0x1}) [ 262.748948][ T26] audit: type=1804 audit(1634603364.676:83): pid=13331 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir833406043/syzkaller.TotoXj/151/cgroup.controllers" dev="sda1" ino=14519 res=1 errno=0 [ 262.792380][T12900] Bluetooth: hci4: command 0x0406 tx timeout [ 262.828058][T12900] Bluetooth: hci5: command 0x0406 tx timeout 00:29:24 executing program 3: getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x2c, &(0x7f0000000180)=[@in={0x2, 0x0, @private}, @in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000180)=ANY=[], 0x208e2ab) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000080)={0xfffffffffffffffe, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000000406011c000000008700827c00000900050001"], 0x1c}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000500) 00:29:24 executing program 5: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000100)={0x1d, r1, 0x2}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000080)={&(0x7f0000000b40)={0x1d, 0x0, 0x0, {0x0, 0x1ee}}, 0x18, &(0x7f0000000b80)={&(0x7f0000000000)="02", 0x8}}, 0x0) 00:29:25 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x18, r1, 0xf01, 0x0, 0x0, {}, [@TIPC_NLA_MON={0x4}]}, 0x18}}, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r3, r2, 0x0, 0x10000a006) 00:29:25 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000300), &(0x7f0000000340)=0x14) 00:29:25 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) 00:29:25 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x4000000000002, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x80, 0x0) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) r3 = openat$cgroup_type(r0, &(0x7f0000000000), 0x2, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000009, 0x40010, r3, 0x80000001000) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) r5 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) socket(0x10, 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0x1c) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r6) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000020c0), &(0x7f0000002100)=0xc) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r7, 0x4000000000000, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0xc01, 0x3, 0x438, 0x2e8, 0x5002004a, 0x7d09, 0x0, 0x3, 0x3a0, 0x3c8, 0x3c8, 0x3a0, 0x3c8, 0x4, 0x0, {[{{@uncond, 0x0, 0x2a0, 0x2e8, 0x0, {}, [@common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0xfffd}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x498) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000002240)=[{{&(0x7f0000000040)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000140)=[{&(0x7f00000001c0)="b35459eab157139645dff2328b7c8a914bab223d4675742e77c724e48dfb21d3e31629ee9532371e5a5cd53d95ea4dffc1c7747ae2c9970407d29c4979719bc214ae4f6491b4738e5b10006ec525f48ad733b55c8fc3fedaee48fa46a61089b8961171ad4cdbdfae023d914091a02acf61a2", 0x72}, {&(0x7f0000000300)="1d5a67a8695e623a7342156ee1cebc16ab529930a8dfc51df11a853fb5d2169bbc7ab5aedf5a84dcf610e0443d4f91318d1dacdbab590e036ce16caf36384f545c5f36844200a900992e542bf3eb04e1b04abda74b737a1db6f7aca31de1084d1026948b0c92bae1ccfb4e7d54251b62bb5fbd9d9a4348a108d453e8a22c8c08e4928a01597e30a8a560de57581ad522c22a902b1653cfaed880f6f12d", 0x9d}, {&(0x7f00000003c0)="0890058cb4bc3b8ac36b6236011de0b825c5af5ce6e590fe51465de7e34e17ad675258e454c36a5187dfe4ea2046681ac586b1909764f2898272fb275d01884de30981664a2989436c34cc06ac6175b13ea6636e49c8689f433ae67c880e0a382e68c4200275e18d6b592de41b2baec85f6b2c7e32f0891f3979f6ec8e620777f4b59d3abc064f0e60b239724a1ae4af7f815b27bf", 0x95}], 0x3, &(0x7f0000000540)=[@rights={{0x20, 0x1, 0x1, [r0, 0xffffffffffffffff, r3, r5]}}, @rights={{0x14, 0x1, 0x1, [r2]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01}}}], 0x80}}, {{&(0x7f00000005c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000780)=[{&(0x7f0000000640)="d67948928c56abc67a6fbdf23da152db801331cca670e665b9b9a75ae1ab9aabfdc575251a3ebfc9f12e8d828e91a8eccf4c0ac030f96fb1ae97c69796fe3e08db0b5a6be498cca57c85b71e125a1f0bcf8bef2f7c42be31896c506d96dff78efad4580c65bc7745b893aa7057aa1a8606aa6efdb42a38dcb15f3b4fea4513b74fbb4a27103ce41f", 0x88}, {&(0x7f0000000700)="9ff23d7a8db0d6a406b41399ef499953139e1ee9fdc75b500311e0442020470ae17b624bb330be4289cffad923a09a5b41786a833b9a2693ae34e9f2c9cd9ef2126a8fabf0ec00286f091b17", 0x4c}], 0x2, &(0x7f0000000240)=ANY=[@ANYBLOB="1c000000000000000100000001000000", @ANYRES32, @ANYRES32=r0, @ANYBLOB="efd9a51f730000"], 0x20, 0x8000}}, {{&(0x7f0000000800)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000001ac0)=[{0x0}, {&(0x7f0000001940)="ad914b7bd4a854bf8d930679a799cef94f8c", 0x12}, {&(0x7f0000001980)="c7b95ce41008d663886800b6d0a7b5ecfb054fec6238c668ca8c155626e70e0babe72b6cb383859a1104a882f32c9568d3c7a929916c3b0f66208d88b9d078d237232c4e990202ec65bd848575e6609a31bcf882cdff7b151f0939c1499e4cd3667dd0e029ab2ee88139d2ae7eb6750e452963bc668dc58bdfa73df1709fd4dba7218def9f", 0x85}, {&(0x7f0000001a40)="94ba0620db3296bf7d25acd74e77ac7047aaa20eb37009ff2d46f2830e70e214e9cc5da2a15843a8c85be3bbde3de7b6de0aa01a2cc5ae3ee08ca4a3f7a49cf47b9201c94ad619", 0x47}], 0x4, 0x0, 0x0, 0xc000}}, {{&(0x7f0000001b40)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000001c80)=[{&(0x7f0000001bc0)="28cda7cf078c762e4f6a0874a8c34bd2638c9602bd012eef51d965f4f51f6a20f96759830820d524209ee51b312793ada5c0b3caefcb26016e211d257c0e859a26f0445b53f1ddf2604c35495148559718044f0adbce0dfbb70dc69dc5e142e598a66d0e7cd0f3c11c48d9bca37a383d53cb6115c118d6491c5853e7631c144d", 0x80}], 0x1, &(0x7f0000001cc0)=[@cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff}}}], 0x20, 0x20000080}}, {{&(0x7f0000001d00)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000001f00)=[{&(0x7f0000001d80)="1452aefb8af5790fd2dce64efbfc47ae4c872e1e21e622b37632dca524367b5212a2b69226224b59bc795574311789c1e96eaf23ba7173ff098ee3c0d2f06c6dea37d5ec9d6e532564cc9744aba9b2e0363b4a5d691d113e71e9f84945", 0x5d}, {&(0x7f0000001e00)="decc6bf69de7448cfcc1541437dd1d47369caa9d7245c6b221e5a802c4ed00f1f3ff694c4568dfd39e0ed308b2ac88e8887c57aed8f885d0f7ac49bb1e98ba2e3d76a303f86d7904e4927dd535e63f55b11628d1c1dd6488720e7b0afadd9ac618aacd923998f9250d2a9c490a8c75fb18c967731dce82a80f2e0b69c0d2279423c3838b725075a4a1032084e8bfec64ae7e9da2266c84bcfac827ad1dbec7cca7e0a960234c17cc628bf344452583eaae0b910b02e18730bc328d23b4ee98cf015a25e279012decf36d0bb2c69a006d8a23eb684e3718cd55a9b633", 0xdc}], 0x2, &(0x7f0000002140)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee00}}}, @rights={{0x14, 0x1, 0x1, [r3]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r6}}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0xee01}}}, @rights={{0x14, 0x1, 0x1, [r0]}}, @rights={{0x1c, 0x1, 0x1, [r2, r5, r7]}}], 0xf0, 0x40d4}}], 0x5, 0x8880) socket$vsock_stream(0x28, 0x1, 0x0) ppoll(&(0x7f00000000c0)=[{r2, 0x8124}, {0xffffffffffffffff, 0x0, 0x64}], 0x2, &(0x7f00000002c0)={0x0, r4+10000000}, 0x0, 0x0) [ 263.227179][T13356] vcan0: tx address claim with dest, not broadcast [ 263.337102][ T26] audit: type=1804 audit(1634603365.336:84): pid=13361 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir833406043/syzkaller.TotoXj/152/cgroup.controllers" dev="sda1" ino=14524 res=1 errno=0 00:29:25 executing program 5: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000100)={0x12, 0x3, 0x8, 0x4}, 0x40) r1 = socket$inet6(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000001900)={r0, &(0x7f0000001800), &(0x7f00000018c0)=@tcp6=r1}, 0x20) 00:29:25 executing program 1: socketpair(0x2, 0x3, 0x2, &(0x7f0000000000)) 00:29:25 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000002bc0)=[{{&(0x7f0000000040)={0xa, 0x4e20, 0x0, @remote, 0x7}, 0x1c, 0x0}}], 0x1, 0x0) [ 263.826971][ T26] audit: type=1804 audit(1634603365.826:85): pid=13367 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir516473655/syzkaller.aQ1LtY/140/cgroup.controllers" dev="sda1" ino=14544 res=1 errno=0 00:29:26 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) getsockopt$netlink(r0, 0x10e, 0x4, &(0x7f0000000000)=""/102, &(0x7f0000000080)=0x66) 00:29:26 executing program 0: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050708b676250000000000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000014c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff000000000900010068667363"], 0x38}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x4924924924926d3, 0x0) 00:29:26 executing program 3: getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x2c, &(0x7f0000000180)=[@in={0x2, 0x0, @private}, @in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000180)=ANY=[], 0x208e2ab) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000080)={0xfffffffffffffffe, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000000406011c000000008700827c00000900050001"], 0x1c}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000500) 00:29:26 executing program 5: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r1, 0x65, 0x2, &(0x7f0000000600)=0xfffff000, 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_raw(r1, &(0x7f0000000180)={0x1d, r2}, 0x10) close(r1) 00:29:26 executing program 1: preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x3c}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) r3 = socket(0x10, 0x803, 0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)={0x2c, r2, 0x209, 0x0, 0x0, {}, [@FOU_ATTR_IFINDEX={0x8, 0xb, r4}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @multicast2}, @FOU_ATTR_PEER_PORT={0x6}]}, 0x2c}}, 0x0) [ 264.414785][T13387] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 264.523186][T13390] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 264.601922][T13387] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 00:29:26 executing program 5: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r1, 0x65, 0x2, &(0x7f0000000600)=0xfffff000, 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_raw(r1, &(0x7f0000000180)={0x1d, r2}, 0x10) close(r1) 00:29:26 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt(r0, 0x84, 0x80, 0x0, &(0x7f0000001600)) 00:29:26 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) socket$can_raw(0x1d, 0x3, 0x1) clock_gettime(0x0, &(0x7f0000000300)) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x1, &(0x7f0000002680)) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x18, 0x2, 0x0, 0x1, @val={0x14}}}}, @IFLA_MASTER={0x8, 0x3}]}, 0x50}}, 0x0) [ 264.710953][ T26] audit: type=1804 audit(1634603366.716:86): pid=13410 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir833406043/syzkaller.TotoXj/153/cgroup.controllers" dev="sda1" ino=14552 res=1 errno=0 00:29:27 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x4000000000002, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x80, 0x0) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) r3 = openat$cgroup_type(r0, &(0x7f0000000000), 0x2, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000009, 0x40010, r3, 0x80000001000) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) r5 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) socket(0x10, 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0x1c) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r6) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000020c0), &(0x7f0000002100)=0xc) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r7, 0x4000000000000, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0xc01, 0x3, 0x438, 0x2e8, 0x5002004a, 0x7d09, 0x0, 0x3, 0x3a0, 0x3c8, 0x3c8, 0x3a0, 0x3c8, 0x4, 0x0, {[{{@uncond, 0x0, 0x2a0, 0x2e8, 0x0, {}, [@common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0xfffd}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x498) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000002240)=[{{&(0x7f0000000040)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000140)=[{&(0x7f00000001c0)="b35459eab157139645dff2328b7c8a914bab223d4675742e77c724e48dfb21d3e31629ee9532371e5a5cd53d95ea4dffc1c7747ae2c9970407d29c4979719bc214ae4f6491b4738e5b10006ec525f48ad733b55c8fc3fedaee48fa46a61089b8961171ad4cdbdfae023d914091a02acf61a2", 0x72}, {&(0x7f0000000300)="1d5a67a8695e623a7342156ee1cebc16ab529930a8dfc51df11a853fb5d2169bbc7ab5aedf5a84dcf610e0443d4f91318d1dacdbab590e036ce16caf36384f545c5f36844200a900992e542bf3eb04e1b04abda74b737a1db6f7aca31de1084d1026948b0c92bae1ccfb4e7d54251b62bb5fbd9d9a4348a108d453e8a22c8c08e4928a01597e30a8a560de57581ad522c22a902b1653cfaed880f6f12d", 0x9d}, {&(0x7f00000003c0)="0890058cb4bc3b8ac36b6236011de0b825c5af5ce6e590fe51465de7e34e17ad675258e454c36a5187dfe4ea2046681ac586b1909764f2898272fb275d01884de30981664a2989436c34cc06ac6175b13ea6636e49c8689f433ae67c880e0a382e68c4200275e18d6b592de41b2baec85f6b2c7e32f0891f3979f6ec8e620777f4b59d3abc064f0e60b239724a1ae4af7f815b27bf", 0x95}], 0x3, &(0x7f0000000540)=[@rights={{0x20, 0x1, 0x1, [r0, 0xffffffffffffffff, r3, r5]}}, @rights={{0x14, 0x1, 0x1, [r2]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01}}}], 0x80}}, {{&(0x7f00000005c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000780)=[{&(0x7f0000000640)="d67948928c56abc67a6fbdf23da152db801331cca670e665b9b9a75ae1ab9aabfdc575251a3ebfc9f12e8d828e91a8eccf4c0ac030f96fb1ae97c69796fe3e08db0b5a6be498cca57c85b71e125a1f0bcf8bef2f7c42be31896c506d96dff78efad4580c65bc7745b893aa7057aa1a8606aa6efdb42a38dcb15f3b4fea4513b74fbb4a27103ce41f", 0x88}, {&(0x7f0000000700)="9ff23d7a8db0d6a406b41399ef499953139e1ee9fdc75b500311e0442020470ae17b624bb330be4289cffad923a09a5b41786a833b9a2693ae34e9f2c9cd9ef2126a8fabf0ec00286f091b17", 0x4c}], 0x2, &(0x7f0000000240)=ANY=[@ANYBLOB="1c000000000000000100000001000000", @ANYRES32, @ANYRES32=r0, @ANYBLOB="efd9a51f730000"], 0x20, 0x8000}}, {{&(0x7f0000000800)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000001ac0)=[{0x0}, {&(0x7f0000001940)="ad914b7bd4a854bf8d930679a799cef94f8c", 0x12}, {&(0x7f0000001980)="c7b95ce41008d663886800b6d0a7b5ecfb054fec6238c668ca8c155626e70e0babe72b6cb383859a1104a882f32c9568d3c7a929916c3b0f66208d88b9d078d237232c4e990202ec65bd848575e6609a31bcf882cdff7b151f0939c1499e4cd3667dd0e029ab2ee88139d2ae7eb6750e452963bc668dc58bdfa73df1709fd4dba7218def9f", 0x85}, {&(0x7f0000001a40)="94ba0620db3296bf7d25acd74e77ac7047aaa20eb37009ff2d46f2830e70e214e9cc5da2a15843a8c85be3bbde3de7b6de0aa01a2cc5ae3ee08ca4a3f7a49cf47b9201c94ad619", 0x47}], 0x4, 0x0, 0x0, 0xc000}}, {{&(0x7f0000001b40)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000001c80)=[{&(0x7f0000001bc0)="28cda7cf078c762e4f6a0874a8c34bd2638c9602bd012eef51d965f4f51f6a20f96759830820d524209ee51b312793ada5c0b3caefcb26016e211d257c0e859a26f0445b53f1ddf2604c35495148559718044f0adbce0dfbb70dc69dc5e142e598a66d0e7cd0f3c11c48d9bca37a383d53cb6115c118d6491c5853e7631c144d", 0x80}], 0x1, &(0x7f0000001cc0)=[@cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff}}}], 0x20, 0x20000080}}, {{&(0x7f0000001d00)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000001f00)=[{&(0x7f0000001d80)="1452aefb8af5790fd2dce64efbfc47ae4c872e1e21e622b37632dca524367b5212a2b69226224b59bc795574311789c1e96eaf23ba7173ff098ee3c0d2f06c6dea37d5ec9d6e532564cc9744aba9b2e0363b4a5d691d113e71e9f84945", 0x5d}, {&(0x7f0000001e00)="decc6bf69de7448cfcc1541437dd1d47369caa9d7245c6b221e5a802c4ed00f1f3ff694c4568dfd39e0ed308b2ac88e8887c57aed8f885d0f7ac49bb1e98ba2e3d76a303f86d7904e4927dd535e63f55b11628d1c1dd6488720e7b0afadd9ac618aacd923998f9250d2a9c490a8c75fb18c967731dce82a80f2e0b69c0d2279423c3838b725075a4a1032084e8bfec64ae7e9da2266c84bcfac827ad1dbec7cca7e0a960234c17cc628bf344452583eaae0b910b02e18730bc328d23b4ee98cf015a25e279012decf36d0bb2c69a006d8a23eb684e3718cd55a9b633", 0xdc}], 0x2, &(0x7f0000002140)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee00}}}, @rights={{0x14, 0x1, 0x1, [r3]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r6}}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0xee01}}}, @rights={{0x14, 0x1, 0x1, [r0]}}, @rights={{0x1c, 0x1, 0x1, [r2, r5, r7]}}], 0xf0, 0x40d4}}], 0x5, 0x8880) socket$vsock_stream(0x28, 0x1, 0x0) ppoll(&(0x7f00000000c0)=[{r2, 0x8124}, {0xffffffffffffffff, 0x0, 0x64}], 0x2, &(0x7f00000002c0)={0x0, r4+10000000}, 0x0, 0x0) 00:29:27 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x84, 0x80, &(0x7f0000000ec0)=@broute={'broute\x00', 0x20, 0x4, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000040], 0x0, 0x0, 0x0}, 0x8) 00:29:27 executing program 5: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r1, 0x65, 0x2, &(0x7f0000000600)=0xfffff000, 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_raw(r1, &(0x7f0000000180)={0x1d, r2}, 0x10) close(r1) 00:29:27 executing program 4: syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000080), 0xffffffffffffffff) setsockopt$WPAN_SECURITY_LEVEL(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000200)=0x3, 0x4) socketpair(0x0, 0x80b, 0x5, &(0x7f0000000340)) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_inet_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000540)) socket$inet6_tcp(0xa, 0x1, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) 00:29:27 executing program 3: getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x2c, &(0x7f0000000180)=[@in={0x2, 0x0, @private}, @in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000180)=ANY=[], 0x208e2ab) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000080)={0xfffffffffffffffe, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000000406011c000000008700827c00000900050001"], 0x1c}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000500) 00:29:27 executing program 1: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x101, 0x0, 0x0, {}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ID={0x8}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x3f}, @NFTA_SET_DESC={0x14, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xa92}]}]}]}]}, @NFT_MSG_NEWRULE={0x14}], {0x14}}, 0x8c}}, 0x0) 00:29:27 executing program 5: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r1, 0x65, 0x2, &(0x7f0000000600)=0xfffff000, 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_raw(r1, &(0x7f0000000180)={0x1d, r2}, 0x10) close(r1) 00:29:27 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x4000000000002, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x80, 0x0) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) r3 = openat$cgroup_type(r0, &(0x7f0000000000), 0x2, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000009, 0x40010, r3, 0x80000001000) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) r5 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) socket(0x10, 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0x1c) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r6) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000020c0), &(0x7f0000002100)=0xc) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r7, 0x4000000000000, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0xc01, 0x3, 0x438, 0x2e8, 0x5002004a, 0x7d09, 0x0, 0x3, 0x3a0, 0x3c8, 0x3c8, 0x3a0, 0x3c8, 0x4, 0x0, {[{{@uncond, 0x0, 0x2a0, 0x2e8, 0x0, {}, [@common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0xfffd}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x498) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000002240)=[{{&(0x7f0000000040)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000140)=[{&(0x7f00000001c0)="b35459eab157139645dff2328b7c8a914bab223d4675742e77c724e48dfb21d3e31629ee9532371e5a5cd53d95ea4dffc1c7747ae2c9970407d29c4979719bc214ae4f6491b4738e5b10006ec525f48ad733b55c8fc3fedaee48fa46a61089b8961171ad4cdbdfae023d914091a02acf61a2", 0x72}, {&(0x7f0000000300)="1d5a67a8695e623a7342156ee1cebc16ab529930a8dfc51df11a853fb5d2169bbc7ab5aedf5a84dcf610e0443d4f91318d1dacdbab590e036ce16caf36384f545c5f36844200a900992e542bf3eb04e1b04abda74b737a1db6f7aca31de1084d1026948b0c92bae1ccfb4e7d54251b62bb5fbd9d9a4348a108d453e8a22c8c08e4928a01597e30a8a560de57581ad522c22a902b1653cfaed880f6f12d", 0x9d}, {&(0x7f00000003c0)="0890058cb4bc3b8ac36b6236011de0b825c5af5ce6e590fe51465de7e34e17ad675258e454c36a5187dfe4ea2046681ac586b1909764f2898272fb275d01884de30981664a2989436c34cc06ac6175b13ea6636e49c8689f433ae67c880e0a382e68c4200275e18d6b592de41b2baec85f6b2c7e32f0891f3979f6ec8e620777f4b59d3abc064f0e60b239724a1ae4af7f815b27bf", 0x95}], 0x3, &(0x7f0000000540)=[@rights={{0x20, 0x1, 0x1, [r0, 0xffffffffffffffff, r3, r5]}}, @rights={{0x14, 0x1, 0x1, [r2]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01}}}], 0x80}}, {{&(0x7f00000005c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000780)=[{&(0x7f0000000640)="d67948928c56abc67a6fbdf23da152db801331cca670e665b9b9a75ae1ab9aabfdc575251a3ebfc9f12e8d828e91a8eccf4c0ac030f96fb1ae97c69796fe3e08db0b5a6be498cca57c85b71e125a1f0bcf8bef2f7c42be31896c506d96dff78efad4580c65bc7745b893aa7057aa1a8606aa6efdb42a38dcb15f3b4fea4513b74fbb4a27103ce41f", 0x88}, {&(0x7f0000000700)="9ff23d7a8db0d6a406b41399ef499953139e1ee9fdc75b500311e0442020470ae17b624bb330be4289cffad923a09a5b41786a833b9a2693ae34e9f2c9cd9ef2126a8fabf0ec00286f091b17", 0x4c}], 0x2, &(0x7f0000000240)=ANY=[@ANYBLOB="1c000000000000000100000001000000", @ANYRES32, @ANYRES32=r0, @ANYBLOB="efd9a51f730000"], 0x20, 0x8000}}, {{&(0x7f0000000800)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000001ac0)=[{0x0}, {&(0x7f0000001940)="ad914b7bd4a854bf8d930679a799cef94f8c", 0x12}, {&(0x7f0000001980)="c7b95ce41008d663886800b6d0a7b5ecfb054fec6238c668ca8c155626e70e0babe72b6cb383859a1104a882f32c9568d3c7a929916c3b0f66208d88b9d078d237232c4e990202ec65bd848575e6609a31bcf882cdff7b151f0939c1499e4cd3667dd0e029ab2ee88139d2ae7eb6750e452963bc668dc58bdfa73df1709fd4dba7218def9f", 0x85}, {&(0x7f0000001a40)="94ba0620db3296bf7d25acd74e77ac7047aaa20eb37009ff2d46f2830e70e214e9cc5da2a15843a8c85be3bbde3de7b6de0aa01a2cc5ae3ee08ca4a3f7a49cf47b9201c94ad619", 0x47}], 0x4, 0x0, 0x0, 0xc000}}, {{&(0x7f0000001b40)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000001c80)=[{&(0x7f0000001bc0)="28cda7cf078c762e4f6a0874a8c34bd2638c9602bd012eef51d965f4f51f6a20f96759830820d524209ee51b312793ada5c0b3caefcb26016e211d257c0e859a26f0445b53f1ddf2604c35495148559718044f0adbce0dfbb70dc69dc5e142e598a66d0e7cd0f3c11c48d9bca37a383d53cb6115c118d6491c5853e7631c144d", 0x80}], 0x1, &(0x7f0000001cc0)=[@cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff}}}], 0x20, 0x20000080}}, {{&(0x7f0000001d00)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000001f00)=[{&(0x7f0000001d80)="1452aefb8af5790fd2dce64efbfc47ae4c872e1e21e622b37632dca524367b5212a2b69226224b59bc795574311789c1e96eaf23ba7173ff098ee3c0d2f06c6dea37d5ec9d6e532564cc9744aba9b2e0363b4a5d691d113e71e9f84945", 0x5d}, {&(0x7f0000001e00)="decc6bf69de7448cfcc1541437dd1d47369caa9d7245c6b221e5a802c4ed00f1f3ff694c4568dfd39e0ed308b2ac88e8887c57aed8f885d0f7ac49bb1e98ba2e3d76a303f86d7904e4927dd535e63f55b11628d1c1dd6488720e7b0afadd9ac618aacd923998f9250d2a9c490a8c75fb18c967731dce82a80f2e0b69c0d2279423c3838b725075a4a1032084e8bfec64ae7e9da2266c84bcfac827ad1dbec7cca7e0a960234c17cc628bf344452583eaae0b910b02e18730bc328d23b4ee98cf015a25e279012decf36d0bb2c69a006d8a23eb684e3718cd55a9b633", 0xdc}], 0x2, &(0x7f0000002140)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee00}}}, @rights={{0x14, 0x1, 0x1, [r3]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r6}}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0xee01}}}, @rights={{0x14, 0x1, 0x1, [r0]}}, @rights={{0x1c, 0x1, 0x1, [r2, r5, r7]}}], 0xf0, 0x40d4}}], 0x5, 0x8880) socket$vsock_stream(0x28, 0x1, 0x0) ppoll(&(0x7f00000000c0)=[{r2, 0x8124}, {0xffffffffffffffff, 0x0, 0x64}], 0x2, &(0x7f00000002c0)={0x0, r4+10000000}, 0x0, 0x0) 00:29:27 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x4000000000002, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x80, 0x0) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) r3 = openat$cgroup_type(r0, &(0x7f0000000000), 0x2, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000009, 0x40010, r3, 0x80000001000) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) r5 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) socket(0x10, 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0x1c) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r6) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000020c0), &(0x7f0000002100)=0xc) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r7, 0x4000000000000, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0xc01, 0x3, 0x438, 0x2e8, 0x5002004a, 0x7d09, 0x0, 0x3, 0x3a0, 0x3c8, 0x3c8, 0x3a0, 0x3c8, 0x4, 0x0, {[{{@uncond, 0x0, 0x2a0, 0x2e8, 0x0, {}, [@common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0xfffd}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x498) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000002240)=[{{&(0x7f0000000040)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000140)=[{&(0x7f00000001c0)="b35459eab157139645dff2328b7c8a914bab223d4675742e77c724e48dfb21d3e31629ee9532371e5a5cd53d95ea4dffc1c7747ae2c9970407d29c4979719bc214ae4f6491b4738e5b10006ec525f48ad733b55c8fc3fedaee48fa46a61089b8961171ad4cdbdfae023d914091a02acf61a2", 0x72}, {&(0x7f0000000300)="1d5a67a8695e623a7342156ee1cebc16ab529930a8dfc51df11a853fb5d2169bbc7ab5aedf5a84dcf610e0443d4f91318d1dacdbab590e036ce16caf36384f545c5f36844200a900992e542bf3eb04e1b04abda74b737a1db6f7aca31de1084d1026948b0c92bae1ccfb4e7d54251b62bb5fbd9d9a4348a108d453e8a22c8c08e4928a01597e30a8a560de57581ad522c22a902b1653cfaed880f6f12d", 0x9d}, {&(0x7f00000003c0)="0890058cb4bc3b8ac36b6236011de0b825c5af5ce6e590fe51465de7e34e17ad675258e454c36a5187dfe4ea2046681ac586b1909764f2898272fb275d01884de30981664a2989436c34cc06ac6175b13ea6636e49c8689f433ae67c880e0a382e68c4200275e18d6b592de41b2baec85f6b2c7e32f0891f3979f6ec8e620777f4b59d3abc064f0e60b239724a1ae4af7f815b27bf", 0x95}], 0x3, &(0x7f0000000540)=[@rights={{0x20, 0x1, 0x1, [r0, 0xffffffffffffffff, r3, r5]}}, @rights={{0x14, 0x1, 0x1, [r2]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01}}}], 0x80}}, {{&(0x7f00000005c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000780)=[{&(0x7f0000000640)="d67948928c56abc67a6fbdf23da152db801331cca670e665b9b9a75ae1ab9aabfdc575251a3ebfc9f12e8d828e91a8eccf4c0ac030f96fb1ae97c69796fe3e08db0b5a6be498cca57c85b71e125a1f0bcf8bef2f7c42be31896c506d96dff78efad4580c65bc7745b893aa7057aa1a8606aa6efdb42a38dcb15f3b4fea4513b74fbb4a27103ce41f", 0x88}, {&(0x7f0000000700)="9ff23d7a8db0d6a406b41399ef499953139e1ee9fdc75b500311e0442020470ae17b624bb330be4289cffad923a09a5b41786a833b9a2693ae34e9f2c9cd9ef2126a8fabf0ec00286f091b17", 0x4c}], 0x2, &(0x7f0000000240)=ANY=[@ANYBLOB="1c000000000000000100000001000000", @ANYRES32, @ANYRES32=r0, @ANYBLOB="efd9a51f730000"], 0x20, 0x8000}}, {{&(0x7f0000000800)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000001ac0)=[{0x0}, {&(0x7f0000001940)="ad914b7bd4a854bf8d930679a799cef94f8c", 0x12}, {&(0x7f0000001980)="c7b95ce41008d663886800b6d0a7b5ecfb054fec6238c668ca8c155626e70e0babe72b6cb383859a1104a882f32c9568d3c7a929916c3b0f66208d88b9d078d237232c4e990202ec65bd848575e6609a31bcf882cdff7b151f0939c1499e4cd3667dd0e029ab2ee88139d2ae7eb6750e452963bc668dc58bdfa73df1709fd4dba7218def9f", 0x85}, {&(0x7f0000001a40)="94ba0620db3296bf7d25acd74e77ac7047aaa20eb37009ff2d46f2830e70e214e9cc5da2a15843a8c85be3bbde3de7b6de0aa01a2cc5ae3ee08ca4a3f7a49cf47b9201c94ad619", 0x47}], 0x4, 0x0, 0x0, 0xc000}}, {{&(0x7f0000001b40)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000001c80)=[{&(0x7f0000001bc0)="28cda7cf078c762e4f6a0874a8c34bd2638c9602bd012eef51d965f4f51f6a20f96759830820d524209ee51b312793ada5c0b3caefcb26016e211d257c0e859a26f0445b53f1ddf2604c35495148559718044f0adbce0dfbb70dc69dc5e142e598a66d0e7cd0f3c11c48d9bca37a383d53cb6115c118d6491c5853e7631c144d", 0x80}], 0x1, &(0x7f0000001cc0)=[@cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff}}}], 0x20, 0x20000080}}, {{&(0x7f0000001d00)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000001f00)=[{&(0x7f0000001d80)="1452aefb8af5790fd2dce64efbfc47ae4c872e1e21e622b37632dca524367b5212a2b69226224b59bc795574311789c1e96eaf23ba7173ff098ee3c0d2f06c6dea37d5ec9d6e532564cc9744aba9b2e0363b4a5d691d113e71e9f84945", 0x5d}, {&(0x7f0000001e00)="decc6bf69de7448cfcc1541437dd1d47369caa9d7245c6b221e5a802c4ed00f1f3ff694c4568dfd39e0ed308b2ac88e8887c57aed8f885d0f7ac49bb1e98ba2e3d76a303f86d7904e4927dd535e63f55b11628d1c1dd6488720e7b0afadd9ac618aacd923998f9250d2a9c490a8c75fb18c967731dce82a80f2e0b69c0d2279423c3838b725075a4a1032084e8bfec64ae7e9da2266c84bcfac827ad1dbec7cca7e0a960234c17cc628bf344452583eaae0b910b02e18730bc328d23b4ee98cf015a25e279012decf36d0bb2c69a006d8a23eb684e3718cd55a9b633", 0xdc}], 0x2, &(0x7f0000002140)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee00}}}, @rights={{0x14, 0x1, 0x1, [r3]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r6}}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0xee01}}}, @rights={{0x14, 0x1, 0x1, [r0]}}, @rights={{0x1c, 0x1, 0x1, [r2, r5, r7]}}], 0xf0, 0x40d4}}], 0x5, 0x8880) socket$vsock_stream(0x28, 0x1, 0x0) ppoll(&(0x7f00000000c0)=[{r2, 0x8124}, {0xffffffffffffffff, 0x0, 0x64}], 0x2, &(0x7f00000002c0)={0x0, r4+10000000}, 0x0, 0x0) 00:29:27 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=@newtaction={0x64, 0x30, 0x303, 0x0, 0x0, {}, [{0x50, 0x1, [@m_vlan={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{}, 0x4}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) [ 266.010958][ T26] audit: type=1804 audit(1634603368.016:87): pid=13441 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir833406043/syzkaller.TotoXj/154/cgroup.controllers" dev="sda1" ino=14523 res=1 errno=0 00:29:28 executing program 5: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x3af4701e) r2 = socket$inet_tcp(0x2, 0x1, 0x0) getpeername$inet(r2, &(0x7f0000000040), &(0x7f0000000240)=0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r1, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x19, 0x8, &(0x7f00000003c0)=ANY=[@ANYBLOB="0001000100000000000000000018210000", @ANYRES32, @ANYBLOB="000000000800000085100000020000000559d6ad010000008451ffff0800000095000099d8c87600"], &(0x7f0000000440)='syzkaller\x00', 0x7f, 0x48, &(0x7f0000000480)=""/72, 0x41000, 0x0, '\x00', 0x0, 0x6, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x7, 0x3}, 0x8, 0x10, &(0x7f0000000540)={0x5, 0x2, 0x4, 0x200}, 0x10, 0x0, r0}, 0x78) openat$cgroup_ro(r0, &(0x7f0000000280)='cpuset.effective_cpus\x00', 0x0, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(r3, 0xc4089434, &(0x7f0000000600)={0x0, 0x3b2, 0x0, [0x7cb, 0x1, 0x8, 0xffff, 0x80], [0x1a2, 0x48da77fb, 0x9, 0x4, 0x7, 0xcc56, 0x0, 0x8, 0xffffffff80000000, 0x7fffffff, 0x54, 0xffffffff, 0x100000000, 0xad, 0x4, 0x9, 0xfb42, 0xffffffffffffff01, 0xff, 0x1, 0x40, 0x1, 0x9, 0x2, 0x4, 0xfffffffffffffeff, 0xe87a, 0x3, 0x3, 0xb404, 0x8000, 0x3, 0x1, 0x3, 0x6, 0xffffffffffff7fff, 0x79a1, 0xaf, 0x3, 0x7ff, 0x40, 0x941, 0x6, 0x1f, 0x80000001, 0xa0a3, 0x922, 0x7ff, 0x4, 0x101, 0x3, 0x4, 0x2, 0x3, 0x2, 0x7, 0x9, 0x2, 0x14a, 0x1, 0x7fff, 0x0, 0x1, 0x3, 0x7fff, 0x4, 0xff, 0x1, 0x400, 0x2, 0xffff, 0x1ff, 0x8, 0x28000000000000, 0xffffffff, 0xf6, 0x4ba, 0x57a, 0x9, 0x200, 0x1ff, 0x7, 0x3, 0x2, 0x2f7f, 0xdf, 0xc9, 0x5, 0x100000000, 0x4000007, 0x5, 0x1, 0x401, 0x8000, 0x5, 0x2, 0xeef, 0x6, 0x5, 0x6, 0x80, 0x6, 0xb2e3, 0x2, 0x1, 0x9, 0x1000, 0x8000, 0x3ff, 0x1, 0x8, 0x7, 0x9, 0x1000000000000, 0x1f, 0x0, 0xfdf, 0x85, 0x3, 0x6, 0x20]}) ioctl$FS_IOC_RESVSP(r0, 0x40305839, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8000000}) ioctl$FICLONERANGE(r1, 0x4020940d, &(0x7f0000000380)={{r0}, 0x5, 0x0, 0x86d5}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$FOU_CMD_ADD(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000400)={0x38, r5, 0x209, 0x0, 0x0, {}, [@FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @loopback}, @FOU_ATTR_IFINDEX={0x8, 0xb, r7}]}, 0x38}}, 0x0) 00:29:28 executing program 1: r0 = socket$inet(0x2, 0x100000000003, 0x400000000001) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000080)="441f070300000000000074ed27c1b3fe76ce384b1a6a722a3beaf52671", 0x1d) getsockopt$inet_opts(r0, 0x0, 0x4, 0x0, &(0x7f0000000040)) 00:29:30 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x4000000000002, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x80, 0x0) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) r3 = openat$cgroup_type(r0, &(0x7f0000000000), 0x2, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000009, 0x40010, r3, 0x80000001000) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) r5 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) socket(0x10, 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0x1c) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r6) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000020c0), &(0x7f0000002100)=0xc) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r7, 0x4000000000000, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0xc01, 0x3, 0x438, 0x2e8, 0x5002004a, 0x7d09, 0x0, 0x3, 0x3a0, 0x3c8, 0x3c8, 0x3a0, 0x3c8, 0x4, 0x0, {[{{@uncond, 0x0, 0x2a0, 0x2e8, 0x0, {}, [@common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0xfffd}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x498) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000002240)=[{{&(0x7f0000000040)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000140)=[{&(0x7f00000001c0)="b35459eab157139645dff2328b7c8a914bab223d4675742e77c724e48dfb21d3e31629ee9532371e5a5cd53d95ea4dffc1c7747ae2c9970407d29c4979719bc214ae4f6491b4738e5b10006ec525f48ad733b55c8fc3fedaee48fa46a61089b8961171ad4cdbdfae023d914091a02acf61a2", 0x72}, {&(0x7f0000000300)="1d5a67a8695e623a7342156ee1cebc16ab529930a8dfc51df11a853fb5d2169bbc7ab5aedf5a84dcf610e0443d4f91318d1dacdbab590e036ce16caf36384f545c5f36844200a900992e542bf3eb04e1b04abda74b737a1db6f7aca31de1084d1026948b0c92bae1ccfb4e7d54251b62bb5fbd9d9a4348a108d453e8a22c8c08e4928a01597e30a8a560de57581ad522c22a902b1653cfaed880f6f12d", 0x9d}, {&(0x7f00000003c0)="0890058cb4bc3b8ac36b6236011de0b825c5af5ce6e590fe51465de7e34e17ad675258e454c36a5187dfe4ea2046681ac586b1909764f2898272fb275d01884de30981664a2989436c34cc06ac6175b13ea6636e49c8689f433ae67c880e0a382e68c4200275e18d6b592de41b2baec85f6b2c7e32f0891f3979f6ec8e620777f4b59d3abc064f0e60b239724a1ae4af7f815b27bf", 0x95}], 0x3, &(0x7f0000000540)=[@rights={{0x20, 0x1, 0x1, [r0, 0xffffffffffffffff, r3, r5]}}, @rights={{0x14, 0x1, 0x1, [r2]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01}}}], 0x80}}, {{&(0x7f00000005c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000780)=[{&(0x7f0000000640)="d67948928c56abc67a6fbdf23da152db801331cca670e665b9b9a75ae1ab9aabfdc575251a3ebfc9f12e8d828e91a8eccf4c0ac030f96fb1ae97c69796fe3e08db0b5a6be498cca57c85b71e125a1f0bcf8bef2f7c42be31896c506d96dff78efad4580c65bc7745b893aa7057aa1a8606aa6efdb42a38dcb15f3b4fea4513b74fbb4a27103ce41f", 0x88}, {&(0x7f0000000700)="9ff23d7a8db0d6a406b41399ef499953139e1ee9fdc75b500311e0442020470ae17b624bb330be4289cffad923a09a5b41786a833b9a2693ae34e9f2c9cd9ef2126a8fabf0ec00286f091b17", 0x4c}], 0x2, &(0x7f0000000240)=ANY=[@ANYBLOB="1c000000000000000100000001000000", @ANYRES32, @ANYRES32=r0, @ANYBLOB="efd9a51f730000"], 0x20, 0x8000}}, {{&(0x7f0000000800)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000001ac0)=[{0x0}, {&(0x7f0000001940)="ad914b7bd4a854bf8d930679a799cef94f8c", 0x12}, {&(0x7f0000001980)="c7b95ce41008d663886800b6d0a7b5ecfb054fec6238c668ca8c155626e70e0babe72b6cb383859a1104a882f32c9568d3c7a929916c3b0f66208d88b9d078d237232c4e990202ec65bd848575e6609a31bcf882cdff7b151f0939c1499e4cd3667dd0e029ab2ee88139d2ae7eb6750e452963bc668dc58bdfa73df1709fd4dba7218def9f", 0x85}, {&(0x7f0000001a40)="94ba0620db3296bf7d25acd74e77ac7047aaa20eb37009ff2d46f2830e70e214e9cc5da2a15843a8c85be3bbde3de7b6de0aa01a2cc5ae3ee08ca4a3f7a49cf47b9201c94ad619", 0x47}], 0x4, 0x0, 0x0, 0xc000}}, {{&(0x7f0000001b40)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000001c80)=[{&(0x7f0000001bc0)="28cda7cf078c762e4f6a0874a8c34bd2638c9602bd012eef51d965f4f51f6a20f96759830820d524209ee51b312793ada5c0b3caefcb26016e211d257c0e859a26f0445b53f1ddf2604c35495148559718044f0adbce0dfbb70dc69dc5e142e598a66d0e7cd0f3c11c48d9bca37a383d53cb6115c118d6491c5853e7631c144d", 0x80}], 0x1, &(0x7f0000001cc0)=[@cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff}}}], 0x20, 0x20000080}}, {{&(0x7f0000001d00)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000001f00)=[{&(0x7f0000001d80)="1452aefb8af5790fd2dce64efbfc47ae4c872e1e21e622b37632dca524367b5212a2b69226224b59bc795574311789c1e96eaf23ba7173ff098ee3c0d2f06c6dea37d5ec9d6e532564cc9744aba9b2e0363b4a5d691d113e71e9f84945", 0x5d}, {&(0x7f0000001e00)="decc6bf69de7448cfcc1541437dd1d47369caa9d7245c6b221e5a802c4ed00f1f3ff694c4568dfd39e0ed308b2ac88e8887c57aed8f885d0f7ac49bb1e98ba2e3d76a303f86d7904e4927dd535e63f55b11628d1c1dd6488720e7b0afadd9ac618aacd923998f9250d2a9c490a8c75fb18c967731dce82a80f2e0b69c0d2279423c3838b725075a4a1032084e8bfec64ae7e9da2266c84bcfac827ad1dbec7cca7e0a960234c17cc628bf344452583eaae0b910b02e18730bc328d23b4ee98cf015a25e279012decf36d0bb2c69a006d8a23eb684e3718cd55a9b633", 0xdc}], 0x2, &(0x7f0000002140)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee00}}}, @rights={{0x14, 0x1, 0x1, [r3]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r6}}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0xee01}}}, @rights={{0x14, 0x1, 0x1, [r0]}}, @rights={{0x1c, 0x1, 0x1, [r2, r5, r7]}}], 0xf0, 0x40d4}}], 0x5, 0x8880) socket$vsock_stream(0x28, 0x1, 0x0) ppoll(&(0x7f00000000c0)=[{r2, 0x8124}, {0xffffffffffffffff, 0x0, 0x64}], 0x2, &(0x7f00000002c0)={0x0, r4+10000000}, 0x0, 0x0) 00:29:30 executing program 1: r0 = socket$inet(0x2, 0x100000000003, 0x400000000001) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000080)="441f070300000000000074ed27c1b3fe76ce384b1a6a722a3beaf52671", 0x1d) getsockopt$inet_opts(r0, 0x0, 0x4, 0x0, &(0x7f0000000040)) 00:29:30 executing program 5: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x3af4701e) r2 = socket$inet_tcp(0x2, 0x1, 0x0) getpeername$inet(r2, &(0x7f0000000040), &(0x7f0000000240)=0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r1, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x19, 0x8, &(0x7f00000003c0)=ANY=[@ANYBLOB="0001000100000000000000000018210000", @ANYRES32, @ANYBLOB="000000000800000085100000020000000559d6ad010000008451ffff0800000095000099d8c87600"], &(0x7f0000000440)='syzkaller\x00', 0x7f, 0x48, &(0x7f0000000480)=""/72, 0x41000, 0x0, '\x00', 0x0, 0x6, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x7, 0x3}, 0x8, 0x10, &(0x7f0000000540)={0x5, 0x2, 0x4, 0x200}, 0x10, 0x0, r0}, 0x78) openat$cgroup_ro(r0, &(0x7f0000000280)='cpuset.effective_cpus\x00', 0x0, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(r3, 0xc4089434, &(0x7f0000000600)={0x0, 0x3b2, 0x0, [0x7cb, 0x1, 0x8, 0xffff, 0x80], [0x1a2, 0x48da77fb, 0x9, 0x4, 0x7, 0xcc56, 0x0, 0x8, 0xffffffff80000000, 0x7fffffff, 0x54, 0xffffffff, 0x100000000, 0xad, 0x4, 0x9, 0xfb42, 0xffffffffffffff01, 0xff, 0x1, 0x40, 0x1, 0x9, 0x2, 0x4, 0xfffffffffffffeff, 0xe87a, 0x3, 0x3, 0xb404, 0x8000, 0x3, 0x1, 0x3, 0x6, 0xffffffffffff7fff, 0x79a1, 0xaf, 0x3, 0x7ff, 0x40, 0x941, 0x6, 0x1f, 0x80000001, 0xa0a3, 0x922, 0x7ff, 0x4, 0x101, 0x3, 0x4, 0x2, 0x3, 0x2, 0x7, 0x9, 0x2, 0x14a, 0x1, 0x7fff, 0x0, 0x1, 0x3, 0x7fff, 0x4, 0xff, 0x1, 0x400, 0x2, 0xffff, 0x1ff, 0x8, 0x28000000000000, 0xffffffff, 0xf6, 0x4ba, 0x57a, 0x9, 0x200, 0x1ff, 0x7, 0x3, 0x2, 0x2f7f, 0xdf, 0xc9, 0x5, 0x100000000, 0x4000007, 0x5, 0x1, 0x401, 0x8000, 0x5, 0x2, 0xeef, 0x6, 0x5, 0x6, 0x80, 0x6, 0xb2e3, 0x2, 0x1, 0x9, 0x1000, 0x8000, 0x3ff, 0x1, 0x8, 0x7, 0x9, 0x1000000000000, 0x1f, 0x0, 0xfdf, 0x85, 0x3, 0x6, 0x20]}) ioctl$FS_IOC_RESVSP(r0, 0x40305839, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8000000}) ioctl$FICLONERANGE(r1, 0x4020940d, &(0x7f0000000380)={{r0}, 0x5, 0x0, 0x86d5}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$FOU_CMD_ADD(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000400)={0x38, r5, 0x209, 0x0, 0x0, {}, [@FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @loopback}, @FOU_ATTR_IFINDEX={0x8, 0xb, r7}]}, 0x38}}, 0x0) 00:29:30 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x3af4701e) r2 = socket$inet_tcp(0x2, 0x1, 0x0) getpeername$inet(r2, &(0x7f0000000040), &(0x7f0000000240)=0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r1, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x19, 0x8, &(0x7f00000003c0)=ANY=[@ANYBLOB="0001000100000000000000000018210000", @ANYRES32, @ANYBLOB="000000000800000085100000020000000559d6ad010000008451ffff0800000095000099d8c87600"], &(0x7f0000000440)='syzkaller\x00', 0x7f, 0x48, &(0x7f0000000480)=""/72, 0x41000, 0x0, '\x00', 0x0, 0x6, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x7, 0x3}, 0x8, 0x10, &(0x7f0000000540)={0x5, 0x2, 0x4, 0x200}, 0x10, 0x0, r0}, 0x78) openat$cgroup_ro(r0, &(0x7f0000000280)='cpuset.effective_cpus\x00', 0x0, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(r3, 0xc4089434, &(0x7f0000000600)={0x0, 0x3b2, 0x0, [0x7cb, 0x1, 0x8, 0xffff, 0x80], [0x1a2, 0x48da77fb, 0x9, 0x4, 0x7, 0xcc56, 0x0, 0x8, 0xffffffff80000000, 0x7fffffff, 0x54, 0xffffffff, 0x100000000, 0xad, 0x4, 0x9, 0xfb42, 0xffffffffffffff01, 0xff, 0x1, 0x40, 0x1, 0x9, 0x2, 0x4, 0xfffffffffffffeff, 0xe87a, 0x3, 0x3, 0xb404, 0x8000, 0x3, 0x1, 0x3, 0x6, 0xffffffffffff7fff, 0x79a1, 0xaf, 0x3, 0x7ff, 0x40, 0x941, 0x6, 0x1f, 0x80000001, 0xa0a3, 0x922, 0x7ff, 0x4, 0x101, 0x3, 0x4, 0x2, 0x3, 0x2, 0x7, 0x9, 0x2, 0x14a, 0x1, 0x7fff, 0x0, 0x1, 0x3, 0x7fff, 0x4, 0xff, 0x1, 0x400, 0x2, 0xffff, 0x1ff, 0x8, 0x28000000000000, 0xffffffff, 0xf6, 0x4ba, 0x57a, 0x9, 0x200, 0x1ff, 0x7, 0x3, 0x2, 0x2f7f, 0xdf, 0xc9, 0x5, 0x100000000, 0x4000007, 0x5, 0x1, 0x401, 0x8000, 0x5, 0x2, 0xeef, 0x6, 0x5, 0x6, 0x80, 0x6, 0xb2e3, 0x2, 0x1, 0x9, 0x1000, 0x8000, 0x3ff, 0x1, 0x8, 0x7, 0x9, 0x1000000000000, 0x1f, 0x0, 0xfdf, 0x85, 0x3, 0x6, 0x20]}) ioctl$FS_IOC_RESVSP(r0, 0x40305839, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8000000}) ioctl$FICLONERANGE(r1, 0x4020940d, &(0x7f0000000380)={{r0}, 0x5, 0x0, 0x86d5}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$FOU_CMD_ADD(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000400)={0x38, r5, 0x209, 0x0, 0x0, {}, [@FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @loopback}, @FOU_ATTR_IFINDEX={0x8, 0xb, r7}]}, 0x38}}, 0x0) 00:29:30 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x4000000000002, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x80, 0x0) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) r3 = openat$cgroup_type(r0, &(0x7f0000000000), 0x2, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000009, 0x40010, r3, 0x80000001000) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) r5 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) socket(0x10, 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0x1c) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r6) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000020c0), &(0x7f0000002100)=0xc) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r7, 0x4000000000000, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0xc01, 0x3, 0x438, 0x2e8, 0x5002004a, 0x7d09, 0x0, 0x3, 0x3a0, 0x3c8, 0x3c8, 0x3a0, 0x3c8, 0x4, 0x0, {[{{@uncond, 0x0, 0x2a0, 0x2e8, 0x0, {}, [@common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0xfffd}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x498) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000002240)=[{{&(0x7f0000000040)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000140)=[{&(0x7f00000001c0)="b35459eab157139645dff2328b7c8a914bab223d4675742e77c724e48dfb21d3e31629ee9532371e5a5cd53d95ea4dffc1c7747ae2c9970407d29c4979719bc214ae4f6491b4738e5b10006ec525f48ad733b55c8fc3fedaee48fa46a61089b8961171ad4cdbdfae023d914091a02acf61a2", 0x72}, {&(0x7f0000000300)="1d5a67a8695e623a7342156ee1cebc16ab529930a8dfc51df11a853fb5d2169bbc7ab5aedf5a84dcf610e0443d4f91318d1dacdbab590e036ce16caf36384f545c5f36844200a900992e542bf3eb04e1b04abda74b737a1db6f7aca31de1084d1026948b0c92bae1ccfb4e7d54251b62bb5fbd9d9a4348a108d453e8a22c8c08e4928a01597e30a8a560de57581ad522c22a902b1653cfaed880f6f12d", 0x9d}, {&(0x7f00000003c0)="0890058cb4bc3b8ac36b6236011de0b825c5af5ce6e590fe51465de7e34e17ad675258e454c36a5187dfe4ea2046681ac586b1909764f2898272fb275d01884de30981664a2989436c34cc06ac6175b13ea6636e49c8689f433ae67c880e0a382e68c4200275e18d6b592de41b2baec85f6b2c7e32f0891f3979f6ec8e620777f4b59d3abc064f0e60b239724a1ae4af7f815b27bf", 0x95}], 0x3, &(0x7f0000000540)=[@rights={{0x20, 0x1, 0x1, [r0, 0xffffffffffffffff, r3, r5]}}, @rights={{0x14, 0x1, 0x1, [r2]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01}}}], 0x80}}, {{&(0x7f00000005c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000780)=[{&(0x7f0000000640)="d67948928c56abc67a6fbdf23da152db801331cca670e665b9b9a75ae1ab9aabfdc575251a3ebfc9f12e8d828e91a8eccf4c0ac030f96fb1ae97c69796fe3e08db0b5a6be498cca57c85b71e125a1f0bcf8bef2f7c42be31896c506d96dff78efad4580c65bc7745b893aa7057aa1a8606aa6efdb42a38dcb15f3b4fea4513b74fbb4a27103ce41f", 0x88}, {&(0x7f0000000700)="9ff23d7a8db0d6a406b41399ef499953139e1ee9fdc75b500311e0442020470ae17b624bb330be4289cffad923a09a5b41786a833b9a2693ae34e9f2c9cd9ef2126a8fabf0ec00286f091b17", 0x4c}], 0x2, &(0x7f0000000240)=ANY=[@ANYBLOB="1c000000000000000100000001000000", @ANYRES32, @ANYRES32=r0, @ANYBLOB="efd9a51f730000"], 0x20, 0x8000}}, {{&(0x7f0000000800)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000001ac0)=[{0x0}, {&(0x7f0000001940)="ad914b7bd4a854bf8d930679a799cef94f8c", 0x12}, {&(0x7f0000001980)="c7b95ce41008d663886800b6d0a7b5ecfb054fec6238c668ca8c155626e70e0babe72b6cb383859a1104a882f32c9568d3c7a929916c3b0f66208d88b9d078d237232c4e990202ec65bd848575e6609a31bcf882cdff7b151f0939c1499e4cd3667dd0e029ab2ee88139d2ae7eb6750e452963bc668dc58bdfa73df1709fd4dba7218def9f", 0x85}, {&(0x7f0000001a40)="94ba0620db3296bf7d25acd74e77ac7047aaa20eb37009ff2d46f2830e70e214e9cc5da2a15843a8c85be3bbde3de7b6de0aa01a2cc5ae3ee08ca4a3f7a49cf47b9201c94ad619", 0x47}], 0x4, 0x0, 0x0, 0xc000}}, {{&(0x7f0000001b40)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000001c80)=[{&(0x7f0000001bc0)="28cda7cf078c762e4f6a0874a8c34bd2638c9602bd012eef51d965f4f51f6a20f96759830820d524209ee51b312793ada5c0b3caefcb26016e211d257c0e859a26f0445b53f1ddf2604c35495148559718044f0adbce0dfbb70dc69dc5e142e598a66d0e7cd0f3c11c48d9bca37a383d53cb6115c118d6491c5853e7631c144d", 0x80}], 0x1, &(0x7f0000001cc0)=[@cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff}}}], 0x20, 0x20000080}}, {{&(0x7f0000001d00)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000001f00)=[{&(0x7f0000001d80)="1452aefb8af5790fd2dce64efbfc47ae4c872e1e21e622b37632dca524367b5212a2b69226224b59bc795574311789c1e96eaf23ba7173ff098ee3c0d2f06c6dea37d5ec9d6e532564cc9744aba9b2e0363b4a5d691d113e71e9f84945", 0x5d}, {&(0x7f0000001e00)="decc6bf69de7448cfcc1541437dd1d47369caa9d7245c6b221e5a802c4ed00f1f3ff694c4568dfd39e0ed308b2ac88e8887c57aed8f885d0f7ac49bb1e98ba2e3d76a303f86d7904e4927dd535e63f55b11628d1c1dd6488720e7b0afadd9ac618aacd923998f9250d2a9c490a8c75fb18c967731dce82a80f2e0b69c0d2279423c3838b725075a4a1032084e8bfec64ae7e9da2266c84bcfac827ad1dbec7cca7e0a960234c17cc628bf344452583eaae0b910b02e18730bc328d23b4ee98cf015a25e279012decf36d0bb2c69a006d8a23eb684e3718cd55a9b633", 0xdc}], 0x2, &(0x7f0000002140)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee00}}}, @rights={{0x14, 0x1, 0x1, [r3]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r6}}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0xee01}}}, @rights={{0x14, 0x1, 0x1, [r0]}}, @rights={{0x1c, 0x1, 0x1, [r2, r5, r7]}}], 0xf0, 0x40d4}}], 0x5, 0x8880) socket$vsock_stream(0x28, 0x1, 0x0) ppoll(&(0x7f00000000c0)=[{r2, 0x8124}, {0xffffffffffffffff, 0x0, 0x64}], 0x2, &(0x7f00000002c0)={0x0, r4+10000000}, 0x0, 0x0) 00:29:30 executing program 1: r0 = socket$inet(0x2, 0x100000000003, 0x400000000001) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000080)="441f070300000000000074ed27c1b3fe76ce384b1a6a722a3beaf52671", 0x1d) getsockopt$inet_opts(r0, 0x0, 0x4, 0x0, &(0x7f0000000040)) 00:29:30 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x4000000000002, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x80, 0x0) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) r3 = openat$cgroup_type(r0, &(0x7f0000000000), 0x2, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000009, 0x40010, r3, 0x80000001000) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) r5 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) socket(0x10, 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0x1c) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r6) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000020c0), &(0x7f0000002100)=0xc) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r7, 0x4000000000000, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0xc01, 0x3, 0x438, 0x2e8, 0x5002004a, 0x7d09, 0x0, 0x3, 0x3a0, 0x3c8, 0x3c8, 0x3a0, 0x3c8, 0x4, 0x0, {[{{@uncond, 0x0, 0x2a0, 0x2e8, 0x0, {}, [@common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0xfffd}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x498) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000002240)=[{{&(0x7f0000000040)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000140)=[{&(0x7f00000001c0)="b35459eab157139645dff2328b7c8a914bab223d4675742e77c724e48dfb21d3e31629ee9532371e5a5cd53d95ea4dffc1c7747ae2c9970407d29c4979719bc214ae4f6491b4738e5b10006ec525f48ad733b55c8fc3fedaee48fa46a61089b8961171ad4cdbdfae023d914091a02acf61a2", 0x72}, {&(0x7f0000000300)="1d5a67a8695e623a7342156ee1cebc16ab529930a8dfc51df11a853fb5d2169bbc7ab5aedf5a84dcf610e0443d4f91318d1dacdbab590e036ce16caf36384f545c5f36844200a900992e542bf3eb04e1b04abda74b737a1db6f7aca31de1084d1026948b0c92bae1ccfb4e7d54251b62bb5fbd9d9a4348a108d453e8a22c8c08e4928a01597e30a8a560de57581ad522c22a902b1653cfaed880f6f12d", 0x9d}, {&(0x7f00000003c0)="0890058cb4bc3b8ac36b6236011de0b825c5af5ce6e590fe51465de7e34e17ad675258e454c36a5187dfe4ea2046681ac586b1909764f2898272fb275d01884de30981664a2989436c34cc06ac6175b13ea6636e49c8689f433ae67c880e0a382e68c4200275e18d6b592de41b2baec85f6b2c7e32f0891f3979f6ec8e620777f4b59d3abc064f0e60b239724a1ae4af7f815b27bf", 0x95}], 0x3, &(0x7f0000000540)=[@rights={{0x20, 0x1, 0x1, [r0, 0xffffffffffffffff, r3, r5]}}, @rights={{0x14, 0x1, 0x1, [r2]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01}}}], 0x80}}, {{&(0x7f00000005c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000780)=[{&(0x7f0000000640)="d67948928c56abc67a6fbdf23da152db801331cca670e665b9b9a75ae1ab9aabfdc575251a3ebfc9f12e8d828e91a8eccf4c0ac030f96fb1ae97c69796fe3e08db0b5a6be498cca57c85b71e125a1f0bcf8bef2f7c42be31896c506d96dff78efad4580c65bc7745b893aa7057aa1a8606aa6efdb42a38dcb15f3b4fea4513b74fbb4a27103ce41f", 0x88}, {&(0x7f0000000700)="9ff23d7a8db0d6a406b41399ef499953139e1ee9fdc75b500311e0442020470ae17b624bb330be4289cffad923a09a5b41786a833b9a2693ae34e9f2c9cd9ef2126a8fabf0ec00286f091b17", 0x4c}], 0x2, &(0x7f0000000240)=ANY=[@ANYBLOB="1c000000000000000100000001000000", @ANYRES32, @ANYRES32=r0, @ANYBLOB="efd9a51f730000"], 0x20, 0x8000}}, {{&(0x7f0000000800)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000001ac0)=[{0x0}, {&(0x7f0000001940)="ad914b7bd4a854bf8d930679a799cef94f8c", 0x12}, {&(0x7f0000001980)="c7b95ce41008d663886800b6d0a7b5ecfb054fec6238c668ca8c155626e70e0babe72b6cb383859a1104a882f32c9568d3c7a929916c3b0f66208d88b9d078d237232c4e990202ec65bd848575e6609a31bcf882cdff7b151f0939c1499e4cd3667dd0e029ab2ee88139d2ae7eb6750e452963bc668dc58bdfa73df1709fd4dba7218def9f", 0x85}, {&(0x7f0000001a40)="94ba0620db3296bf7d25acd74e77ac7047aaa20eb37009ff2d46f2830e70e214e9cc5da2a15843a8c85be3bbde3de7b6de0aa01a2cc5ae3ee08ca4a3f7a49cf47b9201c94ad619", 0x47}], 0x4, 0x0, 0x0, 0xc000}}, {{&(0x7f0000001b40)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000001c80)=[{&(0x7f0000001bc0)="28cda7cf078c762e4f6a0874a8c34bd2638c9602bd012eef51d965f4f51f6a20f96759830820d524209ee51b312793ada5c0b3caefcb26016e211d257c0e859a26f0445b53f1ddf2604c35495148559718044f0adbce0dfbb70dc69dc5e142e598a66d0e7cd0f3c11c48d9bca37a383d53cb6115c118d6491c5853e7631c144d", 0x80}], 0x1, &(0x7f0000001cc0)=[@cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff}}}], 0x20, 0x20000080}}, {{&(0x7f0000001d00)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000001f00)=[{&(0x7f0000001d80)="1452aefb8af5790fd2dce64efbfc47ae4c872e1e21e622b37632dca524367b5212a2b69226224b59bc795574311789c1e96eaf23ba7173ff098ee3c0d2f06c6dea37d5ec9d6e532564cc9744aba9b2e0363b4a5d691d113e71e9f84945", 0x5d}, {&(0x7f0000001e00)="decc6bf69de7448cfcc1541437dd1d47369caa9d7245c6b221e5a802c4ed00f1f3ff694c4568dfd39e0ed308b2ac88e8887c57aed8f885d0f7ac49bb1e98ba2e3d76a303f86d7904e4927dd535e63f55b11628d1c1dd6488720e7b0afadd9ac618aacd923998f9250d2a9c490a8c75fb18c967731dce82a80f2e0b69c0d2279423c3838b725075a4a1032084e8bfec64ae7e9da2266c84bcfac827ad1dbec7cca7e0a960234c17cc628bf344452583eaae0b910b02e18730bc328d23b4ee98cf015a25e279012decf36d0bb2c69a006d8a23eb684e3718cd55a9b633", 0xdc}], 0x2, &(0x7f0000002140)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee00}}}, @rights={{0x14, 0x1, 0x1, [r3]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r6}}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0xee01}}}, @rights={{0x14, 0x1, 0x1, [r0]}}, @rights={{0x1c, 0x1, 0x1, [r2, r5, r7]}}], 0xf0, 0x40d4}}], 0x5, 0x8880) socket$vsock_stream(0x28, 0x1, 0x0) ppoll(&(0x7f00000000c0)=[{r2, 0x8124}, {0xffffffffffffffff, 0x0, 0x64}], 0x2, &(0x7f00000002c0)={0x0, r4+10000000}, 0x0, 0x0) 00:29:30 executing program 1: r0 = socket$inet(0x2, 0x100000000003, 0x400000000001) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000080)="441f070300000000000074ed27c1b3fe76ce384b1a6a722a3beaf52671", 0x1d) getsockopt$inet_opts(r0, 0x0, 0x4, 0x0, &(0x7f0000000040)) 00:29:30 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x3af4701e) r2 = socket$inet_tcp(0x2, 0x1, 0x0) getpeername$inet(r2, &(0x7f0000000040), &(0x7f0000000240)=0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r1, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x19, 0x8, &(0x7f00000003c0)=ANY=[@ANYBLOB="0001000100000000000000000018210000", @ANYRES32, @ANYBLOB="000000000800000085100000020000000559d6ad010000008451ffff0800000095000099d8c87600"], &(0x7f0000000440)='syzkaller\x00', 0x7f, 0x48, &(0x7f0000000480)=""/72, 0x41000, 0x0, '\x00', 0x0, 0x6, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x7, 0x3}, 0x8, 0x10, &(0x7f0000000540)={0x5, 0x2, 0x4, 0x200}, 0x10, 0x0, r0}, 0x78) openat$cgroup_ro(r0, &(0x7f0000000280)='cpuset.effective_cpus\x00', 0x0, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(r3, 0xc4089434, &(0x7f0000000600)={0x0, 0x3b2, 0x0, [0x7cb, 0x1, 0x8, 0xffff, 0x80], [0x1a2, 0x48da77fb, 0x9, 0x4, 0x7, 0xcc56, 0x0, 0x8, 0xffffffff80000000, 0x7fffffff, 0x54, 0xffffffff, 0x100000000, 0xad, 0x4, 0x9, 0xfb42, 0xffffffffffffff01, 0xff, 0x1, 0x40, 0x1, 0x9, 0x2, 0x4, 0xfffffffffffffeff, 0xe87a, 0x3, 0x3, 0xb404, 0x8000, 0x3, 0x1, 0x3, 0x6, 0xffffffffffff7fff, 0x79a1, 0xaf, 0x3, 0x7ff, 0x40, 0x941, 0x6, 0x1f, 0x80000001, 0xa0a3, 0x922, 0x7ff, 0x4, 0x101, 0x3, 0x4, 0x2, 0x3, 0x2, 0x7, 0x9, 0x2, 0x14a, 0x1, 0x7fff, 0x0, 0x1, 0x3, 0x7fff, 0x4, 0xff, 0x1, 0x400, 0x2, 0xffff, 0x1ff, 0x8, 0x28000000000000, 0xffffffff, 0xf6, 0x4ba, 0x57a, 0x9, 0x200, 0x1ff, 0x7, 0x3, 0x2, 0x2f7f, 0xdf, 0xc9, 0x5, 0x100000000, 0x4000007, 0x5, 0x1, 0x401, 0x8000, 0x5, 0x2, 0xeef, 0x6, 0x5, 0x6, 0x80, 0x6, 0xb2e3, 0x2, 0x1, 0x9, 0x1000, 0x8000, 0x3ff, 0x1, 0x8, 0x7, 0x9, 0x1000000000000, 0x1f, 0x0, 0xfdf, 0x85, 0x3, 0x6, 0x20]}) ioctl$FS_IOC_RESVSP(r0, 0x40305839, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8000000}) ioctl$FICLONERANGE(r1, 0x4020940d, &(0x7f0000000380)={{r0}, 0x5, 0x0, 0x86d5}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$FOU_CMD_ADD(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000400)={0x38, r5, 0x209, 0x0, 0x0, {}, [@FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @loopback}, @FOU_ATTR_IFINDEX={0x8, 0xb, r7}]}, 0x38}}, 0x0) 00:29:31 executing program 1: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x3af4701e) r2 = socket$inet_tcp(0x2, 0x1, 0x0) getpeername$inet(r2, &(0x7f0000000040), &(0x7f0000000240)=0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r1, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x19, 0x8, &(0x7f00000003c0)=ANY=[@ANYBLOB="0001000100000000000000000018210000", @ANYRES32, @ANYBLOB="000000000800000085100000020000000559d6ad010000008451ffff0800000095000099d8c87600"], &(0x7f0000000440)='syzkaller\x00', 0x7f, 0x48, &(0x7f0000000480)=""/72, 0x41000, 0x0, '\x00', 0x0, 0x6, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x7, 0x3}, 0x8, 0x10, &(0x7f0000000540)={0x5, 0x2, 0x4, 0x200}, 0x10, 0x0, r0}, 0x78) openat$cgroup_ro(r0, &(0x7f0000000280)='cpuset.effective_cpus\x00', 0x0, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(r3, 0xc4089434, &(0x7f0000000600)={0x0, 0x3b2, 0x0, [0x7cb, 0x1, 0x8, 0xffff, 0x80], [0x1a2, 0x48da77fb, 0x9, 0x4, 0x7, 0xcc56, 0x0, 0x8, 0xffffffff80000000, 0x7fffffff, 0x54, 0xffffffff, 0x100000000, 0xad, 0x4, 0x9, 0xfb42, 0xffffffffffffff01, 0xff, 0x1, 0x40, 0x1, 0x9, 0x2, 0x4, 0xfffffffffffffeff, 0xe87a, 0x3, 0x3, 0xb404, 0x8000, 0x3, 0x1, 0x3, 0x6, 0xffffffffffff7fff, 0x79a1, 0xaf, 0x3, 0x7ff, 0x40, 0x941, 0x6, 0x1f, 0x80000001, 0xa0a3, 0x922, 0x7ff, 0x4, 0x101, 0x3, 0x4, 0x2, 0x3, 0x2, 0x7, 0x9, 0x2, 0x14a, 0x1, 0x7fff, 0x0, 0x1, 0x3, 0x7fff, 0x4, 0xff, 0x1, 0x400, 0x2, 0xffff, 0x1ff, 0x8, 0x28000000000000, 0xffffffff, 0xf6, 0x4ba, 0x57a, 0x9, 0x200, 0x1ff, 0x7, 0x3, 0x2, 0x2f7f, 0xdf, 0xc9, 0x5, 0x100000000, 0x4000007, 0x5, 0x1, 0x401, 0x8000, 0x5, 0x2, 0xeef, 0x6, 0x5, 0x6, 0x80, 0x6, 0xb2e3, 0x2, 0x1, 0x9, 0x1000, 0x8000, 0x3ff, 0x1, 0x8, 0x7, 0x9, 0x1000000000000, 0x1f, 0x0, 0xfdf, 0x85, 0x3, 0x6, 0x20]}) ioctl$FS_IOC_RESVSP(r0, 0x40305839, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8000000}) ioctl$FICLONERANGE(r1, 0x4020940d, &(0x7f0000000380)={{r0}, 0x5, 0x0, 0x86d5}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$FOU_CMD_ADD(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000400)={0x38, r5, 0x209, 0x0, 0x0, {}, [@FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @loopback}, @FOU_ATTR_IFINDEX={0x8, 0xb, r7}]}, 0x38}}, 0x0) 00:29:31 executing program 5: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x3af4701e) r2 = socket$inet_tcp(0x2, 0x1, 0x0) getpeername$inet(r2, &(0x7f0000000040), &(0x7f0000000240)=0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r1, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x19, 0x8, &(0x7f00000003c0)=ANY=[@ANYBLOB="0001000100000000000000000018210000", @ANYRES32, @ANYBLOB="000000000800000085100000020000000559d6ad010000008451ffff0800000095000099d8c87600"], &(0x7f0000000440)='syzkaller\x00', 0x7f, 0x48, &(0x7f0000000480)=""/72, 0x41000, 0x0, '\x00', 0x0, 0x6, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x7, 0x3}, 0x8, 0x10, &(0x7f0000000540)={0x5, 0x2, 0x4, 0x200}, 0x10, 0x0, r0}, 0x78) openat$cgroup_ro(r0, &(0x7f0000000280)='cpuset.effective_cpus\x00', 0x0, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(r3, 0xc4089434, &(0x7f0000000600)={0x0, 0x3b2, 0x0, [0x7cb, 0x1, 0x8, 0xffff, 0x80], [0x1a2, 0x48da77fb, 0x9, 0x4, 0x7, 0xcc56, 0x0, 0x8, 0xffffffff80000000, 0x7fffffff, 0x54, 0xffffffff, 0x100000000, 0xad, 0x4, 0x9, 0xfb42, 0xffffffffffffff01, 0xff, 0x1, 0x40, 0x1, 0x9, 0x2, 0x4, 0xfffffffffffffeff, 0xe87a, 0x3, 0x3, 0xb404, 0x8000, 0x3, 0x1, 0x3, 0x6, 0xffffffffffff7fff, 0x79a1, 0xaf, 0x3, 0x7ff, 0x40, 0x941, 0x6, 0x1f, 0x80000001, 0xa0a3, 0x922, 0x7ff, 0x4, 0x101, 0x3, 0x4, 0x2, 0x3, 0x2, 0x7, 0x9, 0x2, 0x14a, 0x1, 0x7fff, 0x0, 0x1, 0x3, 0x7fff, 0x4, 0xff, 0x1, 0x400, 0x2, 0xffff, 0x1ff, 0x8, 0x28000000000000, 0xffffffff, 0xf6, 0x4ba, 0x57a, 0x9, 0x200, 0x1ff, 0x7, 0x3, 0x2, 0x2f7f, 0xdf, 0xc9, 0x5, 0x100000000, 0x4000007, 0x5, 0x1, 0x401, 0x8000, 0x5, 0x2, 0xeef, 0x6, 0x5, 0x6, 0x80, 0x6, 0xb2e3, 0x2, 0x1, 0x9, 0x1000, 0x8000, 0x3ff, 0x1, 0x8, 0x7, 0x9, 0x1000000000000, 0x1f, 0x0, 0xfdf, 0x85, 0x3, 0x6, 0x20]}) ioctl$FS_IOC_RESVSP(r0, 0x40305839, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8000000}) ioctl$FICLONERANGE(r1, 0x4020940d, &(0x7f0000000380)={{r0}, 0x5, 0x0, 0x86d5}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$FOU_CMD_ADD(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000400)={0x38, r5, 0x209, 0x0, 0x0, {}, [@FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @loopback}, @FOU_ATTR_IFINDEX={0x8, 0xb, r7}]}, 0x38}}, 0x0) 00:29:32 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x3af4701e) r2 = socket$inet_tcp(0x2, 0x1, 0x0) getpeername$inet(r2, &(0x7f0000000040), &(0x7f0000000240)=0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r1, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x19, 0x8, &(0x7f00000003c0)=ANY=[@ANYBLOB="0001000100000000000000000018210000", @ANYRES32, @ANYBLOB="000000000800000085100000020000000559d6ad010000008451ffff0800000095000099d8c87600"], &(0x7f0000000440)='syzkaller\x00', 0x7f, 0x48, &(0x7f0000000480)=""/72, 0x41000, 0x0, '\x00', 0x0, 0x6, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x7, 0x3}, 0x8, 0x10, &(0x7f0000000540)={0x5, 0x2, 0x4, 0x200}, 0x10, 0x0, r0}, 0x78) openat$cgroup_ro(r0, &(0x7f0000000280)='cpuset.effective_cpus\x00', 0x0, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(r3, 0xc4089434, &(0x7f0000000600)={0x0, 0x3b2, 0x0, [0x7cb, 0x1, 0x8, 0xffff, 0x80], [0x1a2, 0x48da77fb, 0x9, 0x4, 0x7, 0xcc56, 0x0, 0x8, 0xffffffff80000000, 0x7fffffff, 0x54, 0xffffffff, 0x100000000, 0xad, 0x4, 0x9, 0xfb42, 0xffffffffffffff01, 0xff, 0x1, 0x40, 0x1, 0x9, 0x2, 0x4, 0xfffffffffffffeff, 0xe87a, 0x3, 0x3, 0xb404, 0x8000, 0x3, 0x1, 0x3, 0x6, 0xffffffffffff7fff, 0x79a1, 0xaf, 0x3, 0x7ff, 0x40, 0x941, 0x6, 0x1f, 0x80000001, 0xa0a3, 0x922, 0x7ff, 0x4, 0x101, 0x3, 0x4, 0x2, 0x3, 0x2, 0x7, 0x9, 0x2, 0x14a, 0x1, 0x7fff, 0x0, 0x1, 0x3, 0x7fff, 0x4, 0xff, 0x1, 0x400, 0x2, 0xffff, 0x1ff, 0x8, 0x28000000000000, 0xffffffff, 0xf6, 0x4ba, 0x57a, 0x9, 0x200, 0x1ff, 0x7, 0x3, 0x2, 0x2f7f, 0xdf, 0xc9, 0x5, 0x100000000, 0x4000007, 0x5, 0x1, 0x401, 0x8000, 0x5, 0x2, 0xeef, 0x6, 0x5, 0x6, 0x80, 0x6, 0xb2e3, 0x2, 0x1, 0x9, 0x1000, 0x8000, 0x3ff, 0x1, 0x8, 0x7, 0x9, 0x1000000000000, 0x1f, 0x0, 0xfdf, 0x85, 0x3, 0x6, 0x20]}) ioctl$FS_IOC_RESVSP(r0, 0x40305839, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8000000}) ioctl$FICLONERANGE(r1, 0x4020940d, &(0x7f0000000380)={{r0}, 0x5, 0x0, 0x86d5}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$FOU_CMD_ADD(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000400)={0x38, r5, 0x209, 0x0, 0x0, {}, [@FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @loopback}, @FOU_ATTR_IFINDEX={0x8, 0xb, r7}]}, 0x38}}, 0x0) 00:29:33 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x4000000000002, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x80, 0x0) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) r3 = openat$cgroup_type(r0, &(0x7f0000000000), 0x2, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000009, 0x40010, r3, 0x80000001000) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) r5 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) socket(0x10, 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0x1c) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r6) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000020c0), &(0x7f0000002100)=0xc) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r7, 0x4000000000000, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0xc01, 0x3, 0x438, 0x2e8, 0x5002004a, 0x7d09, 0x0, 0x3, 0x3a0, 0x3c8, 0x3c8, 0x3a0, 0x3c8, 0x4, 0x0, {[{{@uncond, 0x0, 0x2a0, 0x2e8, 0x0, {}, [@common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0xfffd}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x498) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000002240)=[{{&(0x7f0000000040)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000140)=[{&(0x7f00000001c0)="b35459eab157139645dff2328b7c8a914bab223d4675742e77c724e48dfb21d3e31629ee9532371e5a5cd53d95ea4dffc1c7747ae2c9970407d29c4979719bc214ae4f6491b4738e5b10006ec525f48ad733b55c8fc3fedaee48fa46a61089b8961171ad4cdbdfae023d914091a02acf61a2", 0x72}, {&(0x7f0000000300)="1d5a67a8695e623a7342156ee1cebc16ab529930a8dfc51df11a853fb5d2169bbc7ab5aedf5a84dcf610e0443d4f91318d1dacdbab590e036ce16caf36384f545c5f36844200a900992e542bf3eb04e1b04abda74b737a1db6f7aca31de1084d1026948b0c92bae1ccfb4e7d54251b62bb5fbd9d9a4348a108d453e8a22c8c08e4928a01597e30a8a560de57581ad522c22a902b1653cfaed880f6f12d", 0x9d}, {&(0x7f00000003c0)="0890058cb4bc3b8ac36b6236011de0b825c5af5ce6e590fe51465de7e34e17ad675258e454c36a5187dfe4ea2046681ac586b1909764f2898272fb275d01884de30981664a2989436c34cc06ac6175b13ea6636e49c8689f433ae67c880e0a382e68c4200275e18d6b592de41b2baec85f6b2c7e32f0891f3979f6ec8e620777f4b59d3abc064f0e60b239724a1ae4af7f815b27bf", 0x95}], 0x3, &(0x7f0000000540)=[@rights={{0x20, 0x1, 0x1, [r0, 0xffffffffffffffff, r3, r5]}}, @rights={{0x14, 0x1, 0x1, [r2]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01}}}], 0x80}}, {{&(0x7f00000005c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000780)=[{&(0x7f0000000640)="d67948928c56abc67a6fbdf23da152db801331cca670e665b9b9a75ae1ab9aabfdc575251a3ebfc9f12e8d828e91a8eccf4c0ac030f96fb1ae97c69796fe3e08db0b5a6be498cca57c85b71e125a1f0bcf8bef2f7c42be31896c506d96dff78efad4580c65bc7745b893aa7057aa1a8606aa6efdb42a38dcb15f3b4fea4513b74fbb4a27103ce41f", 0x88}, {&(0x7f0000000700)="9ff23d7a8db0d6a406b41399ef499953139e1ee9fdc75b500311e0442020470ae17b624bb330be4289cffad923a09a5b41786a833b9a2693ae34e9f2c9cd9ef2126a8fabf0ec00286f091b17", 0x4c}], 0x2, &(0x7f0000000240)=ANY=[@ANYBLOB="1c000000000000000100000001000000", @ANYRES32, @ANYRES32=r0, @ANYBLOB="efd9a51f730000"], 0x20, 0x8000}}, {{&(0x7f0000000800)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000001ac0)=[{0x0}, {&(0x7f0000001940)="ad914b7bd4a854bf8d930679a799cef94f8c", 0x12}, {&(0x7f0000001980)="c7b95ce41008d663886800b6d0a7b5ecfb054fec6238c668ca8c155626e70e0babe72b6cb383859a1104a882f32c9568d3c7a929916c3b0f66208d88b9d078d237232c4e990202ec65bd848575e6609a31bcf882cdff7b151f0939c1499e4cd3667dd0e029ab2ee88139d2ae7eb6750e452963bc668dc58bdfa73df1709fd4dba7218def9f", 0x85}, {&(0x7f0000001a40)="94ba0620db3296bf7d25acd74e77ac7047aaa20eb37009ff2d46f2830e70e214e9cc5da2a15843a8c85be3bbde3de7b6de0aa01a2cc5ae3ee08ca4a3f7a49cf47b9201c94ad619", 0x47}], 0x4, 0x0, 0x0, 0xc000}}, {{&(0x7f0000001b40)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000001c80)=[{&(0x7f0000001bc0)="28cda7cf078c762e4f6a0874a8c34bd2638c9602bd012eef51d965f4f51f6a20f96759830820d524209ee51b312793ada5c0b3caefcb26016e211d257c0e859a26f0445b53f1ddf2604c35495148559718044f0adbce0dfbb70dc69dc5e142e598a66d0e7cd0f3c11c48d9bca37a383d53cb6115c118d6491c5853e7631c144d", 0x80}], 0x1, &(0x7f0000001cc0)=[@cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff}}}], 0x20, 0x20000080}}, {{&(0x7f0000001d00)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000001f00)=[{&(0x7f0000001d80)="1452aefb8af5790fd2dce64efbfc47ae4c872e1e21e622b37632dca524367b5212a2b69226224b59bc795574311789c1e96eaf23ba7173ff098ee3c0d2f06c6dea37d5ec9d6e532564cc9744aba9b2e0363b4a5d691d113e71e9f84945", 0x5d}, {&(0x7f0000001e00)="decc6bf69de7448cfcc1541437dd1d47369caa9d7245c6b221e5a802c4ed00f1f3ff694c4568dfd39e0ed308b2ac88e8887c57aed8f885d0f7ac49bb1e98ba2e3d76a303f86d7904e4927dd535e63f55b11628d1c1dd6488720e7b0afadd9ac618aacd923998f9250d2a9c490a8c75fb18c967731dce82a80f2e0b69c0d2279423c3838b725075a4a1032084e8bfec64ae7e9da2266c84bcfac827ad1dbec7cca7e0a960234c17cc628bf344452583eaae0b910b02e18730bc328d23b4ee98cf015a25e279012decf36d0bb2c69a006d8a23eb684e3718cd55a9b633", 0xdc}], 0x2, &(0x7f0000002140)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee00}}}, @rights={{0x14, 0x1, 0x1, [r3]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r6}}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0xee01}}}, @rights={{0x14, 0x1, 0x1, [r0]}}, @rights={{0x1c, 0x1, 0x1, [r2, r5, r7]}}], 0xf0, 0x40d4}}], 0x5, 0x8880) socket$vsock_stream(0x28, 0x1, 0x0) ppoll(&(0x7f00000000c0)=[{r2, 0x8124}, {0xffffffffffffffff, 0x0, 0x64}], 0x2, &(0x7f00000002c0)={0x0, r4+10000000}, 0x0, 0x0) 00:29:33 executing program 1: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x3af4701e) r2 = socket$inet_tcp(0x2, 0x1, 0x0) getpeername$inet(r2, &(0x7f0000000040), &(0x7f0000000240)=0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r1, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x19, 0x8, &(0x7f00000003c0)=ANY=[@ANYBLOB="0001000100000000000000000018210000", @ANYRES32, @ANYBLOB="000000000800000085100000020000000559d6ad010000008451ffff0800000095000099d8c87600"], &(0x7f0000000440)='syzkaller\x00', 0x7f, 0x48, &(0x7f0000000480)=""/72, 0x41000, 0x0, '\x00', 0x0, 0x6, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x7, 0x3}, 0x8, 0x10, &(0x7f0000000540)={0x5, 0x2, 0x4, 0x200}, 0x10, 0x0, r0}, 0x78) openat$cgroup_ro(r0, &(0x7f0000000280)='cpuset.effective_cpus\x00', 0x0, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(r3, 0xc4089434, &(0x7f0000000600)={0x0, 0x3b2, 0x0, [0x7cb, 0x1, 0x8, 0xffff, 0x80], [0x1a2, 0x48da77fb, 0x9, 0x4, 0x7, 0xcc56, 0x0, 0x8, 0xffffffff80000000, 0x7fffffff, 0x54, 0xffffffff, 0x100000000, 0xad, 0x4, 0x9, 0xfb42, 0xffffffffffffff01, 0xff, 0x1, 0x40, 0x1, 0x9, 0x2, 0x4, 0xfffffffffffffeff, 0xe87a, 0x3, 0x3, 0xb404, 0x8000, 0x3, 0x1, 0x3, 0x6, 0xffffffffffff7fff, 0x79a1, 0xaf, 0x3, 0x7ff, 0x40, 0x941, 0x6, 0x1f, 0x80000001, 0xa0a3, 0x922, 0x7ff, 0x4, 0x101, 0x3, 0x4, 0x2, 0x3, 0x2, 0x7, 0x9, 0x2, 0x14a, 0x1, 0x7fff, 0x0, 0x1, 0x3, 0x7fff, 0x4, 0xff, 0x1, 0x400, 0x2, 0xffff, 0x1ff, 0x8, 0x28000000000000, 0xffffffff, 0xf6, 0x4ba, 0x57a, 0x9, 0x200, 0x1ff, 0x7, 0x3, 0x2, 0x2f7f, 0xdf, 0xc9, 0x5, 0x100000000, 0x4000007, 0x5, 0x1, 0x401, 0x8000, 0x5, 0x2, 0xeef, 0x6, 0x5, 0x6, 0x80, 0x6, 0xb2e3, 0x2, 0x1, 0x9, 0x1000, 0x8000, 0x3ff, 0x1, 0x8, 0x7, 0x9, 0x1000000000000, 0x1f, 0x0, 0xfdf, 0x85, 0x3, 0x6, 0x20]}) ioctl$FS_IOC_RESVSP(r0, 0x40305839, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8000000}) ioctl$FICLONERANGE(r1, 0x4020940d, &(0x7f0000000380)={{r0}, 0x5, 0x0, 0x86d5}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$FOU_CMD_ADD(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000400)={0x38, r5, 0x209, 0x0, 0x0, {}, [@FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @loopback}, @FOU_ATTR_IFINDEX={0x8, 0xb, r7}]}, 0x38}}, 0x0) 00:29:33 executing program 5: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x3af4701e) r2 = socket$inet_tcp(0x2, 0x1, 0x0) getpeername$inet(r2, &(0x7f0000000040), &(0x7f0000000240)=0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r1, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x19, 0x8, &(0x7f00000003c0)=ANY=[@ANYBLOB="0001000100000000000000000018210000", @ANYRES32, @ANYBLOB="000000000800000085100000020000000559d6ad010000008451ffff0800000095000099d8c87600"], &(0x7f0000000440)='syzkaller\x00', 0x7f, 0x48, &(0x7f0000000480)=""/72, 0x41000, 0x0, '\x00', 0x0, 0x6, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x7, 0x3}, 0x8, 0x10, &(0x7f0000000540)={0x5, 0x2, 0x4, 0x200}, 0x10, 0x0, r0}, 0x78) openat$cgroup_ro(r0, &(0x7f0000000280)='cpuset.effective_cpus\x00', 0x0, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(r3, 0xc4089434, &(0x7f0000000600)={0x0, 0x3b2, 0x0, [0x7cb, 0x1, 0x8, 0xffff, 0x80], [0x1a2, 0x48da77fb, 0x9, 0x4, 0x7, 0xcc56, 0x0, 0x8, 0xffffffff80000000, 0x7fffffff, 0x54, 0xffffffff, 0x100000000, 0xad, 0x4, 0x9, 0xfb42, 0xffffffffffffff01, 0xff, 0x1, 0x40, 0x1, 0x9, 0x2, 0x4, 0xfffffffffffffeff, 0xe87a, 0x3, 0x3, 0xb404, 0x8000, 0x3, 0x1, 0x3, 0x6, 0xffffffffffff7fff, 0x79a1, 0xaf, 0x3, 0x7ff, 0x40, 0x941, 0x6, 0x1f, 0x80000001, 0xa0a3, 0x922, 0x7ff, 0x4, 0x101, 0x3, 0x4, 0x2, 0x3, 0x2, 0x7, 0x9, 0x2, 0x14a, 0x1, 0x7fff, 0x0, 0x1, 0x3, 0x7fff, 0x4, 0xff, 0x1, 0x400, 0x2, 0xffff, 0x1ff, 0x8, 0x28000000000000, 0xffffffff, 0xf6, 0x4ba, 0x57a, 0x9, 0x200, 0x1ff, 0x7, 0x3, 0x2, 0x2f7f, 0xdf, 0xc9, 0x5, 0x100000000, 0x4000007, 0x5, 0x1, 0x401, 0x8000, 0x5, 0x2, 0xeef, 0x6, 0x5, 0x6, 0x80, 0x6, 0xb2e3, 0x2, 0x1, 0x9, 0x1000, 0x8000, 0x3ff, 0x1, 0x8, 0x7, 0x9, 0x1000000000000, 0x1f, 0x0, 0xfdf, 0x85, 0x3, 0x6, 0x20]}) ioctl$FS_IOC_RESVSP(r0, 0x40305839, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8000000}) ioctl$FICLONERANGE(r1, 0x4020940d, &(0x7f0000000380)={{r0}, 0x5, 0x0, 0x86d5}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$FOU_CMD_ADD(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000400)={0x38, r5, 0x209, 0x0, 0x0, {}, [@FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @loopback}, @FOU_ATTR_IFINDEX={0x8, 0xb, r7}]}, 0x38}}, 0x0) 00:29:33 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}]}, 0x1c}}, 0x0) 00:29:33 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x4000000000002, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x80, 0x0) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) r3 = openat$cgroup_type(r0, &(0x7f0000000000), 0x2, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000009, 0x40010, r3, 0x80000001000) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) r5 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) socket(0x10, 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0x1c) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r6) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000020c0), &(0x7f0000002100)=0xc) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r7, 0x4000000000000, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0xc01, 0x3, 0x438, 0x2e8, 0x5002004a, 0x7d09, 0x0, 0x3, 0x3a0, 0x3c8, 0x3c8, 0x3a0, 0x3c8, 0x4, 0x0, {[{{@uncond, 0x0, 0x2a0, 0x2e8, 0x0, {}, [@common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0xfffd}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x498) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000002240)=[{{&(0x7f0000000040)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000140)=[{&(0x7f00000001c0)="b35459eab157139645dff2328b7c8a914bab223d4675742e77c724e48dfb21d3e31629ee9532371e5a5cd53d95ea4dffc1c7747ae2c9970407d29c4979719bc214ae4f6491b4738e5b10006ec525f48ad733b55c8fc3fedaee48fa46a61089b8961171ad4cdbdfae023d914091a02acf61a2", 0x72}, {&(0x7f0000000300)="1d5a67a8695e623a7342156ee1cebc16ab529930a8dfc51df11a853fb5d2169bbc7ab5aedf5a84dcf610e0443d4f91318d1dacdbab590e036ce16caf36384f545c5f36844200a900992e542bf3eb04e1b04abda74b737a1db6f7aca31de1084d1026948b0c92bae1ccfb4e7d54251b62bb5fbd9d9a4348a108d453e8a22c8c08e4928a01597e30a8a560de57581ad522c22a902b1653cfaed880f6f12d", 0x9d}, {&(0x7f00000003c0)="0890058cb4bc3b8ac36b6236011de0b825c5af5ce6e590fe51465de7e34e17ad675258e454c36a5187dfe4ea2046681ac586b1909764f2898272fb275d01884de30981664a2989436c34cc06ac6175b13ea6636e49c8689f433ae67c880e0a382e68c4200275e18d6b592de41b2baec85f6b2c7e32f0891f3979f6ec8e620777f4b59d3abc064f0e60b239724a1ae4af7f815b27bf", 0x95}], 0x3, &(0x7f0000000540)=[@rights={{0x20, 0x1, 0x1, [r0, 0xffffffffffffffff, r3, r5]}}, @rights={{0x14, 0x1, 0x1, [r2]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01}}}], 0x80}}, {{&(0x7f00000005c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000780)=[{&(0x7f0000000640)="d67948928c56abc67a6fbdf23da152db801331cca670e665b9b9a75ae1ab9aabfdc575251a3ebfc9f12e8d828e91a8eccf4c0ac030f96fb1ae97c69796fe3e08db0b5a6be498cca57c85b71e125a1f0bcf8bef2f7c42be31896c506d96dff78efad4580c65bc7745b893aa7057aa1a8606aa6efdb42a38dcb15f3b4fea4513b74fbb4a27103ce41f", 0x88}, {&(0x7f0000000700)="9ff23d7a8db0d6a406b41399ef499953139e1ee9fdc75b500311e0442020470ae17b624bb330be4289cffad923a09a5b41786a833b9a2693ae34e9f2c9cd9ef2126a8fabf0ec00286f091b17", 0x4c}], 0x2, &(0x7f0000000240)=ANY=[@ANYBLOB="1c000000000000000100000001000000", @ANYRES32, @ANYRES32=r0, @ANYBLOB="efd9a51f730000"], 0x20, 0x8000}}, {{&(0x7f0000000800)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000001ac0)=[{0x0}, {&(0x7f0000001940)="ad914b7bd4a854bf8d930679a799cef94f8c", 0x12}, {&(0x7f0000001980)="c7b95ce41008d663886800b6d0a7b5ecfb054fec6238c668ca8c155626e70e0babe72b6cb383859a1104a882f32c9568d3c7a929916c3b0f66208d88b9d078d237232c4e990202ec65bd848575e6609a31bcf882cdff7b151f0939c1499e4cd3667dd0e029ab2ee88139d2ae7eb6750e452963bc668dc58bdfa73df1709fd4dba7218def9f", 0x85}, {&(0x7f0000001a40)="94ba0620db3296bf7d25acd74e77ac7047aaa20eb37009ff2d46f2830e70e214e9cc5da2a15843a8c85be3bbde3de7b6de0aa01a2cc5ae3ee08ca4a3f7a49cf47b9201c94ad619", 0x47}], 0x4, 0x0, 0x0, 0xc000}}, {{&(0x7f0000001b40)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000001c80)=[{&(0x7f0000001bc0)="28cda7cf078c762e4f6a0874a8c34bd2638c9602bd012eef51d965f4f51f6a20f96759830820d524209ee51b312793ada5c0b3caefcb26016e211d257c0e859a26f0445b53f1ddf2604c35495148559718044f0adbce0dfbb70dc69dc5e142e598a66d0e7cd0f3c11c48d9bca37a383d53cb6115c118d6491c5853e7631c144d", 0x80}], 0x1, &(0x7f0000001cc0)=[@cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff}}}], 0x20, 0x20000080}}, {{&(0x7f0000001d00)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000001f00)=[{&(0x7f0000001d80)="1452aefb8af5790fd2dce64efbfc47ae4c872e1e21e622b37632dca524367b5212a2b69226224b59bc795574311789c1e96eaf23ba7173ff098ee3c0d2f06c6dea37d5ec9d6e532564cc9744aba9b2e0363b4a5d691d113e71e9f84945", 0x5d}, {&(0x7f0000001e00)="decc6bf69de7448cfcc1541437dd1d47369caa9d7245c6b221e5a802c4ed00f1f3ff694c4568dfd39e0ed308b2ac88e8887c57aed8f885d0f7ac49bb1e98ba2e3d76a303f86d7904e4927dd535e63f55b11628d1c1dd6488720e7b0afadd9ac618aacd923998f9250d2a9c490a8c75fb18c967731dce82a80f2e0b69c0d2279423c3838b725075a4a1032084e8bfec64ae7e9da2266c84bcfac827ad1dbec7cca7e0a960234c17cc628bf344452583eaae0b910b02e18730bc328d23b4ee98cf015a25e279012decf36d0bb2c69a006d8a23eb684e3718cd55a9b633", 0xdc}], 0x2, &(0x7f0000002140)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee00}}}, @rights={{0x14, 0x1, 0x1, [r3]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r6}}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0xee01}}}, @rights={{0x14, 0x1, 0x1, [r0]}}, @rights={{0x1c, 0x1, 0x1, [r2, r5, r7]}}], 0xf0, 0x40d4}}], 0x5, 0x8880) socket$vsock_stream(0x28, 0x1, 0x0) ppoll(&(0x7f00000000c0)=[{r2, 0x8124}, {0xffffffffffffffff, 0x0, 0x64}], 0x2, &(0x7f00000002c0)={0x0, r4+10000000}, 0x0, 0x0) 00:29:33 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x4000000000002, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x80, 0x0) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) r3 = openat$cgroup_type(r0, &(0x7f0000000000), 0x2, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000009, 0x40010, r3, 0x80000001000) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) r5 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) socket(0x10, 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0x1c) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r6) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000020c0), &(0x7f0000002100)=0xc) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r7, 0x4000000000000, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0xc01, 0x3, 0x438, 0x2e8, 0x5002004a, 0x7d09, 0x0, 0x3, 0x3a0, 0x3c8, 0x3c8, 0x3a0, 0x3c8, 0x4, 0x0, {[{{@uncond, 0x0, 0x2a0, 0x2e8, 0x0, {}, [@common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0xfffd}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x498) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000002240)=[{{&(0x7f0000000040)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000140)=[{&(0x7f00000001c0)="b35459eab157139645dff2328b7c8a914bab223d4675742e77c724e48dfb21d3e31629ee9532371e5a5cd53d95ea4dffc1c7747ae2c9970407d29c4979719bc214ae4f6491b4738e5b10006ec525f48ad733b55c8fc3fedaee48fa46a61089b8961171ad4cdbdfae023d914091a02acf61a2", 0x72}, {&(0x7f0000000300)="1d5a67a8695e623a7342156ee1cebc16ab529930a8dfc51df11a853fb5d2169bbc7ab5aedf5a84dcf610e0443d4f91318d1dacdbab590e036ce16caf36384f545c5f36844200a900992e542bf3eb04e1b04abda74b737a1db6f7aca31de1084d1026948b0c92bae1ccfb4e7d54251b62bb5fbd9d9a4348a108d453e8a22c8c08e4928a01597e30a8a560de57581ad522c22a902b1653cfaed880f6f12d", 0x9d}, {&(0x7f00000003c0)="0890058cb4bc3b8ac36b6236011de0b825c5af5ce6e590fe51465de7e34e17ad675258e454c36a5187dfe4ea2046681ac586b1909764f2898272fb275d01884de30981664a2989436c34cc06ac6175b13ea6636e49c8689f433ae67c880e0a382e68c4200275e18d6b592de41b2baec85f6b2c7e32f0891f3979f6ec8e620777f4b59d3abc064f0e60b239724a1ae4af7f815b27bf", 0x95}], 0x3, &(0x7f0000000540)=[@rights={{0x20, 0x1, 0x1, [r0, 0xffffffffffffffff, r3, r5]}}, @rights={{0x14, 0x1, 0x1, [r2]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01}}}], 0x80}}, {{&(0x7f00000005c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000780)=[{&(0x7f0000000640)="d67948928c56abc67a6fbdf23da152db801331cca670e665b9b9a75ae1ab9aabfdc575251a3ebfc9f12e8d828e91a8eccf4c0ac030f96fb1ae97c69796fe3e08db0b5a6be498cca57c85b71e125a1f0bcf8bef2f7c42be31896c506d96dff78efad4580c65bc7745b893aa7057aa1a8606aa6efdb42a38dcb15f3b4fea4513b74fbb4a27103ce41f", 0x88}, {&(0x7f0000000700)="9ff23d7a8db0d6a406b41399ef499953139e1ee9fdc75b500311e0442020470ae17b624bb330be4289cffad923a09a5b41786a833b9a2693ae34e9f2c9cd9ef2126a8fabf0ec00286f091b17", 0x4c}], 0x2, &(0x7f0000000240)=ANY=[@ANYBLOB="1c000000000000000100000001000000", @ANYRES32, @ANYRES32=r0, @ANYBLOB="efd9a51f730000"], 0x20, 0x8000}}, {{&(0x7f0000000800)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000001ac0)=[{0x0}, {&(0x7f0000001940)="ad914b7bd4a854bf8d930679a799cef94f8c", 0x12}, {&(0x7f0000001980)="c7b95ce41008d663886800b6d0a7b5ecfb054fec6238c668ca8c155626e70e0babe72b6cb383859a1104a882f32c9568d3c7a929916c3b0f66208d88b9d078d237232c4e990202ec65bd848575e6609a31bcf882cdff7b151f0939c1499e4cd3667dd0e029ab2ee88139d2ae7eb6750e452963bc668dc58bdfa73df1709fd4dba7218def9f", 0x85}, {&(0x7f0000001a40)="94ba0620db3296bf7d25acd74e77ac7047aaa20eb37009ff2d46f2830e70e214e9cc5da2a15843a8c85be3bbde3de7b6de0aa01a2cc5ae3ee08ca4a3f7a49cf47b9201c94ad619", 0x47}], 0x4, 0x0, 0x0, 0xc000}}, {{&(0x7f0000001b40)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000001c80)=[{&(0x7f0000001bc0)="28cda7cf078c762e4f6a0874a8c34bd2638c9602bd012eef51d965f4f51f6a20f96759830820d524209ee51b312793ada5c0b3caefcb26016e211d257c0e859a26f0445b53f1ddf2604c35495148559718044f0adbce0dfbb70dc69dc5e142e598a66d0e7cd0f3c11c48d9bca37a383d53cb6115c118d6491c5853e7631c144d", 0x80}], 0x1, &(0x7f0000001cc0)=[@cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff}}}], 0x20, 0x20000080}}, {{&(0x7f0000001d00)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000001f00)=[{&(0x7f0000001d80)="1452aefb8af5790fd2dce64efbfc47ae4c872e1e21e622b37632dca524367b5212a2b69226224b59bc795574311789c1e96eaf23ba7173ff098ee3c0d2f06c6dea37d5ec9d6e532564cc9744aba9b2e0363b4a5d691d113e71e9f84945", 0x5d}, {&(0x7f0000001e00)="decc6bf69de7448cfcc1541437dd1d47369caa9d7245c6b221e5a802c4ed00f1f3ff694c4568dfd39e0ed308b2ac88e8887c57aed8f885d0f7ac49bb1e98ba2e3d76a303f86d7904e4927dd535e63f55b11628d1c1dd6488720e7b0afadd9ac618aacd923998f9250d2a9c490a8c75fb18c967731dce82a80f2e0b69c0d2279423c3838b725075a4a1032084e8bfec64ae7e9da2266c84bcfac827ad1dbec7cca7e0a960234c17cc628bf344452583eaae0b910b02e18730bc328d23b4ee98cf015a25e279012decf36d0bb2c69a006d8a23eb684e3718cd55a9b633", 0xdc}], 0x2, &(0x7f0000002140)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee00}}}, @rights={{0x14, 0x1, 0x1, [r3]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r6}}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0xee01}}}, @rights={{0x14, 0x1, 0x1, [r0]}}, @rights={{0x1c, 0x1, 0x1, [r2, r5, r7]}}], 0xf0, 0x40d4}}], 0x5, 0x8880) socket$vsock_stream(0x28, 0x1, 0x0) ppoll(&(0x7f00000000c0)=[{r2, 0x8124}, {0xffffffffffffffff, 0x0, 0x64}], 0x2, &(0x7f00000002c0)={0x0, r4+10000000}, 0x0, 0x0) 00:29:33 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb0100bb"], &(0x7f0000000200)=""/208, 0xbb, 0xd0, 0x1}, 0x20) 00:29:33 executing program 3: unshare(0x64020000) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000000)={@private1, 0x0, 0x0, 0x1, 0x9}, 0x23) close(r2) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) vmsplice(r0, &(0x7f00000004c0)=[{&(0x7f0000000300)="2979becfe0e0a89d2c9cfff4f96b1265f6504a0164789d8976be4174b2fc96af53978b7acd6b808b26000c856da8e5a6b03490a02efada8d132536e2e1a29c89b04275c56b7d0b913ed41132fb70cc58f3c01e7d73d74bdd9fafa8d4760e175bc96633a980406da01d428fbb285538665bb4fb5d88b33e66ddb95517bf8108e6aea922354e899edfc8dea37a87c2fa9aff6d9e55a97c82564fa2be1860c4c93c14bea1b995955179824610e08541f773", 0xb0}], 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000000)={@private1={0xfc, 0x1, '\x00', 0xfc}, 0x21, 0x0, 0x2}, 0x20) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000001c00)={&(0x7f0000001b00)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001bc0)={&(0x7f0000001b40)=ANY=[@ANYBLOB="58000000680020002a37b228329dd2c3bd70001e8fbf86971765eee2", @ANYRES32=0x0, @ANYBLOB="080008800400010004000b0006000700060000002400020000000000000000000200000000000000fdffffff040000000200000005000000"], 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x4004000) sendto$inet6(r3, &(0x7f00000001c0)="5c4b643ba2a7c12deff804a0edbac9325ad72ee5350a8a14ba6054ecf37a808b8c0ad112b1fc08b01751402b42892c4ef31f6589ac345d9650c3878fef7676037bacc9e29b1974accd7e31cf828f1077d5e9be170b0d773ec32837d5dcda796c7acef1ffafc51b3e5d850cafb52e5507839cf5df3945326637703d60bb79c82c3e4f09fde769618a2e9f22451ac71d34b890c2824dcd94113a18cec25f86ee46eac89c4dd1f21d62bb8a91bc80500e1e41df6a04a046ba96d7", 0xb9, 0x4000090, &(0x7f0000000280)={0xa, 0x4e20, 0x9, @local, 0x8}, 0x1c) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(r5, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r5, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd0d0c2ac, 0x1, 0x0, 0x0) splice(r5, 0x0, r1, 0x0, 0x6f401, 0x0) 00:29:34 executing program 5: r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x28, r0, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_SEC_FRAME_COUNTER={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x28}}, 0x0) [ 272.118450][T13553] hsr0 speed is unknown, defaulting to 1000 00:29:34 executing program 1: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x3af4701e) r2 = socket$inet_tcp(0x2, 0x1, 0x0) getpeername$inet(r2, &(0x7f0000000040), &(0x7f0000000240)=0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r1, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x19, 0x8, &(0x7f00000003c0)=ANY=[@ANYBLOB="0001000100000000000000000018210000", @ANYRES32, @ANYBLOB="000000000800000085100000020000000559d6ad010000008451ffff0800000095000099d8c87600"], &(0x7f0000000440)='syzkaller\x00', 0x7f, 0x48, &(0x7f0000000480)=""/72, 0x41000, 0x0, '\x00', 0x0, 0x6, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x7, 0x3}, 0x8, 0x10, &(0x7f0000000540)={0x5, 0x2, 0x4, 0x200}, 0x10, 0x0, r0}, 0x78) openat$cgroup_ro(r0, &(0x7f0000000280)='cpuset.effective_cpus\x00', 0x0, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(r3, 0xc4089434, &(0x7f0000000600)={0x0, 0x3b2, 0x0, [0x7cb, 0x1, 0x8, 0xffff, 0x80], [0x1a2, 0x48da77fb, 0x9, 0x4, 0x7, 0xcc56, 0x0, 0x8, 0xffffffff80000000, 0x7fffffff, 0x54, 0xffffffff, 0x100000000, 0xad, 0x4, 0x9, 0xfb42, 0xffffffffffffff01, 0xff, 0x1, 0x40, 0x1, 0x9, 0x2, 0x4, 0xfffffffffffffeff, 0xe87a, 0x3, 0x3, 0xb404, 0x8000, 0x3, 0x1, 0x3, 0x6, 0xffffffffffff7fff, 0x79a1, 0xaf, 0x3, 0x7ff, 0x40, 0x941, 0x6, 0x1f, 0x80000001, 0xa0a3, 0x922, 0x7ff, 0x4, 0x101, 0x3, 0x4, 0x2, 0x3, 0x2, 0x7, 0x9, 0x2, 0x14a, 0x1, 0x7fff, 0x0, 0x1, 0x3, 0x7fff, 0x4, 0xff, 0x1, 0x400, 0x2, 0xffff, 0x1ff, 0x8, 0x28000000000000, 0xffffffff, 0xf6, 0x4ba, 0x57a, 0x9, 0x200, 0x1ff, 0x7, 0x3, 0x2, 0x2f7f, 0xdf, 0xc9, 0x5, 0x100000000, 0x4000007, 0x5, 0x1, 0x401, 0x8000, 0x5, 0x2, 0xeef, 0x6, 0x5, 0x6, 0x80, 0x6, 0xb2e3, 0x2, 0x1, 0x9, 0x1000, 0x8000, 0x3ff, 0x1, 0x8, 0x7, 0x9, 0x1000000000000, 0x1f, 0x0, 0xfdf, 0x85, 0x3, 0x6, 0x20]}) ioctl$FS_IOC_RESVSP(r0, 0x40305839, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8000000}) ioctl$FICLONERANGE(r1, 0x4020940d, &(0x7f0000000380)={{r0}, 0x5, 0x0, 0x86d5}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$FOU_CMD_ADD(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000400)={0x38, r5, 0x209, 0x0, 0x0, {}, [@FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @loopback}, @FOU_ATTR_IFINDEX={0x8, 0xb, r7}]}, 0x38}}, 0x0) 00:29:34 executing program 5: r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x28, r0, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_SEC_FRAME_COUNTER={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x28}}, 0x0) 00:29:34 executing program 5: r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x28, r0, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_SEC_FRAME_COUNTER={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x28}}, 0x0) [ 272.952010][T12900] Bluetooth: hci1: command 0x0406 tx timeout 00:29:36 executing program 1: unshare(0x64020000) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000000)={@private1, 0x0, 0x0, 0x1, 0x9}, 0x23) close(r2) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) vmsplice(r0, &(0x7f00000004c0)=[{&(0x7f0000000300)="2979becfe0e0a89d2c9cfff4f96b1265f6504a0164789d8976be4174b2fc96af53978b7acd6b808b26000c856da8e5a6b03490a02efada8d132536e2e1a29c89b04275c56b7d0b913ed41132fb70cc58f3c01e7d73d74bdd9fafa8d4760e175bc96633a980406da01d428fbb285538665bb4fb5d88b33e66ddb95517bf8108e6aea922354e899edfc8dea37a87c2fa9aff6d9e55a97c82564fa2be1860c4c93c14bea1b995955179824610e08541f773", 0xb0}], 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000000)={@private1={0xfc, 0x1, '\x00', 0xfc}, 0x21, 0x0, 0x2}, 0x20) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000001c00)={&(0x7f0000001b00)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001bc0)={&(0x7f0000001b40)=ANY=[@ANYBLOB="58000000680020002a37b228329dd2c3bd70001e8fbf86971765eee2", @ANYRES32=0x0, @ANYBLOB="080008800400010004000b0006000700060000002400020000000000000000000200000000000000fdffffff040000000200000005000000"], 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x4004000) sendto$inet6(r3, &(0x7f00000001c0)="5c4b643ba2a7c12deff804a0edbac9325ad72ee5350a8a14ba6054ecf37a808b8c0ad112b1fc08b01751402b42892c4ef31f6589ac345d9650c3878fef7676037bacc9e29b1974accd7e31cf828f1077d5e9be170b0d773ec32837d5dcda796c7acef1ffafc51b3e5d850cafb52e5507839cf5df3945326637703d60bb79c82c3e4f09fde769618a2e9f22451ac71d34b890c2824dcd94113a18cec25f86ee46eac89c4dd1f21d62bb8a91bc80500e1e41df6a04a046ba96d7", 0xb9, 0x4000090, &(0x7f0000000280)={0xa, 0x4e20, 0x9, @local, 0x8}, 0x1c) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(r5, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r5, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd0d0c2ac, 0x1, 0x0, 0x0) splice(r5, 0x0, r1, 0x0, 0x6f401, 0x0) 00:29:36 executing program 2: unshare(0x64020000) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000000)={@private1, 0x0, 0x0, 0x1, 0x9}, 0x23) close(r2) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) vmsplice(r0, &(0x7f00000004c0)=[{&(0x7f0000000300)="2979becfe0e0a89d2c9cfff4f96b1265f6504a0164789d8976be4174b2fc96af53978b7acd6b808b26000c856da8e5a6b03490a02efada8d132536e2e1a29c89b04275c56b7d0b913ed41132fb70cc58f3c01e7d73d74bdd9fafa8d4760e175bc96633a980406da01d428fbb285538665bb4fb5d88b33e66ddb95517bf8108e6aea922354e899edfc8dea37a87c2fa9aff6d9e55a97c82564fa2be1860c4c93c14bea1b995955179824610e08541f773", 0xb0}], 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000000)={@private1={0xfc, 0x1, '\x00', 0xfc}, 0x21, 0x0, 0x2}, 0x20) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000001c00)={&(0x7f0000001b00)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001bc0)={&(0x7f0000001b40)=ANY=[@ANYBLOB="58000000680020002a37b228329dd2c3bd70001e8fbf86971765eee2", @ANYRES32=0x0, @ANYBLOB="080008800400010004000b0006000700060000002400020000000000000000000200000000000000fdffffff040000000200000005000000"], 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x4004000) sendto$inet6(r3, &(0x7f00000001c0)="5c4b643ba2a7c12deff804a0edbac9325ad72ee5350a8a14ba6054ecf37a808b8c0ad112b1fc08b01751402b42892c4ef31f6589ac345d9650c3878fef7676037bacc9e29b1974accd7e31cf828f1077d5e9be170b0d773ec32837d5dcda796c7acef1ffafc51b3e5d850cafb52e5507839cf5df3945326637703d60bb79c82c3e4f09fde769618a2e9f22451ac71d34b890c2824dcd94113a18cec25f86ee46eac89c4dd1f21d62bb8a91bc80500e1e41df6a04a046ba96d7", 0xb9, 0x4000090, &(0x7f0000000280)={0xa, 0x4e20, 0x9, @local, 0x8}, 0x1c) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(r5, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r5, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd0d0c2ac, 0x1, 0x0, 0x0) splice(r5, 0x0, r1, 0x0, 0x6f401, 0x0) 00:29:36 executing program 3: unshare(0x64020000) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000000)={@private1, 0x0, 0x0, 0x1, 0x9}, 0x23) close(r2) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) vmsplice(r0, &(0x7f00000004c0)=[{&(0x7f0000000300)="2979becfe0e0a89d2c9cfff4f96b1265f6504a0164789d8976be4174b2fc96af53978b7acd6b808b26000c856da8e5a6b03490a02efada8d132536e2e1a29c89b04275c56b7d0b913ed41132fb70cc58f3c01e7d73d74bdd9fafa8d4760e175bc96633a980406da01d428fbb285538665bb4fb5d88b33e66ddb95517bf8108e6aea922354e899edfc8dea37a87c2fa9aff6d9e55a97c82564fa2be1860c4c93c14bea1b995955179824610e08541f773", 0xb0}], 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000000)={@private1={0xfc, 0x1, '\x00', 0xfc}, 0x21, 0x0, 0x2}, 0x20) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000001c00)={&(0x7f0000001b00)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001bc0)={&(0x7f0000001b40)=ANY=[@ANYBLOB="58000000680020002a37b228329dd2c3bd70001e8fbf86971765eee2", @ANYRES32=0x0, @ANYBLOB="080008800400010004000b0006000700060000002400020000000000000000000200000000000000fdffffff040000000200000005000000"], 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x4004000) sendto$inet6(r3, &(0x7f00000001c0)="5c4b643ba2a7c12deff804a0edbac9325ad72ee5350a8a14ba6054ecf37a808b8c0ad112b1fc08b01751402b42892c4ef31f6589ac345d9650c3878fef7676037bacc9e29b1974accd7e31cf828f1077d5e9be170b0d773ec32837d5dcda796c7acef1ffafc51b3e5d850cafb52e5507839cf5df3945326637703d60bb79c82c3e4f09fde769618a2e9f22451ac71d34b890c2824dcd94113a18cec25f86ee46eac89c4dd1f21d62bb8a91bc80500e1e41df6a04a046ba96d7", 0xb9, 0x4000090, &(0x7f0000000280)={0xa, 0x4e20, 0x9, @local, 0x8}, 0x1c) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(r5, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r5, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd0d0c2ac, 0x1, 0x0, 0x0) splice(r5, 0x0, r1, 0x0, 0x6f401, 0x0) 00:29:36 executing program 5: r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x28, r0, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_SEC_FRAME_COUNTER={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x28}}, 0x0) 00:29:36 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000507000000000000000000000400", @ANYRES32=r2, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}]}}}, @IFLA_LINK={0x8, 0x5, r8}]}, 0x4c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000740)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r5}}, 0x20}}, 0x0) 00:29:36 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000400)=ANY=[@ANYBLOB="3c00000024000b0f00000000e4ff000000000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000b00010064736d61726b00000c0002000600010020"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newtfilter={0x24, 0x29, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xffff}}}, 0x24}}, 0x0) [ 274.493455][T13606] hsr0 speed is unknown, defaulting to 1000 00:29:36 executing program 5: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000004240)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000000580)={&(0x7f0000000040)={0x2, 0x0, @dev}, 0x10, 0x0, 0x0, &(0x7f0000000500)=[@fadd={0x24, 0x114, 0x6, {{}, 0x0, 0x0}}], 0x58}, 0x0) [ 274.534634][T13616] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 274.619035][T13604] hsr0 speed is unknown, defaulting to 1000 [ 274.670492][T13622] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 274.760811][T13617] hsr0 speed is unknown, defaulting to 1000 00:29:36 executing program 5: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000280)="240000001a005f0014f9e407000904000a00000074000000000e000008001b003a000000", 0x24) [ 274.872076][T13644] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 274.949152][T13616] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 00:29:37 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000400)=ANY=[@ANYBLOB="3c00000024000b0f00000000e4ff000000000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000b00010064736d61726b00000c0002000600010020"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newtfilter={0x24, 0x29, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xffff}}}, 0x24}}, 0x0) [ 275.119207][T13733] netlink: 'syz-executor.5': attribute type 27 has an invalid length. 00:29:37 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000507000000000000000000000400", @ANYRES32=r2, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}]}}}, @IFLA_LINK={0x8, 0x5, r8}]}, 0x4c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000740)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r5}}, 0x20}}, 0x0) [ 275.205914][T13745] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 00:29:37 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000e00)={&(0x7f0000000100)={0xa8, r1, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PEERS={0x80, 0x8, 0x0, 0x1, [{0x7c, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x2c, 0x9, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5}}]}]}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x0, 0x0, @remote}}, @WGPEER_A_FLAGS={0x8, 0x3, 0x6}]}]}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}]}, 0xa8}}, 0x0) [ 275.440361][T13763] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 00:29:37 executing program 2: unshare(0x64020000) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000000)={@private1, 0x0, 0x0, 0x1, 0x9}, 0x23) close(r2) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) vmsplice(r0, &(0x7f00000004c0)=[{&(0x7f0000000300)="2979becfe0e0a89d2c9cfff4f96b1265f6504a0164789d8976be4174b2fc96af53978b7acd6b808b26000c856da8e5a6b03490a02efada8d132536e2e1a29c89b04275c56b7d0b913ed41132fb70cc58f3c01e7d73d74bdd9fafa8d4760e175bc96633a980406da01d428fbb285538665bb4fb5d88b33e66ddb95517bf8108e6aea922354e899edfc8dea37a87c2fa9aff6d9e55a97c82564fa2be1860c4c93c14bea1b995955179824610e08541f773", 0xb0}], 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000000)={@private1={0xfc, 0x1, '\x00', 0xfc}, 0x21, 0x0, 0x2}, 0x20) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000001c00)={&(0x7f0000001b00)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001bc0)={&(0x7f0000001b40)=ANY=[@ANYBLOB="58000000680020002a37b228329dd2c3bd70001e8fbf86971765eee2", @ANYRES32=0x0, @ANYBLOB="080008800400010004000b0006000700060000002400020000000000000000000200000000000000fdffffff040000000200000005000000"], 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x4004000) sendto$inet6(r3, &(0x7f00000001c0)="5c4b643ba2a7c12deff804a0edbac9325ad72ee5350a8a14ba6054ecf37a808b8c0ad112b1fc08b01751402b42892c4ef31f6589ac345d9650c3878fef7676037bacc9e29b1974accd7e31cf828f1077d5e9be170b0d773ec32837d5dcda796c7acef1ffafc51b3e5d850cafb52e5507839cf5df3945326637703d60bb79c82c3e4f09fde769618a2e9f22451ac71d34b890c2824dcd94113a18cec25f86ee46eac89c4dd1f21d62bb8a91bc80500e1e41df6a04a046ba96d7", 0xb9, 0x4000090, &(0x7f0000000280)={0xa, 0x4e20, 0x9, @local, 0x8}, 0x1c) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(r5, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r5, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd0d0c2ac, 0x1, 0x0, 0x0) splice(r5, 0x0, r1, 0x0, 0x6f401, 0x0) 00:29:37 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000400)=ANY=[@ANYBLOB="3c00000024000b0f00000000e4ff000000000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000b00010064736d61726b00000c0002000600010020"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newtfilter={0x24, 0x29, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xffff}}}, 0x24}}, 0x0) 00:29:37 executing program 5: syz_emit_ethernet(0x2a, &(0x7f0000000000)={@remote, @dev, @val, {@arp={0x806, @generic={0x0, 0x0, 0x6, 0x0, 0x0, @broadcast, "", @local}}}}, 0x0) 00:29:37 executing program 1: unshare(0x64020000) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000000)={@private1, 0x0, 0x0, 0x1, 0x9}, 0x23) close(r2) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) vmsplice(r0, &(0x7f00000004c0)=[{&(0x7f0000000300)="2979becfe0e0a89d2c9cfff4f96b1265f6504a0164789d8976be4174b2fc96af53978b7acd6b808b26000c856da8e5a6b03490a02efada8d132536e2e1a29c89b04275c56b7d0b913ed41132fb70cc58f3c01e7d73d74bdd9fafa8d4760e175bc96633a980406da01d428fbb285538665bb4fb5d88b33e66ddb95517bf8108e6aea922354e899edfc8dea37a87c2fa9aff6d9e55a97c82564fa2be1860c4c93c14bea1b995955179824610e08541f773", 0xb0}], 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000000)={@private1={0xfc, 0x1, '\x00', 0xfc}, 0x21, 0x0, 0x2}, 0x20) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000001c00)={&(0x7f0000001b00)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001bc0)={&(0x7f0000001b40)=ANY=[@ANYBLOB="58000000680020002a37b228329dd2c3bd70001e8fbf86971765eee2", @ANYRES32=0x0, @ANYBLOB="080008800400010004000b0006000700060000002400020000000000000000000200000000000000fdffffff040000000200000005000000"], 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x4004000) sendto$inet6(r3, &(0x7f00000001c0)="5c4b643ba2a7c12deff804a0edbac9325ad72ee5350a8a14ba6054ecf37a808b8c0ad112b1fc08b01751402b42892c4ef31f6589ac345d9650c3878fef7676037bacc9e29b1974accd7e31cf828f1077d5e9be170b0d773ec32837d5dcda796c7acef1ffafc51b3e5d850cafb52e5507839cf5df3945326637703d60bb79c82c3e4f09fde769618a2e9f22451ac71d34b890c2824dcd94113a18cec25f86ee46eac89c4dd1f21d62bb8a91bc80500e1e41df6a04a046ba96d7", 0xb9, 0x4000090, &(0x7f0000000280)={0xa, 0x4e20, 0x9, @local, 0x8}, 0x1c) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(r5, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r5, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd0d0c2ac, 0x1, 0x0, 0x0) splice(r5, 0x0, r1, 0x0, 0x6f401, 0x0) 00:29:37 executing program 3: unshare(0x64020000) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000000)={@private1, 0x0, 0x0, 0x1, 0x9}, 0x23) close(r2) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) vmsplice(r0, &(0x7f00000004c0)=[{&(0x7f0000000300)="2979becfe0e0a89d2c9cfff4f96b1265f6504a0164789d8976be4174b2fc96af53978b7acd6b808b26000c856da8e5a6b03490a02efada8d132536e2e1a29c89b04275c56b7d0b913ed41132fb70cc58f3c01e7d73d74bdd9fafa8d4760e175bc96633a980406da01d428fbb285538665bb4fb5d88b33e66ddb95517bf8108e6aea922354e899edfc8dea37a87c2fa9aff6d9e55a97c82564fa2be1860c4c93c14bea1b995955179824610e08541f773", 0xb0}], 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000000)={@private1={0xfc, 0x1, '\x00', 0xfc}, 0x21, 0x0, 0x2}, 0x20) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000001c00)={&(0x7f0000001b00)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001bc0)={&(0x7f0000001b40)=ANY=[@ANYBLOB="58000000680020002a37b228329dd2c3bd70001e8fbf86971765eee2", @ANYRES32=0x0, @ANYBLOB="080008800400010004000b0006000700060000002400020000000000000000000200000000000000fdffffff040000000200000005000000"], 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x4004000) sendto$inet6(r3, &(0x7f00000001c0)="5c4b643ba2a7c12deff804a0edbac9325ad72ee5350a8a14ba6054ecf37a808b8c0ad112b1fc08b01751402b42892c4ef31f6589ac345d9650c3878fef7676037bacc9e29b1974accd7e31cf828f1077d5e9be170b0d773ec32837d5dcda796c7acef1ffafc51b3e5d850cafb52e5507839cf5df3945326637703d60bb79c82c3e4f09fde769618a2e9f22451ac71d34b890c2824dcd94113a18cec25f86ee46eac89c4dd1f21d62bb8a91bc80500e1e41df6a04a046ba96d7", 0xb9, 0x4000090, &(0x7f0000000280)={0xa, 0x4e20, 0x9, @local, 0x8}, 0x1c) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(r5, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r5, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd0d0c2ac, 0x1, 0x0, 0x0) splice(r5, 0x0, r1, 0x0, 0x6f401, 0x0) [ 275.729701][T13793] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 00:29:37 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000507000000000000000000000400", @ANYRES32=r2, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}]}}}, @IFLA_LINK={0x8, 0x5, r8}]}, 0x4c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000740)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r5}}, 0x20}}, 0x0) 00:29:37 executing program 5: r0 = socket(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507008bd649071faaf93d000000", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000500)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f00000007c0)=@newqdisc={0x3c, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8, 0x3}, {0x10, 0x2, [@TCA_TBF_RATE64={0xc, 0x7}]}}]}, 0x3c}}, 0x0) [ 275.852771][T13795] hsr0 speed is unknown, defaulting to 1000 [ 275.915602][T13796] hsr0 speed is unknown, defaulting to 1000 [ 275.946989][T13794] hsr0 speed is unknown, defaulting to 1000 [ 276.129833][T13856] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 276.206304][T13857] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 00:29:38 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000400)=ANY=[@ANYBLOB="3c00000024000b0f00000000e4ff000000000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000b00010064736d61726b00000c0002000600010020"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newtfilter={0x24, 0x29, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xffff}}}, 0x24}}, 0x0) [ 276.374227][T13856] netlink: 'syz-executor.5': attribute type 7 has an invalid length. [ 276.399136][T13909] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 00:29:38 executing program 3: unshare(0x64020000) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000000)={@private1, 0x0, 0x0, 0x1, 0x9}, 0x23) close(r2) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) vmsplice(r0, &(0x7f00000004c0)=[{&(0x7f0000000300)="2979becfe0e0a89d2c9cfff4f96b1265f6504a0164789d8976be4174b2fc96af53978b7acd6b808b26000c856da8e5a6b03490a02efada8d132536e2e1a29c89b04275c56b7d0b913ed41132fb70cc58f3c01e7d73d74bdd9fafa8d4760e175bc96633a980406da01d428fbb285538665bb4fb5d88b33e66ddb95517bf8108e6aea922354e899edfc8dea37a87c2fa9aff6d9e55a97c82564fa2be1860c4c93c14bea1b995955179824610e08541f773", 0xb0}], 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000000)={@private1={0xfc, 0x1, '\x00', 0xfc}, 0x21, 0x0, 0x2}, 0x20) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000001c00)={&(0x7f0000001b00)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001bc0)={&(0x7f0000001b40)=ANY=[@ANYBLOB="58000000680020002a37b228329dd2c3bd70001e8fbf86971765eee2", @ANYRES32=0x0, @ANYBLOB="080008800400010004000b0006000700060000002400020000000000000000000200000000000000fdffffff040000000200000005000000"], 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x4004000) sendto$inet6(r3, &(0x7f00000001c0)="5c4b643ba2a7c12deff804a0edbac9325ad72ee5350a8a14ba6054ecf37a808b8c0ad112b1fc08b01751402b42892c4ef31f6589ac345d9650c3878fef7676037bacc9e29b1974accd7e31cf828f1077d5e9be170b0d773ec32837d5dcda796c7acef1ffafc51b3e5d850cafb52e5507839cf5df3945326637703d60bb79c82c3e4f09fde769618a2e9f22451ac71d34b890c2824dcd94113a18cec25f86ee46eac89c4dd1f21d62bb8a91bc80500e1e41df6a04a046ba96d7", 0xb9, 0x4000090, &(0x7f0000000280)={0xa, 0x4e20, 0x9, @local, 0x8}, 0x1c) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(r5, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r5, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd0d0c2ac, 0x1, 0x0, 0x0) splice(r5, 0x0, r1, 0x0, 0x6f401, 0x0) 00:29:38 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000507000000000000000000000400", @ANYRES32=r2, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}]}}}, @IFLA_LINK={0x8, 0x5, r8}]}, 0x4c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000740)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r5}}, 0x20}}, 0x0) 00:29:38 executing program 1: unshare(0x64020000) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000000)={@private1, 0x0, 0x0, 0x1, 0x9}, 0x23) close(r2) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) vmsplice(r0, &(0x7f00000004c0)=[{&(0x7f0000000300)="2979becfe0e0a89d2c9cfff4f96b1265f6504a0164789d8976be4174b2fc96af53978b7acd6b808b26000c856da8e5a6b03490a02efada8d132536e2e1a29c89b04275c56b7d0b913ed41132fb70cc58f3c01e7d73d74bdd9fafa8d4760e175bc96633a980406da01d428fbb285538665bb4fb5d88b33e66ddb95517bf8108e6aea922354e899edfc8dea37a87c2fa9aff6d9e55a97c82564fa2be1860c4c93c14bea1b995955179824610e08541f773", 0xb0}], 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000000)={@private1={0xfc, 0x1, '\x00', 0xfc}, 0x21, 0x0, 0x2}, 0x20) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000001c00)={&(0x7f0000001b00)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001bc0)={&(0x7f0000001b40)=ANY=[@ANYBLOB="58000000680020002a37b228329dd2c3bd70001e8fbf86971765eee2", @ANYRES32=0x0, @ANYBLOB="080008800400010004000b0006000700060000002400020000000000000000000200000000000000fdffffff040000000200000005000000"], 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x4004000) sendto$inet6(r3, &(0x7f00000001c0)="5c4b643ba2a7c12deff804a0edbac9325ad72ee5350a8a14ba6054ecf37a808b8c0ad112b1fc08b01751402b42892c4ef31f6589ac345d9650c3878fef7676037bacc9e29b1974accd7e31cf828f1077d5e9be170b0d773ec32837d5dcda796c7acef1ffafc51b3e5d850cafb52e5507839cf5df3945326637703d60bb79c82c3e4f09fde769618a2e9f22451ac71d34b890c2824dcd94113a18cec25f86ee46eac89c4dd1f21d62bb8a91bc80500e1e41df6a04a046ba96d7", 0xb9, 0x4000090, &(0x7f0000000280)={0xa, 0x4e20, 0x9, @local, 0x8}, 0x1c) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(r5, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r5, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd0d0c2ac, 0x1, 0x0, 0x0) splice(r5, 0x0, r1, 0x0, 0x6f401, 0x0) 00:29:38 executing program 2: unshare(0x64020000) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000000)={@private1, 0x0, 0x0, 0x1, 0x9}, 0x23) close(r2) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) vmsplice(r0, &(0x7f00000004c0)=[{&(0x7f0000000300)="2979becfe0e0a89d2c9cfff4f96b1265f6504a0164789d8976be4174b2fc96af53978b7acd6b808b26000c856da8e5a6b03490a02efada8d132536e2e1a29c89b04275c56b7d0b913ed41132fb70cc58f3c01e7d73d74bdd9fafa8d4760e175bc96633a980406da01d428fbb285538665bb4fb5d88b33e66ddb95517bf8108e6aea922354e899edfc8dea37a87c2fa9aff6d9e55a97c82564fa2be1860c4c93c14bea1b995955179824610e08541f773", 0xb0}], 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000000)={@private1={0xfc, 0x1, '\x00', 0xfc}, 0x21, 0x0, 0x2}, 0x20) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000001c00)={&(0x7f0000001b00)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001bc0)={&(0x7f0000001b40)=ANY=[@ANYBLOB="58000000680020002a37b228329dd2c3bd70001e8fbf86971765eee2", @ANYRES32=0x0, @ANYBLOB="080008800400010004000b0006000700060000002400020000000000000000000200000000000000fdffffff040000000200000005000000"], 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x4004000) sendto$inet6(r3, &(0x7f00000001c0)="5c4b643ba2a7c12deff804a0edbac9325ad72ee5350a8a14ba6054ecf37a808b8c0ad112b1fc08b01751402b42892c4ef31f6589ac345d9650c3878fef7676037bacc9e29b1974accd7e31cf828f1077d5e9be170b0d773ec32837d5dcda796c7acef1ffafc51b3e5d850cafb52e5507839cf5df3945326637703d60bb79c82c3e4f09fde769618a2e9f22451ac71d34b890c2824dcd94113a18cec25f86ee46eac89c4dd1f21d62bb8a91bc80500e1e41df6a04a046ba96d7", 0xb9, 0x4000090, &(0x7f0000000280)={0xa, 0x4e20, 0x9, @local, 0x8}, 0x1c) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(r5, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r5, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd0d0c2ac, 0x1, 0x0, 0x0) splice(r5, 0x0, r1, 0x0, 0x6f401, 0x0) 00:29:38 executing program 4: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) setsockopt$rose(r0, 0x104, 0x4, &(0x7f0000000000), 0x4) 00:29:38 executing program 5: r0 = socket(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507008bd649071faaf93d000000", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000500)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f00000007c0)=@newqdisc={0x3c, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8, 0x3}, {0x10, 0x2, [@TCA_TBF_RATE64={0xc, 0x7}]}}]}, 0x3c}}, 0x0) [ 277.014811][T13959] hsr0 speed is unknown, defaulting to 1000 [ 277.074948][T13952] netlink: 'syz-executor.5': attribute type 7 has an invalid length. [ 277.090822][T13954] hsr0 speed is unknown, defaulting to 1000 [ 277.151503][T13984] hsr0 speed is unknown, defaulting to 1000 00:29:39 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x3c, r1, 0xb12b53214aca7953, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}]}, 0x3c}}, 0x0) 00:29:39 executing program 0: syz_emit_ethernet(0x14, &(0x7f0000000000)={@broadcast, @broadcast, @val={@void}, {@generic={0x8ff, "e0ae"}}}, 0x0) 00:29:39 executing program 5: r0 = socket(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507008bd649071faaf93d000000", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000500)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f00000007c0)=@newqdisc={0x3c, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8, 0x3}, {0x10, 0x2, [@TCA_TBF_RATE64={0xc, 0x7}]}}]}, 0x3c}}, 0x0) 00:29:39 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000040)=ANY=[], 0x8) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) sendmmsg$inet6(r0, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="8202", 0x2}, {&(0x7f0000000340)="000000000000000000000092110000", 0xf}], 0x2}}], 0x1, 0x4000c800) sendto$inet6(r0, &(0x7f0000000300), 0x7, 0x0, 0x0, 0xfffffffffffffdfd) [ 277.865389][T14082] netlink: 'syz-executor.5': attribute type 7 has an invalid length. 00:29:40 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010100}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f0000000140)={r1}, 0x8) 00:29:40 executing program 5: r0 = socket(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507008bd649071faaf93d000000", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000500)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f00000007c0)=@newqdisc={0x3c, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8, 0x3}, {0x10, 0x2, [@TCA_TBF_RATE64={0xc, 0x7}]}}]}, 0x3c}}, 0x0) 00:29:40 executing program 1: r0 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_mreqn(r0, 0x6, 0x23, 0x0, &(0x7f0000000040)=0x37) 00:29:40 executing program 2: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) vmsplice(r1, &(0x7f00000003c0)=[{&(0x7f0000000200)="b3fe2d05d5a1390531b5f83efbc74c9f56abe2180c2e57d7f40eb41614eebe193e9fa3892b26a28bb6af35d80ba54c1ef4d34abddf7ff3a9d935fa7c811f09489d53b604b206ca94fb62688545a9ba", 0x4f}, {&(0x7f0000000140)='*', 0x1}], 0x2, 0x0) bind$alg(r2, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'crc32\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) r4 = accept4$alg(r3, 0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r5, 0x8912, 0x400308) splice(r0, 0x0, r4, 0x0, 0xc31, 0x0) 00:29:40 executing program 3: sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010001fff0007248f1c872d2bf1b75bee", @ANYRES32=0x0, @ANYBLOB="ff7f000000000000140012800a00010076786c616e0000000400028008000a"], 0x3c}, 0x1, 0x8000a0ffffffff}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0) 00:29:40 executing program 4: r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x85, &(0x7f0000000040), 0x10) [ 278.282456][T14099] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 278.291881][T14099] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 278.300846][T14099] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 278.309643][T14099] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 278.381661][T14099] device vxlan0 entered promiscuous mode [ 278.430364][T14106] netlink: 'syz-executor.5': attribute type 7 has an invalid length. 00:29:40 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x4704, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) recvmmsg(r0, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) ioctl$SIOCGSTAMPNS(r0, 0x8907, 0x0) ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000100)) 00:29:40 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x2, 0x17, 0x0, 0x0, 0x2}, 0x10}}, 0x0) sendmsg$key(r1, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f0000ca6000)={&(0x7f0000000000)={0x2, 0xd, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x400300, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in=@broadcast, @in6=@mcast2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, '\x00', 0xffffffffffffffff}}}]}, 0xa0}}, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000001c0), 0xfa) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)={0x2, 0x12, 0x0, 0x0, 0x2}, 0x10}}, 0x0) sendmsg$key(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)={0x2, 0x12, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 00:29:40 executing program 3: sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010001fff0007248f1c872d2bf1b75bee", @ANYRES32=0x0, @ANYBLOB="ff7f000000000000140012800a00010076786c616e0000000400028008000a"], 0x3c}, 0x1, 0x8000a0ffffffff}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0) 00:29:40 executing program 0: r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001e80), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_PAUSE_GET(r1, &(0x7f0000002080)={0x0, 0x0, &(0x7f0000002040)={&(0x7f0000002000)={0x18, r0, 0x1, 0x0, 0x0, {}, [@HEADER={0x4}]}, 0x18}}, 0x0) 00:29:40 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x5c, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x20, 0x11, 0x0, 0x1, @synproxy={{0xd}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_SYNPROXY_FLAGS={0x8, 0x3, 0x1, 0x0, 0x12}]}}}]}], {0x14, 0x10}}, 0xa4}}, 0x0) 00:29:40 executing program 5: unshare(0x6c060000) unshare(0x4000000) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x208e19b) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000001700)=0x20) mmap(&(0x7f00009f1000/0x3000)=nil, 0x3000, 0x2000003, 0x28011, r0, 0xffffd000) r1 = socket$alg(0x26, 0x5, 0x0) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x0, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x1c}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f00000006c0), 0xffffffffffffffff) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'veth1_macvtap\x00', 0x0}) sendmsg$BATADV_CMD_TP_METER_CANCEL(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r4, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}]}, 0x1c}}, 0x0) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x44, r4, 0x300, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x81}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x81}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x20}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x81}]}, 0x44}, 0x1, 0x0, 0x0, 0x8080}, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58) r7 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000200)="ad56b6cc0400aeb995298992ea5400c2", 0x10) recvmmsg(r7, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) [ 278.857631][T14136] hsr0 speed is unknown, defaulting to 1000 00:29:42 executing program 3: sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010001fff0007248f1c872d2bf1b75bee", @ANYRES32=0x0, @ANYBLOB="ff7f000000000000140012800a00010076786c616e0000000400028008000a"], 0x3c}, 0x1, 0x8000a0ffffffff}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0) 00:29:42 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@loopback, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@multicast2, 0x0, 0x2b}, 0x0, @in6=@empty}}, 0xe8) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000004c0)={{{@in6=@remote, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in6=@private2, 0x0, 0x2b}, 0x0, @in6=@empty}}, 0xe8) r2 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) sendmsg$key(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) recvmmsg(r2, &(0x7f0000000f00), 0x274, 0x10000, &(0x7f0000001000)={0x77359400}) close(r2) 00:29:42 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000800)="2e00000038000511d25a803f3b00000d0324fc60100035400c0002000200000037153e370a000180afc7c7ea2500", 0x2e}], 0x1}, 0x0) 00:29:42 executing program 1: r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SSUBSCRIP(r0, 0x89e7, 0x0) 00:29:42 executing program 2: r0 = socket$inet(0x2, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r1, 0x40286608, &(0x7f0000001200)={0x3f}) sendto$inet(r0, &(0x7f0000000000)="89", 0x1, 0x1, 0x0, 0x0) [ 280.250854][T14181] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 280.320307][T14183] EXT4-fs warning (device sda1): verify_group_input:136: Cannot add at group 63 (only 16 groups) 00:29:42 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="010000000000000004003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c0433005000de295b3acba512e4080211000001505050505050"], 0x448}}, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x28011, r0, 0x0) sendmsg$NL80211_CMD_UPDATE_FT_IES(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)={0x30, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_IE={0xa, 0x2a, [@chsw_timing={0x68, 0x4}]}, @NL80211_ATTR_IE={0x4}]}, 0x30}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r5, r4, 0x0, 0x10000a006) 00:29:42 executing program 0: sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="00010000", @ANYRES16=0x0, @ANYBLOB="c88845e7e05ae52d00009300000008001317"], 0x1c}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b28, &(0x7f0000000000)={'wlan1\x00'}) 00:29:42 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@loopback, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@multicast2, 0x0, 0x2b}, 0x0, @in6=@empty}}, 0xe8) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000004c0)={{{@in6=@remote, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in6=@private2, 0x0, 0x2b}, 0x0, @in6=@empty}}, 0xe8) r2 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) sendmsg$key(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) recvmmsg(r2, &(0x7f0000000f00), 0x274, 0x10000, &(0x7f0000001000)={0x77359400}) close(r2) [ 280.434935][T14186] EXT4-fs warning (device sda1): verify_group_input:136: Cannot add at group 63 (only 16 groups) 00:29:42 executing program 3: sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010001fff0007248f1c872d2bf1b75bee", @ANYRES32=0x0, @ANYBLOB="ff7f000000000000140012800a00010076786c616e0000000400028008000a"], 0x3c}, 0x1, 0x8000a0ffffffff}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0) 00:29:42 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@loopback, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@multicast2, 0x0, 0x2b}, 0x0, @in6=@empty}}, 0xe8) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000004c0)={{{@in6=@remote, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in6=@private2, 0x0, 0x2b}, 0x0, @in6=@empty}}, 0xe8) r2 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) sendmsg$key(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) recvmmsg(r2, &(0x7f0000000f00), 0x274, 0x10000, &(0x7f0000001000)={0x77359400}) close(r2) 00:29:42 executing program 0: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x4, 0x4}, 0x40) r1 = socket$inet6(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r0, &(0x7f0000000100), &(0x7f0000000000)=@udp6=r1}, 0x20) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000380)={r0, &(0x7f0000000340), 0x0}, 0x20) [ 280.733888][ T26] audit: type=1804 audit(1634603382.727:88): pid=14194 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir706221036/syzkaller.mXHjpb/161/cgroup.controllers" dev="sda1" ino=14628 res=1 errno=0 00:29:44 executing program 5: unshare(0x6c060000) unshare(0x4000000) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000540)=ANY=[@ANYBLOB="92c421513891f29b2431b700000300000000003097f8fb15e460d481e317c5ba36f7f31d368e81096c3a5c009cf92bf0a4bd7be5164b85aba32019abfa3dc622aae5e1509da2b391fc8a8620c5dab2d0d893678ba98fa7f4eee0627d20c5cff05786b497661dcb2eb9bd4ef20c91ced74ece4ef3ab8c889a39761bb594cc9bfd09aaa4b5493b5cef91168323f6d38e9aed86d77808f51ce8e20b7387236e7972c3e9af2e6d79d74e08ac4dedabb3f91d12307d6edcf76f1a931ba9c3a290d9eebe109416dda94802b9088567e4f736f4ec2d185b1b98bbe115510e64e3713099bd02000000b50ba7ffbbb3b3926453e782b17a69e0dc6c7b0d8656962ace4f42c7345309dc78bdcf4c7a5fdb324048f4d301c027bdb1259bf02c2af315cf3dbb335c"], 0x208e19b) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000001700)=0x20) mmap(&(0x7f00009f1000/0x3000)=nil, 0x3000, 0x2000003, 0x28011, r0, 0xffffd000) r1 = socket$alg(0x26, 0x5, 0x0) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x0, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x1c}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f00000006c0), 0xffffffffffffffff) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'veth1_macvtap\x00', 0x0}) sendmsg$BATADV_CMD_TP_METER_CANCEL(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r4, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}]}, 0x1c}}, 0x0) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x44, r4, 0x300, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x81}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x81}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x20}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x81}]}, 0x44}, 0x1, 0x0, 0x0, 0x8080}, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58) r7 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000200)="ad56b6cc0400aeb995298992ea5400c2", 0x10) recvmmsg(r7, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) 00:29:44 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@loopback, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@multicast2, 0x0, 0x2b}, 0x0, @in6=@empty}}, 0xe8) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000004c0)={{{@in6=@remote, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in6=@private2, 0x0, 0x2b}, 0x0, @in6=@empty}}, 0xe8) r2 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) sendmsg$key(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) recvmmsg(r2, &(0x7f0000000f00), 0x274, 0x10000, &(0x7f0000001000)={0x77359400}) close(r2) 00:29:44 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@loopback, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@multicast2, 0x0, 0x2b}, 0x0, @in6=@empty}}, 0xe8) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000004c0)={{{@in6=@remote, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in6=@private2, 0x0, 0x2b}, 0x0, @in6=@empty}}, 0xe8) r2 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) sendmsg$key(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) recvmmsg(r2, &(0x7f0000000f00), 0x274, 0x10000, &(0x7f0000001000)={0x77359400}) close(r2) 00:29:44 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x1000}, 0x4) r1 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0x0) 00:29:44 executing program 0: recvmsg$can_bcm(0xffffffffffffffff, 0x0, 0x0) unshare(0x40000000) 00:29:44 executing program 1: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x9, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x61, 0x11, 0x48}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0xac, &(0x7f0000000200)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 00:29:44 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@loopback, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@multicast2, 0x0, 0x2b}, 0x0, @in6=@empty}}, 0xe8) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000004c0)={{{@in6=@remote, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in6=@private2, 0x0, 0x2b}, 0x0, @in6=@empty}}, 0xe8) r2 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) sendmsg$key(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) recvmmsg(r2, &(0x7f0000000f00), 0x274, 0x10000, &(0x7f0000001000)={0x77359400}) close(r2) 00:29:44 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@loopback, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@multicast2, 0x0, 0x2b}, 0x0, @in6=@empty}}, 0xe8) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000004c0)={{{@in6=@remote, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in6=@private2, 0x0, 0x2b}, 0x0, @in6=@empty}}, 0xe8) r2 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) sendmsg$key(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) recvmmsg(r2, &(0x7f0000000f00), 0x274, 0x10000, &(0x7f0000001000)={0x77359400}) close(r2) [ 282.623573][T14226] hsr0 speed is unknown, defaulting to 1000 [ 282.764062][T14232] hsr0 speed is unknown, defaulting to 1000 00:29:44 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000200)={0xa, 0x14e24}, 0x1c) recvmmsg(r0, &(0x7f0000000200), 0x38c, 0x0, 0x0) connect$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f00000001c0)) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000300)=@abs, 0x6e, &(0x7f0000000500)=[{&(0x7f0000000380)=""/105, 0x69}, {&(0x7f0000000400)=""/210, 0xd2}], 0x2, &(0x7f0000000540)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x10}}], 0xf0}, 0x40002002) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x64, 0x0, 0x800, 0x70bd25, 0x25dfdbfd, {}, [@GTPA_NET_NS_FD={0x8}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_NET_NS_FD={0x8}, @GTPA_I_TEI={0x8}, @GTPA_I_TEI={0x8, 0x8, 0x4}, @GTPA_NET_NS_FD={0x8}, @GTPA_O_TEI={0x8, 0x9, 0x3}, @GTPA_FLOW={0x6, 0x6, 0x2}, @GTPA_MS_ADDRESS={0x8, 0x5, @local}, @GTPA_O_TEI={0x8}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000001}, 0x4054) ppoll(&(0x7f0000000040)=[{r0, 0x2, 0x3000300}], 0x1, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f00000001c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x56) listen(r1, 0x0) r2 = accept(r1, 0x0, 0x0) sendto$inet6(r2, &(0x7f0000000000), 0xffffffffffffffe6, 0x0, 0x0, 0x18fae6fad8906d26) sendmsg$nl_route(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f00000007c0)=ANY=[@ANYBLOB], 0x14}, 0x1, 0x0, 0x0, 0x24004080}, 0x0) 00:29:45 executing program 4: socket(0x3, 0x0, 0x8001) 00:29:45 executing program 2: setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="ff6b3e52cb0aecdefae312393cfd981520655ace1e9486c56fff18b416b81077439429bc55e23e01abad00b6d3e2a1ea04b2574250de61a89fe4c989c36ba0334a"], 0x38) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x52, &(0x7f00000000c0)={&(0x7f0000000000)=@bridge_setlink={0x94, 0x13, 0xa29, 0x0, 0x0, {0x7, 0x0, 0x0, r1}, [@IFLA_AF_SPEC={0x8, 0xc, 0x0, 0x0, [@AF_BRIDGE={0x4e00}]}, @IFLA_AF_SPEC={0x6c, 0x1a, 0x0, 0x1, [@AF_INET6={0x54, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @mcast1}, @IFLA_INET6_TOKEN={0xffffffffffffff92, 0x7, @private1}, @IFLA_INET6_TOKEN={0x14, 0x7, @dev}, @IFLA_INET6_ADDR_GEN_MODE]}, @AF_BRIDGE={0x4}, @AF_INET6={0xc}, @AF_MPLS={0x4}]}]}, 0x94}}, 0x0) 00:29:45 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(0xffffffffffffffff, 0x0, 0x0) ioctl$FITRIM(r0, 0x4030582b, &(0x7f0000000080)={0x0, 0x0, 0x4000000dce9}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="b405730cdb2a9135260eeb5d4950000000000000611060000000250100000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) readv(r2, &(0x7f0000000300)=[{&(0x7f00000005c0)=""/213, 0xd5}, {&(0x7f00000003c0)=""/169, 0xa9}, {&(0x7f0000000280)=""/58, 0x3a}, {&(0x7f0000000780)=""/97, 0x61}, {&(0x7f0000000800)=""/128, 0x80}], 0x5) r3 = socket$kcm(0x29, 0x1000000000002, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r5, &(0x7f0000000200), 0x806000) ioctl$FS_IOC_RESVSP(r5, 0x40305829, &(0x7f0000000380)={0x0, 0x0, 0x0, 0xa00000}) write$cgroup_subtree(r5, 0x0, 0x4) openat$cgroup_ro(r5, &(0x7f0000000380)='cpu.stat\x00', 0x0, 0x0) setsockopt$packet_buf(r4, 0x107, 0x2, &(0x7f0000000040)="29e1bc16365dca776110311f9138a55f", 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000400)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r6, 0x0) sendfile(r3, r1, 0x0, 0x100000004) [ 283.253251][T14286] bridge0: port 1(bridge_slave_0) entered disabled state [ 283.309051][T14290] bridge0: port 1(bridge_slave_0) entered disabled state [ 283.335391][ T26] audit: type=1804 audit(1634603385.327:89): pid=14287 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir935394635/syzkaller.uhO8Tk/155/memory.events" dev="sda1" ino=14653 res=1 errno=0 [ 283.478202][ T26] audit: type=1804 audit(1634603385.327:90): pid=14287 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir935394635/syzkaller.uhO8Tk/155/memory.events" dev="sda1" ino=14653 res=1 errno=0 [ 283.835390][ T26] audit: type=1800 audit(1634603385.827:91): pid=14287 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.0" name="memory.events" dev="sda1" ino=14653 res=0 errno=0 [ 283.932416][ T26] audit: type=1804 audit(1634603385.867:92): pid=14291 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir935394635/syzkaller.uhO8Tk/155/memory.events" dev="sda1" ino=14653 res=1 errno=0 [ 284.027062][ T26] audit: type=1804 audit(1634603385.867:93): pid=14291 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir935394635/syzkaller.uhO8Tk/155/memory.events" dev="sda1" ino=14653 res=1 errno=0 00:29:48 executing program 5: unshare(0x6c060000) unshare(0x4000000) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x208e19b) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000001700)=0x20) mmap(&(0x7f00009f1000/0x3000)=nil, 0x3000, 0x2000003, 0x28011, r0, 0xffffd000) r1 = socket$alg(0x26, 0x5, 0x0) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x0, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x1c}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f00000006c0), 0xffffffffffffffff) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'veth1_macvtap\x00', 0x0}) sendmsg$BATADV_CMD_TP_METER_CANCEL(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r4, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}]}, 0x1c}}, 0x0) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x44, r4, 0x300, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x81}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x81}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x20}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x81}]}, 0x44}, 0x1, 0x0, 0x0, 0x8080}, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58) r7 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000200)="ad56b6cc0400aeb995298992ea5400c2", 0x10) recvmmsg(r7, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) 00:29:48 executing program 4: sendmsg$TIPC_NL_NODE_GET(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000040), 0xc, &(0x7f0000000280)={0x0}}, 0x0) accept$alg(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="193fff7f", @ANYRES32, @ANYRES32=0x1], &(0x7f0000000780)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000007c0)={0x3, 0x1}, 0x8, 0x10, &(0x7f0000000800)={0x4, 0x10, 0x9, 0x10000}, 0x10}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={&(0x7f0000000940)='ext4_evict_inode\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0xf000) ioctl$EXT4_IOC_MIGRATE(r2, 0x6609) sendfile(r3, r4, 0x0, 0xf03b0000) ioctl$sock_TIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000100)) sendmsg$TIPC_CMD_SET_LINK_PRI(r4, &(0x7f0000000b40)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000b00)={&(0x7f0000000880)=ANY=[@ANYBLOB='\x00\x00', @ANYRES16=0x0, @ANYBLOB="000327bd7000fddbdf2501000000000000000841000000140018000000057564703a73797a3000000000"], 0x30}}, 0x40880) sendfile(r3, r2, 0x0, 0x8000000000004) socket$inet_sctp(0x2, 0x0, 0x84) preadv(0xffffffffffffffff, &(0x7f0000000640)=[{&(0x7f0000000300)=""/255, 0xff}, {0x0}, {&(0x7f00000001c0)=""/50, 0x32}, {&(0x7f0000000500)=""/72, 0x48}, {&(0x7f0000000580)=""/27, 0x1b}, {&(0x7f00000005c0)=""/109, 0x6d}], 0x6, 0x4, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) 00:29:48 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x1000}, 0x4) r1 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0x0) 00:29:48 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(0xffffffffffffffff, 0x0, 0x0) ioctl$FITRIM(r0, 0x4030582b, &(0x7f0000000080)={0x0, 0x0, 0x4000000dce9}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="b405730cdb2a9135260eeb5d4950000000000000611060000000250100000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) readv(r2, &(0x7f0000000300)=[{&(0x7f00000005c0)=""/213, 0xd5}, {&(0x7f00000003c0)=""/169, 0xa9}, {&(0x7f0000000280)=""/58, 0x3a}, {&(0x7f0000000780)=""/97, 0x61}, {&(0x7f0000000800)=""/128, 0x80}], 0x5) r3 = socket$kcm(0x29, 0x1000000000002, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r5, &(0x7f0000000200), 0x806000) ioctl$FS_IOC_RESVSP(r5, 0x40305829, &(0x7f0000000380)={0x0, 0x0, 0x0, 0xa00000}) write$cgroup_subtree(r5, 0x0, 0x4) openat$cgroup_ro(r5, &(0x7f0000000380)='cpu.stat\x00', 0x0, 0x0) setsockopt$packet_buf(r4, 0x107, 0x2, &(0x7f0000000040)="29e1bc16365dca776110311f9138a55f", 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000400)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r6, 0x0) sendfile(r3, r1, 0x0, 0x100000004) 00:29:48 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x1000}, 0x4) r1 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0x0) 00:29:48 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000200)={0xa, 0x14e24}, 0x1c) recvmmsg(r0, &(0x7f0000000200), 0x38c, 0x0, 0x0) connect$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f00000001c0)) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000300)=@abs, 0x6e, &(0x7f0000000500)=[{&(0x7f0000000380)=""/105, 0x69}, {&(0x7f0000000400)=""/210, 0xd2}], 0x2, &(0x7f0000000540)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x10}}], 0xf0}, 0x40002002) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x64, 0x0, 0x800, 0x70bd25, 0x25dfdbfd, {}, [@GTPA_NET_NS_FD={0x8}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_NET_NS_FD={0x8}, @GTPA_I_TEI={0x8}, @GTPA_I_TEI={0x8, 0x8, 0x4}, @GTPA_NET_NS_FD={0x8}, @GTPA_O_TEI={0x8, 0x9, 0x3}, @GTPA_FLOW={0x6, 0x6, 0x2}, @GTPA_MS_ADDRESS={0x8, 0x5, @local}, @GTPA_O_TEI={0x8}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000001}, 0x4054) ppoll(&(0x7f0000000040)=[{r0, 0x2, 0x3000300}], 0x1, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f00000001c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x56) listen(r1, 0x0) r2 = accept(r1, 0x0, 0x0) sendto$inet6(r2, &(0x7f0000000000), 0xffffffffffffffe6, 0x0, 0x0, 0x18fae6fad8906d26) sendmsg$nl_route(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f00000007c0)=ANY=[@ANYBLOB], 0x14}, 0x1, 0x0, 0x0, 0x24004080}, 0x0) [ 286.374065][ T26] audit: type=1804 audit(1634603388.367:94): pid=14310 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir935394635/syzkaller.uhO8Tk/156/memory.events" dev="sda1" ino=14049 res=1 errno=0 [ 286.552637][ T26] audit: type=1804 audit(1634603388.417:95): pid=14310 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir935394635/syzkaller.uhO8Tk/156/memory.events" dev="sda1" ino=14049 res=1 errno=0 [ 286.994316][T14325] hsr0 speed is unknown, defaulting to 1000 00:29:49 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x1000}, 0x4) r1 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0x0) 00:29:49 executing program 4: sendmsg$TIPC_NL_NODE_GET(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000040), 0xc, &(0x7f0000000280)={0x0}}, 0x0) accept$alg(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="193fff7f", @ANYRES32, @ANYRES32=0x1], &(0x7f0000000780)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000007c0)={0x3, 0x1}, 0x8, 0x10, &(0x7f0000000800)={0x4, 0x10, 0x9, 0x10000}, 0x10}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={&(0x7f0000000940)='ext4_evict_inode\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0xf000) ioctl$EXT4_IOC_MIGRATE(r2, 0x6609) sendfile(r3, r4, 0x0, 0xf03b0000) ioctl$sock_TIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000100)) sendmsg$TIPC_CMD_SET_LINK_PRI(r4, &(0x7f0000000b40)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000b00)={&(0x7f0000000880)=ANY=[@ANYBLOB='\x00\x00', @ANYRES16=0x0, @ANYBLOB="000327bd7000fddbdf2501000000000000000841000000140018000000057564703a73797a3000000000"], 0x30}}, 0x40880) sendfile(r3, r2, 0x0, 0x8000000000004) socket$inet_sctp(0x2, 0x0, 0x84) preadv(0xffffffffffffffff, &(0x7f0000000640)=[{&(0x7f0000000300)=""/255, 0xff}, {0x0}, {&(0x7f00000001c0)=""/50, 0x32}, {&(0x7f0000000500)=""/72, 0x48}, {&(0x7f0000000580)=""/27, 0x1b}, {&(0x7f00000005c0)=""/109, 0x6d}], 0x6, 0x4, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) 00:29:49 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x1000}, 0x4) r1 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0x0) 00:29:49 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(0xffffffffffffffff, 0x0, 0x0) ioctl$FITRIM(r0, 0x4030582b, &(0x7f0000000080)={0x0, 0x0, 0x4000000dce9}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="b405730cdb2a9135260eeb5d4950000000000000611060000000250100000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) readv(r2, &(0x7f0000000300)=[{&(0x7f00000005c0)=""/213, 0xd5}, {&(0x7f00000003c0)=""/169, 0xa9}, {&(0x7f0000000280)=""/58, 0x3a}, {&(0x7f0000000780)=""/97, 0x61}, {&(0x7f0000000800)=""/128, 0x80}], 0x5) r3 = socket$kcm(0x29, 0x1000000000002, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r5, &(0x7f0000000200), 0x806000) ioctl$FS_IOC_RESVSP(r5, 0x40305829, &(0x7f0000000380)={0x0, 0x0, 0x0, 0xa00000}) write$cgroup_subtree(r5, 0x0, 0x4) openat$cgroup_ro(r5, &(0x7f0000000380)='cpu.stat\x00', 0x0, 0x0) setsockopt$packet_buf(r4, 0x107, 0x2, &(0x7f0000000040)="29e1bc16365dca776110311f9138a55f", 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000400)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r6, 0x0) sendfile(r3, r1, 0x0, 0x100000004) 00:29:49 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000200)={0xa, 0x14e24}, 0x1c) recvmmsg(r0, &(0x7f0000000200), 0x38c, 0x0, 0x0) connect$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f00000001c0)) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000300)=@abs, 0x6e, &(0x7f0000000500)=[{&(0x7f0000000380)=""/105, 0x69}, {&(0x7f0000000400)=""/210, 0xd2}], 0x2, &(0x7f0000000540)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x10}}], 0xf0}, 0x40002002) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x64, 0x0, 0x800, 0x70bd25, 0x25dfdbfd, {}, [@GTPA_NET_NS_FD={0x8}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_NET_NS_FD={0x8}, @GTPA_I_TEI={0x8}, @GTPA_I_TEI={0x8, 0x8, 0x4}, @GTPA_NET_NS_FD={0x8}, @GTPA_O_TEI={0x8, 0x9, 0x3}, @GTPA_FLOW={0x6, 0x6, 0x2}, @GTPA_MS_ADDRESS={0x8, 0x5, @local}, @GTPA_O_TEI={0x8}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000001}, 0x4054) ppoll(&(0x7f0000000040)=[{r0, 0x2, 0x3000300}], 0x1, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f00000001c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x56) listen(r1, 0x0) r2 = accept(r1, 0x0, 0x0) sendto$inet6(r2, &(0x7f0000000000), 0xffffffffffffffe6, 0x0, 0x0, 0x18fae6fad8906d26) sendmsg$nl_route(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f00000007c0)=ANY=[@ANYBLOB], 0x14}, 0x1, 0x0, 0x0, 0x24004080}, 0x0) [ 287.933445][ T26] audit: type=1804 audit(1634603389.927:96): pid=14361 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir935394635/syzkaller.uhO8Tk/157/memory.events" dev="sda1" ino=14132 res=1 errno=0 [ 288.158703][ T26] audit: type=1804 audit(1634603389.997:97): pid=14361 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir935394635/syzkaller.uhO8Tk/157/memory.events" dev="sda1" ino=14132 res=1 errno=0 00:29:50 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x1000}, 0x4) r1 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0x0) 00:29:53 executing program 5: unshare(0x6c060000) unshare(0x4000000) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x208e19b) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000001700)=0x20) mmap(&(0x7f00009f1000/0x3000)=nil, 0x3000, 0x2000003, 0x28011, r0, 0xffffd000) r1 = socket$alg(0x26, 0x5, 0x0) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x0, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x1c}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f00000006c0), 0xffffffffffffffff) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'veth1_macvtap\x00', 0x0}) sendmsg$BATADV_CMD_TP_METER_CANCEL(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r4, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}]}, 0x1c}}, 0x0) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x44, r4, 0x300, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x81}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x81}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x20}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x81}]}, 0x44}, 0x1, 0x0, 0x0, 0x8080}, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58) r7 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000200)="ad56b6cc0400aeb995298992ea5400c2", 0x10) recvmmsg(r7, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) 00:29:53 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x1000}, 0x4) r1 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0x0) 00:29:53 executing program 4: sendmsg$TIPC_NL_NODE_GET(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000040), 0xc, &(0x7f0000000280)={0x0}}, 0x0) accept$alg(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="193fff7f", @ANYRES32, @ANYRES32=0x1], &(0x7f0000000780)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000007c0)={0x3, 0x1}, 0x8, 0x10, &(0x7f0000000800)={0x4, 0x10, 0x9, 0x10000}, 0x10}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={&(0x7f0000000940)='ext4_evict_inode\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0xf000) ioctl$EXT4_IOC_MIGRATE(r2, 0x6609) sendfile(r3, r4, 0x0, 0xf03b0000) ioctl$sock_TIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000100)) sendmsg$TIPC_CMD_SET_LINK_PRI(r4, &(0x7f0000000b40)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000b00)={&(0x7f0000000880)=ANY=[@ANYBLOB='\x00\x00', @ANYRES16=0x0, @ANYBLOB="000327bd7000fddbdf2501000000000000000841000000140018000000057564703a73797a3000000000"], 0x30}}, 0x40880) sendfile(r3, r2, 0x0, 0x8000000000004) socket$inet_sctp(0x2, 0x0, 0x84) preadv(0xffffffffffffffff, &(0x7f0000000640)=[{&(0x7f0000000300)=""/255, 0xff}, {0x0}, {&(0x7f00000001c0)=""/50, 0x32}, {&(0x7f0000000500)=""/72, 0x48}, {&(0x7f0000000580)=""/27, 0x1b}, {&(0x7f00000005c0)=""/109, 0x6d}], 0x6, 0x4, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) 00:29:53 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(0xffffffffffffffff, 0x0, 0x0) ioctl$FITRIM(r0, 0x4030582b, &(0x7f0000000080)={0x0, 0x0, 0x4000000dce9}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="b405730cdb2a9135260eeb5d4950000000000000611060000000250100000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) readv(r2, &(0x7f0000000300)=[{&(0x7f00000005c0)=""/213, 0xd5}, {&(0x7f00000003c0)=""/169, 0xa9}, {&(0x7f0000000280)=""/58, 0x3a}, {&(0x7f0000000780)=""/97, 0x61}, {&(0x7f0000000800)=""/128, 0x80}], 0x5) r3 = socket$kcm(0x29, 0x1000000000002, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r5, &(0x7f0000000200), 0x806000) ioctl$FS_IOC_RESVSP(r5, 0x40305829, &(0x7f0000000380)={0x0, 0x0, 0x0, 0xa00000}) write$cgroup_subtree(r5, 0x0, 0x4) openat$cgroup_ro(r5, &(0x7f0000000380)='cpu.stat\x00', 0x0, 0x0) setsockopt$packet_buf(r4, 0x107, 0x2, &(0x7f0000000040)="29e1bc16365dca776110311f9138a55f", 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000400)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r6, 0x0) sendfile(r3, r1, 0x0, 0x100000004) 00:29:53 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000200)={0xa, 0x14e24}, 0x1c) recvmmsg(r0, &(0x7f0000000200), 0x38c, 0x0, 0x0) connect$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f00000001c0)) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000300)=@abs, 0x6e, &(0x7f0000000500)=[{&(0x7f0000000380)=""/105, 0x69}, {&(0x7f0000000400)=""/210, 0xd2}], 0x2, &(0x7f0000000540)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x10}}], 0xf0}, 0x40002002) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x64, 0x0, 0x800, 0x70bd25, 0x25dfdbfd, {}, [@GTPA_NET_NS_FD={0x8}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_NET_NS_FD={0x8}, @GTPA_I_TEI={0x8}, @GTPA_I_TEI={0x8, 0x8, 0x4}, @GTPA_NET_NS_FD={0x8}, @GTPA_O_TEI={0x8, 0x9, 0x3}, @GTPA_FLOW={0x6, 0x6, 0x2}, @GTPA_MS_ADDRESS={0x8, 0x5, @local}, @GTPA_O_TEI={0x8}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000001}, 0x4054) ppoll(&(0x7f0000000040)=[{r0, 0x2, 0x3000300}], 0x1, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f00000001c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x56) listen(r1, 0x0) r2 = accept(r1, 0x0, 0x0) sendto$inet6(r2, &(0x7f0000000000), 0xffffffffffffffe6, 0x0, 0x0, 0x18fae6fad8906d26) sendmsg$nl_route(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f00000007c0)=ANY=[@ANYBLOB], 0x14}, 0x1, 0x0, 0x0, 0x24004080}, 0x0) 00:29:53 executing program 3: sendmsg$TIPC_NL_NODE_GET(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000040), 0xc, &(0x7f0000000280)={0x0}}, 0x0) accept$alg(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="193fff7f", @ANYRES32, @ANYRES32=0x1], &(0x7f0000000780)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000007c0)={0x3, 0x1}, 0x8, 0x10, &(0x7f0000000800)={0x4, 0x10, 0x9, 0x10000}, 0x10}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={&(0x7f0000000940)='ext4_evict_inode\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0xf000) ioctl$EXT4_IOC_MIGRATE(r2, 0x6609) sendfile(r3, r4, 0x0, 0xf03b0000) ioctl$sock_TIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000100)) sendmsg$TIPC_CMD_SET_LINK_PRI(r4, &(0x7f0000000b40)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000b00)={&(0x7f0000000880)=ANY=[@ANYBLOB='\x00\x00', @ANYRES16=0x0, @ANYBLOB="000327bd7000fddbdf2501000000000000000841000000140018000000057564703a73797a3000000000"], 0x30}}, 0x40880) sendfile(r3, r2, 0x0, 0x8000000000004) socket$inet_sctp(0x2, 0x0, 0x84) preadv(0xffffffffffffffff, &(0x7f0000000640)=[{&(0x7f0000000300)=""/255, 0xff}, {0x0}, {&(0x7f00000001c0)=""/50, 0x32}, {&(0x7f0000000500)=""/72, 0x48}, {&(0x7f0000000580)=""/27, 0x1b}, {&(0x7f00000005c0)=""/109, 0x6d}], 0x6, 0x4, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) [ 291.489445][ T26] audit: type=1804 audit(1634603393.488:98): pid=14394 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir935394635/syzkaller.uhO8Tk/158/memory.events" dev="sda1" ino=14661 res=1 errno=0 [ 291.650367][ T26] audit: type=1804 audit(1634603393.538:99): pid=14394 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir935394635/syzkaller.uhO8Tk/158/memory.events" dev="sda1" ino=14661 res=1 errno=0 [ 292.199555][T14407] hsr0 speed is unknown, defaulting to 1000 00:29:54 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000200)={0xa, 0x14e24}, 0x1c) recvmmsg(r0, &(0x7f0000000200), 0x38c, 0x0, 0x0) connect$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f00000001c0)) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000300)=@abs, 0x6e, &(0x7f0000000500)=[{&(0x7f0000000380)=""/105, 0x69}, {&(0x7f0000000400)=""/210, 0xd2}], 0x2, &(0x7f0000000540)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x10}}], 0xf0}, 0x40002002) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x64, 0x0, 0x800, 0x70bd25, 0x25dfdbfd, {}, [@GTPA_NET_NS_FD={0x8}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_NET_NS_FD={0x8}, @GTPA_I_TEI={0x8}, @GTPA_I_TEI={0x8, 0x8, 0x4}, @GTPA_NET_NS_FD={0x8}, @GTPA_O_TEI={0x8, 0x9, 0x3}, @GTPA_FLOW={0x6, 0x6, 0x2}, @GTPA_MS_ADDRESS={0x8, 0x5, @local}, @GTPA_O_TEI={0x8}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000001}, 0x4054) ppoll(&(0x7f0000000040)=[{r0, 0x2, 0x3000300}], 0x1, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f00000001c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x56) listen(r1, 0x0) r2 = accept(r1, 0x0, 0x0) sendto$inet6(r2, &(0x7f0000000000), 0xffffffffffffffe6, 0x0, 0x0, 0x18fae6fad8906d26) sendmsg$nl_route(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f00000007c0)=ANY=[@ANYBLOB], 0x14}, 0x1, 0x0, 0x0, 0x24004080}, 0x0) 00:29:54 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000200)={0xa, 0x14e24}, 0x1c) recvmmsg(r0, &(0x7f0000000200), 0x38c, 0x0, 0x0) connect$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f00000001c0)) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000300)=@abs, 0x6e, &(0x7f0000000500)=[{&(0x7f0000000380)=""/105, 0x69}, {&(0x7f0000000400)=""/210, 0xd2}], 0x2, &(0x7f0000000540)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x10}}], 0xf0}, 0x40002002) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x64, 0x0, 0x800, 0x70bd25, 0x25dfdbfd, {}, [@GTPA_NET_NS_FD={0x8}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_NET_NS_FD={0x8}, @GTPA_I_TEI={0x8}, @GTPA_I_TEI={0x8, 0x8, 0x4}, @GTPA_NET_NS_FD={0x8}, @GTPA_O_TEI={0x8, 0x9, 0x3}, @GTPA_FLOW={0x6, 0x6, 0x2}, @GTPA_MS_ADDRESS={0x8, 0x5, @local}, @GTPA_O_TEI={0x8}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000001}, 0x4054) ppoll(&(0x7f0000000040)=[{r0, 0x2, 0x3000300}], 0x1, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f00000001c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x56) listen(r1, 0x0) r2 = accept(r1, 0x0, 0x0) sendto$inet6(r2, &(0x7f0000000000), 0xffffffffffffffe6, 0x0, 0x0, 0x18fae6fad8906d26) sendmsg$nl_route(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f00000007c0)=ANY=[@ANYBLOB], 0x14}, 0x1, 0x0, 0x0, 0x24004080}, 0x0) 00:29:54 executing program 4: sendmsg$TIPC_NL_NODE_GET(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000040), 0xc, &(0x7f0000000280)={0x0}}, 0x0) accept$alg(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="193fff7f", @ANYRES32, @ANYRES32=0x1], &(0x7f0000000780)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000007c0)={0x3, 0x1}, 0x8, 0x10, &(0x7f0000000800)={0x4, 0x10, 0x9, 0x10000}, 0x10}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={&(0x7f0000000940)='ext4_evict_inode\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0xf000) ioctl$EXT4_IOC_MIGRATE(r2, 0x6609) sendfile(r3, r4, 0x0, 0xf03b0000) ioctl$sock_TIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000100)) sendmsg$TIPC_CMD_SET_LINK_PRI(r4, &(0x7f0000000b40)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000b00)={&(0x7f0000000880)=ANY=[@ANYBLOB='\x00\x00', @ANYRES16=0x0, @ANYBLOB="000327bd7000fddbdf2501000000000000000841000000140018000000057564703a73797a3000000000"], 0x30}}, 0x40880) sendfile(r3, r2, 0x0, 0x8000000000004) socket$inet_sctp(0x2, 0x0, 0x84) preadv(0xffffffffffffffff, &(0x7f0000000640)=[{&(0x7f0000000300)=""/255, 0xff}, {0x0}, {&(0x7f00000001c0)=""/50, 0x32}, {&(0x7f0000000500)=""/72, 0x48}, {&(0x7f0000000580)=""/27, 0x1b}, {&(0x7f00000005c0)=""/109, 0x6d}], 0x6, 0x4, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) 00:29:54 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(0xffffffffffffffff, 0x0, 0x0) ioctl$FITRIM(r0, 0x4030582b, &(0x7f0000000080)={0x0, 0x0, 0x4000000dce9}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="b405730cdb2a9135260eeb5d4950000000000000611060000000250100000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) readv(r2, &(0x7f0000000300)=[{&(0x7f00000005c0)=""/213, 0xd5}, {&(0x7f00000003c0)=""/169, 0xa9}, {&(0x7f0000000280)=""/58, 0x3a}, {&(0x7f0000000780)=""/97, 0x61}, {&(0x7f0000000800)=""/128, 0x80}], 0x5) r3 = socket$kcm(0x29, 0x1000000000002, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r5, &(0x7f0000000200), 0x806000) ioctl$FS_IOC_RESVSP(r5, 0x40305829, &(0x7f0000000380)={0x0, 0x0, 0x0, 0xa00000}) write$cgroup_subtree(r5, 0x0, 0x4) openat$cgroup_ro(r5, &(0x7f0000000380)='cpu.stat\x00', 0x0, 0x0) setsockopt$packet_buf(r4, 0x107, 0x2, &(0x7f0000000040)="29e1bc16365dca776110311f9138a55f", 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000400)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r6, 0x0) sendfile(r3, r1, 0x0, 0x100000004) 00:29:55 executing program 3: sendmsg$TIPC_NL_NODE_GET(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000040), 0xc, &(0x7f0000000280)={0x0}}, 0x0) accept$alg(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="193fff7f", @ANYRES32, @ANYRES32=0x1], &(0x7f0000000780)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000007c0)={0x3, 0x1}, 0x8, 0x10, &(0x7f0000000800)={0x4, 0x10, 0x9, 0x10000}, 0x10}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={&(0x7f0000000940)='ext4_evict_inode\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0xf000) ioctl$EXT4_IOC_MIGRATE(r2, 0x6609) sendfile(r3, r4, 0x0, 0xf03b0000) ioctl$sock_TIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000100)) sendmsg$TIPC_CMD_SET_LINK_PRI(r4, &(0x7f0000000b40)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000b00)={&(0x7f0000000880)=ANY=[@ANYBLOB='\x00\x00', @ANYRES16=0x0, @ANYBLOB="000327bd7000fddbdf2501000000000000000841000000140018000000057564703a73797a3000000000"], 0x30}}, 0x40880) sendfile(r3, r2, 0x0, 0x8000000000004) socket$inet_sctp(0x2, 0x0, 0x84) preadv(0xffffffffffffffff, &(0x7f0000000640)=[{&(0x7f0000000300)=""/255, 0xff}, {0x0}, {&(0x7f00000001c0)=""/50, 0x32}, {&(0x7f0000000500)=""/72, 0x48}, {&(0x7f0000000580)=""/27, 0x1b}, {&(0x7f00000005c0)=""/109, 0x6d}], 0x6, 0x4, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) [ 293.167532][ T26] audit: type=1804 audit(1634603395.168:100): pid=14442 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir706221036/syzkaller.mXHjpb/167/memory.events" dev="sda1" ino=14225 res=1 errno=0 [ 293.352896][ T26] audit: type=1804 audit(1634603395.188:101): pid=14442 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir706221036/syzkaller.mXHjpb/167/memory.events" dev="sda1" ino=14225 res=1 errno=0 00:29:56 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000200)={0xa, 0x14e24}, 0x1c) recvmmsg(r0, &(0x7f0000000200), 0x38c, 0x0, 0x0) connect$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f00000001c0)) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000300)=@abs, 0x6e, &(0x7f0000000500)=[{&(0x7f0000000380)=""/105, 0x69}, {&(0x7f0000000400)=""/210, 0xd2}], 0x2, &(0x7f0000000540)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x10}}], 0xf0}, 0x40002002) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x64, 0x0, 0x800, 0x70bd25, 0x25dfdbfd, {}, [@GTPA_NET_NS_FD={0x8}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_NET_NS_FD={0x8}, @GTPA_I_TEI={0x8}, @GTPA_I_TEI={0x8, 0x8, 0x4}, @GTPA_NET_NS_FD={0x8}, @GTPA_O_TEI={0x8, 0x9, 0x3}, @GTPA_FLOW={0x6, 0x6, 0x2}, @GTPA_MS_ADDRESS={0x8, 0x5, @local}, @GTPA_O_TEI={0x8}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000001}, 0x4054) ppoll(&(0x7f0000000040)=[{r0, 0x2, 0x3000300}], 0x1, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f00000001c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x56) listen(r1, 0x0) r2 = accept(r1, 0x0, 0x0) sendto$inet6(r2, &(0x7f0000000000), 0xffffffffffffffe6, 0x0, 0x0, 0x18fae6fad8906d26) sendmsg$nl_route(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f00000007c0)=ANY=[@ANYBLOB], 0x14}, 0x1, 0x0, 0x0, 0x24004080}, 0x0) 00:29:59 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(0xffffffffffffffff, 0x0, 0x0) ioctl$FITRIM(r0, 0x4030582b, &(0x7f0000000080)={0x0, 0x0, 0x4000000dce9}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="b405730cdb2a9135260eeb5d4950000000000000611060000000250100000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) readv(r2, &(0x7f0000000300)=[{&(0x7f00000005c0)=""/213, 0xd5}, {&(0x7f00000003c0)=""/169, 0xa9}, {&(0x7f0000000280)=""/58, 0x3a}, {&(0x7f0000000780)=""/97, 0x61}, {&(0x7f0000000800)=""/128, 0x80}], 0x5) r3 = socket$kcm(0x29, 0x1000000000002, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r5, &(0x7f0000000200), 0x806000) ioctl$FS_IOC_RESVSP(r5, 0x40305829, &(0x7f0000000380)={0x0, 0x0, 0x0, 0xa00000}) write$cgroup_subtree(r5, 0x0, 0x4) openat$cgroup_ro(r5, &(0x7f0000000380)='cpu.stat\x00', 0x0, 0x0) setsockopt$packet_buf(r4, 0x107, 0x2, &(0x7f0000000040)="29e1bc16365dca776110311f9138a55f", 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000400)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r6, 0x0) sendfile(r3, r1, 0x0, 0x100000004) 00:29:59 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000200)={0xa, 0x14e24}, 0x1c) recvmmsg(r0, &(0x7f0000000200), 0x38c, 0x0, 0x0) connect$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f00000001c0)) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000300)=@abs, 0x6e, &(0x7f0000000500)=[{&(0x7f0000000380)=""/105, 0x69}, {&(0x7f0000000400)=""/210, 0xd2}], 0x2, &(0x7f0000000540)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x10}}], 0xf0}, 0x40002002) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x64, 0x0, 0x800, 0x70bd25, 0x25dfdbfd, {}, [@GTPA_NET_NS_FD={0x8}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_NET_NS_FD={0x8}, @GTPA_I_TEI={0x8}, @GTPA_I_TEI={0x8, 0x8, 0x4}, @GTPA_NET_NS_FD={0x8}, @GTPA_O_TEI={0x8, 0x9, 0x3}, @GTPA_FLOW={0x6, 0x6, 0x2}, @GTPA_MS_ADDRESS={0x8, 0x5, @local}, @GTPA_O_TEI={0x8}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000001}, 0x4054) ppoll(&(0x7f0000000040)=[{r0, 0x2, 0x3000300}], 0x1, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f00000001c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x56) listen(r1, 0x0) r2 = accept(r1, 0x0, 0x0) sendto$inet6(r2, &(0x7f0000000000), 0xffffffffffffffe6, 0x0, 0x0, 0x18fae6fad8906d26) sendmsg$nl_route(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f00000007c0)=ANY=[@ANYBLOB], 0x14}, 0x1, 0x0, 0x0, 0x24004080}, 0x0) 00:29:59 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000340), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000180)=@gcm_256={{0x303, 0x36}, "f8ff2000ffffffff", "c408ee5dfa1bb5f044b4ea4ab57a3a932943170243333b60859335878286b7fb", "9900ffe9", "ffffa130fffffffe"}, 0x38) close(r0) 00:29:59 executing program 3: sendmsg$TIPC_NL_NODE_GET(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000040), 0xc, &(0x7f0000000280)={0x0}}, 0x0) accept$alg(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="193fff7f", @ANYRES32, @ANYRES32=0x1], &(0x7f0000000780)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000007c0)={0x3, 0x1}, 0x8, 0x10, &(0x7f0000000800)={0x4, 0x10, 0x9, 0x10000}, 0x10}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={&(0x7f0000000940)='ext4_evict_inode\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0xf000) ioctl$EXT4_IOC_MIGRATE(r2, 0x6609) sendfile(r3, r4, 0x0, 0xf03b0000) ioctl$sock_TIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000100)) sendmsg$TIPC_CMD_SET_LINK_PRI(r4, &(0x7f0000000b40)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000b00)={&(0x7f0000000880)=ANY=[@ANYBLOB='\x00\x00', @ANYRES16=0x0, @ANYBLOB="000327bd7000fddbdf2501000000000000000841000000140018000000057564703a73797a3000000000"], 0x30}}, 0x40880) sendfile(r3, r2, 0x0, 0x8000000000004) socket$inet_sctp(0x2, 0x0, 0x84) preadv(0xffffffffffffffff, &(0x7f0000000640)=[{&(0x7f0000000300)=""/255, 0xff}, {0x0}, {&(0x7f00000001c0)=""/50, 0x32}, {&(0x7f0000000500)=""/72, 0x48}, {&(0x7f0000000580)=""/27, 0x1b}, {&(0x7f00000005c0)=""/109, 0x6d}], 0x6, 0x4, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) 00:29:59 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000200)={0xa, 0x14e24}, 0x1c) recvmmsg(r0, &(0x7f0000000200), 0x38c, 0x0, 0x0) connect$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f00000001c0)) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000300)=@abs, 0x6e, &(0x7f0000000500)=[{&(0x7f0000000380)=""/105, 0x69}, {&(0x7f0000000400)=""/210, 0xd2}], 0x2, &(0x7f0000000540)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x10}}], 0xf0}, 0x40002002) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x64, 0x0, 0x800, 0x70bd25, 0x25dfdbfd, {}, [@GTPA_NET_NS_FD={0x8}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_NET_NS_FD={0x8}, @GTPA_I_TEI={0x8}, @GTPA_I_TEI={0x8, 0x8, 0x4}, @GTPA_NET_NS_FD={0x8}, @GTPA_O_TEI={0x8, 0x9, 0x3}, @GTPA_FLOW={0x6, 0x6, 0x2}, @GTPA_MS_ADDRESS={0x8, 0x5, @local}, @GTPA_O_TEI={0x8}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000001}, 0x4054) ppoll(&(0x7f0000000040)=[{r0, 0x2, 0x3000300}], 0x1, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f00000001c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x56) listen(r1, 0x0) r2 = accept(r1, 0x0, 0x0) sendto$inet6(r2, &(0x7f0000000000), 0xffffffffffffffe6, 0x0, 0x0, 0x18fae6fad8906d26) sendmsg$nl_route(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f00000007c0)=ANY=[@ANYBLOB], 0x14}, 0x1, 0x0, 0x0, 0x24004080}, 0x0) 00:29:59 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$TIPC_CMD_RESET_LINK_STATS(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000001000000000000000c4100000014001462726f6164636173742d6c696e6b0f"], 0x30}}, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f80ecdb4cb9cca7480ef426000000e3bd6efb440009000e000a0010000000008000001207", 0x2e}], 0x1}, 0x100) sendmsg$kcm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000080)="2e00000010008188040f80ecc00000000000000026000000050000000f414f000e000a0010000b2fd613e3de10fa", 0x79}], 0x1}, 0x24048004) [ 297.272545][ T26] audit: type=1804 audit(1634603399.268:102): pid=14494 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir706221036/syzkaller.mXHjpb/168/memory.events" dev="sda1" ino=14689 res=1 errno=0 [ 297.476789][ T26] audit: type=1804 audit(1634603399.328:103): pid=14494 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir706221036/syzkaller.mXHjpb/168/memory.events" dev="sda1" ino=14689 res=1 errno=0 00:29:59 executing program 4: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="13ffffec10000000006c4000000000000000000a20200000002701000000000000000000000054ac3f1ea39feb247a300000000038000000120a0102000000000000000000004778040004800900020002000000000000000900010073797a3000000000080003"], 0x1}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000000006c0000000002000020000a2000"], 0x1}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000500) 00:29:59 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000006c0)=@newtaction={0x78, 0x30, 0x17b, 0x0, 0x0, {}, [{0x64, 0x1, [@m_bpf={0x60, 0x1, 0x0, 0x0, {{0x8}, {0x38, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x2}, @TCA_ACT_BPF_PARMS={0x18}, @TCA_ACT_BPF_OPS={0x14, 0x4, [{0xba}, {}]}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x78}}, 0x0) [ 298.000318][ T26] audit: type=1804 audit(1634603399.998:104): pid=14522 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir516473655/syzkaller.aQ1LtY/164/cgroup.controllers" dev="sda1" ino=14690 res=1 errno=0 00:30:00 executing program 5: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x7b, &(0x7f0000000400)=[@in={0x2, 0x0, @empty}], 0x10) 00:30:00 executing program 4: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="13ffffec10000000006c4000000000000000000a20200000002701000000000000000000000054ac3f1ea39feb247a300000000038000000120a0102000000000000000000004778040004800900020002000000000000000900010073797a3000000000080003"], 0x1}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000000006c0000000002000020000a2000"], 0x1}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000500) 00:30:00 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000200)={0xa, 0x14e24}, 0x1c) recvmmsg(r0, &(0x7f0000000200), 0x38c, 0x0, 0x0) connect$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f00000001c0)) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000300)=@abs, 0x6e, &(0x7f0000000500)=[{&(0x7f0000000380)=""/105, 0x69}, {&(0x7f0000000400)=""/210, 0xd2}], 0x2, &(0x7f0000000540)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x10}}], 0xf0}, 0x40002002) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x64, 0x0, 0x800, 0x70bd25, 0x25dfdbfd, {}, [@GTPA_NET_NS_FD={0x8}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_NET_NS_FD={0x8}, @GTPA_I_TEI={0x8}, @GTPA_I_TEI={0x8, 0x8, 0x4}, @GTPA_NET_NS_FD={0x8}, @GTPA_O_TEI={0x8, 0x9, 0x3}, @GTPA_FLOW={0x6, 0x6, 0x2}, @GTPA_MS_ADDRESS={0x8, 0x5, @local}, @GTPA_O_TEI={0x8}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000001}, 0x4054) ppoll(&(0x7f0000000040)=[{r0, 0x2, 0x3000300}], 0x1, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f00000001c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x56) listen(r1, 0x0) r2 = accept(r1, 0x0, 0x0) sendto$inet6(r2, &(0x7f0000000000), 0xffffffffffffffe6, 0x0, 0x0, 0x18fae6fad8906d26) sendmsg$nl_route(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f00000007c0)=ANY=[@ANYBLOB], 0x14}, 0x1, 0x0, 0x0, 0x24004080}, 0x0) 00:30:00 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ifreq(r0, 0x8922, &(0x7f0000000000)={'vlan0\x00', @ifru_ivalue}) 00:30:00 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(0xffffffffffffffff, 0x0, 0x0) ioctl$FITRIM(r0, 0x4030582b, &(0x7f0000000080)={0x0, 0x0, 0x4000000dce9}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="b405730cdb2a9135260eeb5d4950000000000000611060000000250100000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) readv(r2, &(0x7f0000000300)=[{&(0x7f00000005c0)=""/213, 0xd5}, {&(0x7f00000003c0)=""/169, 0xa9}, {&(0x7f0000000280)=""/58, 0x3a}, {&(0x7f0000000780)=""/97, 0x61}, {&(0x7f0000000800)=""/128, 0x80}], 0x5) r3 = socket$kcm(0x29, 0x1000000000002, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r5, &(0x7f0000000200), 0x806000) ioctl$FS_IOC_RESVSP(r5, 0x40305829, &(0x7f0000000380)={0x0, 0x0, 0x0, 0xa00000}) write$cgroup_subtree(r5, 0x0, 0x4) openat$cgroup_ro(r5, &(0x7f0000000380)='cpu.stat\x00', 0x0, 0x0) setsockopt$packet_buf(r4, 0x107, 0x2, &(0x7f0000000040)="29e1bc16365dca776110311f9138a55f", 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000400)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r6, 0x0) sendfile(r3, r1, 0x0, 0x100000004) 00:30:00 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_SPLIT(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x44, r1, 0x1, 0x0, 0x0, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x5}}, {0x8}}]}, 0x44}}, 0x0) 00:30:00 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newlink={0x78, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x50, 0x12, 0x0, 0x1, @hsr={{0x8}, {0xfffffffffffffd24, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8}, @IFLA_HSR_SLAVE2={0x8}, @IFLA_HSR_VERSION={0x5}, @IFLA_HSR_SLAVE1={0x8}, @IFLA_HSR_VERSION={0x5}, @IFLA_HSR_MULTICAST_SPEC={0x5}, @IFLA_HSR_SLAVE1={0x8}, @IFLA_HSR_VERSION={0x5}]}}}, @IFLA_LINK={0x8}]}, 0x78}}, 0x0) 00:30:00 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x2f) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000003c0)={{{@in6=@ipv4={'\x00', '\xff\xff', @empty}, @in=@multicast2, 0x0, 0xb363, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x33}, 0x0, @in6=@mcast2}}, 0xe8) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x7}, 0x1c) 00:30:00 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ifreq(r0, 0x89f3, &(0x7f0000000080)={'bond0\x00', @ifru_data=0x0}) [ 298.791637][T14545] __nla_validate_parse: 5 callbacks suppressed [ 298.791657][T14545] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.5'. [ 298.832708][ T26] audit: type=1804 audit(1634603400.828:105): pid=14535 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir516473655/syzkaller.aQ1LtY/165/cgroup.controllers" dev="sda1" ino=14177 res=1 errno=0 [ 298.985901][ T26] audit: type=1804 audit(1634603400.868:106): pid=14544 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir706221036/syzkaller.mXHjpb/169/memory.events" dev="sda1" ino=14689 res=1 errno=0 00:30:01 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='ip_vti0\x00', 0x10) connect$inet(r0, &(0x7f0000000100)={0x2, 0x0, @rand_addr=0x7fffffff}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x400000000000075, 0x0) 00:30:01 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)={0x2, 0x4, 0x1, 0x3, 0x0, 0x1}, 0x40) bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000000040)=r0, 0x4) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000000)={0x0, &(0x7f0000000180)=""/86, &(0x7f0000000200), &(0x7f0000000300), 0x0, r0}, 0x38) 00:30:01 executing program 2: r0 = epoll_create(0x7f) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)) [ 299.177870][ T26] audit: type=1804 audit(1634603400.898:107): pid=14544 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir706221036/syzkaller.mXHjpb/169/memory.events" dev="sda1" ino=14689 res=1 errno=0 00:30:01 executing program 2: pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x656, 0x5) r3 = socket$inet6(0x10, 0x3, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x3, &(0x7f0000000280)=@framed, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$ITER_CREATE(0x21, &(0x7f0000000100)={r1}, 0x8) bind$inet6(r0, &(0x7f0000000680)={0xa, 0x4e21, 0x101, @private1={0xfc, 0x1, '\x00', 0x1}, 0x6}, 0x1c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f00000000c0)='i2c_reply\x00'}, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x3, 0xf3, 0x7f, 0x0, 0x1}, 0x40) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000080)={@map=r5, r4, 0x7}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000180)={0xffffffffffffffff, 0xc0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=0xfffffffffffffff8, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x80008, 0x25}, 0x0, 0x0, &(0x7f0000000380)={0x100001ff, 0xb, 0x406, 0xa0}, &(0x7f00000002c0)=0x4, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=0x6}}, 0x10) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r4, 0x6612) sendto$inet6(r3, &(0x7f0000000280)="23000000220009bb00b9409b849ac00a00e3b8a98623ff2a09a6c5b01109e3ecabbe82", 0x23, 0x0, 0x0, 0x0) r6 = socket(0x11, 0x4, 0x0) bind(r5, &(0x7f0000000700)=@hci={0x1f, 0x1, 0x5}, 0x80) sendmsg$nl_route_sched(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="8800ff0300000000000070defbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0521090007000e00edffef0a08000e008501000008000e00ff0f000008000100686866002c0002000800050005000000080002000700000008000500090000080005000200000008000d003f0a000006000500ff01000ddc00050004030000060005003a6d57eb00000000000200000011821c48ebb601fca24ff11358161c5ae77414e5dde4eb44f0bfe85e7b3a046a5fcbbe2bd06c233e10b1eea61743a05a512828fbf8667481f3c29e6aeb0a15a52e3a6df70edee3896776951cfe1b74f58e916c2ebcc7b9706447"], 0x88}, 0x1, 0x0, 0x0, 0x20040000}, 0x48004) recvfrom$inet6(r3, &(0x7f0000000000)=""/187, 0xbb, 0x0, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000000)="290000002000190f", 0x8}], 0x1) sendto$inet6(r6, &(0x7f0000000000)='s', 0x1, 0x800, 0x0, 0x0) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfffffd88) 00:30:01 executing program 4: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="13ffffec10000000006c4000000000000000000a20200000002701000000000000000000000054ac3f1ea39feb247a300000000038000000120a0102000000000000000000004778040004800900020002000000000000000900010073797a3000000000080003"], 0x1}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000000006c0000000002000020000a2000"], 0x1}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000500) [ 299.806423][T14568] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.2'. 00:30:01 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x5}]}, 0x1c}}, 0x0) 00:30:01 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='ip_vti0\x00', 0x10) connect$inet(r0, &(0x7f0000000100)={0x2, 0x0, @rand_addr=0x7fffffff}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x400000000000075, 0x0) 00:30:01 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x6c, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x30, 0x11, 0x0, 0x1, @immediate={{0xe}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DREG={0x8}, @NFTA_IMMEDIATE_DATA={0x10, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}]}]}}}]}], {0x14, 0x10}}, 0xb4}}, 0x0) 00:30:01 executing program 0: r0 = socket(0x11, 0x800000003, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_REQ_SET_REG(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'bb\x00'}]}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_GET_REG(r1, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, r3, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x8}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x10040088) sendmsg$NL80211_CMD_GET_REG(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r3, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x3d}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8080}, 0x4040000) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x51) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r5, 0x8912, 0x400308) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x2, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_codel={{0xa}, {0xc, 0x2, [@TCA_CODEL_ECN={0x8}]}}]}, 0x3c}}, 0x0) [ 300.004154][ T26] audit: type=1804 audit(1634603401.998:108): pid=14573 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir516473655/syzkaller.aQ1LtY/166/cgroup.controllers" dev="sda1" ino=14678 res=1 errno=0 00:30:02 executing program 3: unshare(0xc020080) 00:30:02 executing program 1: r0 = socket$unix(0x1, 0x2, 0x0) r1 = epoll_create(0x6) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)={0xa000000c}) r2 = epoll_create(0x6) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000000c0)={0x1}) 00:30:02 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8914, &(0x7f0000000140)={'wlan0\x00'}) 00:30:02 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000002b80)={0x0, 0x0, &(0x7f0000002b40)={&(0x7f0000002740)={0x28, r1, 0x3a72a8955f7cc333, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x15}]}]}, @ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x28}}, 0x0) 00:30:02 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='ip_vti0\x00', 0x10) connect$inet(r0, &(0x7f0000000100)={0x2, 0x0, @rand_addr=0x7fffffff}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x400000000000075, 0x0) 00:30:02 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000025c0)={0x2c, r1, 0x1, 0x0, 0x0, {0x17}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}]}]}, 0x2c}}, 0x0) 00:30:02 executing program 2: pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x656, 0x5) r3 = socket$inet6(0x10, 0x3, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x3, &(0x7f0000000280)=@framed, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$ITER_CREATE(0x21, &(0x7f0000000100)={r1}, 0x8) bind$inet6(r0, &(0x7f0000000680)={0xa, 0x4e21, 0x101, @private1={0xfc, 0x1, '\x00', 0x1}, 0x6}, 0x1c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f00000000c0)='i2c_reply\x00'}, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x3, 0xf3, 0x7f, 0x0, 0x1}, 0x40) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000080)={@map=r5, r4, 0x7}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000180)={0xffffffffffffffff, 0xc0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=0xfffffffffffffff8, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x80008, 0x25}, 0x0, 0x0, &(0x7f0000000380)={0x100001ff, 0xb, 0x406, 0xa0}, &(0x7f00000002c0)=0x4, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=0x6}}, 0x10) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r4, 0x6612) sendto$inet6(r3, &(0x7f0000000280)="23000000220009bb00b9409b849ac00a00e3b8a98623ff2a09a6c5b01109e3ecabbe82", 0x23, 0x0, 0x0, 0x0) r6 = socket(0x11, 0x4, 0x0) bind(r5, &(0x7f0000000700)=@hci={0x1f, 0x1, 0x5}, 0x80) sendmsg$nl_route_sched(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="8800ff0300000000000070defbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0521090007000e00edffef0a08000e008501000008000e00ff0f000008000100686866002c0002000800050005000000080002000700000008000500090000080005000200000008000d003f0a000006000500ff01000ddc00050004030000060005003a6d57eb00000000000200000011821c48ebb601fca24ff11358161c5ae77414e5dde4eb44f0bfe85e7b3a046a5fcbbe2bd06c233e10b1eea61743a05a512828fbf8667481f3c29e6aeb0a15a52e3a6df70edee3896776951cfe1b74f58e916c2ebcc7b9706447"], 0x88}, 0x1, 0x0, 0x0, 0x20040000}, 0x48004) recvfrom$inet6(r3, &(0x7f0000000000)=""/187, 0xbb, 0x0, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000000)="290000002000190f", 0x8}], 0x1) sendto$inet6(r6, &(0x7f0000000000)='s', 0x1, 0x800, 0x0, 0x0) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfffffd88) 00:30:02 executing program 4: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="13ffffec10000000006c4000000000000000000a20200000002701000000000000000000000054ac3f1ea39feb247a300000000038000000120a0102000000000000000000004778040004800900020002000000000000000900010073797a3000000000080003"], 0x1}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000000006c0000000002000020000a2000"], 0x1}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000500) 00:30:02 executing program 1: sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000000c0)="2f0a00001c0005c5ffffff000d000000020000000b00c200db3bedd5289fdf", 0x1f}], 0x1}, 0x0) r0 = socket(0x10, 0x80002, 0x0) write(0xffffffffffffffff, &(0x7f00000000c0)="2400000058001f03ff17f403012304050a04f5110800010003010002080003", 0x1f) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x6, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x4924924924926dd, 0x0) 00:30:02 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@private2, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa, 0x80}}, {{@in6=@empty, 0x0, 0x3c}}}, 0xe8) syz_emit_ethernet(0x4a, &(0x7f00000001c0)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x14, 0x6, 0x0, @local, @mcast2, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 00:30:02 executing program 0: bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x3000000, 0xe, 0x0, &(0x7f0000000380)="0078cc72be8d111bd83652e531d2", 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) [ 300.849038][T14613] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.2'. [ 301.018727][ T26] audit: type=1804 audit(1634603403.018:109): pid=14614 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir516473655/syzkaller.aQ1LtY/167/cgroup.controllers" dev="sda1" ino=14682 res=1 errno=0 00:30:03 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='ip_vti0\x00', 0x10) connect$inet(r0, &(0x7f0000000100)={0x2, 0x0, @rand_addr=0x7fffffff}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x400000000000075, 0x0) 00:30:03 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3400000010000104000000000000008004000000", @ANYRES32=r8, @ANYBLOB="0000000000120000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r5, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r8], 0x28}}, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000810400000000000e000000004000", @ANYRES32=r2, @ANYBLOB="000000000000000208000a00", @ANYRES32=r8], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0xfffffffe, &(0x7f0000000100)={&(0x7f0000000040)=@dellink={0x20, 0x11, 0x37b, 0x0, 0x0, {0x0, 0x0, 0x0, r8}}, 0x20}}, 0x6) 00:30:03 executing program 0: bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x3000000, 0xe, 0x0, &(0x7f0000000380)="0078cc72be8d111bd83652e531d2", 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 00:30:03 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x5, [@typedef={0x1}]}, {0x0, [0x5f, 0x61, 0x2e]}}, &(0x7f0000000040)=""/159, 0x29, 0x9f, 0x1}, 0x20) [ 301.248972][T14628] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 301.307939][T14634] bridge1: port 1(syz_tun) entered blocking state [ 301.337706][T14634] bridge1: port 1(syz_tun) entered disabled state [ 301.366104][T14634] device syz_tun entered promiscuous mode [ 301.409582][T14628] device bridge_slave_0 left promiscuous mode [ 301.418084][T14628] bridge0: port 1(bridge_slave_0) entered disabled state [ 301.535373][T14628] bridge1: port 2(bridge_slave_0) entered blocking state [ 301.543049][T14628] bridge1: port 2(bridge_slave_0) entered disabled state 00:30:03 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) recvfrom(r1, &(0x7f0000000380)=""/163, 0xa3, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000005c0)=[{{0x0, 0xfffffffffffffea3, 0x0}}], 0x3ffffffffffff62, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x0, 0x0, 0x0, 0x0, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) [ 301.617499][T14628] device bridge_slave_0 entered promiscuous mode [ 301.656025][T14638] device bridge_slave_0 left promiscuous mode 00:30:03 executing program 2: pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x656, 0x5) r3 = socket$inet6(0x10, 0x3, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x3, &(0x7f0000000280)=@framed, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$ITER_CREATE(0x21, &(0x7f0000000100)={r1}, 0x8) bind$inet6(r0, &(0x7f0000000680)={0xa, 0x4e21, 0x101, @private1={0xfc, 0x1, '\x00', 0x1}, 0x6}, 0x1c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f00000000c0)='i2c_reply\x00'}, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x3, 0xf3, 0x7f, 0x0, 0x1}, 0x40) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000080)={@map=r5, r4, 0x7}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000180)={0xffffffffffffffff, 0xc0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=0xfffffffffffffff8, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x80008, 0x25}, 0x0, 0x0, &(0x7f0000000380)={0x100001ff, 0xb, 0x406, 0xa0}, &(0x7f00000002c0)=0x4, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=0x6}}, 0x10) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r4, 0x6612) sendto$inet6(r3, &(0x7f0000000280)="23000000220009bb00b9409b849ac00a00e3b8a98623ff2a09a6c5b01109e3ecabbe82", 0x23, 0x0, 0x0, 0x0) r6 = socket(0x11, 0x4, 0x0) bind(r5, &(0x7f0000000700)=@hci={0x1f, 0x1, 0x5}, 0x80) sendmsg$nl_route_sched(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="8800ff0300000000000070defbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0521090007000e00edffef0a08000e008501000008000e00ff0f000008000100686866002c0002000800050005000000080002000700000008000500090000080005000200000008000d003f0a000006000500ff01000ddc00050004030000060005003a6d57eb00000000000200000011821c48ebb601fca24ff11358161c5ae77414e5dde4eb44f0bfe85e7b3a046a5fcbbe2bd06c233e10b1eea61743a05a512828fbf8667481f3c29e6aeb0a15a52e3a6df70edee3896776951cfe1b74f58e916c2ebcc7b9706447"], 0x88}, 0x1, 0x0, 0x0, 0x20040000}, 0x48004) recvfrom$inet6(r3, &(0x7f0000000000)=""/187, 0xbb, 0x0, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000000)="290000002000190f", 0x8}], 0x1) sendto$inet6(r6, &(0x7f0000000000)='s', 0x1, 0x800, 0x0, 0x0) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfffffd88) 00:30:03 executing program 5: r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x2c, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=r2, @ANYBLOB="00000000000000001c0012800b000100697036746e6c00000c00028008000100", @ANYRESOCT], 0x3c}, 0x1, 0x0, 0x0, 0x11}, 0x0) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r4}]}}}]}, 0x3c}}, 0x0) 00:30:03 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000640)={'ip6tnl0\x00', &(0x7f00000005c0)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0}}) [ 301.678056][T14638] bridge1: port 2(bridge_slave_0) entered disabled state 00:30:03 executing program 0: bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x3000000, 0xe, 0x0, &(0x7f0000000380)="0078cc72be8d111bd83652e531d2", 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) [ 301.728532][T14638] device syz_tun left promiscuous mode [ 301.765718][T14638] bridge1: port 1(syz_tun) entered disabled state 00:30:03 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @tproxy={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_TPROXY_REG_ADDR={0x8}, @NFTA_TPROXY_FAMILY={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) [ 301.928208][T14634] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 302.015983][T14628] bridge1: port 1(syz_tun) entered blocking state [ 302.022485][T14628] bridge1: port 1(syz_tun) entered disabled state 00:30:04 executing program 5: r0 = socket(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0xa00000000000000, 0x80, &(0x7f00000000c0)=@broute={'broute\x00', 0x20, 0x1, 0x990, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000e00], 0x0, 0x0, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"/2448]}, 0xa08) [ 302.094471][T14628] device syz_tun entered promiscuous mode [ 302.144693][T14634] bridge1: port 2(bridge_slave_0) entered blocking state [ 302.160255][T14634] bridge1: port 2(bridge_slave_0) entered disabled state 00:30:04 executing program 0: bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000003c0)=ANY=[@ANYBLOB="b702000003001000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7020000020000006a0a00fe000000008500000087000000b70000000000000095000000000000007961e62273faa6884c44827ffe33732b0d27517495db22c369fc01b191533d003e4a10cbd4dfb403d80912aa8ef860dd81e221f886dc0154419e85b178e246297048629c6326bfe8f81c360dd75981ecd37d10391cc7415a1c8d3ac9efafb9ff34fedbb2ca4d35f6b5f65e8894425d22dce799b0a5d65dee16bffed85ac530e49bbe2cc6636e4b0d78e3d91e8213cc3f3aa0fa286d1af0557be41f4f983eb553b1b9e36d77174f29c57c0db60076f5ab1933257f000000000000005ed8fa984bb0fcb5d69543ac2ad14988f585e2ec276e5d9d9464ede6deb474604da29f1b7d924c96d8c04e5ff44ca849a436284bc99d4b03487b4c221a26c2722862bd4e64b2ca92c22a061ecff1edecd4de3e8d2c88b2b03ad75e3774a70363ad96a36bc5adc64a121331b0980b8f24d5a6fc8b9fa3db3bdd1f48369863e3c2bc37067a1fe90d7cc733eb753fc3fbe8fa03e59c061732486e68b39e02a63cbff4af35dd8a17dd33dfa196911b654e60fa881a77b295a8ed9374cb784e9afcfd308b51b6f00b359d41bfe0240f5aaa9e037891216b4c02291f12ffff0000291195615f13acdbe142541ba3ba10abcaf1cb9d9c819522bf2cf04699902d8e19a9a714ba1afc6edc2eec0380be7c3ef024bbbc37dc1c3f7639768e84dda015fe6abf4e16d3f8faedceba22ade43e667d8cc80a54775712ca1aa83227085a7b6ccf4b17ce6e26b345f1cbc0b16312ec7fc7870eb81724fcde39982c720fbad55be728acdc4acb8ce24c6fc3bf21e7f2f9c1916f77d6db064ab7ba34debf9fd2d0dd40b341afc6a1be00d1910c024351e926f30153cadfbeb9110ff0696fde63973c0a1d85e37c34d1842d50af6e53ec26955476b1414221200100000000b3950a2c8c1e568cbe9d0ef0eb6fd80a809b3a8f718c58a155618c7086755246fc6ae78369b237c3ea9507584802e932fb40226db10ff0759539a4d834c58e2156ce998dbfca031b3c85b18a5df074dccd6211c22e8fb069b00e9933dbe31ddb6067142eb1e8c9da440a8668b6e892c3e3791d22dc0a08cefe440700000000000000dc58f7c9e9f930748f02a24d1952f85496c9b37257b76c6c3bd14781cd3482497efc1d20ce9110a3855d2b9993954bc49b6d70d1bd5910d86a7a6d85fe6374dcba0b09d029327d8b81ca527fbd25bdb8aaccb2b5f486d7a0f77f508af37f63eeef8a0f558b0c2a8a62fb81eee2e16e04440030498187557c4ff20b436e3368a50f97bb1294a3a76b1c4b1a750f8dec0d0baa47515b7d1f255e47fc0f5cc0e80a34244e80fb544e84617ae8f660571453aa50a1a13946f7857f919d3815f395eacb3c7257e86efa59f33071bf0a493f8e3136d1249145e9e324bb256cfb4e95fc1619b5afa5733cdd5d87c1000000008862efcc32bcfe81cd6a4ed822ea69af4ef837119131b0e71e32cc00c38ef2b351a32bd9fa11e8ee802d5b57628d8ac8ad7b5851162a8c8787e03c2ede59cda9879720d1388fc3c4e514b0ab9cdaec3111debba1cb0eedef39f189480a005525b6c31a61a307ccbb6e7ca2fb00a6fbbd1c5500d196d81c239bc8d1fb22df08cf823e5fababace728aa7bb70365ceba3112ad69692f224f29d0aa852664822fc047562dffaf729a5c370000000000000000000000ace923f5e8f6fc8e19ae3cb469ece97bd943d8d020edcc1c069665a9f4aba4adfe4e13ecbfd4e73ea7c64d9fa0fd21e834322c4cd49122c3235fc65ae308d38cf70f5faf3464367d6c4831733c72f8a653f630b6f93581acf7553f589fa0a653283ac8d54be067e52e6823f15ea7d1128974fc302d8d68f053addb045bf2715ec1c7e9d8d29d7896b29f60bbd1f63b3b3e052a908f345c18b4ab543cf910ded680b4718396e03be6e4e0c54265b49182fbded4dd1cb179ffe496acb701e625ceaaf19ffbecd965eddb3a93839a25c635a20d6730dfaf54ca7ef02b41fb24e0eb80ec5387dc258d5718c1c271cc95dd5e306e1576b5d1c7031e572d501717a041ef315a3072ac90f2de74f78a1e3d64a6218e133be10b72993d883de7594e4dd247989708bb34c82ff0eb9b9560683b0b5f0635fd0710d154d88f86e874f45d528cfe63ee76287801999e643d1902bb651d8af6a548378f133568efc29f402d3902ae0ca2407c1fd15c518349cbc6d3eabc857b6c9c95f373863f59bab0349825f2da72d1cf78be3e891c5f2a2c2f0cdf8c7b808e8923735d66f71c92e4f5d3db"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x3000000, 0xe, 0x0, &(0x7f0000000380)="0078cc72be8d111bd83652e531d2", 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 00:30:04 executing program 4: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000006, 0x100000002272, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000000240)=0xffffffff, 0x4) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f00000001c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x56) listen(r1, 0x0) connect$unix(r0, &(0x7f0000000500)=@abs={0x0, 0x0, 0x4e23}, 0x6e) connect$unix(r0, &(0x7f0000000140)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r2 = accept(r1, 0x0, 0x0) recvfrom$unix(r0, &(0x7f00000000c0)=""/90, 0xffffffffffffffef, 0x0, 0x0, 0x0) sendto$inet6(r2, &(0x7f0000000000), 0xffffffffffffffe6, 0x0, 0x0, 0x18fae6fad8906d26) connect$unix(r1, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x4ca31, 0xffffffffffffffff, 0x0) [ 302.220698][T14634] device bridge_slave_0 entered promiscuous mode [ 302.245542][T14638] device bridge_slave_0 left promiscuous mode [ 302.254730][T14638] bridge1: port 2(bridge_slave_0) entered disabled state [ 302.297739][T14638] device syz_tun left promiscuous mode [ 302.327309][T14638] bridge1: port 1(syz_tun) entered disabled state [ 302.492957][T14648] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.2'. 00:30:04 executing program 5: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=ANY=[@ANYBLOB="4400000024000b0f001000"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000009000100677265640000000014000200100003000a"], 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000540)=@newqdisc={0x178, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x148, 0x2, [@TCA_GRED_STAB={0x104, 0x2, "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"}, @TCA_GRED_LIMIT={0x8, 0x6, 0x7}, @TCA_GRED_PARMS={0x38}]}}]}, 0x178}}, 0x0) 00:30:04 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, &(0x7f00000000c0)='wg2\x00', 0x4) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) sendmmsg(r0, &(0x7f0000000240), 0x5c3, 0x200000000000000) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000003c40)=[{{&(0x7f0000000000)=@l2={0x1f, 0x0, @fixed}, 0x80, 0x0}}], 0x1, 0x0) 00:30:04 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3400000010000104000000000000008004000000", @ANYRES32=r8, @ANYBLOB="0000000000120000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r5, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r8], 0x28}}, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000810400000000000e000000004000", @ANYRES32=r2, @ANYBLOB="000000000000000208000a00", @ANYRES32=r8], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0xfffffffe, &(0x7f0000000100)={&(0x7f0000000040)=@dellink={0x20, 0x11, 0x37b, 0x0, 0x0, {0x0, 0x0, 0x0, r8}}, 0x20}}, 0x6) [ 302.712658][T14682] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 00:30:04 executing program 4: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000006, 0x100000002272, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000000240)=0xffffffff, 0x4) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f00000001c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x56) listen(r1, 0x0) connect$unix(r0, &(0x7f0000000500)=@abs={0x0, 0x0, 0x4e23}, 0x6e) connect$unix(r0, &(0x7f0000000140)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r2 = accept(r1, 0x0, 0x0) recvfrom$unix(r0, &(0x7f00000000c0)=""/90, 0xffffffffffffffef, 0x0, 0x0, 0x0) sendto$inet6(r2, &(0x7f0000000000), 0xffffffffffffffe6, 0x0, 0x0, 0x18fae6fad8906d26) connect$unix(r1, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x4ca31, 0xffffffffffffffff, 0x0) 00:30:04 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) recvfrom(r1, &(0x7f0000000380)=""/163, 0xa3, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000005c0)=[{{0x0, 0xfffffffffffffea3, 0x0}}], 0x3ffffffffffff62, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x0, 0x0, 0x0, 0x0, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 00:30:04 executing program 2: pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x656, 0x5) r3 = socket$inet6(0x10, 0x3, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x3, &(0x7f0000000280)=@framed, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$ITER_CREATE(0x21, &(0x7f0000000100)={r1}, 0x8) bind$inet6(r0, &(0x7f0000000680)={0xa, 0x4e21, 0x101, @private1={0xfc, 0x1, '\x00', 0x1}, 0x6}, 0x1c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f00000000c0)='i2c_reply\x00'}, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x3, 0xf3, 0x7f, 0x0, 0x1}, 0x40) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000080)={@map=r5, r4, 0x7}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000180)={0xffffffffffffffff, 0xc0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=0xfffffffffffffff8, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x80008, 0x25}, 0x0, 0x0, &(0x7f0000000380)={0x100001ff, 0xb, 0x406, 0xa0}, &(0x7f00000002c0)=0x4, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=0x6}}, 0x10) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r4, 0x6612) sendto$inet6(r3, &(0x7f0000000280)="23000000220009bb00b9409b849ac00a00e3b8a98623ff2a09a6c5b01109e3ecabbe82", 0x23, 0x0, 0x0, 0x0) r6 = socket(0x11, 0x4, 0x0) bind(r5, &(0x7f0000000700)=@hci={0x1f, 0x1, 0x5}, 0x80) sendmsg$nl_route_sched(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="8800ff0300000000000070defbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0521090007000e00edffef0a08000e008501000008000e00ff0f000008000100686866002c0002000800050005000000080002000700000008000500090000080005000200000008000d003f0a000006000500ff01000ddc00050004030000060005003a6d57eb00000000000200000011821c48ebb601fca24ff11358161c5ae77414e5dde4eb44f0bfe85e7b3a046a5fcbbe2bd06c233e10b1eea61743a05a512828fbf8667481f3c29e6aeb0a15a52e3a6df70edee3896776951cfe1b74f58e916c2ebcc7b9706447"], 0x88}, 0x1, 0x0, 0x0, 0x20040000}, 0x48004) recvfrom$inet6(r3, &(0x7f0000000000)=""/187, 0xbb, 0x0, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000000)="290000002000190f", 0x8}], 0x1) sendto$inet6(r6, &(0x7f0000000000)='s', 0x1, 0x800, 0x0, 0x0) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfffffd88) [ 302.850140][T14686] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 302.914323][T14692] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 302.933905][T14703] bridge1: port 1(syz_tun) entered blocking state [ 302.955134][T14703] bridge1: port 1(syz_tun) entered disabled state [ 302.999295][T14703] device syz_tun entered promiscuous mode [ 303.034642][T14686] bridge1: port 2(bridge_slave_0) entered blocking state [ 303.058143][T14686] bridge1: port 2(bridge_slave_0) entered disabled state [ 303.129157][T14686] device bridge_slave_0 entered promiscuous mode 00:30:05 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, &(0x7f00000000c0)='wg2\x00', 0x4) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) sendmmsg(r0, &(0x7f0000000240), 0x5c3, 0x200000000000000) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000003c40)=[{{&(0x7f0000000000)=@l2={0x1f, 0x0, @fixed}, 0x80, 0x0}}], 0x1, 0x0) [ 303.186987][T14684] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 303.228556][T14707] device bridge_slave_0 left promiscuous mode [ 303.238723][T14707] bridge1: port 2(bridge_slave_0) entered disabled state [ 303.276097][T14707] device syz_tun left promiscuous mode [ 303.296731][T14707] bridge1: port 1(syz_tun) entered disabled state 00:30:05 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) recvfrom(r1, &(0x7f0000000380)=""/163, 0xa3, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000005c0)=[{{0x0, 0xfffffffffffffea3, 0x0}}], 0x3ffffffffffff62, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x0, 0x0, 0x0, 0x0, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 00:30:05 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3400000010000104000000000000008004000000", @ANYRES32=r8, @ANYBLOB="0000000000120000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r5, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r8], 0x28}}, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000810400000000000e000000004000", @ANYRES32=r2, @ANYBLOB="000000000000000208000a00", @ANYRES32=r8], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0xfffffffe, &(0x7f0000000100)={&(0x7f0000000040)=@dellink={0x20, 0x11, 0x37b, 0x0, 0x0, {0x0, 0x0, 0x0, r8}}, 0x20}}, 0x6) 00:30:05 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, &(0x7f00000000c0)='wg2\x00', 0x4) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) sendmmsg(r0, &(0x7f0000000240), 0x5c3, 0x200000000000000) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000003c40)=[{{&(0x7f0000000000)=@l2={0x1f, 0x0, @fixed}, 0x80, 0x0}}], 0x1, 0x0) 00:30:05 executing program 2: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000006, 0x100000002272, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000000240)=0xffffffff, 0x4) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f00000001c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x56) listen(r1, 0x0) connect$unix(r0, &(0x7f0000000500)=@abs={0x0, 0x0, 0x4e23}, 0x6e) connect$unix(r0, &(0x7f0000000140)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r2 = accept(r1, 0x0, 0x0) recvfrom$unix(r0, &(0x7f00000000c0)=""/90, 0xffffffffffffffef, 0x0, 0x0, 0x0) sendto$inet6(r2, &(0x7f0000000000), 0xffffffffffffffe6, 0x0, 0x0, 0x18fae6fad8906d26) connect$unix(r1, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x4ca31, 0xffffffffffffffff, 0x0) 00:30:05 executing program 4: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000006, 0x100000002272, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000000240)=0xffffffff, 0x4) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f00000001c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x56) listen(r1, 0x0) connect$unix(r0, &(0x7f0000000500)=@abs={0x0, 0x0, 0x4e23}, 0x6e) connect$unix(r0, &(0x7f0000000140)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r2 = accept(r1, 0x0, 0x0) recvfrom$unix(r0, &(0x7f00000000c0)=""/90, 0xffffffffffffffef, 0x0, 0x0, 0x0) sendto$inet6(r2, &(0x7f0000000000), 0xffffffffffffffe6, 0x0, 0x0, 0x18fae6fad8906d26) connect$unix(r1, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x4ca31, 0xffffffffffffffff, 0x0) [ 303.910170][T14732] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 00:30:05 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) recvfrom(r1, &(0x7f0000000380)=""/163, 0xa3, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000005c0)=[{{0x0, 0xfffffffffffffea3, 0x0}}], 0x3ffffffffffff62, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x0, 0x0, 0x0, 0x0, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) [ 304.000650][T14736] bridge1: port 1(syz_tun) entered blocking state [ 304.029732][T14736] bridge1: port 1(syz_tun) entered disabled state [ 304.083570][T14736] device syz_tun entered promiscuous mode [ 304.133429][T14732] bridge1: port 2(bridge_slave_0) entered blocking state [ 304.164170][T14732] bridge1: port 2(bridge_slave_0) entered disabled state [ 304.238087][T14732] device bridge_slave_0 entered promiscuous mode [ 304.298617][T14742] device bridge_slave_0 left promiscuous mode [ 304.306399][T14742] bridge1: port 2(bridge_slave_0) entered disabled state [ 304.354065][T14742] device syz_tun left promiscuous mode [ 304.366749][T14742] bridge1: port 1(syz_tun) entered disabled state 00:30:06 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, &(0x7f00000000c0)='wg2\x00', 0x4) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) sendmmsg(r0, &(0x7f0000000240), 0x5c3, 0x200000000000000) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000003c40)=[{{&(0x7f0000000000)=@l2={0x1f, 0x0, @fixed}, 0x80, 0x0}}], 0x1, 0x0) 00:30:06 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3400000010000104000000000000008004000000", @ANYRES32=r8, @ANYBLOB="0000000000120000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r5, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r8], 0x28}}, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000810400000000000e000000004000", @ANYRES32=r2, @ANYBLOB="000000000000000208000a00", @ANYRES32=r8], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0xfffffffe, &(0x7f0000000100)={&(0x7f0000000040)=@dellink={0x20, 0x11, 0x37b, 0x0, 0x0, {0x0, 0x0, 0x0, r8}}, 0x20}}, 0x6) 00:30:06 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) recvfrom(r1, &(0x7f0000000380)=""/163, 0xa3, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000005c0)=[{{0x0, 0xfffffffffffffea3, 0x0}}], 0x3ffffffffffff62, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x0, 0x0, 0x0, 0x0, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 00:30:06 executing program 4: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000006, 0x100000002272, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000000240)=0xffffffff, 0x4) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f00000001c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x56) listen(r1, 0x0) connect$unix(r0, &(0x7f0000000500)=@abs={0x0, 0x0, 0x4e23}, 0x6e) connect$unix(r0, &(0x7f0000000140)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r2 = accept(r1, 0x0, 0x0) recvfrom$unix(r0, &(0x7f00000000c0)=""/90, 0xffffffffffffffef, 0x0, 0x0, 0x0) sendto$inet6(r2, &(0x7f0000000000), 0xffffffffffffffe6, 0x0, 0x0, 0x18fae6fad8906d26) connect$unix(r1, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x4ca31, 0xffffffffffffffff, 0x0) [ 304.830909][T14761] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 00:30:06 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3400000010000104000000000000008004000000", @ANYRES32=r8, @ANYBLOB="0000000000120000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r5, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r8], 0x28}}, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000810400000000000e000000004000", @ANYRES32=r2, @ANYBLOB="000000000000000208000a00", @ANYRES32=r8], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0xfffffffe, &(0x7f0000000100)={&(0x7f0000000040)=@dellink={0x20, 0x11, 0x37b, 0x0, 0x0, {0x0, 0x0, 0x0, r8}}, 0x20}}, 0x6) [ 304.884357][T14761] bridge1: port 1(syz_tun) entered blocking state [ 304.901059][T14761] bridge1: port 1(syz_tun) entered disabled state 00:30:06 executing program 2: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000006, 0x100000002272, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000000240)=0xffffffff, 0x4) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f00000001c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x56) listen(r1, 0x0) connect$unix(r0, &(0x7f0000000500)=@abs={0x0, 0x0, 0x4e23}, 0x6e) connect$unix(r0, &(0x7f0000000140)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r2 = accept(r1, 0x0, 0x0) recvfrom$unix(r0, &(0x7f00000000c0)=""/90, 0xffffffffffffffef, 0x0, 0x0, 0x0) sendto$inet6(r2, &(0x7f0000000000), 0xffffffffffffffe6, 0x0, 0x0, 0x18fae6fad8906d26) connect$unix(r1, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x4ca31, 0xffffffffffffffff, 0x0) [ 304.928514][T14761] device syz_tun entered promiscuous mode [ 304.957656][T14767] bridge1: port 2(bridge_slave_0) entered blocking state [ 304.988715][T14767] bridge1: port 2(bridge_slave_0) entered disabled state [ 305.052891][T14767] device bridge_slave_0 entered promiscuous mode 00:30:07 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) recvfrom(r1, &(0x7f0000000380)=""/163, 0xa3, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000005c0)=[{{0x0, 0xfffffffffffffea3, 0x0}}], 0x3ffffffffffff62, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x0, 0x0, 0x0, 0x0, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) [ 305.095180][T14772] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 305.154499][T14761] device bridge_slave_0 left promiscuous mode [ 305.162300][T14761] bridge1: port 2(bridge_slave_0) entered disabled state [ 305.222147][T14761] device syz_tun left promiscuous mode [ 305.252651][T14761] bridge1: port 1(syz_tun) entered disabled state [ 305.358818][T14775] bridge1: port 1(syz_tun) entered blocking state [ 305.375910][T14775] bridge1: port 1(syz_tun) entered disabled state [ 305.413105][T14775] device syz_tun entered promiscuous mode [ 305.469786][T14777] device bridge_slave_0 left promiscuous mode [ 305.478247][T14777] bridge0: port 1(bridge_slave_0) entered disabled state [ 305.541480][T14777] bridge1: port 2(bridge_slave_0) entered blocking state [ 305.550470][T14777] bridge1: port 2(bridge_slave_0) entered disabled state [ 305.565428][T14777] device bridge_slave_0 entered promiscuous mode [ 305.584421][T14772] device bridge_slave_0 left promiscuous mode [ 305.598420][T14772] bridge1: port 2(bridge_slave_0) entered disabled state [ 305.624033][T14772] device syz_tun left promiscuous mode [ 305.641146][T14772] bridge1: port 1(syz_tun) entered disabled state 00:30:07 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) recvfrom(r1, &(0x7f0000000380)=""/163, 0xa3, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000005c0)=[{{0x0, 0xfffffffffffffea3, 0x0}}], 0x3ffffffffffff62, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x0, 0x0, 0x0, 0x0, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 00:30:07 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3400000010000104000000000000008004000000", @ANYRES32=r8, @ANYBLOB="0000000000120000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r5, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r8], 0x28}}, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000810400000000000e000000004000", @ANYRES32=r2, @ANYBLOB="000000000000000208000a00", @ANYRES32=r8], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0xfffffffe, &(0x7f0000000100)={&(0x7f0000000040)=@dellink={0x20, 0x11, 0x37b, 0x0, 0x0, {0x0, 0x0, 0x0, r8}}, 0x20}}, 0x6) 00:30:07 executing program 3: r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000100)={&(0x7f0000000040)=@nfc={0x27, 0x31}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000180)="0000020000000000020000008100", 0x5e8}], 0x1, 0x0, 0x0, 0x50}, 0x0) 00:30:08 executing program 4: mmap$xdp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x3, 0x20010, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$inet6(0xa, 0x6, 0x21) setsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000000)={{{@in=@remote, @in=@rand_addr=0x64010101, 0x4e20, 0xffff, 0x0, 0x0, 0x2, 0xa0, 0x20, 0xc}, {0x7f, 0x47, 0x5, 0x5, 0x40, 0x1, 0x10000, 0x2}, {0x0, 0x0, 0x0, 0x7f}, 0x1, 0x6e6bbd, 0x0, 0x1, 0x3, 0x3}, {{@in6=@ipv4={'\x00', '\xff\xff', @private=0xa010100}, 0x4d2, 0x32}, 0xa, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x0, 0x0, 0x0, 0x100, 0x5, 0x90e}}, 0xe8) ioctl$sock_inet6_SIOCDIFADDR(r0, 0x5450, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x4e24, 0x4, @loopback, 0x100}, 0x1c) [ 306.005538][T14800] hsr0: VLAN not yet supported [ 306.007741][T14799] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 00:30:08 executing program 2: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000006, 0x100000002272, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000000240)=0xffffffff, 0x4) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f00000001c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x56) listen(r1, 0x0) connect$unix(r0, &(0x7f0000000500)=@abs={0x0, 0x0, 0x4e23}, 0x6e) connect$unix(r0, &(0x7f0000000140)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r2 = accept(r1, 0x0, 0x0) recvfrom$unix(r0, &(0x7f00000000c0)=""/90, 0xffffffffffffffef, 0x0, 0x0, 0x0) sendto$inet6(r2, &(0x7f0000000000), 0xffffffffffffffe6, 0x0, 0x0, 0x18fae6fad8906d26) connect$unix(r1, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x4ca31, 0xffffffffffffffff, 0x0) 00:30:08 executing program 3: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffb, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000740)={&(0x7f0000000000)=""/244, 0x1202000, 0x1000}, 0x20) getsockopt$XDP_STATISTICS(r0, 0x11b, 0x7, &(0x7f00000001c0), &(0x7f0000000200)=0x30) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000180)={0x0}, 0x20) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) [ 306.080330][T14805] bridge1: port 1(syz_tun) entered blocking state [ 306.100831][T14805] bridge1: port 1(syz_tun) entered disabled state [ 306.185822][T14805] device syz_tun entered promiscuous mode [ 306.220119][T14799] bridge1: port 2(bridge_slave_0) entered blocking state 00:30:08 executing program 4: r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], &(0x7f0000000280)=""/237, 0x37, 0xed, 0xffffffff}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x18, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2}, [@call]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x180}, 0x70) 00:30:08 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @multicast1}, 0x10) syz_emit_ethernet(0x32, &(0x7f0000000200)={@link_local, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @private, @broadcast=0xe0000001}, {0x0, 0x4e22, 0x10, 0x0, @gue={{0x2}}}}}}}, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(crct10dif-generic)\x00'}, 0x58) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket(0x10, 0x8000000803, 0x0) write(r1, &(0x7f0000000000)="220000002000070700be00000900070102000000000f000000200000050013800100", 0x22) syz_emit_ethernet(0x32, &(0x7f0000000140)={@local, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @broadcast=0xe0000001}, {0x0, 0x4e22, 0x10, 0x0, @gue={{0x2}}}}}}}, 0x0) syz_emit_ethernet(0xee, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaea7a61398c6b2e9100230081004e00000402f0a5cf510565624179b3df91a9c867e6e3345187d63b1732404a3ca6bbc735e41439b5e8330e07d8dc66282e5bfc55feed0fc151b8026393d40f060101398978365c0a88ea364ec33ba3b160fe5a942907774822626ef4db308f30602eb3c1fcd67c00f1356babf281e50156984dd21c02228dab5da40b1c26482563ffd03927fd0f68f16f32bdb525e12e7512c35b3a4f7f49bb4aed128c3c0b0880af7e8877dda261a5da1203055b898d1aa1a55b8ef5c72a7770a4ec841ea6146229c6163dc0e694613d317aaf024dcd75"], &(0x7f0000000180)={0x0, 0x2, [0x3d, 0x246, 0x29b, 0xd5c]}) [ 306.243214][T14799] bridge1: port 2(bridge_slave_0) entered disabled state [ 306.307217][T14799] device bridge_slave_0 entered promiscuous mode [ 306.338008][T14811] device bridge_slave_0 left promiscuous mode [ 306.346654][T14811] bridge1: port 2(bridge_slave_0) entered disabled state [ 306.393420][T14811] device syz_tun left promiscuous mode [ 306.428869][T14811] bridge1: port 1(syz_tun) entered disabled state 00:30:08 executing program 4: sendmsg$DEVLINK_CMD_TRAP_SET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)={0x54, 0x0, 0x0, 0x0, 0x0, {}, [{@pci={{0x8}, {0x11}}, {0x1c}, {0x20}}]}, 0x54}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000070601801fdb59cc049ca2700100e90005"], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000f00) [ 306.555746][T14814] hsr0 speed is unknown, defaulting to 1000 00:30:08 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x24, &(0x7f0000000000)=0x100000, 0x4) 00:30:08 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3400000010000104000000000000008004000000", @ANYRES32=r8, @ANYBLOB="0000000000120000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r5, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r8], 0x28}}, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000810400000000000e000000004000", @ANYRES32=r2, @ANYBLOB="000000000000000208000a00", @ANYRES32=r8], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0xfffffffe, &(0x7f0000000100)={&(0x7f0000000040)=@dellink={0x20, 0x11, 0x37b, 0x0, 0x0, {0x0, 0x0, 0x0, r8}}, 0x20}}, 0x6) 00:30:08 executing program 5: sendmsg$NLBL_MGMT_C_LISTALL(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) [ 306.874448][ T26] audit: type=1804 audit(1634603408.869:110): pid=14851 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir516473655/syzkaller.aQ1LtY/176/cgroup.controllers" dev="sda1" ino=14719 res=1 errno=0 00:30:08 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000004200)={0x0, 0x0, &(0x7f00000041c0)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010000507000001000000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x64, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x38, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{}, {}, 0x0, 0x8}}, @TCA_TBF_RATE64={0xc, 0x4, 0x15aff709ef5d6967}]}}]}, 0x64}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=@delchain={0x24, 0x29, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xd}, {0x0, 0xffff}}}, 0x24}}, 0x0) [ 306.945772][T14857] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 307.002723][T14859] bridge1: port 1(syz_tun) entered blocking state [ 307.018304][T14859] bridge1: port 1(syz_tun) entered disabled state [ 307.036439][T14859] device syz_tun entered promiscuous mode [ 307.070424][T14857] bridge1: port 2(bridge_slave_0) entered blocking state [ 307.096609][T14857] bridge1: port 2(bridge_slave_0) entered disabled state 00:30:09 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={0x48, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x48}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x3, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) [ 307.176500][T14857] device bridge_slave_0 entered promiscuous mode [ 307.266150][T14859] device bridge_slave_0 left promiscuous mode [ 307.272439][T14859] bridge1: port 2(bridge_slave_0) entered disabled state 00:30:09 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000040)=[@in6={0xa, 0x4e21, 0x0, @dev, 0x7}, @in6={0xa, 0x4e21, 0x0, @private1}], 0x38) [ 307.320746][T14859] device syz_tun left promiscuous mode [ 307.332809][T14859] bridge1: port 1(syz_tun) entered disabled state 00:30:09 executing program 4: sendmsg$DEVLINK_CMD_TRAP_SET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)={0x54, 0x0, 0x0, 0x0, 0x0, {}, [{@pci={{0x8}, {0x11}}, {0x1c}, {0x20}}]}, 0x54}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000070601801fdb59cc049ca2700100e90005"], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000f00) [ 307.462223][T14867] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 307.550646][T14868] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 00:30:09 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0xb, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x11}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) [ 307.792795][ T26] audit: type=1804 audit(1634603409.789:111): pid=14893 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir516473655/syzkaller.aQ1LtY/177/cgroup.controllers" dev="sda1" ino=14065 res=1 errno=0 00:30:10 executing program 3: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffb, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000740)={&(0x7f0000000000)=""/244, 0x1202000, 0x1000}, 0x20) getsockopt$XDP_STATISTICS(r0, 0x11b, 0x7, &(0x7f00000001c0), &(0x7f0000000200)=0x30) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000180)={0x0}, 0x20) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) 00:30:10 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000004200)={0x0, 0x0, &(0x7f00000041c0)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010000507000001000000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x64, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x38, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{}, {}, 0x0, 0x8}}, @TCA_TBF_RATE64={0xc, 0x4, 0x15aff709ef5d6967}]}}]}, 0x64}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=@delchain={0x24, 0x29, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xd}, {0x0, 0xffff}}}, 0x24}}, 0x0) 00:30:10 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0xb, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x11}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 00:30:10 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @tunnel={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_TUNNEL_KEY={0x8}, @NFTA_TUNNEL_DREG={0x8, 0x2, 0x1, 0x0, 0x17}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 00:30:10 executing program 4: sendmsg$DEVLINK_CMD_TRAP_SET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)={0x54, 0x0, 0x0, 0x0, 0x0, {}, [{@pci={{0x8}, {0x11}}, {0x1c}, {0x20}}]}, 0x54}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000070601801fdb59cc049ca2700100e90005"], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000f00) 00:30:10 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0x0, 0x1}, 0x6) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0x400448ca, 0x0) [ 308.859010][T14915] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 00:30:11 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0xb, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x11}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 00:30:11 executing program 0: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffb, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000740)={&(0x7f0000000000)=""/244, 0x1202000, 0x1000}, 0x20) getsockopt$XDP_STATISTICS(r0, 0x11b, 0x7, &(0x7f00000001c0), &(0x7f0000000200)=0x30) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000180)={0x0}, 0x20) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) [ 309.006626][T14918] hsr0 speed is unknown, defaulting to 1000 00:30:11 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0x0, 0x1}, 0x6) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0x400448ca, 0x0) [ 309.079760][ T26] audit: type=1804 audit(1634603411.079:112): pid=14912 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir516473655/syzkaller.aQ1LtY/178/cgroup.controllers" dev="sda1" ino=14734 res=1 errno=0 00:30:11 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000004200)={0x0, 0x0, &(0x7f00000041c0)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010000507000001000000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x64, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x38, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{}, {}, 0x0, 0x8}}, @TCA_TBF_RATE64={0xc, 0x4, 0x15aff709ef5d6967}]}}]}, 0x64}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=@delchain={0x24, 0x29, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xd}, {0x0, 0xffff}}}, 0x24}}, 0x0) 00:30:11 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0xb, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x11}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) [ 309.338646][T14959] hsr0 speed is unknown, defaulting to 1000 00:30:11 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0x0, 0x1}, 0x6) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0x400448ca, 0x0) [ 309.486803][T14971] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 00:30:13 executing program 3: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffb, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000740)={&(0x7f0000000000)=""/244, 0x1202000, 0x1000}, 0x20) getsockopt$XDP_STATISTICS(r0, 0x11b, 0x7, &(0x7f00000001c0), &(0x7f0000000200)=0x30) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000180)={0x0}, 0x20) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) 00:30:13 executing program 5: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffb, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000740)={&(0x7f0000000000)=""/244, 0x1202000, 0x1000}, 0x20) getsockopt$XDP_STATISTICS(r0, 0x11b, 0x7, &(0x7f00000001c0), &(0x7f0000000200)=0x30) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000180)={0x0}, 0x20) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) 00:30:13 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0x0, 0x1}, 0x6) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0x400448ca, 0x0) 00:30:13 executing program 4: sendmsg$DEVLINK_CMD_TRAP_SET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)={0x54, 0x0, 0x0, 0x0, 0x0, {}, [{@pci={{0x8}, {0x11}}, {0x1c}, {0x20}}]}, 0x54}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000070601801fdb59cc049ca2700100e90005"], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000f00) 00:30:13 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000004200)={0x0, 0x0, &(0x7f00000041c0)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010000507000001000000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x64, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x38, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{}, {}, 0x0, 0x8}}, @TCA_TBF_RATE64={0xc, 0x4, 0x15aff709ef5d6967}]}}]}, 0x64}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=@delchain={0x24, 0x29, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xd}, {0x0, 0xffff}}}, 0x24}}, 0x0) [ 311.270231][T15021] hsr0 speed is unknown, defaulting to 1000 [ 311.278984][T15025] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 00:30:13 executing program 0: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffb, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000740)={&(0x7f0000000000)=""/244, 0x1202000, 0x1000}, 0x20) getsockopt$XDP_STATISTICS(r0, 0x11b, 0x7, &(0x7f00000001c0), &(0x7f0000000200)=0x30) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000180)={0x0}, 0x20) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) 00:30:13 executing program 2: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffb, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000740)={&(0x7f0000000000)=""/244, 0x1202000, 0x1000}, 0x20) getsockopt$XDP_STATISTICS(r0, 0x11b, 0x7, &(0x7f00000001c0), &(0x7f0000000200)=0x30) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000180)={0x0}, 0x20) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) [ 311.478367][ T26] audit: type=1804 audit(1634603413.479:113): pid=15022 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir516473655/syzkaller.aQ1LtY/179/cgroup.controllers" dev="sda1" ino=14747 res=1 errno=0 [ 311.549674][T15035] hsr0 speed is unknown, defaulting to 1000 00:30:13 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0xfff2}, {}, {0xfff1}}, [@filter_kind_options=@f_rsvp6={{0xa}, {0x4}}]}, 0x34}}, 0x0) r3 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000200), 0x4924924924926d3, 0x0) [ 311.803162][T15078] hsr0 speed is unknown, defaulting to 1000 [ 311.912482][T15085] hsr0 speed is unknown, defaulting to 1000 [ 311.961628][T15101] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 00:30:14 executing program 1: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) sendmsg$TIPC_NL_NODE_GET(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000300)={0x0, 0x3e}}, 0x8000) accept$alg(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) sendfile(r2, r3, 0x0, 0xf03b0000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$BTRFS_IOC_SPACE_INFO(r2, 0xc0109414, &(0x7f0000000dc0)=ANY=[@ANYBLOB="4900000000000000000000000000000000000000000000000000fffffffffffffff90000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000110000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000700"/1537]) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) bpf$MAP_UPDATE_ELEM(0x4, &(0x7f0000000480)={0xffffffffffffffff, &(0x7f0000000340), &(0x7f0000000440)=@udp}, 0x20) splice(r1, &(0x7f00000014c0)=0x4, 0xffffffffffffffff, &(0x7f0000001500)=0x9, 0x6, 0x2) sendfile(r2, r1, 0x0, 0x8000000000004) socket$inet_sctp(0x2, 0x5, 0x84) 00:30:14 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'geneve1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="5400000010000100"/20, @ANYRES32=r1, @ANYBLOB="0000000000000000340012800b00010067656e65766500002400028005000a0001000000080001000300000005000c00050000000800010001"], 0x54}}, 0x0) 00:30:14 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @random}]}, 0x44}}, 0x0) 00:30:15 executing program 4: getsockopt$SO_COOKIE(0xffffffffffffffff, 0x1, 0x39, &(0x7f0000000140), &(0x7f0000000200)=0x8) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x12, 0x1, &(0x7f0000000040)=@raw=[@call={0x85, 0x0, 0x0, 0x3c}], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xcc, &(0x7f0000000580)=""/204, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="4f0a82bdea74c253c7", @ANYRES16=0x0, @ANYRESDEC=r0], 0x14}, 0x1, 0x0, 0x0, 0x64850}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000016c0)={'vcan0\x00'}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000000)) pipe(&(0x7f0000000240)) socket$inet_udp(0x2, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x20000000000000, &(0x7f00000000c0)={0x19, 0x4, 0x4, 0xfffffffa}, 0x40) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f00000000c0)=0x1914, 0x4) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x4e22}, 0x1c) sendto$inet6(r1, 0x0, 0x1cd, 0x200408d4, &(0x7f0000000380)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) ioctl$sock_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) sendto$inet6(r1, &(0x7f00000001c0)="d02a2b7ba76127fcbda203f6fdcc", 0xe, 0x0, 0x0, 0x0) recvmsg(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)}, 0x13f5c) 00:30:16 executing program 3: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffb, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000740)={&(0x7f0000000000)=""/244, 0x1202000, 0x1000}, 0x20) getsockopt$XDP_STATISTICS(r0, 0x11b, 0x7, &(0x7f00000001c0), &(0x7f0000000200)=0x30) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000180)={0x0}, 0x20) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) 00:30:16 executing program 4: r0 = epoll_create1(0x0) epoll_pwait(r0, &(0x7f0000000000)=[{}], 0x1, 0x80, &(0x7f0000000040), 0x8) 00:30:16 executing program 1: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) sendmsg$TIPC_NL_NODE_GET(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000300)={0x0, 0x3e}}, 0x8000) accept$alg(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) sendfile(r2, r3, 0x0, 0xf03b0000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$BTRFS_IOC_SPACE_INFO(r2, 0xc0109414, &(0x7f0000000dc0)=ANY=[@ANYBLOB="4900000000000000000000000000000000000000000000000000fffffffffffffff90000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000110000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000700"/1537]) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) bpf$MAP_UPDATE_ELEM(0x4, &(0x7f0000000480)={0xffffffffffffffff, &(0x7f0000000340), &(0x7f0000000440)=@udp}, 0x20) splice(r1, &(0x7f00000014c0)=0x4, 0xffffffffffffffff, &(0x7f0000001500)=0x9, 0x6, 0x2) sendfile(r2, r1, 0x0, 0x8000000000004) socket$inet_sctp(0x2, 0x5, 0x84) 00:30:16 executing program 5: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffb, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000740)={&(0x7f0000000000)=""/244, 0x1202000, 0x1000}, 0x20) getsockopt$XDP_STATISTICS(r0, 0x11b, 0x7, &(0x7f00000001c0), &(0x7f0000000200)=0x30) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000180)={0x0}, 0x20) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) 00:30:16 executing program 2: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffb, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000740)={&(0x7f0000000000)=""/244, 0x1202000, 0x1000}, 0x20) getsockopt$XDP_STATISTICS(r0, 0x11b, 0x7, &(0x7f00000001c0), &(0x7f0000000200)=0x30) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000180)={0x0}, 0x20) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) [ 314.937877][T15193] hsr0 speed is unknown, defaulting to 1000 [ 315.007303][T15194] hsr0 speed is unknown, defaulting to 1000 [ 315.035731][T15195] hsr0 speed is unknown, defaulting to 1000 00:30:17 executing program 0: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffb, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000740)={&(0x7f0000000000)=""/244, 0x1202000, 0x1000}, 0x20) getsockopt$XDP_STATISTICS(r0, 0x11b, 0x7, &(0x7f00000001c0), &(0x7f0000000200)=0x30) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000180)={0x0}, 0x20) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) 00:30:17 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) sendmsg$TIPC_NL_NODE_GET(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000300)={0x0, 0x3e}}, 0x8000) accept$alg(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) sendfile(r2, r3, 0x0, 0xf03b0000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$BTRFS_IOC_SPACE_INFO(r2, 0xc0109414, &(0x7f0000000dc0)=ANY=[@ANYBLOB="4900000000000000000000000000000000000000000000000000fffffffffffffff90000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000110000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000700"/1537]) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) bpf$MAP_UPDATE_ELEM(0x4, &(0x7f0000000480)={0xffffffffffffffff, &(0x7f0000000340), &(0x7f0000000440)=@udp}, 0x20) splice(r1, &(0x7f00000014c0)=0x4, 0xffffffffffffffff, &(0x7f0000001500)=0x9, 0x6, 0x2) sendfile(r2, r1, 0x0, 0x8000000000004) socket$inet_sctp(0x2, 0x5, 0x84) [ 315.730655][T15266] hsr0 speed is unknown, defaulting to 1000 00:30:18 executing program 1: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) sendmsg$TIPC_NL_NODE_GET(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000300)={0x0, 0x3e}}, 0x8000) accept$alg(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) sendfile(r2, r3, 0x0, 0xf03b0000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$BTRFS_IOC_SPACE_INFO(r2, 0xc0109414, &(0x7f0000000dc0)=ANY=[@ANYBLOB="4900000000000000000000000000000000000000000000000000fffffffffffffff90000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000110000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000700"/1537]) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) bpf$MAP_UPDATE_ELEM(0x4, &(0x7f0000000480)={0xffffffffffffffff, &(0x7f0000000340), &(0x7f0000000440)=@udp}, 0x20) splice(r1, &(0x7f00000014c0)=0x4, 0xffffffffffffffff, &(0x7f0000001500)=0x9, 0x6, 0x2) sendfile(r2, r1, 0x0, 0x8000000000004) socket$inet_sctp(0x2, 0x5, 0x84) 00:30:18 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) sendmsg$TIPC_NL_NODE_GET(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000300)={0x0, 0x3e}}, 0x8000) accept$alg(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) sendfile(r2, r3, 0x0, 0xf03b0000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$BTRFS_IOC_SPACE_INFO(r2, 0xc0109414, &(0x7f0000000dc0)=ANY=[@ANYBLOB="4900000000000000000000000000000000000000000000000000fffffffffffffff90000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000110000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000700"/1537]) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) bpf$MAP_UPDATE_ELEM(0x4, &(0x7f0000000480)={0xffffffffffffffff, &(0x7f0000000340), &(0x7f0000000440)=@udp}, 0x20) splice(r1, &(0x7f00000014c0)=0x4, 0xffffffffffffffff, &(0x7f0000001500)=0x9, 0x6, 0x2) sendfile(r2, r1, 0x0, 0x8000000000004) socket$inet_sctp(0x2, 0x5, 0x84) [ 316.939737][ T1358] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.946125][ T1358] ieee802154 phy1 wpan1: encryption failed: -22 00:30:19 executing program 1: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) sendmsg$TIPC_NL_NODE_GET(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000300)={0x0, 0x3e}}, 0x8000) accept$alg(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) sendfile(r2, r3, 0x0, 0xf03b0000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$BTRFS_IOC_SPACE_INFO(r2, 0xc0109414, &(0x7f0000000dc0)=ANY=[@ANYBLOB="4900000000000000000000000000000000000000000000000000fffffffffffffff90000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000110000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000700"/1537]) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) bpf$MAP_UPDATE_ELEM(0x4, &(0x7f0000000480)={0xffffffffffffffff, &(0x7f0000000340), &(0x7f0000000440)=@udp}, 0x20) splice(r1, &(0x7f00000014c0)=0x4, 0xffffffffffffffff, &(0x7f0000001500)=0x9, 0x6, 0x2) sendfile(r2, r1, 0x0, 0x8000000000004) socket$inet_sctp(0x2, 0x5, 0x84) 00:30:20 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) sendmsg$TIPC_NL_NODE_GET(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000300)={0x0, 0x3e}}, 0x8000) accept$alg(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) sendfile(r2, r3, 0x0, 0xf03b0000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$BTRFS_IOC_SPACE_INFO(r2, 0xc0109414, &(0x7f0000000dc0)=ANY=[@ANYBLOB="4900000000000000000000000000000000000000000000000000fffffffffffffff90000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000110000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000700"/1537]) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) bpf$MAP_UPDATE_ELEM(0x4, &(0x7f0000000480)={0xffffffffffffffff, &(0x7f0000000340), &(0x7f0000000440)=@udp}, 0x20) splice(r1, &(0x7f00000014c0)=0x4, 0xffffffffffffffff, &(0x7f0000001500)=0x9, 0x6, 0x2) sendfile(r2, r1, 0x0, 0x8000000000004) socket$inet_sctp(0x2, 0x5, 0x84) 00:30:20 executing program 5: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffb, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000740)={&(0x7f0000000000)=""/244, 0x1202000, 0x1000}, 0x20) getsockopt$XDP_STATISTICS(r0, 0x11b, 0x7, &(0x7f00000001c0), &(0x7f0000000200)=0x30) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000180)={0x0}, 0x20) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) [ 318.800540][T15317] hsr0 speed is unknown, defaulting to 1000 00:30:20 executing program 2: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffb, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000740)={&(0x7f0000000000)=""/244, 0x1202000, 0x1000}, 0x20) getsockopt$XDP_STATISTICS(r0, 0x11b, 0x7, &(0x7f00000001c0), &(0x7f0000000200)=0x30) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000180)={0x0}, 0x20) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) 00:30:20 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) sendmsg$TIPC_NL_NODE_GET(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000300)={0x0, 0x3e}}, 0x8000) accept$alg(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) sendfile(r2, r3, 0x0, 0xf03b0000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$BTRFS_IOC_SPACE_INFO(r2, 0xc0109414, &(0x7f0000000dc0)=ANY=[@ANYBLOB="4900000000000000000000000000000000000000000000000000fffffffffffffff90000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000110000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000700"/1537]) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) bpf$MAP_UPDATE_ELEM(0x4, &(0x7f0000000480)={0xffffffffffffffff, &(0x7f0000000340), &(0x7f0000000440)=@udp}, 0x20) splice(r1, &(0x7f00000014c0)=0x4, 0xffffffffffffffff, &(0x7f0000001500)=0x9, 0x6, 0x2) sendfile(r2, r1, 0x0, 0x8000000000004) socket$inet_sctp(0x2, 0x5, 0x84) [ 319.124978][T15330] hsr0 speed is unknown, defaulting to 1000 00:30:21 executing program 1: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f00000000c0)=ANY=[], 0x4) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) getsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, 0x0, &(0x7f0000000100)) 00:30:21 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCDARP(r0, 0x8953, &(0x7f00000000c0)={{0x2, 0x0, @private}, {0x0, @random="1ffe5e4b00ef"}, 0x28, {}, 'lo\x00'}) 00:30:22 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001540)=@newsa={0x13c, 0x10, 0x1, 0x0, 0x0, {{@in=@multicast1, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0xa}, {@in=@dev, 0x0, 0x33}, @in6=@local, {}, {}, {}, 0x0, 0x0, 0xa, 0x3}, [@algo_auth_trunc={0x4c, 0x14, {{'digest_null-generic\x00'}}}]}, 0x13c}}, 0x0) 00:30:22 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_free_percpu\x00', r0}, 0x10) r1 = socket$packet(0x11, 0x2, 0x300) close(r1) 00:30:22 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001300), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000001380)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r1, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000001400)={&(0x7f00000013c0)={0x28, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_COOKIE={0xc}]}, 0x28}}, 0x0) 00:30:22 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) sendmsg$TIPC_NL_NODE_GET(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000300)={0x0, 0x3e}}, 0x8000) accept$alg(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) sendfile(r2, r3, 0x0, 0xf03b0000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$BTRFS_IOC_SPACE_INFO(r2, 0xc0109414, &(0x7f0000000dc0)=ANY=[@ANYBLOB="4900000000000000000000000000000000000000000000000000fffffffffffffff90000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000110000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000700"/1537]) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) bpf$MAP_UPDATE_ELEM(0x4, &(0x7f0000000480)={0xffffffffffffffff, &(0x7f0000000340), &(0x7f0000000440)=@udp}, 0x20) splice(r1, &(0x7f00000014c0)=0x4, 0xffffffffffffffff, &(0x7f0000001500)=0x9, 0x6, 0x2) sendfile(r2, r1, 0x0, 0x8000000000004) socket$inet_sctp(0x2, 0x5, 0x84) 00:30:22 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) ioctl$FIBMAP(r1, 0x1, &(0x7f00000000c0)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000380), 0x101bf) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f00000000c0)={0x2, 0x0, @dev}, 0x10) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x34) r4 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) connect$802154_dgram(0xffffffffffffffff, &(0x7f0000001940)={0x24, @long}, 0x14) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000002240), 0x400000000000116, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x635) bind$802154_dgram(r4, &(0x7f0000000000)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0102}}}, 0x14) connect$802154_dgram(r4, &(0x7f0000001940)={0x24, @long}, 0x14) sendmmsg$sock(r4, &(0x7f0000002240), 0x400000000000116, 0x0) sendfile(0xffffffffffffffff, r4, &(0x7f0000000080)=0x1f, 0xffffffffffffffff) sendmmsg(r3, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) 00:30:22 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c) sendmmsg$inet(r0, &(0x7f00000002c0)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="000e523997c6a27029cc198566d56c", 0xf}], 0x1}}], 0x1, 0x0) 00:30:22 executing program 1: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x4, 0x13, r0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000040)={0x14, 0x4, 0x4, 0xffff, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5000000}, 0x40) [ 320.878461][ T26] audit: type=1804 audit(1634603422.879:114): pid=15402 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir706221036/syzkaller.mXHjpb/191/memory.events" dev="sda1" ino=14290 res=1 errno=0 [ 321.113375][ T26] audit: type=1800 audit(1634603422.879:115): pid=15402 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="memory.events" dev="sda1" ino=14290 res=0 errno=0 [ 321.311430][ T26] audit: type=1804 audit(1634603422.879:116): pid=15402 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir706221036/syzkaller.mXHjpb/191/memory.events" dev="sda1" ino=14290 res=1 errno=0 [ 321.522608][ T26] audit: type=1800 audit(1634603422.879:117): pid=15402 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="memory.events" dev="sda1" ino=14290 res=0 errno=0 [ 321.684946][ T26] audit: type=1800 audit(1634603423.019:118): pid=15402 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="memory.events" dev="sda1" ino=14290 res=0 errno=0 00:30:24 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) ioctl$FIBMAP(r1, 0x1, &(0x7f00000000c0)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000380), 0x101bf) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f00000000c0)={0x2, 0x0, @dev}, 0x10) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x34) r4 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) connect$802154_dgram(0xffffffffffffffff, &(0x7f0000001940)={0x24, @long}, 0x14) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000002240), 0x400000000000116, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x635) bind$802154_dgram(r4, &(0x7f0000000000)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0102}}}, 0x14) connect$802154_dgram(r4, &(0x7f0000001940)={0x24, @long}, 0x14) sendmmsg$sock(r4, &(0x7f0000002240), 0x400000000000116, 0x0) sendfile(0xffffffffffffffff, r4, &(0x7f0000000080)=0x1f, 0xffffffffffffffff) sendmmsg(r3, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) 00:30:24 executing program 1: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x4, 0x13, r0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000040)={0x14, 0x4, 0x4, 0xffff, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5000000}, 0x40) 00:30:24 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c) sendmmsg$inet(r0, &(0x7f00000002c0)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="000e523997c6a27029cc198566d56c", 0xf}], 0x1}}], 0x1, 0x0) 00:30:24 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) sendmsg$TIPC_NL_NODE_GET(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000300)={0x0, 0x3e}}, 0x8000) accept$alg(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) sendfile(r2, r3, 0x0, 0xf03b0000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$BTRFS_IOC_SPACE_INFO(r2, 0xc0109414, &(0x7f0000000dc0)=ANY=[@ANYBLOB="4900000000000000000000000000000000000000000000000000fffffffffffffff90000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000110000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000700"/1537]) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) bpf$MAP_UPDATE_ELEM(0x4, &(0x7f0000000480)={0xffffffffffffffff, &(0x7f0000000340), &(0x7f0000000440)=@udp}, 0x20) splice(r1, &(0x7f00000014c0)=0x4, 0xffffffffffffffff, &(0x7f0000001500)=0x9, 0x6, 0x2) sendfile(r2, r1, 0x0, 0x8000000000004) socket$inet_sctp(0x2, 0x5, 0x84) 00:30:24 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) ioctl$FIBMAP(r1, 0x1, &(0x7f00000000c0)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000380), 0x101bf) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f00000000c0)={0x2, 0x0, @dev}, 0x10) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x34) r4 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) connect$802154_dgram(0xffffffffffffffff, &(0x7f0000001940)={0x24, @long}, 0x14) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000002240), 0x400000000000116, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x635) bind$802154_dgram(r4, &(0x7f0000000000)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0102}}}, 0x14) connect$802154_dgram(r4, &(0x7f0000001940)={0x24, @long}, 0x14) sendmmsg$sock(r4, &(0x7f0000002240), 0x400000000000116, 0x0) sendfile(0xffffffffffffffff, r4, &(0x7f0000000080)=0x1f, 0xffffffffffffffff) sendmmsg(r3, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) 00:30:24 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x4, 0x13, r0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000040)={0x14, 0x4, 0x4, 0xffff, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5000000}, 0x40) [ 322.796104][ T26] audit: type=1804 audit(1634603424.799:119): pid=15428 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir706221036/syzkaller.mXHjpb/192/memory.events" dev="sda1" ino=14369 res=1 errno=0 00:30:24 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c) sendmmsg$inet(r0, &(0x7f00000002c0)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="000e523997c6a27029cc198566d56c", 0xf}], 0x1}}], 0x1, 0x0) [ 322.956310][ T26] audit: type=1800 audit(1634603424.829:120): pid=15428 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="memory.events" dev="sda1" ino=14369 res=0 errno=0 00:30:25 executing program 1: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x4, 0x13, r0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000040)={0x14, 0x4, 0x4, 0xffff, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5000000}, 0x40) [ 323.202236][ T26] audit: type=1804 audit(1634603424.839:121): pid=15428 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir706221036/syzkaller.mXHjpb/192/memory.events" dev="sda1" ino=14369 res=1 errno=0 00:30:25 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x4, 0x13, r0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000040)={0x14, 0x4, 0x4, 0xffff, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5000000}, 0x40) 00:30:25 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c) sendmmsg$inet(r0, &(0x7f00000002c0)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="000e523997c6a27029cc198566d56c", 0xf}], 0x1}}], 0x1, 0x0) [ 323.432565][ T26] audit: type=1800 audit(1634603424.839:122): pid=15428 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="memory.events" dev="sda1" ino=14369 res=0 errno=0 [ 323.683198][ T26] audit: type=1804 audit(1634603424.959:123): pid=15430 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir711539129/syzkaller.91D5fF/184/memory.events" dev="sda1" ino=14465 res=1 errno=0 00:30:25 executing program 1: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x4, 0x13, r0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000040)={0x14, 0x4, 0x4, 0xffff, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5000000}, 0x40) 00:30:25 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) ioctl$FIBMAP(r1, 0x1, &(0x7f00000000c0)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000380), 0x101bf) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f00000000c0)={0x2, 0x0, @dev}, 0x10) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x34) r4 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) connect$802154_dgram(0xffffffffffffffff, &(0x7f0000001940)={0x24, @long}, 0x14) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000002240), 0x400000000000116, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x635) bind$802154_dgram(r4, &(0x7f0000000000)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0102}}}, 0x14) connect$802154_dgram(r4, &(0x7f0000001940)={0x24, @long}, 0x14) sendmmsg$sock(r4, &(0x7f0000002240), 0x400000000000116, 0x0) sendfile(0xffffffffffffffff, r4, &(0x7f0000000080)=0x1f, 0xffffffffffffffff) sendmmsg(r3, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) 00:30:25 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff752b6bfe00080000faff8141", @ANYRES32=0x0, @ANYBLOB="67a9fde500000000280012800a00010076786c616e"], 0x3}}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x0) 00:30:26 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x4, 0x13, r0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000040)={0x14, 0x4, 0x4, 0xffff, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5000000}, 0x40) 00:30:26 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x1c, r1, 0x11, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8}]}, 0x1c}}, 0x0) [ 324.103274][T15451] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 00:30:26 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) ioctl$FIBMAP(r1, 0x1, &(0x7f00000000c0)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000380), 0x101bf) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f00000000c0)={0x2, 0x0, @dev}, 0x10) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x34) r4 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) connect$802154_dgram(0xffffffffffffffff, &(0x7f0000001940)={0x24, @long}, 0x14) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000002240), 0x400000000000116, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x635) bind$802154_dgram(r4, &(0x7f0000000000)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0102}}}, 0x14) connect$802154_dgram(r4, &(0x7f0000001940)={0x24, @long}, 0x14) sendmmsg$sock(r4, &(0x7f0000002240), 0x400000000000116, 0x0) sendfile(0xffffffffffffffff, r4, &(0x7f0000000080)=0x1f, 0xffffffffffffffff) sendmmsg(r3, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) 00:30:26 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) shutdown(r0, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x21, &(0x7f00000003c0), 0x4) write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[], 0x2bcf) shutdown(r0, 0x1) ioctl$sock_inet_SIOCGIFPFLAGS(r1, 0x8935, &(0x7f00000000c0)={'ip_vti0\x00'}) recvmsg(r0, &(0x7f0000001440)={0x0, 0xa, &(0x7f00000015c0)=[{&(0x7f0000001600)=""/4096, 0xf99e}], 0x12, 0x0, 0xff96ce4aaaa47475, 0x7115}, 0x1100) 00:30:26 executing program 2: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCDELRT(r0, 0x890c, &(0x7f0000000000)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x0, @null, @netrom={'nr', 0x0}, 0x0, [@bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast, @null]}) 00:30:26 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) 00:30:26 executing program 1: r0 = socket(0x200000000000011, 0x4000000000080002, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'lo\x00', 0x0}) bind$packet(r0, &(0x7f0000000000)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @dev}, 0x14) getsockname$packet(r0, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="d00800002400ffff01dfb9000000000000000000", @ANYRES32=r3, @ANYBLOB="0000000bf1ffffff000000000800010063627100a408020004040600030000000500000000700300fdffffffffff00001f000000050000000002000001000000000010008300000016000000080200000000000000ffff0002000000cf000000feffffff080000000180000003000000090000000200000000274a49ef6949a7bb000000050000000100000004000000ff7f000000000000000400000002000004000000ff0f0000f44f350001000000010400005eb768350100000008000000ffffffffc38d00001f000000040008830600000000000100f7ffffff030000000080ffff050104000600000006000000a900000000000000c0000000c0ffffff08000000018000000101000006000000b300000000000020050000000104000004000000070000010800000001010000c22e0000c0ffffff0500000004000000040000000900000008000000f7ffffff0800000003000000080000000400000001000080040000000400000000100000040000000700000009000000fcffffff01000000010000000900000000020000060e0000080000000200000002000000090000000800000007000000ab000000fb00000007000000ff0100000800000001040000070000000300000009000000ff07000008f0ff00ffff0000a90100000900000005000000200000000500000001000000070000008eb7000000000080010000000000000007000000fffffffffcffffff01f0ffff000000003f00000003000000000100000080000000800000030000000500000005000000ffffffff0700000015ba000004000000070000000300000003000000ffffffff04000000554f00006ff800000700000003000000000200000600000008000000b300000006000000000000000007000001010000030000000080000000040000730a000001000080010000009e0c0000000800000100008000000000000000004000000000fefffff67d000004000400ff01000002000000000000004000000040000000ed000000010001000e0a05000000000000020000040000000600000002000000ff7f00000100000001000000060000007f000000020000000004000004000000090000009000000008000000c4f3b3a1bc3c80fa0400000005000000f50a0000ffff0000060000008ff9ffff070000001eaaffff3f0000008000000000000000ff0c0000ff7f0000030000007f0000002d0000000800000000010000ff070000ffffffff2bab000002000000ace800000500000000000000e1bf934d070000001f000d000300000004000000070000000900000005000000030000000200000087d400000200000008000000000100007f0000000e000000080000000200000007000000ffffff7f06000000000000000500000001000000820000001f0000000004000001000000faffffff05000000060000000700000003000000100005"], 0x8d0}}, 0x0) r4 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 00:30:26 executing program 2: r0 = socket(0x23, 0x5, 0x0) sendmsg$NL80211_CMD_LEAVE_IBSS(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0) sendmsg$NL80211_CMD_DEL_TX_TS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x300}, 0x4080) [ 324.589609][T15468] netlink: 1164 bytes leftover after parsing attributes in process `syz-executor.1'. 00:30:26 executing program 3: r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000013c0)=@bpf_lsm={0x2, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000040)='syzkaller\x00', 0x5, 0x1000, &(0x7f0000001440)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000080)={r0, 0xffffffffffffffff, 0x29}, 0x10) [ 324.688046][T15468] netlink: 1164 bytes leftover after parsing attributes in process `syz-executor.1'. 00:30:26 executing program 1: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x48, 0x9, 0xa, 0x101, 0x0, 0x0, {}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ID={0x8}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x3f}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x8, 0x2, 0x0, 0x1, [{0x4}]}]}]}, @NFT_MSG_NEWRULE={0x14}], {0x14}}, 0x84}}, 0x0) 00:30:27 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) ioctl$FIBMAP(r1, 0x1, &(0x7f00000000c0)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000380), 0x101bf) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f00000000c0)={0x2, 0x0, @dev}, 0x10) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x34) r4 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) connect$802154_dgram(0xffffffffffffffff, &(0x7f0000001940)={0x24, @long}, 0x14) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000002240), 0x400000000000116, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x635) bind$802154_dgram(r4, &(0x7f0000000000)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0102}}}, 0x14) connect$802154_dgram(r4, &(0x7f0000001940)={0x24, @long}, 0x14) sendmmsg$sock(r4, &(0x7f0000002240), 0x400000000000116, 0x0) sendfile(0xffffffffffffffff, r4, &(0x7f0000000080)=0x1f, 0xffffffffffffffff) sendmmsg(r3, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) 00:30:27 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000280)="230000000100c0", 0x7) 00:30:27 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000002d80)=[{{&(0x7f0000000ac0)={0xa, 0x4e21, 0x0, @empty}, 0x1c, &(0x7f0000000dc0)=[{0x0}, {&(0x7f0000000d00)="e8", 0x1}], 0x2}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) 00:30:27 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0x9, 0x6, 0x2}, 0x40) close(0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xf03b0000) read(0xffffffffffffffff, &(0x7f0000000300)=""/67, 0x43) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8000000000004) sendmsg$NLBL_CIPSOV4_C_LIST(r0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x10000000000000) r1 = socket(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_FLOW_PLIMIT={0x8, 0xe}]}}]}, 0x38}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 00:30:28 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) ioctl$FIBMAP(r1, 0x1, &(0x7f00000000c0)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000380), 0x101bf) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f00000000c0)={0x2, 0x0, @dev}, 0x10) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x34) r4 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) connect$802154_dgram(0xffffffffffffffff, &(0x7f0000001940)={0x24, @long}, 0x14) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000002240), 0x400000000000116, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x635) bind$802154_dgram(r4, &(0x7f0000000000)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0102}}}, 0x14) connect$802154_dgram(r4, &(0x7f0000001940)={0x24, @long}, 0x14) sendmmsg$sock(r4, &(0x7f0000002240), 0x400000000000116, 0x0) sendfile(0xffffffffffffffff, r4, &(0x7f0000000080)=0x1f, 0xffffffffffffffff) sendmmsg(r3, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) 00:30:28 executing program 1: pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000200)=0x1, 0x4) setsockopt$sock_timeval(r2, 0x1, 0x15, &(0x7f0000000040)={0x0, 0x2710}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x10) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000100)={0x0, 0x81, 0x1df}, 0x14) write$binfmt_misc(r1, &(0x7f0000000080)=ANY=[], 0xff01) r3 = accept4$unix(r0, 0x0, &(0x7f0000001b40), 0x80800) recvmmsg$unix(r3, &(0x7f0000006d80)=[{{&(0x7f0000000240)=@abs, 0x6e, &(0x7f0000000080)=[{&(0x7f00000002c0)=""/112, 0x70}, {&(0x7f0000000340)=""/83, 0x53}], 0x2, &(0x7f00000003c0)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x48}}, {{&(0x7f0000000440)=@abs, 0x6e, &(0x7f0000000140)=[{0x0}], 0x1}}, {{&(0x7f0000000640), 0x6e, &(0x7f0000000900)=[{&(0x7f00000006c0)=""/181, 0xb5}, {&(0x7f0000000780)=""/98, 0x62}, {&(0x7f0000000800)=""/95, 0x5f}, {&(0x7f0000000880)=""/69, 0x45}, {&(0x7f00000001c0)=""/50, 0x32}], 0x5}}, {{0x0, 0x0, &(0x7f0000002b40)=[{&(0x7f0000000980)=""/35, 0x23}, {&(0x7f00000009c0)=""/4096, 0x1000}, {&(0x7f00000019c0)=""/176, 0xb0}, {&(0x7f0000001a80)=""/134, 0x86}, {0x0}], 0x5}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000006580)=[{&(0x7f0000005280)=""/50, 0x32}, {&(0x7f00000052c0)=""/125, 0x7d}, {&(0x7f0000005340)=""/4096, 0x1000}, {&(0x7f0000006340)=""/19, 0x13}, {&(0x7f0000006380)=""/232, 0xe8}, {&(0x7f0000006480)}, {&(0x7f00000064c0)=""/176, 0xb0}], 0x7}}, {{0x0, 0x0, &(0x7f0000006780)=[{&(0x7f0000006600)=""/215, 0xd7}, {&(0x7f0000006700)=""/77, 0x4d}], 0x2}}, {{0x0, 0x0, &(0x7f0000006c80)=[{&(0x7f00000067c0)=""/138, 0x8a}, {&(0x7f0000006880)=""/111, 0x6f}, {&(0x7f0000006900)=""/87, 0x57}, {&(0x7f0000006980)=""/51, 0x33}, {&(0x7f00000069c0)=""/172, 0xac}, {&(0x7f0000006a80)=""/26, 0x1a}, {&(0x7f0000006ac0)=""/120, 0x78}, {&(0x7f0000006b40)=""/240, 0xf0}, {&(0x7f0000006c40)=""/20, 0x14}], 0x9, &(0x7f0000006d40)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x18}}], 0x8, 0x100, &(0x7f0000006f80)={0x77359400}) pipe(&(0x7f0000006480)) socket$netlink(0x10, 0x3, 0x8000000004) splice(0xffffffffffffffff, &(0x7f0000000540)=0x6, 0xffffffffffffffff, &(0x7f00000005c0)=0x7, 0xc5, 0xa) splice(r0, 0x0, r2, 0x0, 0x10003, 0x0) 00:30:28 executing program 4: socketpair$unix(0x1, 0x0, 0x0, 0x0) close(0xffffffffffffffff) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000005c0)=0x169, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000780)={@in={{0x2, 0x0, @local}}, 0x0, 0x9, 0x47, 0x0, "0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030cf00"}, 0xd8) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20000ffd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f00000001c0)=0x5, 0x4) recvmsg(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)=[{0x0}], 0x1, 0x0, 0x0, 0x5801}, 0x100) write$binfmt_elf64(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="92342dfe497400d60f15957f269f4b5eb214fb725e553e96daee6d04dc0e262c319ec1ce213158a6bf2757a88a8bd6b9456d837b961b9a4168ef005ff67444b664ad1c1af47fa2cadadc91248f50af14cde46b17c52c9898afd1e5af595048d3ef5e56399564ad3e2499a97255d621a3f157bcc5445c3fb32f", @ANYRESDEC], 0x1000001bd) 00:30:28 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000280)="230000000100c0", 0x7) 00:30:28 executing program 3: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x1c, 0x2, 0x0, 0x1, {{0x8}, {0x8}, [@IFLA_GTP_PDP_HASHSIZE={0x8, 0x3, 0xffffffff}]}}}}]}, 0x48}}, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) 00:30:28 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000280)="230000000100c0", 0x7) 00:30:28 executing program 1: pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000200)=0x1, 0x4) setsockopt$sock_timeval(r2, 0x1, 0x15, &(0x7f0000000040)={0x0, 0x2710}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x10) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000100)={0x0, 0x81, 0x1df}, 0x14) write$binfmt_misc(r1, &(0x7f0000000080)=ANY=[], 0xff01) r3 = accept4$unix(r0, 0x0, &(0x7f0000001b40), 0x80800) recvmmsg$unix(r3, &(0x7f0000006d80)=[{{&(0x7f0000000240)=@abs, 0x6e, &(0x7f0000000080)=[{&(0x7f00000002c0)=""/112, 0x70}, {&(0x7f0000000340)=""/83, 0x53}], 0x2, &(0x7f00000003c0)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x48}}, {{&(0x7f0000000440)=@abs, 0x6e, &(0x7f0000000140)=[{0x0}], 0x1}}, {{&(0x7f0000000640), 0x6e, &(0x7f0000000900)=[{&(0x7f00000006c0)=""/181, 0xb5}, {&(0x7f0000000780)=""/98, 0x62}, {&(0x7f0000000800)=""/95, 0x5f}, {&(0x7f0000000880)=""/69, 0x45}, {&(0x7f00000001c0)=""/50, 0x32}], 0x5}}, {{0x0, 0x0, &(0x7f0000002b40)=[{&(0x7f0000000980)=""/35, 0x23}, {&(0x7f00000009c0)=""/4096, 0x1000}, {&(0x7f00000019c0)=""/176, 0xb0}, {&(0x7f0000001a80)=""/134, 0x86}, {0x0}], 0x5}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000006580)=[{&(0x7f0000005280)=""/50, 0x32}, {&(0x7f00000052c0)=""/125, 0x7d}, {&(0x7f0000005340)=""/4096, 0x1000}, {&(0x7f0000006340)=""/19, 0x13}, {&(0x7f0000006380)=""/232, 0xe8}, {&(0x7f0000006480)}, {&(0x7f00000064c0)=""/176, 0xb0}], 0x7}}, {{0x0, 0x0, &(0x7f0000006780)=[{&(0x7f0000006600)=""/215, 0xd7}, {&(0x7f0000006700)=""/77, 0x4d}], 0x2}}, {{0x0, 0x0, &(0x7f0000006c80)=[{&(0x7f00000067c0)=""/138, 0x8a}, {&(0x7f0000006880)=""/111, 0x6f}, {&(0x7f0000006900)=""/87, 0x57}, {&(0x7f0000006980)=""/51, 0x33}, {&(0x7f00000069c0)=""/172, 0xac}, {&(0x7f0000006a80)=""/26, 0x1a}, {&(0x7f0000006ac0)=""/120, 0x78}, {&(0x7f0000006b40)=""/240, 0xf0}, {&(0x7f0000006c40)=""/20, 0x14}], 0x9, &(0x7f0000006d40)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x18}}], 0x8, 0x100, &(0x7f0000006f80)={0x77359400}) pipe(&(0x7f0000006480)) socket$netlink(0x10, 0x3, 0x8000000004) splice(0xffffffffffffffff, &(0x7f0000000540)=0x6, 0xffffffffffffffff, &(0x7f00000005c0)=0x7, 0xc5, 0xa) splice(r0, 0x0, r2, 0x0, 0x10003, 0x0) 00:30:28 executing program 3: pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000200)=0x1, 0x4) setsockopt$sock_timeval(r2, 0x1, 0x15, &(0x7f0000000040)={0x0, 0x2710}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x10) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000100)={0x0, 0x81, 0x1df}, 0x14) write$binfmt_misc(r1, &(0x7f0000000080)=ANY=[], 0xff01) r3 = accept4$unix(r0, 0x0, &(0x7f0000001b40), 0x80800) recvmmsg$unix(r3, &(0x7f0000006d80)=[{{&(0x7f0000000240)=@abs, 0x6e, &(0x7f0000000080)=[{&(0x7f00000002c0)=""/112, 0x70}, {&(0x7f0000000340)=""/83, 0x53}], 0x2, &(0x7f00000003c0)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x48}}, {{&(0x7f0000000440)=@abs, 0x6e, &(0x7f0000000140)=[{0x0}], 0x1}}, {{&(0x7f0000000640), 0x6e, &(0x7f0000000900)=[{&(0x7f00000006c0)=""/181, 0xb5}, {&(0x7f0000000780)=""/98, 0x62}, {&(0x7f0000000800)=""/95, 0x5f}, {&(0x7f0000000880)=""/69, 0x45}, {&(0x7f00000001c0)=""/50, 0x32}], 0x5}}, {{0x0, 0x0, &(0x7f0000002b40)=[{&(0x7f0000000980)=""/35, 0x23}, {&(0x7f00000009c0)=""/4096, 0x1000}, {&(0x7f00000019c0)=""/176, 0xb0}, {&(0x7f0000001a80)=""/134, 0x86}, {0x0}], 0x5}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000006580)=[{&(0x7f0000005280)=""/50, 0x32}, {&(0x7f00000052c0)=""/125, 0x7d}, {&(0x7f0000005340)=""/4096, 0x1000}, {&(0x7f0000006340)=""/19, 0x13}, {&(0x7f0000006380)=""/232, 0xe8}, {&(0x7f0000006480)}, {&(0x7f00000064c0)=""/176, 0xb0}], 0x7}}, {{0x0, 0x0, &(0x7f0000006780)=[{&(0x7f0000006600)=""/215, 0xd7}, {&(0x7f0000006700)=""/77, 0x4d}], 0x2}}, {{0x0, 0x0, &(0x7f0000006c80)=[{&(0x7f00000067c0)=""/138, 0x8a}, {&(0x7f0000006880)=""/111, 0x6f}, {&(0x7f0000006900)=""/87, 0x57}, {&(0x7f0000006980)=""/51, 0x33}, {&(0x7f00000069c0)=""/172, 0xac}, {&(0x7f0000006a80)=""/26, 0x1a}, {&(0x7f0000006ac0)=""/120, 0x78}, {&(0x7f0000006b40)=""/240, 0xf0}, {&(0x7f0000006c40)=""/20, 0x14}], 0x9, &(0x7f0000006d40)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x18}}], 0x8, 0x100, &(0x7f0000006f80)={0x77359400}) pipe(&(0x7f0000006480)) socket$netlink(0x10, 0x3, 0x8000000004) splice(0xffffffffffffffff, &(0x7f0000000540)=0x6, 0xffffffffffffffff, &(0x7f00000005c0)=0x7, 0xc5, 0xa) splice(r0, 0x0, r2, 0x0, 0x10003, 0x0) 00:30:29 executing program 4: socketpair$unix(0x1, 0x0, 0x0, 0x0) close(0xffffffffffffffff) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000005c0)=0x169, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000780)={@in={{0x2, 0x0, @local}}, 0x0, 0x9, 0x47, 0x0, "0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030cf00"}, 0xd8) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20000ffd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f00000001c0)=0x5, 0x4) recvmsg(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)=[{0x0}], 0x1, 0x0, 0x0, 0x5801}, 0x100) write$binfmt_elf64(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="92342dfe497400d60f15957f269f4b5eb214fb725e553e96daee6d04dc0e262c319ec1ce213158a6bf2757a88a8bd6b9456d837b961b9a4168ef005ff67444b664ad1c1af47fa2cadadc91248f50af14cde46b17c52c9898afd1e5af595048d3ef5e56399564ad3e2499a97255d621a3f157bcc5445c3fb32f", @ANYRESDEC], 0x1000001bd) 00:30:29 executing program 1: pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000200)=0x1, 0x4) setsockopt$sock_timeval(r2, 0x1, 0x15, &(0x7f0000000040)={0x0, 0x2710}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x10) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000100)={0x0, 0x81, 0x1df}, 0x14) write$binfmt_misc(r1, &(0x7f0000000080)=ANY=[], 0xff01) r3 = accept4$unix(r0, 0x0, &(0x7f0000001b40), 0x80800) recvmmsg$unix(r3, &(0x7f0000006d80)=[{{&(0x7f0000000240)=@abs, 0x6e, &(0x7f0000000080)=[{&(0x7f00000002c0)=""/112, 0x70}, {&(0x7f0000000340)=""/83, 0x53}], 0x2, &(0x7f00000003c0)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x48}}, {{&(0x7f0000000440)=@abs, 0x6e, &(0x7f0000000140)=[{0x0}], 0x1}}, {{&(0x7f0000000640), 0x6e, &(0x7f0000000900)=[{&(0x7f00000006c0)=""/181, 0xb5}, {&(0x7f0000000780)=""/98, 0x62}, {&(0x7f0000000800)=""/95, 0x5f}, {&(0x7f0000000880)=""/69, 0x45}, {&(0x7f00000001c0)=""/50, 0x32}], 0x5}}, {{0x0, 0x0, &(0x7f0000002b40)=[{&(0x7f0000000980)=""/35, 0x23}, {&(0x7f00000009c0)=""/4096, 0x1000}, {&(0x7f00000019c0)=""/176, 0xb0}, {&(0x7f0000001a80)=""/134, 0x86}, {0x0}], 0x5}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000006580)=[{&(0x7f0000005280)=""/50, 0x32}, {&(0x7f00000052c0)=""/125, 0x7d}, {&(0x7f0000005340)=""/4096, 0x1000}, {&(0x7f0000006340)=""/19, 0x13}, {&(0x7f0000006380)=""/232, 0xe8}, {&(0x7f0000006480)}, {&(0x7f00000064c0)=""/176, 0xb0}], 0x7}}, {{0x0, 0x0, &(0x7f0000006780)=[{&(0x7f0000006600)=""/215, 0xd7}, {&(0x7f0000006700)=""/77, 0x4d}], 0x2}}, {{0x0, 0x0, &(0x7f0000006c80)=[{&(0x7f00000067c0)=""/138, 0x8a}, {&(0x7f0000006880)=""/111, 0x6f}, {&(0x7f0000006900)=""/87, 0x57}, {&(0x7f0000006980)=""/51, 0x33}, {&(0x7f00000069c0)=""/172, 0xac}, {&(0x7f0000006a80)=""/26, 0x1a}, {&(0x7f0000006ac0)=""/120, 0x78}, {&(0x7f0000006b40)=""/240, 0xf0}, {&(0x7f0000006c40)=""/20, 0x14}], 0x9, &(0x7f0000006d40)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x18}}], 0x8, 0x100, &(0x7f0000006f80)={0x77359400}) pipe(&(0x7f0000006480)) socket$netlink(0x10, 0x3, 0x8000000004) splice(0xffffffffffffffff, &(0x7f0000000540)=0x6, 0xffffffffffffffff, &(0x7f00000005c0)=0x7, 0xc5, 0xa) splice(r0, 0x0, r2, 0x0, 0x10003, 0x0) 00:30:29 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000280)="230000000100c0", 0x7) 00:30:29 executing program 3: pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000200)=0x1, 0x4) setsockopt$sock_timeval(r2, 0x1, 0x15, &(0x7f0000000040)={0x0, 0x2710}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x10) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000100)={0x0, 0x81, 0x1df}, 0x14) write$binfmt_misc(r1, &(0x7f0000000080)=ANY=[], 0xff01) r3 = accept4$unix(r0, 0x0, &(0x7f0000001b40), 0x80800) recvmmsg$unix(r3, &(0x7f0000006d80)=[{{&(0x7f0000000240)=@abs, 0x6e, &(0x7f0000000080)=[{&(0x7f00000002c0)=""/112, 0x70}, {&(0x7f0000000340)=""/83, 0x53}], 0x2, &(0x7f00000003c0)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x48}}, {{&(0x7f0000000440)=@abs, 0x6e, &(0x7f0000000140)=[{0x0}], 0x1}}, {{&(0x7f0000000640), 0x6e, &(0x7f0000000900)=[{&(0x7f00000006c0)=""/181, 0xb5}, {&(0x7f0000000780)=""/98, 0x62}, {&(0x7f0000000800)=""/95, 0x5f}, {&(0x7f0000000880)=""/69, 0x45}, {&(0x7f00000001c0)=""/50, 0x32}], 0x5}}, {{0x0, 0x0, &(0x7f0000002b40)=[{&(0x7f0000000980)=""/35, 0x23}, {&(0x7f00000009c0)=""/4096, 0x1000}, {&(0x7f00000019c0)=""/176, 0xb0}, {&(0x7f0000001a80)=""/134, 0x86}, {0x0}], 0x5}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000006580)=[{&(0x7f0000005280)=""/50, 0x32}, {&(0x7f00000052c0)=""/125, 0x7d}, {&(0x7f0000005340)=""/4096, 0x1000}, {&(0x7f0000006340)=""/19, 0x13}, {&(0x7f0000006380)=""/232, 0xe8}, {&(0x7f0000006480)}, {&(0x7f00000064c0)=""/176, 0xb0}], 0x7}}, {{0x0, 0x0, &(0x7f0000006780)=[{&(0x7f0000006600)=""/215, 0xd7}, {&(0x7f0000006700)=""/77, 0x4d}], 0x2}}, {{0x0, 0x0, &(0x7f0000006c80)=[{&(0x7f00000067c0)=""/138, 0x8a}, {&(0x7f0000006880)=""/111, 0x6f}, {&(0x7f0000006900)=""/87, 0x57}, {&(0x7f0000006980)=""/51, 0x33}, {&(0x7f00000069c0)=""/172, 0xac}, {&(0x7f0000006a80)=""/26, 0x1a}, {&(0x7f0000006ac0)=""/120, 0x78}, {&(0x7f0000006b40)=""/240, 0xf0}, {&(0x7f0000006c40)=""/20, 0x14}], 0x9, &(0x7f0000006d40)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x18}}], 0x8, 0x100, &(0x7f0000006f80)={0x77359400}) pipe(&(0x7f0000006480)) socket$netlink(0x10, 0x3, 0x8000000004) splice(0xffffffffffffffff, &(0x7f0000000540)=0x6, 0xffffffffffffffff, &(0x7f00000005c0)=0x7, 0xc5, 0xa) splice(r0, 0x0, r2, 0x0, 0x10003, 0x0) 00:30:30 executing program 2: unshare(0x6c060000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0x81) sendto$inet6(r0, 0x0, 0x1e, 0x2200c851, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) read(r0, &(0x7f0000000400)=""/67, 0x43) shutdown(r0, 0x0) 00:30:30 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xe, 0x0, &(0x7f0000000580)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={0x0}}, 0x0) read(r0, &(0x7f0000000100)=""/2, 0x2) r2 = socket$inet6(0xa, 0x3, 0x2c) r3 = socket$inet_dccp(0x2, 0x6, 0x0) getpeername(r3, &(0x7f0000000140)=@generic, &(0x7f0000000000)=0x80) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r4 = socket$inet6(0xa, 0x80003, 0x6b) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000001dc0)=ANY=[@ANYBLOB="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"], 0x1) socket(0x10, 0x5, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001240)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f000016e000/0x11000)=nil, 0x11000, 0x0, 0x28011, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000380)=ANY=[@ANYRESHEX=r5, @ANYRESDEC], 0x208e24b) bpf$MAP_CREATE(0x0, &(0x7f0000000480)={0x1d, 0x3, 0x0, 0x200, 0x1, 0x1, 0x3, '\x00', 0x0, r5, 0x3, 0x2, 0x5}, 0x40) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r2, 0x29, 0x7, &(0x7f0000000080)=0x2, 0x4) write$binfmt_misc(r1, &(0x7f0000000080)=ANY=[], 0x2bb98205) splice(r0, 0x0, r2, 0x0, 0x4ff9c, 0x0) 00:30:30 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x11, 0x4, &(0x7f00000001c0)=@framed={{}, [@ldst={0x3, 0x0, 0x3}]}, &(0x7f0000000200)='syzkaller\x00', 0x2, 0xd7, &(0x7f0000000600)=""/215, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 00:30:30 executing program 3: pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000200)=0x1, 0x4) setsockopt$sock_timeval(r2, 0x1, 0x15, &(0x7f0000000040)={0x0, 0x2710}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x10) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000100)={0x0, 0x81, 0x1df}, 0x14) write$binfmt_misc(r1, &(0x7f0000000080)=ANY=[], 0xff01) r3 = accept4$unix(r0, 0x0, &(0x7f0000001b40), 0x80800) recvmmsg$unix(r3, &(0x7f0000006d80)=[{{&(0x7f0000000240)=@abs, 0x6e, &(0x7f0000000080)=[{&(0x7f00000002c0)=""/112, 0x70}, {&(0x7f0000000340)=""/83, 0x53}], 0x2, &(0x7f00000003c0)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x48}}, {{&(0x7f0000000440)=@abs, 0x6e, &(0x7f0000000140)=[{0x0}], 0x1}}, {{&(0x7f0000000640), 0x6e, &(0x7f0000000900)=[{&(0x7f00000006c0)=""/181, 0xb5}, {&(0x7f0000000780)=""/98, 0x62}, {&(0x7f0000000800)=""/95, 0x5f}, {&(0x7f0000000880)=""/69, 0x45}, {&(0x7f00000001c0)=""/50, 0x32}], 0x5}}, {{0x0, 0x0, &(0x7f0000002b40)=[{&(0x7f0000000980)=""/35, 0x23}, {&(0x7f00000009c0)=""/4096, 0x1000}, {&(0x7f00000019c0)=""/176, 0xb0}, {&(0x7f0000001a80)=""/134, 0x86}, {0x0}], 0x5}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000006580)=[{&(0x7f0000005280)=""/50, 0x32}, {&(0x7f00000052c0)=""/125, 0x7d}, {&(0x7f0000005340)=""/4096, 0x1000}, {&(0x7f0000006340)=""/19, 0x13}, {&(0x7f0000006380)=""/232, 0xe8}, {&(0x7f0000006480)}, {&(0x7f00000064c0)=""/176, 0xb0}], 0x7}}, {{0x0, 0x0, &(0x7f0000006780)=[{&(0x7f0000006600)=""/215, 0xd7}, {&(0x7f0000006700)=""/77, 0x4d}], 0x2}}, {{0x0, 0x0, &(0x7f0000006c80)=[{&(0x7f00000067c0)=""/138, 0x8a}, {&(0x7f0000006880)=""/111, 0x6f}, {&(0x7f0000006900)=""/87, 0x57}, {&(0x7f0000006980)=""/51, 0x33}, {&(0x7f00000069c0)=""/172, 0xac}, {&(0x7f0000006a80)=""/26, 0x1a}, {&(0x7f0000006ac0)=""/120, 0x78}, {&(0x7f0000006b40)=""/240, 0xf0}, {&(0x7f0000006c40)=""/20, 0x14}], 0x9, &(0x7f0000006d40)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x18}}], 0x8, 0x100, &(0x7f0000006f80)={0x77359400}) pipe(&(0x7f0000006480)) socket$netlink(0x10, 0x3, 0x8000000004) splice(0xffffffffffffffff, &(0x7f0000000540)=0x6, 0xffffffffffffffff, &(0x7f00000005c0)=0x7, 0xc5, 0xa) splice(r0, 0x0, r2, 0x0, 0x10003, 0x0) 00:30:30 executing program 1: pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000200)=0x1, 0x4) setsockopt$sock_timeval(r2, 0x1, 0x15, &(0x7f0000000040)={0x0, 0x2710}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x10) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000100)={0x0, 0x81, 0x1df}, 0x14) write$binfmt_misc(r1, &(0x7f0000000080)=ANY=[], 0xff01) r3 = accept4$unix(r0, 0x0, &(0x7f0000001b40), 0x80800) recvmmsg$unix(r3, &(0x7f0000006d80)=[{{&(0x7f0000000240)=@abs, 0x6e, &(0x7f0000000080)=[{&(0x7f00000002c0)=""/112, 0x70}, {&(0x7f0000000340)=""/83, 0x53}], 0x2, &(0x7f00000003c0)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x48}}, {{&(0x7f0000000440)=@abs, 0x6e, &(0x7f0000000140)=[{0x0}], 0x1}}, {{&(0x7f0000000640), 0x6e, &(0x7f0000000900)=[{&(0x7f00000006c0)=""/181, 0xb5}, {&(0x7f0000000780)=""/98, 0x62}, {&(0x7f0000000800)=""/95, 0x5f}, {&(0x7f0000000880)=""/69, 0x45}, {&(0x7f00000001c0)=""/50, 0x32}], 0x5}}, {{0x0, 0x0, &(0x7f0000002b40)=[{&(0x7f0000000980)=""/35, 0x23}, {&(0x7f00000009c0)=""/4096, 0x1000}, {&(0x7f00000019c0)=""/176, 0xb0}, {&(0x7f0000001a80)=""/134, 0x86}, {0x0}], 0x5}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000006580)=[{&(0x7f0000005280)=""/50, 0x32}, {&(0x7f00000052c0)=""/125, 0x7d}, {&(0x7f0000005340)=""/4096, 0x1000}, {&(0x7f0000006340)=""/19, 0x13}, {&(0x7f0000006380)=""/232, 0xe8}, {&(0x7f0000006480)}, {&(0x7f00000064c0)=""/176, 0xb0}], 0x7}}, {{0x0, 0x0, &(0x7f0000006780)=[{&(0x7f0000006600)=""/215, 0xd7}, {&(0x7f0000006700)=""/77, 0x4d}], 0x2}}, {{0x0, 0x0, &(0x7f0000006c80)=[{&(0x7f00000067c0)=""/138, 0x8a}, {&(0x7f0000006880)=""/111, 0x6f}, {&(0x7f0000006900)=""/87, 0x57}, {&(0x7f0000006980)=""/51, 0x33}, {&(0x7f00000069c0)=""/172, 0xac}, {&(0x7f0000006a80)=""/26, 0x1a}, {&(0x7f0000006ac0)=""/120, 0x78}, {&(0x7f0000006b40)=""/240, 0xf0}, {&(0x7f0000006c40)=""/20, 0x14}], 0x9, &(0x7f0000006d40)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x18}}], 0x8, 0x100, &(0x7f0000006f80)={0x77359400}) pipe(&(0x7f0000006480)) socket$netlink(0x10, 0x3, 0x8000000004) splice(0xffffffffffffffff, &(0x7f0000000540)=0x6, 0xffffffffffffffff, &(0x7f00000005c0)=0x7, 0xc5, 0xa) splice(r0, 0x0, r2, 0x0, 0x10003, 0x0) [ 328.260578][T15539] hsr0 speed is unknown, defaulting to 1000 00:30:30 executing program 2: unshare(0x6c060000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0x81) sendto$inet6(r0, 0x0, 0x1e, 0x2200c851, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) read(r0, &(0x7f0000000400)=""/67, 0x43) shutdown(r0, 0x0) [ 328.490167][T15568] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING 00:30:30 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001240)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000140)={0x20}) openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x2e011, r0, 0x0) 00:30:30 executing program 4: socketpair$unix(0x1, 0x0, 0x0, 0x0) close(0xffffffffffffffff) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000005c0)=0x169, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000780)={@in={{0x2, 0x0, @local}}, 0x0, 0x9, 0x47, 0x0, "0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030cf00"}, 0xd8) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20000ffd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f00000001c0)=0x5, 0x4) recvmsg(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)=[{0x0}], 0x1, 0x0, 0x0, 0x5801}, 0x100) write$binfmt_elf64(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="92342dfe497400d60f15957f269f4b5eb214fb725e553e96daee6d04dc0e262c319ec1ce213158a6bf2757a88a8bd6b9456d837b961b9a4168ef005ff67444b664ad1c1af47fa2cadadc91248f50af14cde46b17c52c9898afd1e5af595048d3ef5e56399564ad3e2499a97255d621a3f157bcc5445c3fb32f", @ANYRESDEC], 0x1000001bd) 00:30:30 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x18, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x4}]}, 0x18}}, 0x0) 00:30:30 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x9}, 0x1c) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f00000001c0)=@fragment, 0x8) sendmmsg(r0, &(0x7f0000006d00)=[{{0x0, 0x1002002, 0x0}}], 0xc6, 0x0) [ 328.910129][T15572] hsr0 speed is unknown, defaulting to 1000 00:30:31 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000100)={0x14, 0xa, 0xa, 0x201}, 0x14}}, 0x0) 00:30:31 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001240)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000140)={0x20}) openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x2e011, r0, 0x0) 00:30:31 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x9}, 0x1c) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f00000001c0)=@fragment, 0x8) sendmmsg(r0, &(0x7f0000006d00)=[{{0x0, 0x1002002, 0x0}}], 0xc6, 0x0) 00:30:32 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xe, 0x0, &(0x7f0000000580)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={0x0}}, 0x0) read(r0, &(0x7f0000000100)=""/2, 0x2) r2 = socket$inet6(0xa, 0x3, 0x2c) r3 = socket$inet_dccp(0x2, 0x6, 0x0) getpeername(r3, &(0x7f0000000140)=@generic, &(0x7f0000000000)=0x80) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r4 = socket$inet6(0xa, 0x80003, 0x6b) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000001dc0)=ANY=[@ANYBLOB="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"], 0x1) socket(0x10, 0x5, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001240)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f000016e000/0x11000)=nil, 0x11000, 0x0, 0x28011, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000380)=ANY=[@ANYRESHEX=r5, @ANYRESDEC], 0x208e24b) bpf$MAP_CREATE(0x0, &(0x7f0000000480)={0x1d, 0x3, 0x0, 0x200, 0x1, 0x1, 0x3, '\x00', 0x0, r5, 0x3, 0x2, 0x5}, 0x40) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r2, 0x29, 0x7, &(0x7f0000000080)=0x2, 0x4) write$binfmt_misc(r1, &(0x7f0000000080)=ANY=[], 0x2bb98205) splice(r0, 0x0, r2, 0x0, 0x4ff9c, 0x0) 00:30:32 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x5}, 0x6) 00:30:32 executing program 2: unshare(0x6c060000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0x81) sendto$inet6(r0, 0x0, 0x1e, 0x2200c851, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) read(r0, &(0x7f0000000400)=""/67, 0x43) shutdown(r0, 0x0) 00:30:32 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001240)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000140)={0x20}) openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x2e011, r0, 0x0) 00:30:32 executing program 4: socketpair$unix(0x1, 0x0, 0x0, 0x0) close(0xffffffffffffffff) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000005c0)=0x169, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000780)={@in={{0x2, 0x0, @local}}, 0x0, 0x9, 0x47, 0x0, "0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030cf00"}, 0xd8) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20000ffd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f00000001c0)=0x5, 0x4) recvmsg(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)=[{0x0}], 0x1, 0x0, 0x0, 0x5801}, 0x100) write$binfmt_elf64(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="92342dfe497400d60f15957f269f4b5eb214fb725e553e96daee6d04dc0e262c319ec1ce213158a6bf2757a88a8bd6b9456d837b961b9a4168ef005ff67444b664ad1c1af47fa2cadadc91248f50af14cde46b17c52c9898afd1e5af595048d3ef5e56399564ad3e2499a97255d621a3f157bcc5445c3fb32f", @ANYRESDEC], 0x1000001bd) 00:30:32 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x9}, 0x1c) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f00000001c0)=@fragment, 0x8) sendmmsg(r0, &(0x7f0000006d00)=[{{0x0, 0x1002002, 0x0}}], 0xc6, 0x0) 00:30:32 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x5}, 0x6) [ 330.389939][T15630] hsr0 speed is unknown, defaulting to 1000 [ 330.597179][T15646] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING 00:30:32 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x5}, 0x6) 00:30:32 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x9}, 0x1c) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f00000001c0)=@fragment, 0x8) sendmmsg(r0, &(0x7f0000006d00)=[{{0x0, 0x1002002, 0x0}}], 0xc6, 0x0) 00:30:32 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001240)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000140)={0x20}) openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x2e011, r0, 0x0) 00:30:32 executing program 2: unshare(0x6c060000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0x81) sendto$inet6(r0, 0x0, 0x1e, 0x2200c851, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) read(r0, &(0x7f0000000400)=""/67, 0x43) shutdown(r0, 0x0) 00:30:33 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x5}, 0x6) [ 331.206387][T15669] hsr0 speed is unknown, defaulting to 1000 00:30:34 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xe, 0x0, &(0x7f0000000580)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={0x0}}, 0x0) read(r0, &(0x7f0000000100)=""/2, 0x2) r2 = socket$inet6(0xa, 0x3, 0x2c) r3 = socket$inet_dccp(0x2, 0x6, 0x0) getpeername(r3, &(0x7f0000000140)=@generic, &(0x7f0000000000)=0x80) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r4 = socket$inet6(0xa, 0x80003, 0x6b) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000001dc0)=ANY=[@ANYBLOB="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"], 0x1) socket(0x10, 0x5, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001240)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f000016e000/0x11000)=nil, 0x11000, 0x0, 0x28011, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000380)=ANY=[@ANYRESHEX=r5, @ANYRESDEC], 0x208e24b) bpf$MAP_CREATE(0x0, &(0x7f0000000480)={0x1d, 0x3, 0x0, 0x200, 0x1, 0x1, 0x3, '\x00', 0x0, r5, 0x3, 0x2, 0x5}, 0x40) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r2, 0x29, 0x7, &(0x7f0000000080)=0x2, 0x4) write$binfmt_misc(r1, &(0x7f0000000080)=ANY=[], 0x2bb98205) splice(r0, 0x0, r2, 0x0, 0x4ff9c, 0x0) 00:30:34 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{0x3}, {}]}]}}, &(0x7f0000000000)=""/232, 0x36, 0xe8, 0x1}, 0x20) 00:30:34 executing program 5: r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) bind$ax25(r0, &(0x7f0000000000)={{0x2, @default}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) 00:30:34 executing program 2: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f000001dc00)={0x1b, 0x0, 0x0, 0x2000}, 0x40) mmap(&(0x7f00000fb000/0x2000)=nil, 0x2000, 0x0, 0x11, r3, 0x0) splice(r0, 0x0, r2, 0x0, 0x7fffffff, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_encap(r4, 0x11, 0x64, &(0x7f0000000440), 0x4) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x10) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x6, &(0x7f0000002600)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x80000001, 0x5e, &(0x7f0000000480)=""/94, 0x41100, 0x11, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f00000003c0)={0x0, 0x1}, 0x8, 0x10, &(0x7f0000000100)={0x5, 0x0, 0x0, 0x2}, 0xfffffffffffffd30}, 0x78) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r5, 0x50009417, &(0x7f0000002740)={{r5}, 0x0, 0x2, @inherit={0x60, &(0x7f00000002c0)={0x0, 0x3, 0x1ff, 0xff, {0x1, 0x2, 0x7f, 0x2, 0x5}, [0x6, 0x0, 0x1]}}, @subvolid=0x1000}) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r5, 0x8008f512, &(0x7f00000001c0)) ioctl$BTRFS_IOC_RM_DEV_V2(0xffffffffffffffff, 0x5000943a, &(0x7f0000001600)={{}, 0x0, 0x0, @inherit={0x70, &(0x7f0000000200)=ANY=[@ANYBLOB="010000000000cd46c800000500000006378b7260ccf26d1be405800000000001800000000000000300000000000000240000000000000001000080000000003f000000000000007f000000000000000177f107ddcebce4b12a2dcb803a9c000000000000003b5c000000000000020000200000000000000000000003"]}, @subvolid}) r6 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r6, &(0x7f00000005c0)="23000000220021bb00b9409b849ac00a00e3b8a98623ff2a09a6c5b01109e3ecabbe82", 0x23, 0x0, 0x0, 0x0) recvfrom$inet6(r6, &(0x7f0000000000)=""/203, 0xcb, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="900000a453001f", 0x7, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="1a00000021", 0x5, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)='q', 0x1, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000798204a38b873c80001c0000078dde3f0000000800"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfffffd88) 00:30:34 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000004700)={0x0, 0x0, &(0x7f0000004680)=[{&(0x7f0000001980)={0x1c, 0x1a, 0x521, 0x0, 0x0, "", [@generic="c41e7320d698d5b8586a"]}, 0x1c}], 0x1}, 0x0) 00:30:34 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_int(r0, 0x29, 0xcf, &(0x7f0000000000), &(0x7f0000000040)=0x4) 00:30:34 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x5) sendmsg$inet6(r0, &(0x7f00000004c0)={&(0x7f0000000040)={0xa, 0x4e21, 0x0, @private0}, 0x1c, 0x0}, 0x0) 00:30:34 executing program 5: syz_emit_ethernet(0x66, &(0x7f0000000100)={@broadcast, @broadcast, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @rand_addr, @multicast1}, {{0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x4, 0x8100}}}}}}, 0x0) 00:30:34 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000004700)={0x0, 0x0, &(0x7f0000004680)=[{&(0x7f0000001980)={0x1c, 0x1a, 0x521, 0x0, 0x0, "", [@generic="c41e7320d698d5b8586a"]}, 0x1c}], 0x1}, 0x0) 00:30:34 executing program 3: r0 = socket(0x1e, 0x1, 0x0) sendto$packet(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x1e, 0x0, 0x0, 0x1, 0x0, 0x6, @random="bd0eaf6adf46"}, 0x14) [ 332.509390][T15709] netlink: 1 bytes leftover after parsing attributes in process `syz-executor.2'. 00:30:34 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_ifreq(r0, 0x8914, &(0x7f0000000100)={'wlan1\x00', @ifru_addrs=@xdp}) [ 332.641215][T15718] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING 00:30:34 executing program 4: r0 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r0, &(0x7f0000000000)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @multicast2}}, 0x24) r1 = socket$rxrpc(0x21, 0x2, 0xa) r2 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r2, &(0x7f0000000080)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @empty}}, 0x24) bind$rxrpc(r1, &(0x7f0000000040)=@in6={0x21, 0x0, 0x2, 0x1c, {0x2, 0x0, 0x0, @mcast2}}, 0x24) 00:30:35 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xe, 0x0, &(0x7f0000000580)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={0x0}}, 0x0) read(r0, &(0x7f0000000100)=""/2, 0x2) r2 = socket$inet6(0xa, 0x3, 0x2c) r3 = socket$inet_dccp(0x2, 0x6, 0x0) getpeername(r3, &(0x7f0000000140)=@generic, &(0x7f0000000000)=0x80) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r4 = socket$inet6(0xa, 0x80003, 0x6b) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000001dc0)=ANY=[@ANYBLOB="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"], 0x1) socket(0x10, 0x5, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001240)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f000016e000/0x11000)=nil, 0x11000, 0x0, 0x28011, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000380)=ANY=[@ANYRESHEX=r5, @ANYRESDEC], 0x208e24b) bpf$MAP_CREATE(0x0, &(0x7f0000000480)={0x1d, 0x3, 0x0, 0x200, 0x1, 0x1, 0x3, '\x00', 0x0, r5, 0x3, 0x2, 0x5}, 0x40) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r2, 0x29, 0x7, &(0x7f0000000080)=0x2, 0x4) write$binfmt_misc(r1, &(0x7f0000000080)=ANY=[], 0x2bb98205) splice(r0, 0x0, r2, 0x0, 0x4ff9c, 0x0) 00:30:35 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000004700)={0x0, 0x0, &(0x7f0000004680)=[{&(0x7f0000001980)={0x1c, 0x1a, 0x521, 0x0, 0x0, "", [@generic="c41e7320d698d5b8586a"]}, 0x1c}], 0x1}, 0x0) 00:30:35 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000180), &(0x7f00000003c0)=0xc) sendmsg$nl_netfilter(r0, &(0x7f0000006740)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[], 0x5c}, 0x1, 0x0, 0x0, 0x4000010}, 0x24040084) ioctl$sock_ifreq(0xffffffffffffffff, 0x891f, &(0x7f00000066c0)={'wlan0\x00', @ifru_hwaddr=@dev}) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, 0x0, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x1c2dc0003}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) close(r1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r3, &(0x7f0000000080)=[{&(0x7f0000000240)="d1875c7fec8975", 0x7}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x10012, r3, 0x0) sendfile(r1, r2, 0x0, 0x10000000000000) 00:30:35 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_ifreq(r0, 0x8914, &(0x7f0000000100)={'wlan1\x00', @ifru_addrs=@xdp}) 00:30:35 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$FOU_CMD_DEL(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB='P\x00\x00\x00)3]'], 0x50}}, 0x0) 00:30:35 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000800)=ANY=[@ANYBLOB="5001000024000bef78e17e000000000000000000", @ANYRES32=r1, @ANYBLOB="00000000ffffffff00000000080001007265640024010200140001000000fdff00000000000000060080000c080003c4bf000000040102"], 0x150}}, 0x0) r2 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000140)=[{0x3, 0x0, &(0x7f0000000100), 0x4, &(0x7f0000000100), 0xb}], 0x4924924924928b4, 0x0) 00:30:36 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_elf32(r0, &(0x7f0000000380)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}], "839586282aeddd91399ab2ba9a9250a27e6c27688660ea2458de774b4cc67b7071af091605068c7eb330ab6a1d84cd30526164f2ed0d8cf5d9a314efac787f3657a3856a7312fb22adba61f39f5126def6659e69e0a4a73dd021136ed3823e7100198140c0b5c105255cbbad5bffdf277268688ff74d2a56c6c4d5d4431d8aa3bd7ccc524da618d4a1b72df6a1b9a8df61fe8b140b7decae49bc076df2baac5460c748e44f71358d19c8ce8d5f2dd87545b299ebe239e284bb200ff57a415939a2e4956576d4e0db7df030abd58ce503e1c47aafa4ac6e7d25868573114cecc21609730ee5b730d132a2723cbb569dbc836d4d5f92166d93f2008863272b55eb7442a46aa631c4de61f54997fe8a5490c8eccc889409734e38d6e8d413af96f704694118d6d1e0593cc6ae12a444edd2e0cd94d80212954ac3a4b2a140aedbc9d23edbacba0610d79c2ecaff27e3c77a3bcadbce959ac83cb3e9ddd8f43acef02b9bad1bf9c4478d61ade3d95ed6868762a04c9409d0af31c6a05378795c26cb8f2b5463b2a92c8fd1dbe61dd4063e1ea3c84e10b57ff834db2efb7c4101a9560e49732bfff080d088fc660c1e21d8806609f8115b2460612364d3e075e3968ce31651969154def84f8193edf02d03134ba4a6cede768347e81685ff3cdc4ece30b39461db48d0109d39b5c8c4975281dc7a72626fcd072a51308532dcb7880a2a3efe5933bb28c733d63c72310102e8360b8e4b54a5c3ca4a68487dfcb0244f2b8f3cc823ee926c003a0d28aec8d02260fbb6fc46ff004178a5da9d3fc69aac2b3c3fbe90aa3a15fc387251bcdfeef51c0533ad777a774dfeb67d1a101e774a0fc2f305bc722c02d665a3786a45dc4d5c5303337ce3e8a06cd8f92f9fd947f8366bb7519b964f6261720a71fc468d792cf41e41713e9f0533e5ca9395533c96c12932c123b1a1a5ef3d219bcd67df9fbcadb254cfa62d51f19b6a3a8e5d92d899e749b8c61d2986bdde112ee0550a09f44ca549e3bbaba4bd2455d60a7bd1c18f17f7f375f74a24fe160c26b8e5bbb0cdbbc89fdec7f71acda5a6a88270ebb248255ec1d3a45a21f31fbde45fb42dcebdc329e0921540e3e842cbb7b38a3ba5cccc71051f358041ba7a141e0ae1b30613a63fe074926cb7f286ae1e749a8be62cd3099cb476d033e4ebe195f4dd831d1a789cd2d4fe3d2c16859b9a7d12ca6237c16fd9df3c59d943474e7ca565af4037dc4a880f30c164d8bf3ab727013ce0b69e6cd9055d3c25671beb9d738dac27c5cb44ba6430e1130613134b1fd8105fb707a1d84882153c34fee4f1765dce77619cf7c75cebed548fcd1516d59c580b3a6ac9ac1817348efed474c91014e4f479e67c5389764eef2611568a8b0620993448af57f20f4b7c80a44229dc49997489de27ad726d2c2652fa924e28613ccafa40e6c7905f97801633b1c5c95bf052bb4036bae534067d85c60032c8f64011e40f59ba35710e8f647c2fbce5b79e8649739a507ba37c6857407950fa58b0e3b9a8071a2944a30af1a74e72b6c71c67609e357869bca02263691dbe4d7de7ae5c18d2cf8efdc5710353f7cd9b7ffa016ec60cc47fa306a3428bc44a2cc9b4dacf73a56e77a19cc29fe6e8e880f7249cdc6d9bb2d8069fb5ca41b92a640e3ad764048ad4649e45dd4c7965d02a0dcd2c65eab51853c0cf14f2b218f510eea7de3955a2b43a88edc4ba3345805cb2e9b55f3e9d468f00b7a167f70414a2580c1b60313717ead9d8b061318353d1197f4c8e528a219691157e614a38d77d19df5b9dbc9f4a5e14121b64749560b50801f877ac94b66ebdb0891b806e3f225b348a3a05f9fdd70ebac35c96f5e088d2ff355d8a583d76e116ccb4ba523a37b6782d9d41660f48c6c77a7f64673136b5097d9f8147e6e1215e70af9850d1e2a17a658dbf5f091dc4dd9442204e7c737a4ba57185f964e5cee0adb3ce0aaa58d724c7cddfcb2cf9ffe4c11e56a9ce2ce0cfc8800f531a01e4598f484d045d830bde506fe5094f28a93984a0acd6ae08e72c545001d75fd2a2ca5c62e813e2e2f56f05edd5c49454ac99135b402ebd5abf2edebb84ddb2e4fcecc684f5ea6d819893a053cb17a3a3cc261ebd529578a24f80d2e7a4ec9c48cbecdfc3757ca22ce17937542f2bd2a3abcd497c463caf344c9140f89583fc354c69a2e97a8b6afc0e143c624159accda34caf5e90497f540750ad70b659827326fee0d5b32181e7a86c347e0de24a4dc15d9670f6e32f83d12a020bc4eed97d74ed1a7511b28f93727f03bd8649d84578a174a4615d192cd3f436a6c47a453d2342625b42531672b48c30b5cb402fd5f35e4429e38bef62f65d6e3a683047cf75683c0297a6a327dcc3897088297d5fa4ee4a3796bfba24a0733feea55e730bc9cb9cedbd6a242bef95886d22d1655c9713ceaf59b5af61ddf6deccfa9943385b50db9e208b5b870f99fe5260f3555381be8bac6cde6b65a6356f0eee7ef0a94382f15f777df986dc27e5d77179503a8da939582945a7b0fa0ede2209487f9272bfc0fb953c4c9edc2acb969a49be84231024d52ffae71ce6c3737a0087e8ad8445b4a762a5ecd76122b1dfa8ce445b4cd660115807f29a66f5fa87082e78dc6240bfe1a9ce6149632dc8beab0f4cee9090518f0a726898946af7b0523cb896f502bdf512a08074605e2e3c9fc15254f8e79ef95022dbe972e9eabb0d09b611ebbf12ff7c1ec3a6db24faafa078780d96f0e7a069c9dc59305a630bb86e0a9fbd149ee28768a25c9f0500ff4eaf7c37e85d0dbd3c3ade9f7795070d6787b6343c45c79db9040e8686a4c4bd972692431c1d6e3148efb73b57d71a0ea67af439ac1007d9b1c9617644f6a554183ea69ae3c7239d362585e1b23077e7aed14bf305ea0b216c0b289c2000fcb4e79e9c2c2c851b002953960ccdbbe550734c2eba71ea9519c09c7c80af86163f91a42bb5d4a203063dda483b57330a56cb441610482c9ad58efb34d4139e492ab3dbd124aaabbc061e5803addaa4255e41a7449857327acb1a756e76add1cd3909ff095ce2a5604e3e92f588c50dcfe59522357952d8bc521ad1098455a668f79e5856776e823009e2aca295d1dd30bf9d7af5edfab165f953f95d4fd93317ea5590b3834032b9ff40a0947650d5acc47a93ed9f7a4bb8501153ad922ba84ad34d975caa92816faa28a96704e3f4de2ceedef508ac592006d8ec1794ffe148a23723d99827f7479e986cee02e984e54bb38b4970657fb5e0085a5175773a9e9ab8132de306d39965d71b6d0593feccf64d2bd6f87c08243c8b84dba6a6cc0d4643c9a0af79fd9601f72b0122b51e9405bd824e6e37c5027a84366124623c0a7ccf1b7ea4b98185c41b36ac2ee2f2c05272326e44e46aa652426bf6dfd8a63abfa8002c68a97c07a9c60291543a204bcec0f2ac8ea2964cc3f42a6956ab76ec77b3da7e824fb3ea155a0d6c7079502e71261734b8b72e63d9d844f605c2999bdbcee968857e4c406f6bbb92f2bad0e46a270d26a986fe28cca0c115f4d47e114c86cce7e58618440972ed3c1f7b156358dc04a8486aa580ecc8eb4f4228dea37fa467ec8cf993f989cfb54547ee63ec001042c297adc6d9ce063bc88d08ea8333fb2fc332ce733df11be6fac90b7f4805216f476a29ce70536ae5a2f4a957bc631ce06ef316ea3a6c2b43c0327ec0dab3c137034dbf81d648cb59a146195b73ad43641c31355a6239a009181355d923b84d1a0f848ec5a3f1d043d2cc2edfa6a8f10f5e9bcaff6bd0a5d977c39abef6ae0cd6ba9d523e95c745428241db5060dd73eba78031a59d8a9e3c66c18ab5ccb8bccaeac7aeea8979118ee17f0ec37ae14cf83bdf6474348132dbf2d0aae7f8dd831382c0b8f8175be5da323fc3870aed69316a094ee74d665e9549da02a363a76ebc453abe436b5fdb7b7192c6e30d01b0337b16cb9aaf63996a80201f589d41f99a55e73d5e8d4d832c041e7b064d4291c4c603ca67c51a6e9ab11963b4affdc6e8cf3d7e87c34e44c87825715553959c7e1adaeb987898fcd1e985e88783ab4212e81a4c36f1135842d8bf14c66311d79ad02b44061f6fb4ba5b8bcafea627388dd482b1ea3b6b94f27f904ef374dccc7afe1657282b7a0d3e4866cbfad5f4d3c707dba4ee3bf755807f1d90a8043978ad85349be93f", ['\x00', '\x00', '\x00', '\x00']}, 0x1000) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000000c0)={0x20}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_elf64(r0, &(0x7f0000000380)=ANY=[], 0xfe6f) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000400)=ANY=[], 0x200600) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x0, r1}) 00:30:36 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_ifreq(r0, 0x8914, &(0x7f0000000100)={'wlan1\x00', @ifru_addrs=@xdp}) 00:30:36 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000004700)={0x0, 0x0, &(0x7f0000004680)=[{&(0x7f0000001980)={0x1c, 0x1a, 0x521, 0x0, 0x0, "", [@generic="c41e7320d698d5b8586a"]}, 0x1c}], 0x1}, 0x0) 00:30:36 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000800)=ANY=[@ANYBLOB="5001000024000bef78e17e000000000000000000", @ANYRES32=r1, @ANYBLOB="00000000ffffffff00000000080001007265640024010200140001000000fdff00000000000000060080000c080003c4bf000000040102"], 0x150}}, 0x0) r2 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000140)=[{0x3, 0x0, &(0x7f0000000100), 0x4, &(0x7f0000000100), 0xb}], 0x4924924924928b4, 0x0) 00:30:36 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r0, 0x1f00000000000000, 0x400000000000ce, 0x0, 0x0) [ 334.255284][T15750] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING 00:30:36 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_ifreq(r0, 0x8914, &(0x7f0000000100)={'wlan1\x00', @ifru_addrs=@xdp}) [ 334.504371][ T26] kauditd_printk_skb: 22 callbacks suppressed [ 334.504387][ T26] audit: type=1800 audit(1634603436.510:146): pid=15761 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.4" name="cgroup.controllers" dev="sda1" ino=14824 res=0 errno=0 00:30:37 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_ADDRESS={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, 0x2c}}, 0x0) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000300010000004500000025000000190011000600ad000200000000000006040000000000000000", 0x39}], 0x1) 00:30:37 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_elf32(r0, &(0x7f0000000380)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}], "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", ['\x00', '\x00', '\x00', '\x00']}, 0x1000) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000000c0)={0x20}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_elf64(r0, &(0x7f0000000380)=ANY=[], 0xfe6f) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000400)=ANY=[], 0x200600) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x0, r1}) 00:30:37 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000800)=ANY=[@ANYBLOB="5001000024000bef78e17e000000000000000000", @ANYRES32=r1, @ANYBLOB="00000000ffffffff00000000080001007265640024010200140001000000fdff00000000000000060080000c080003c4bf000000040102"], 0x150}}, 0x0) r2 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000140)=[{0x3, 0x0, &(0x7f0000000100), 0x4, &(0x7f0000000100), 0xb}], 0x4924924924928b4, 0x0) 00:30:37 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r0, 0x6, 0x1b, &(0x7f0000000000), &(0x7f0000000040)=0x4) 00:30:37 executing program 3: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x8, 0x1, &(0x7f0000000180)=@raw=[@alu], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 00:30:37 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001240)=@allocspi={0x126c, 0x16, 0x1, 0x0, 0x0, {{{@in6=@private2, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x32}, @in=@local, {}, {}, {}, 0x70bd27, 0x3502, 0x14, 0x1}, 0x0, 0x6}, [@algo_crypt={0x7d, 0x2, {{'cfb(xeta-generic)\x00'}, 0x1a8, "b1eadb2a6873fbef0b889ddbee7cf8996c24cfacc9889033ffacd953482c51498bfe562efd646fbe2113dd570c0973bc3571fd2b5c"}}, @coaddr={0x14, 0xe, @in6=@remote}, @algo_comp={0x1048, 0x3, {{'lzjh\x00'}, 0x8000, "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"}}, @sec_ctx={0x96, 0x8, {0x92, 0x8, 0x0, 0x81, 0x8a, "9af7d0ea20c601f1ed6673faef9961221eca5213b6c45e9494e82ec39e033a5cc3b7bd1bebcf8b2d4c3e355ec3fa4649e5927919bfcdef0ab190c4b34f4358a087b7d1cec425ad56f6faa855e7b37621fd5d90dc693590706c5c55faa18b9689f842dd101642494bdad4b008d366939c0e7e65231734c0f4590b71a51ab09b3f9e28dfe1aa784db10259"}}]}, 0x126c}}, 0x0) [ 335.626042][T15782] netlink: 'syz-executor.5': attribute type 4 has an invalid length. 00:30:37 executing program 3: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, 0x0, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x380000d, 0x6031, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x80000000001, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffd18, 0x840, 0x0, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, r0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000ffd000/0x3000)=nil, 0xfe27}, &(0x7f0000000100)=0x30) 00:30:37 executing program 1: r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000380)={0x28, 0x0, 0x0, @host}, 0x10) listen(r0, 0x0) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r1) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000040), 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(0xffffffffffffffff, 0x28, 0x1, &(0x7f0000000080)=0xffffffffffffffe1, 0x8) r2 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f00000000c0)={0x28, 0x0, 0x2711}, 0x10, 0x0) accept4$vsock_stream(r2, &(0x7f0000000100), 0x10, 0x80800) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r4 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r4, &(0x7f0000002400)={0x0, 0x0, &(0x7f0000002380)={&(0x7f0000000080)={0x28, 0x14, 0x1, 0x0, 0x0, {0x1}, [@INET_DIAG_REQ_BYTECODE={0x11, 0x1, "46a1495d46cfc85a27b8348c0e"}]}, 0x28}}, 0x0) r5 = accept$alg(r0, 0x0, 0x0) write(r5, &(0x7f0000000000)="c0", 0xfffffe99) 00:30:37 executing program 0: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) write(r0, &(0x7f0000000100)="240000001e005f0014f9f407faac470002000000050000000000080008000100000000ff", 0x24) 00:30:37 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_elf32(r0, &(0x7f0000000380)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}], "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", ['\x00', '\x00', '\x00', '\x00']}, 0x1000) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000000c0)={0x20}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_elf64(r0, &(0x7f0000000380)=ANY=[], 0xfe6f) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000400)=ANY=[], 0x200600) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x0, r1}) 00:30:38 executing program 0: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x50}, [@ldst={0x5, 0x5, 0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1}, 0x48) 00:30:38 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=@getsadinfo={0x1c, 0x23, 0x4, 0x70bd27, 0x25dfdbfb, 0x0, [@XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x80000000}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000000) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newsa={0x140, 0x10, 0x1, 0x0, 0x0, {{@in6=@mcast2, @in=@multicast2}, {@in6=@empty, 0x0, 0x6c}, @in6=@ipv4={'\x00', '\xff\xff', @empty}, {}, {0x5, 0x0, 0x1}, {0x0, 0x0, 0x67fd}, 0x0, 0x0, 0x2}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @replay_thresh={0x8}]}, 0x140}}, 0x0) r1 = socket$inet6(0xa, 0x80003, 0x6b) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000140)={0x3, &(0x7f0000002fe8)=[{0x35, 0x1, 0x4000000000401}, {0x60}, {0x6}]}, 0x10) [ 359.972460][ T7857] Bluetooth: hci3: command 0x0406 tx timeout [ 378.372783][ T1358] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.379157][ T1358] ieee802154 phy1 wpan1: encryption failed: -22 [ 439.820152][ T1358] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.826492][ T1358] ieee802154 phy1 wpan1: encryption failed: -22 [ 499.335232][ T27] INFO: task kworker/u4:0:8 blocked for more than 143 seconds. [ 499.342832][ T27] Not tainted 5.15.0-rc5-syzkaller #0 [ 499.361492][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 499.371646][ T27] task:kworker/u4:0 state:D stack:24040 pid: 8 ppid: 2 flags:0x00004000 [ 499.391739][ T27] Workqueue: netns cleanup_net [ 499.399375][ T27] Call Trace: [ 499.402684][ T27] __schedule+0xb44/0x5960 [ 499.413940][ T27] ? find_held_lock+0x2d/0x110 [ 499.421559][ T27] ? __mutex_lock+0x9c2/0x12f0 [ 499.431589][ T27] ? io_schedule_timeout+0x140/0x140 [ 499.439620][ T27] schedule+0xd3/0x270 [ 499.443731][ T27] schedule_preempt_disabled+0xf/0x20 [ 499.454353][ T27] __mutex_lock+0xa34/0x12f0 [ 499.461670][ T27] ? ip_fib_net_exit+0x1b/0x2b0 [ 499.471811][ T27] ? mutex_lock_io_nested+0x1150/0x1150 [ 499.480061][ T27] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 499.496516][ T27] ? sockfs_dname+0x80/0x80 [ 499.501216][ T27] ? iput.part.0+0x539/0x850 [ 499.512970][ T27] ip_fib_net_exit+0x1b/0x2b0 [ 499.517971][ T27] ? ip_fib_net_exit+0x2b0/0x2b0 [ 499.522957][ T27] ops_exit_list+0xb0/0x160 [ 499.535080][ T27] cleanup_net+0x4ea/0xb00 [ 499.539559][ T27] ? unregister_pernet_device+0x70/0x70 [ 499.551887][ T27] process_one_work+0x9bf/0x16b0 [ 499.557168][ T27] ? pwq_dec_nr_in_flight+0x2a0/0x2a0 [ 499.562569][ T27] ? rwlock_bug.part.0+0x90/0x90 [ 499.575068][ T27] ? _raw_spin_lock_irq+0x41/0x50 [ 499.580169][ T27] worker_thread+0x658/0x11f0 [ 499.584890][ T27] ? process_one_work+0x16b0/0x16b0 [ 499.594747][ T27] kthread+0x3e5/0x4d0 [ 499.599769][ T27] ? set_kthread_struct+0x130/0x130 [ 499.609376][ T27] ret_from_fork+0x1f/0x30 [ 499.614046][ T27] INFO: task syz-executor.2:15784 blocked for more than 143 seconds. [ 499.623172][ T27] Not tainted 5.15.0-rc5-syzkaller #0 [ 499.629778][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 499.639789][ T27] task:syz-executor.2 state:D stack:27656 pid:15784 ppid: 6593 flags:0x00004004 [ 499.649700][ T27] Call Trace: [ 499.653050][ T27] __schedule+0xb44/0x5960 [ 499.659393][ T27] ? find_held_lock+0x2d/0x110 [ 499.664197][ T27] ? __mutex_lock+0x9c0/0x12f0 [ 499.669841][ T27] ? io_schedule_timeout+0x140/0x140 [ 499.676057][ T27] schedule+0xd3/0x270 [ 499.680144][ T27] schedule_preempt_disabled+0xf/0x20 [ 499.686935][ T27] __mutex_lock+0xa34/0x12f0 [ 499.691809][ T27] ? rtnetlink_rcv_msg+0x3be/0xb80 [ 499.698662][ T27] ? mutex_lock_io_nested+0x1150/0x1150 [ 499.704237][ T27] ? rtnetlink_rcv_msg+0x388/0xb80 [ 499.710303][ T27] rtnetlink_rcv_msg+0x3be/0xb80 [ 499.720674][ T27] ? rtnl_newlink+0xa0/0xa0 [ 499.726369][ T27] ? netdev_core_pick_tx+0x2e0/0x2e0 [ 499.731701][ T27] netlink_rcv_skb+0x153/0x420 [ 499.737968][ T27] ? rtnl_newlink+0xa0/0xa0 [ 499.742510][ T27] ? netlink_ack+0xa60/0xa60 [ 499.747618][ T27] ? netlink_deliver_tap+0x1a2/0xc30 [ 499.752936][ T27] ? netlink_deliver_tap+0x1b1/0xc30 [ 499.759284][ T27] netlink_unicast+0x533/0x7d0 [ 499.764085][ T27] ? netlink_attachskb+0x880/0x880 [ 499.770198][ T27] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 499.777438][ T27] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 499.783720][ T27] ? __phys_addr_symbol+0x2c/0x70 [ 499.789775][ T27] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 499.797697][ T27] ? __check_object_size+0x16e/0x3f0 [ 499.803106][ T27] netlink_sendmsg+0x86d/0xda0 [ 499.809213][ T27] ? netlink_unicast+0x7d0/0x7d0 [ 499.814181][ T27] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 499.821865][ T27] ? netlink_unicast+0x7d0/0x7d0 [ 499.831283][ T27] sock_sendmsg+0xcf/0x120 [ 499.837682][ T27] ____sys_sendmsg+0x331/0x810 [ 499.842476][ T27] ? kernel_sendmsg+0x50/0x50 [ 499.848506][ T27] ? do_recvmmsg+0x6d0/0x6d0 [ 499.853117][ T27] ? __lock_acquire+0x162f/0x54a0 [ 499.858724][ T27] ___sys_sendmsg+0xf3/0x170 [ 499.863864][ T27] ? sendmsg_copy_msghdr+0x160/0x160 [ 499.870234][ T27] ? find_held_lock+0x2d/0x110 [ 499.877018][ T27] ? __might_fault+0xd3/0x180 [ 499.881814][ T27] ? lock_downgrade+0x6e0/0x6e0 [ 499.888183][ T27] __sys_sendmmsg+0x195/0x470 [ 499.892881][ T27] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 499.899573][ T27] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 499.906626][ T27] ? find_held_lock+0x2d/0x110 [ 499.911414][ T27] ? __context_tracking_exit+0xb8/0xe0 [ 499.918415][ T27] ? lock_downgrade+0x6e0/0x6e0 [ 499.923324][ T27] ? lock_downgrade+0x6e0/0x6e0 [ 499.928911][ T27] __x64_sys_sendmmsg+0x99/0x100 [ 499.933880][ T27] ? syscall_enter_from_user_mode+0x21/0x70 [ 499.940719][ T27] do_syscall_64+0x35/0xb0 [ 499.949645][ T27] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 499.957123][ T27] RIP: 0033:0x7f470b14aa39 [ 499.961574][ T27] RSP: 002b:00007f47086c0188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 499.971166][ T27] RAX: ffffffffffffffda RBX: 00007f470b24df60 RCX: 00007f470b14aa39 [ 499.980339][ T27] RDX: 04924924924928b4 RSI: 0000000020000140 RDI: 0000000000000004 [ 499.989599][ T27] RBP: 00007f470b1a4c5f R08: 0000000000000000 R09: 0000000000000000 [ 499.998635][ T27] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 500.007562][ T27] R13: 00007ffc91de543f R14: 00007f47086c0300 R15: 0000000000022000 [ 500.016553][ T27] INFO: task syz-executor.5:15786 blocked for more than 144 seconds. [ 500.024718][ T27] Not tainted 5.15.0-rc5-syzkaller #0 [ 500.031747][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 500.041367][ T27] task:syz-executor.5 state:D stack:27976 pid:15786 ppid: 6774 flags:0x00000004 [ 500.051805][ T27] Call Trace: [ 500.059560][ T27] __schedule+0xb44/0x5960 [ 500.064058][ T27] ? find_held_lock+0x2d/0x110 [ 500.070294][ T27] ? __mutex_lock+0x9c0/0x12f0 [ 500.075968][ T27] ? io_schedule_timeout+0x140/0x140 [ 500.081304][ T27] schedule+0xd3/0x270 [ 500.086825][ T27] schedule_preempt_disabled+0xf/0x20 [ 500.092248][ T27] __mutex_lock+0xa34/0x12f0 [ 500.097950][ T27] ? rtnetlink_rcv_msg+0x3be/0xb80 [ 500.103311][ T27] ? mutex_lock_io_nested+0x1150/0x1150 [ 500.110731][ T27] ? rtnetlink_rcv_msg+0x388/0xb80 [ 500.118581][ T27] rtnetlink_rcv_msg+0x3be/0xb80 [ 500.123532][ T27] ? rtnl_newlink+0xa0/0xa0 [ 500.129752][ T27] ? netdev_core_pick_tx+0x2e0/0x2e0 [ 500.135838][ T27] netlink_rcv_skb+0x153/0x420 [ 500.141405][ T27] ? rtnl_newlink+0xa0/0xa0 [ 500.147322][ T27] ? netlink_ack+0xa60/0xa60 [ 500.151955][ T27] ? netlink_deliver_tap+0x1a2/0xc30 [ 500.158256][ T27] ? netlink_deliver_tap+0x1b1/0xc30 [ 500.163565][ T27] netlink_unicast+0x533/0x7d0 [ 500.173251][ T27] ? netlink_attachskb+0x880/0x880 [ 500.179620][ T27] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 500.186855][ T27] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 500.193215][ T27] ? __phys_addr_symbol+0x2c/0x70 [ 500.198393][ T27] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 500.204332][ T27] ? __check_object_size+0x16e/0x3f0 [ 500.211564][ T27] netlink_sendmsg+0x86d/0xda0 [ 500.217494][ T27] ? netlink_unicast+0x7d0/0x7d0 [ 500.222470][ T27] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 500.229630][ T27] ? netlink_unicast+0x7d0/0x7d0 [ 500.234587][ T27] sock_sendmsg+0xcf/0x120 [ 500.240049][ T27] ____sys_sendmsg+0x6e8/0x810 [ 500.244815][ T27] ? kernel_sendmsg+0x50/0x50 [ 500.250739][ T27] ? do_recvmmsg+0x6d0/0x6d0 [ 500.257706][ T27] ? lock_chain_count+0x20/0x20 [ 500.262585][ T27] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 500.268840][ T27] ___sys_sendmsg+0xf3/0x170 [ 500.273587][ T27] ? sendmsg_copy_msghdr+0x160/0x160 [ 500.279770][ T27] ? __fget_files+0x21b/0x3e0 [ 500.284479][ T27] ? lock_downgrade+0x6e0/0x6e0 [ 500.293162][ T27] ? __fget_files+0x23d/0x3e0 [ 500.298377][ T27] ? __fget_light+0xea/0x280 [ 500.303000][ T27] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 500.310065][ T27] __sys_sendmsg+0xe5/0x1b0 [ 500.314618][ T27] ? __sys_sendmsg_sock+0x30/0x30 [ 500.319923][ T27] ? syscall_enter_from_user_mode+0x21/0x70 [ 500.326039][ T27] do_syscall_64+0x35/0xb0 [ 500.330477][ T27] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 500.336662][ T27] RIP: 0033:0x7fa8234eca39 [ 500.341109][ T27] RSP: 002b:00007fa820a41188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 500.349693][ T27] RAX: ffffffffffffffda RBX: 00007fa8235f0020 RCX: 00007fa8234eca39 [ 500.357897][ T27] RDX: 0000000000000000 RSI: 0000000020000180 RDI: 0000000000000004 [ 500.372438][ T27] RBP: 00007fa823546c5f R08: 0000000000000000 R09: 0000000000000000 [ 500.385720][ T27] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 500.393722][ T27] R13: 00007fffee0d99cf R14: 00007fa820a41300 R15: 0000000000022000 [ 500.402006][ T27] INFO: task syz-executor.5:15788 blocked for more than 144 seconds. [ 500.411440][ T27] Not tainted 5.15.0-rc5-syzkaller #0 [ 500.417946][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 500.426918][ T27] task:syz-executor.5 state:D stack:27744 pid:15788 ppid: 6774 flags:0x00000004 [ 500.436308][ T27] Call Trace: [ 500.439610][ T27] __schedule+0xb44/0x5960 [ 500.444063][ T27] ? find_held_lock+0x2d/0x110 [ 500.449550][ T27] ? __mutex_lock+0x9c0/0x12f0 [ 500.454350][ T27] ? io_schedule_timeout+0x140/0x140 [ 500.459791][ T27] schedule+0xd3/0x270 [ 500.463879][ T27] schedule_preempt_disabled+0xf/0x20 [ 500.469506][ T27] __mutex_lock+0xa34/0x12f0 [ 500.474208][ T27] ? rtnetlink_rcv_msg+0x3be/0xb80 [ 500.479492][ T27] ? mutex_lock_io_nested+0x1150/0x1150 [ 500.485215][ T27] ? rtnetlink_rcv_msg+0x388/0xb80 [ 500.490377][ T27] rtnetlink_rcv_msg+0x3be/0xb80 [ 500.496233][ T27] ? rtnl_newlink+0xa0/0xa0 [ 500.500776][ T27] ? netdev_core_pick_tx+0x2e0/0x2e0 [ 500.506407][ T27] netlink_rcv_skb+0x153/0x420 [ 500.511185][ T27] ? rtnl_newlink+0xa0/0xa0 [ 500.516547][ T27] ? netlink_ack+0xa60/0xa60 [ 500.521198][ T27] ? netlink_deliver_tap+0x1a2/0xc30 [ 500.527168][ T27] ? netlink_deliver_tap+0x1b1/0xc30 [ 500.532498][ T27] netlink_unicast+0x533/0x7d0 [ 500.537449][ T27] ? netlink_attachskb+0x880/0x880 [ 500.542613][ T27] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 500.549291][ T27] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 500.555717][ T27] ? __phys_addr_symbol+0x2c/0x70 [ 500.561456][ T27] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 500.567427][ T27] ? __check_object_size+0x16e/0x3f0 [ 500.572748][ T27] netlink_sendmsg+0x86d/0xda0 [ 500.577681][ T27] ? netlink_unicast+0x7d0/0x7d0 [ 500.582731][ T27] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 500.589133][ T27] ? netlink_unicast+0x7d0/0x7d0 [ 500.594107][ T27] sock_sendmsg+0xcf/0x120 [ 500.598695][ T27] sock_write_iter+0x289/0x3c0 [ 500.603480][ T27] ? sock_sendmsg+0x120/0x120 [ 500.609613][ T27] ? find_held_lock+0x2d/0x110 [ 500.614430][ T27] do_iter_readv_writev+0x472/0x750 [ 500.622713][ T27] ? new_sync_write+0x660/0x660 [ 500.629345][ T27] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 500.637105][ T27] ? security_file_permission+0xab/0xd0 [ 500.642866][ T27] do_iter_write+0x188/0x710 [ 500.649140][ T27] ? import_iovec+0x10c/0x150 [ 500.653937][ T27] vfs_writev+0x1aa/0x630 [ 500.658855][ T27] ? vfs_iter_write+0xa0/0xa0 [ 500.663574][ T27] ? lock_downgrade+0x6e0/0x6e0 [ 500.669225][ T27] ? __fget_files+0x23d/0x3e0 [ 500.673936][ T27] ? __fget_light+0xea/0x280 [ 500.678885][ T27] do_writev+0x27f/0x300 [ 500.683165][ T27] ? vfs_writev+0x630/0x630 [ 500.688297][ T27] ? syscall_enter_from_user_mode+0x21/0x70 [ 500.694232][ T27] do_syscall_64+0x35/0xb0 [ 500.699401][ T27] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 500.705832][ T27] RIP: 0033:0x7fa8234eca39 [ 500.710265][ T27] RSP: 002b:00007fa820a20188 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 500.720461][ T27] RAX: ffffffffffffffda RBX: 00007fa8235f00e0 RCX: 00007fa8234eca39 [ 500.730423][ T27] RDX: 0000000000000001 RSI: 00000000200001c0 RDI: 0000000000000003 [ 500.738658][ T27] RBP: 00007fa823546c5f R08: 0000000000000000 R09: 0000000000000000 [ 500.748980][ T27] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 500.758515][ T27] R13: 00007fffee0d99cf R14: 00007fa820a20300 R15: 0000000000022000 [ 500.767600][ T27] INFO: task syz-executor.5:15808 blocked for more than 144 seconds. [ 500.778007][ T27] Not tainted 5.15.0-rc5-syzkaller #0 [ 500.783923][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 500.793587][ T27] task:syz-executor.5 state:D stack:27944 pid:15808 ppid: 6774 flags:0x00000004 [ 500.803715][ T27] Call Trace: [ 500.808030][ T27] __schedule+0xb44/0x5960 [ 500.812488][ T27] ? find_held_lock+0x2d/0x110 [ 500.818720][ T27] ? __mutex_lock+0x9c0/0x12f0 [ 500.824347][ T27] ? io_schedule_timeout+0x140/0x140 [ 500.829762][ T27] schedule+0xd3/0x270 [ 500.833923][ T27] schedule_preempt_disabled+0xf/0x20 [ 500.840287][ T27] __mutex_lock+0xa34/0x12f0 [ 500.847822][ T27] ? rtnetlink_rcv_msg+0x3be/0xb80 [ 500.852980][ T27] ? mutex_lock_io_nested+0x1150/0x1150 [ 500.858825][ T27] ? rtnetlink_rcv_msg+0x388/0xb80 [ 500.864115][ T27] rtnetlink_rcv_msg+0x3be/0xb80 [ 500.869307][ T27] ? rtnl_newlink+0xa0/0xa0 [ 500.873822][ T27] ? netdev_core_pick_tx+0x2e0/0x2e0 [ 500.879183][ T27] netlink_rcv_skb+0x153/0x420 [ 500.883961][ T27] ? rtnl_newlink+0xa0/0xa0 [ 500.888580][ T27] ? netlink_ack+0xa60/0xa60 [ 500.893185][ T27] ? netlink_deliver_tap+0x1a2/0xc30 [ 500.898661][ T27] ? netlink_deliver_tap+0x1b1/0xc30 [ 500.903984][ T27] netlink_unicast+0x533/0x7d0 [ 500.908881][ T27] ? netlink_attachskb+0x880/0x880 [ 500.914009][ T27] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 500.920315][ T27] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 500.926962][ T27] ? __phys_addr_symbol+0x2c/0x70 [ 500.932202][ T27] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 500.938174][ T27] ? __check_object_size+0x16e/0x3f0 [ 500.943477][ T27] netlink_sendmsg+0x86d/0xda0 [ 500.949086][ T27] ? netlink_unicast+0x7d0/0x7d0 [ 500.954059][ T27] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 500.963394][ T27] ? netlink_unicast+0x7d0/0x7d0 [ 500.968468][ T27] sock_sendmsg+0xcf/0x120 [ 500.972899][ T27] sock_write_iter+0x289/0x3c0 [ 500.977736][ T27] ? sock_sendmsg+0x120/0x120 [ 500.982431][ T27] ? find_held_lock+0x2d/0x110 [ 500.987297][ T27] do_iter_readv_writev+0x472/0x750 [ 500.992511][ T27] ? new_sync_write+0x660/0x660 [ 500.997476][ T27] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 501.003741][ T27] ? security_file_permission+0xab/0xd0 [ 501.009501][ T27] do_iter_write+0x188/0x710 [ 501.014122][ T27] ? import_iovec+0x10c/0x150 [ 501.018922][ T27] vfs_writev+0x1aa/0x630 [ 501.023264][ T27] ? vfs_iter_write+0xa0/0xa0 [ 501.028252][ T27] ? lock_downgrade+0x6e0/0x6e0 [ 501.033159][ T27] ? __fget_files+0x23d/0x3e0 [ 501.037901][ T27] ? __fget_light+0xea/0x280 [ 501.042529][ T27] do_writev+0x27f/0x300 [ 501.046869][ T27] ? vfs_writev+0x630/0x630 [ 501.051390][ T27] ? syscall_enter_from_user_mode+0x21/0x70 [ 501.058124][ T27] do_syscall_64+0x35/0xb0 [ 501.062565][ T27] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 501.071489][ T27] RIP: 0033:0x7fa8234eca39 [ 501.076202][ T27] RSP: 002b:00007fa8209ff188 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 501.084624][ T27] RAX: ffffffffffffffda RBX: 00007fa8235f01a0 RCX: 00007fa8234eca39 [ 501.092730][ T27] RDX: 0000000000000001 RSI: 0000000020000180 RDI: 0000000000000003 [ 501.100786][ T27] RBP: 00007fa823546c5f R08: 0000000000000000 R09: 0000000000000000 [ 501.108822][ T27] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 501.116907][ T27] R13: 00007fffee0d99cf R14: 00007fa8209ff300 R15: 0000000000022000 [ 501.125017][ T27] INFO: task syz-executor.5:15811 blocked for more than 145 seconds. [ 501.133267][ T27] Not tainted 5.15.0-rc5-syzkaller #0 [ 501.139352][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 501.148099][ T27] task:syz-executor.5 state:D stack:28176 pid:15811 ppid: 6774 flags:0x00000004 [ 501.157397][ T27] Call Trace: [ 501.160679][ T27] __schedule+0xb44/0x5960 [ 501.166146][ T27] ? find_held_lock+0x2d/0x110 [ 501.170956][ T27] ? __mutex_lock+0x9c0/0x12f0 [ 501.178765][ T27] ? io_schedule_timeout+0x140/0x140 [ 501.184115][ T27] schedule+0xd3/0x270 [ 501.188290][ T27] schedule_preempt_disabled+0xf/0x20 [ 501.193681][ T27] __mutex_lock+0xa34/0x12f0 [ 501.198377][ T27] ? rtnetlink_rcv_msg+0x3be/0xb80 [ 501.203510][ T27] ? mutex_lock_io_nested+0x1150/0x1150 [ 501.209145][ T27] ? rtnetlink_rcv_msg+0x388/0xb80 [ 501.214295][ T27] rtnetlink_rcv_msg+0x3be/0xb80 [ 501.219341][ T27] ? rtnl_newlink+0xa0/0xa0 [ 501.223857][ T27] ? netdev_core_pick_tx+0x2e0/0x2e0 [ 501.229430][ T27] netlink_rcv_skb+0x153/0x420 [ 501.234217][ T27] ? rtnl_newlink+0xa0/0xa0 [ 501.238986][ T27] ? netlink_ack+0xa60/0xa60 [ 501.243594][ T27] ? netlink_deliver_tap+0x1a2/0xc30 [ 501.249765][ T1358] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.249866][ T1358] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.262854][ T27] ? netlink_deliver_tap+0x1b1/0xc30 [ 501.268238][ T27] netlink_unicast+0x533/0x7d0 [ 501.273015][ T27] ? netlink_attachskb+0x880/0x880 [ 501.278938][ T27] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 501.288457][ T27] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 501.294830][ T27] ? __phys_addr_symbol+0x2c/0x70 [ 501.299875][ T27] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 501.305748][ T27] ? __check_object_size+0x16e/0x3f0 [ 501.311063][ T27] netlink_sendmsg+0x86d/0xda0 [ 501.315915][ T27] ? netlink_unicast+0x7d0/0x7d0 [ 501.320871][ T27] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 501.327327][ T27] ? netlink_unicast+0x7d0/0x7d0 [ 501.332544][ T27] sock_sendmsg+0xcf/0x120 [ 501.337069][ T27] ____sys_sendmsg+0x6e8/0x810 [ 501.341848][ T27] ? kernel_sendmsg+0x50/0x50 [ 501.346604][ T27] ? do_recvmmsg+0x6d0/0x6d0 [ 501.351198][ T27] ? lock_chain_count+0x20/0x20 [ 501.356138][ T27] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 501.362134][ T27] ___sys_sendmsg+0xf3/0x170 [ 501.366844][ T27] ? sendmsg_copy_msghdr+0x160/0x160 [ 501.372145][ T27] ? __fget_files+0x21b/0x3e0 [ 501.376917][ T27] ? lock_downgrade+0x6e0/0x6e0 [ 501.381789][ T27] ? __fget_files+0x23d/0x3e0 [ 501.387270][ T27] ? __fget_light+0xea/0x280 [ 501.391875][ T27] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 501.401204][ T27] __sys_sendmsg+0xe5/0x1b0 [ 501.406224][ T27] ? __sys_sendmsg_sock+0x30/0x30 [ 501.411283][ T27] ? syscall_enter_from_user_mode+0x21/0x70 [ 501.417339][ T27] do_syscall_64+0x35/0xb0 [ 501.421791][ T27] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 501.428168][ T27] RIP: 0033:0x7fa8234eca39 [ 501.432700][ T27] RSP: 002b:00007fa82099c188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 501.441847][ T27] RAX: ffffffffffffffda RBX: 00007fa8235f03e0 RCX: 00007fa8234eca39 [ 501.450325][ T27] RDX: 0000000000000000 RSI: 0000000020000180 RDI: 0000000000000004 [ 501.458718][ T27] RBP: 00007fa823546c5f R08: 0000000000000000 R09: 0000000000000000 [ 501.467116][ T27] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 501.475679][ T27] R13: 00007fffee0d99cf R14: 00007fa82099c300 R15: 0000000000022000 [ 501.483701][ T27] INFO: task syz-executor.3:15792 blocked for more than 145 seconds. [ 501.493727][ T27] Not tainted 5.15.0-rc5-syzkaller #0 [ 501.500252][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 501.509493][ T27] task:syz-executor.3 state:D stack:28128 pid:15792 ppid: 8083 flags:0x00004004 [ 501.522161][ T27] Call Trace: [ 501.525947][ T27] __schedule+0xb44/0x5960 [ 501.530496][ T27] ? find_held_lock+0x2d/0x110 [ 501.535785][ T27] ? __mutex_lock+0x9c2/0x12f0 [ 501.541020][ T27] ? io_schedule_timeout+0x140/0x140 [ 501.546774][ T27] schedule+0xd3/0x270 [ 501.550868][ T27] schedule_preempt_disabled+0xf/0x20 [ 501.556846][ T27] __mutex_lock+0xa34/0x12f0 [ 501.561484][ T27] ? smc_pnet_net_init+0x1f9/0x410 [ 501.567580][ T27] ? mutex_lock_io_nested+0x1150/0x1150 [ 501.573161][ T27] ? smc_pnet_net_init+0x111/0x410 [ 501.578907][ T27] ? lockdep_init_map_type+0x2c3/0x7b0 [ 501.584488][ T27] smc_pnet_net_init+0x1f9/0x410 [ 501.589898][ T27] ? smc_net_exit+0x20/0x20 [ 501.594442][ T27] ops_init+0xaf/0x470 [ 501.599036][ T27] setup_net+0x40f/0xa30 [ 501.603305][ T27] ? down_read_killable+0x1a9/0x480 [ 501.609163][ T27] ? ops_init+0x470/0x470 [ 501.613532][ T27] ? rcu_read_lock_sched_held+0x3a/0x70 [ 501.619632][ T27] copy_net_ns+0x319/0x760 [ 501.624089][ T27] create_new_namespaces+0x3f6/0xb20 [ 501.630054][ T27] unshare_nsproxy_namespaces+0xc1/0x1f0 [ 501.636100][ T27] ksys_unshare+0x445/0x920 [ 501.640944][ T27] ? unshare_fd+0x1c0/0x1c0 [ 501.646217][ T27] ? syscall_enter_from_user_mode+0x21/0x70 [ 501.652165][ T27] __x64_sys_unshare+0x2d/0x40 [ 501.657399][ T27] do_syscall_64+0x35/0xb0 [ 501.661860][ T27] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 501.668236][ T27] RIP: 0033:0x7fbc30cc6a39 [ 501.672681][ T27] RSP: 002b:00007fbc2e23c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 501.681647][ T27] RAX: ffffffffffffffda RBX: 00007fbc30dc9f60 RCX: 00007fbc30cc6a39 [ 501.689766][ T27] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000006c060000 [ 501.697859][ T27] RBP: 00007fbc30d20c5f R08: 0000000000000000 R09: 0000000000000000 [ 501.706273][ T27] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 501.714474][ T27] R13: 00007ffc9939a52f R14: 00007fbc2e23c300 R15: 0000000000022000 [ 501.723560][ T27] INFO: task syz-executor.3:15794 blocked for more than 145 seconds. [ 501.732092][ T27] Not tainted 5.15.0-rc5-syzkaller #0 [ 501.740776][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 501.749933][ T27] task:syz-executor.3 state:D stack:26552 pid:15794 ppid: 8083 flags:0x00000004 [ 501.759362][ T27] Call Trace: [ 501.762723][ T27] __schedule+0xb44/0x5960 [ 501.767250][ T27] ? find_held_lock+0x2d/0x110 [ 501.772032][ T27] ? __mutex_lock+0x9c0/0x12f0 [ 501.776892][ T27] ? io_schedule_timeout+0x140/0x140 [ 501.782220][ T27] schedule+0xd3/0x270 [ 501.786451][ T27] schedule_preempt_disabled+0xf/0x20 [ 501.791843][ T27] __mutex_lock+0xa34/0x12f0 [ 501.796634][ T27] ? smc_pnet_net_init+0x1f9/0x410 [ 501.801782][ T27] ? mutex_lock_io_nested+0x1150/0x1150 [ 501.807460][ T27] ? smc_pnet_net_init+0x111/0x410 [ 501.812616][ T27] ? lockdep_init_map_type+0x2c3/0x7b0 [ 501.818174][ T27] smc_pnet_net_init+0x1f9/0x410 [ 501.823131][ T27] ? smc_net_exit+0x20/0x20 [ 501.828437][ T27] ops_init+0xaf/0x470 [ 501.832542][ T27] setup_net+0x40f/0xa30 [ 501.836884][ T27] ? down_read_killable+0x1a9/0x480 [ 501.842208][ T27] ? ops_init+0x470/0x470 [ 501.849742][ T27] ? rcu_read_lock_sched_held+0x3a/0x70 [ 501.855447][ T27] copy_net_ns+0x319/0x760 [ 501.859899][ T27] create_new_namespaces+0x3f6/0xb20 [ 501.865457][ T27] unshare_nsproxy_namespaces+0xc1/0x1f0 [ 501.871201][ T27] ksys_unshare+0x445/0x920 [ 501.875803][ T27] ? unshare_fd+0x1c0/0x1c0 [ 501.880415][ T27] ? syscall_enter_from_user_mode+0x21/0x70 [ 501.886484][ T27] __x64_sys_unshare+0x2d/0x40 [ 501.891273][ T27] do_syscall_64+0x35/0xb0 [ 501.896163][ T27] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 501.902083][ T27] RIP: 0033:0x7fbc30cc6a39 [ 501.906624][ T27] RSP: 002b:00007fbc2e21b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 501.915343][ T27] RAX: ffffffffffffffda RBX: 00007fbc30dca020 RCX: 00007fbc30cc6a39 [ 501.923335][ T27] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000006c060000 [ 501.931844][ T27] RBP: 00007fbc30d20c5f R08: 0000000000000000 R09: 0000000000000000 [ 501.940415][ T27] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 501.949005][ T27] R13: 00007ffc9939a52f R14: 00007fbc2e21b300 R15: 0000000000022000 [ 501.957478][ T27] [ 501.957478][ T27] Showing all locks held in the system: [ 501.966245][ T27] 4 locks held by kworker/u4:0/8: [ 501.971548][ T27] #0: ffff888015fb3138 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x8a3/0x16b0 [ 501.983021][ T27] #1: ffffc90000cd7db0 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x8d7/0x16b0 [ 501.995420][ T27] #2: ffffffff8d0d5990 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x9b/0xb00 [ 502.005220][ T27] #3: ffffffff8d0e90e8 (rtnl_mutex){+.+.}-{3:3}, at: ip_fib_net_exit+0x1b/0x2b0 [ 502.014490][ T27] 1 lock held by khungtaskd/27: [ 502.020019][ T27] #0: ffffffff8b981ee0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x53/0x260 [ 502.030889][ T27] 1 lock held by in:imklog/6268: [ 502.036452][ T27] #0: ffff888072c38ff0 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0xe9/0x100 [ 502.046373][ T27] 3 locks held by kworker/0:5/7857: [ 502.051886][ T27] #0: ffff888147b30538 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work+0x8a3/0x16b0 [ 502.063463][ T27] #1: ffffc900093bfdb0 ((addr_chk_work).work){+.+.}-{0:0}, at: process_one_work+0x8d7/0x16b0 [ 502.074344][ T27] #2: ffffffff8d0e90e8 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_verify_work+0xa/0x20 [ 502.084785][ T27] 3 locks held by kworker/1:9/11904: [ 502.090091][ T27] #0: ffff888010c65d38 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_one_work+0x8a3/0x16b0 [ 502.103436][ T27] #1: ffffc9000438fdb0 ((reg_check_chans).work){+.+.}-{0:0}, at: process_one_work+0x8d7/0x16b0 [ 502.115592][ T27] #2: ffffffff8d0e90e8 (rtnl_mutex){+.+.}-{3:3}, at: reg_check_chans_work+0x83/0xe10 [ 502.126532][ T27] 3 locks held by kworker/1:18/11932: [ 502.131913][ T27] #0: ffff888010c64d38 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x8a3/0x16b0 [ 502.143885][ T27] #1: ffffc9000479fdb0 (deferred_process_work){+.+.}-{0:0}, at: process_one_work+0x8d7/0x16b0 [ 502.156832][ T27] #2: ffffffff8d0e90e8 (rtnl_mutex){+.+.}-{3:3}, at: switchdev_deferred_process_work+0xa/0x20 [ 502.168574][ T27] 1 lock held by syz-executor.2/15784: [ 502.174031][ T27] #0: ffffffff8d0e90e8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x3be/0xb80 [ 502.184884][ T27] 1 lock held by syz-executor.5/15782: [ 502.190405][ T27] #0: ffffffff8d0e90e8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x3be/0xb80 [ 502.201005][ T27] 1 lock held by syz-executor.5/15786: [ 502.206920][ T27] #0: ffffffff8d0e90e8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x3be/0xb80 [ 502.217414][ T27] 1 lock held by syz-executor.5/15788: [ 502.222882][ T27] #0: ffffffff8d0e90e8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x3be/0xb80 [ 502.233983][ T27] 1 lock held by syz-executor.5/15808: [ 502.240431][ T27] #0: ffffffff8d0e90e8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x3be/0xb80 [ 502.250975][ T27] 1 lock held by syz-executor.5/15811: [ 502.258187][ T27] #0: ffffffff8d0e90e8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x3be/0xb80 [ 502.268853][ T27] 2 locks held by syz-executor.3/15792: [ 502.274411][ T27] #0: ffffffff8d0d5990 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x2f5/0x760 [ 502.285646][ T27] #1: ffffffff8d0e90e8 (rtnl_mutex){+.+.}-{3:3}, at: smc_pnet_net_init+0x1f9/0x410 [ 502.296227][ T27] 2 locks held by syz-executor.3/15794: [ 502.301808][ T27] #0: ffffffff8d0d5990 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x2f5/0x760 [ 502.313766][ T27] #1: ffffffff8d0e90e8 (rtnl_mutex){+.+.}-{3:3}, at: smc_pnet_net_init+0x1f9/0x410 [ 502.323958][ T27] [ 502.327084][ T27] ============================================= [ 502.327084][ T27] [ 502.337680][ T27] NMI backtrace for cpu 0 [ 502.342036][ T27] CPU: 0 PID: 27 Comm: khungtaskd Not tainted 5.15.0-rc5-syzkaller #0 [ 502.350268][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 502.360433][ T27] Call Trace: [ 502.363743][ T27] dump_stack_lvl+0xcd/0x134 [ 502.368412][ T27] nmi_cpu_backtrace.cold+0x47/0x144 [ 502.373721][ T27] ? lapic_can_unplug_cpu+0x80/0x80 [ 502.378982][ T27] nmi_trigger_cpumask_backtrace+0x1ae/0x220 [ 502.385035][ T27] watchdog+0xc1d/0xf50 [ 502.389227][ T27] ? reset_hung_task_detector+0x30/0x30 [ 502.394772][ T27] kthread+0x3e5/0x4d0 [ 502.398842][ T27] ? set_kthread_struct+0x130/0x130 [ 502.404046][ T27] ret_from_fork+0x1f/0x30 [ 502.409198][ T27] Sending NMI from CPU 0 to CPUs 1: [ 502.414510][ C1] NMI backtrace for cpu 1 [ 502.414521][ C1] CPU: 1 PID: 158 Comm: kworker/u4:3 Not tainted 5.15.0-rc5-syzkaller #0 [ 502.414542][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 502.414554][ C1] Workqueue: bat_events batadv_nc_worker [ 502.414645][ C1] RIP: 0010:do_raw_spin_unlock+0x120/0x230 [ 502.414671][ C1] Code: 4c 89 ea 48 c1 ea 03 80 3c 02 00 0f 85 f5 00 00 00 4c 89 e2 48 c7 45 10 ff ff ff ff 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 <0f> b6 14 02 4c 89 e0 83 e0 07 83 c0 03 38 d0 7c 08 84 d2 0f 85 92 [ 502.414690][ C1] RSP: 0018:ffffc9000120fbf0 EFLAGS: 00000a02 [ 502.414706][ C1] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: ffffffff815cadf0 [ 502.414720][ C1] RDX: 1ffff11008545a19 RSI: 0000000000000004 RDI: ffff888042a2d0c0 [ 502.414733][ C1] RBP: ffff888042a2d0c0 R08: 0000000000000000 R09: ffff888042a2d0c3 [ 502.414746][ C1] R10: ffffed1008545a18 R11: 0000000000000000 R12: ffff888042a2d0c8 [ 502.414760][ C1] R13: ffff888042a2d0d0 R14: dffffc0000000000 R15: ffffffff88d54720 [ 502.414774][ C1] FS: 0000000000000000(0000) GS:ffff8880b9d00000(0000) knlGS:0000000000000000 [ 502.414793][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 502.414808][ C1] CR2: 00007f6d6fc8c000 CR3: 000000007d220000 CR4: 00000000003506e0 [ 502.414822][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 502.414833][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 502.414845][ C1] Call Trace: [ 502.414853][ C1] _raw_spin_unlock_bh+0x1a/0x30 [ 502.414879][ C1] batadv_nc_purge_paths+0x2a5/0x3a0 [ 502.414904][ C1] batadv_nc_worker+0x930/0xfa0 [ 502.414928][ C1] process_one_work+0x9bf/0x16b0 [ 502.414951][ C1] ? pwq_dec_nr_in_flight+0x2a0/0x2a0 [ 502.414972][ C1] ? rwlock_bug.part.0+0x90/0x90 [ 502.414992][ C1] ? _raw_spin_lock_irq+0x41/0x50 [ 502.415018][ C1] worker_thread+0x658/0x11f0 [ 502.415041][ C1] ? process_one_work+0x16b0/0x16b0 [ 502.415061][ C1] kthread+0x3e5/0x4d0 [ 502.415081][ C1] ? set_kthread_struct+0x130/0x130 [ 502.415104][ C1] ret_from_fork+0x1f/0x30 [ 502.438962][ T27] Kernel panic - not syncing: hung_task: blocked tasks [ 502.624599][ T27] CPU: 0 PID: 27 Comm: khungtaskd Not tainted 5.15.0-rc5-syzkaller #0 [ 502.632836][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 502.642981][ T27] Call Trace: [ 502.646260][ T27] dump_stack_lvl+0xcd/0x134 [ 502.650868][ T27] panic+0x2b0/0x6dd [ 502.654813][ T27] ? __warn_printk+0xf3/0xf3 [ 502.659490][ T27] ? lapic_can_unplug_cpu+0x80/0x80 [ 502.664684][ T27] ? preempt_schedule_thunk+0x16/0x18 [ 502.670145][ T27] ? nmi_trigger_cpumask_backtrace+0x191/0x220 [ 502.676295][ T27] ? watchdog.cold+0x130/0x158 [ 502.681077][ T27] watchdog.cold+0x141/0x158 [ 502.685664][ T27] ? reset_hung_task_detector+0x30/0x30 [ 502.691222][ T27] kthread+0x3e5/0x4d0 [ 502.695301][ T27] ? set_kthread_struct+0x130/0x130 [ 502.700515][ T27] ret_from_fork+0x1f/0x30 [ 502.705215][ T27] Kernel Offset: disabled [ 502.709540][ T27] Rebooting in 86400 seconds..