00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008c00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000063705a2d8eaab339adbb4292aaf28d61"], 0x1978) splice(r3, 0x0, r1, 0x0, 0x406f408, 0x0) 19:16:51 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000840)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x20e05}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc}]}}}]}, 0x40}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x53, 0x0, 0x0, r9}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0xf}]}, 0x28}}, 0x0) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000800)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r10}, 0x10) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x8c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x5c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x4c, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_INGRESS_QOS={0x28, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7fffffff, 0xff}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x1, 0x520}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x5, 0x1f}}]}, @IFLA_VLAN_ID={0x6, 0x1, 0x1}, @IFLA_VLAN_EGRESS_QOS={0x10, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x6}}]}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x8c}}, 0x0) 19:16:51 executing program 2: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c0000002c00270d001001041ecd5d0000dbff00", @ANYRES32=r3, @ANYBLOB="00000010000000000e0000000c0001007463696e646578000c000200060002"], 0x3c}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec15, 0x0) [ 416.979990][T20622] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 417.171574][T20623] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 19:16:52 executing program 1: unshare(0x6c060000) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='qdisc_dequeue\x00', r2}, 0x10) splice(r0, &(0x7f00000001c0)=0x8, 0xffffffffffffffff, 0x0, 0xbb77, 0x0) accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000240), 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000a00)=ANY=[@ANYBLOB="7f454c46ff0600f90100000000000000020003001f00000006020000000000004000000000000000eb0100000000000000000000070038000200ef8a01800400010000000d040000090000000000000004000000000000000000000001000000d90600000000000008000000000000004b0000000000003606000000030000000010000000000000fdffffffffffffff1f00000000000000000000000000000007000000000000000300000000000000aecdfc1de4648e0e6811ecf38ab033f77e07886d60226e774dadd4f62f3c8c2837d8376bd85baf29b09dd97ee98b23c16628e099ed614fbbc4fb705ebb9d467153594be242b15b5c0dc5c4accd2bf6afc15c2698584b8b752d84b8721700c2a39474ee9f60b3959ce631eb51cda70dc5a3fa08081e3bed8b5d90cecda427e50b39764bd6cee6aa072591b81b8ced0ddbeb8a2aa306568d7a176577fe91a480acc887364ad49952ea83fe69650d484d3738356dd45efb53dd1f3d3328f0c92458f4b0934d032a662da021ed00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e2ffffff00000000000000000000000000000019000f000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b6027f79d364ecc0c6cc90c00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070bc5f31596dfac913abeb524fa34711b6917fdad6dfcd39c1cbef0e0815faaa1f12272c1638ed10c14408b02e3b7c2e055977add5304231733ef308516914c0"], 0x67b) unshare(0x40000000) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) r4 = socket(0x10, 0x803, 0x0) r5 = socket(0x11, 0x800000003, 0x0) bind(r5, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r5, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000002340)=@nat={'nat\x00', 0x1b, 0x5, 0x490, 0x2d0, 0x2d0, 0xffffffff, 0x2d0, 0x2d0, 0x3c0, 0x3c0, 0xffffffff, 0x3c0, 0x3c0, 0x5, &(0x7f00000003c0), {[{{@ipv6={@mcast1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, [0x0, 0xffffff00, 0x0, 0xff], [0xff, 0xff, 0xff, 0xff000000], 'wlan0\x00', 'xfrm0\x00', {}, {}, 0x1, 0x5, 0x1, 0x1}, 0x0, 0xa8, 0xf0}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x4, @ipv6=@private1, @ipv6=@empty, @icmp_id=0x66, @gre_key=0x9}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x4, @ipv4=@empty, @ipv6=@dev={0xfe, 0x80, '\x00', 0xb}, @icmp_id=0x68, @gre_key=0xff}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x15, @ipv4=@loopback, @ipv6=@local, @gre_key=0x8acb, @gre_key=0x6}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0xa, @ipv4=@empty, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @gre_key=0x1, @gre_key=0x3}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4f0) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB, @ANYRES32=r6, @ANYBLOB="00000000ffffffff000000000a0001006e6574656d00000010010200ca000000b00e00"], 0x140}}, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r3, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd0d0c2ac, 0x1, 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000002840)=ANY=[@ANYBLOB="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"], 0x1978) splice(r3, 0x0, r1, 0x0, 0x406f408, 0x0) [ 417.329779][T20641] 8021q: adding VLAN 0 to HW filter on device bond5 [ 417.359125][T20641] bond0: (slave bond5): Enslaving as an active interface with an up link 19:16:52 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) sendmmsg$inet(r0, &(0x7f00000039c0)=[{{0x0, 0x0, &(0x7f00000023c0)=[{&(0x7f00000001c0)="cc6e8ceba8e2848c64fd51773f8efc2bbf5ca67c99cad71e0e62285ffd2a6fe9bea2e85c71c695b95e54c88da803099c800668924a39ed10e3adec0236acea863ed0c86f68b2", 0x46}, {&(0x7f0000000240)="e2e923285a0b4f0f16f68b7de621e12476d7a4ad739e55991df246651e177870f7c3086c247d14fe5fdc238993674d506af47a209dfbb3088112b899052b24e4e8029f13905671b942e679d706550a595bdec73c74e35e1f08af84ff720ff5c751e69ca561da616e18ac01a3a7f34f448f9c7294278de38947ef668b2df6bdb7f610cc97ec25d5584d49f9269ee3819400afa9310c4f", 0x96}, {&(0x7f0000000300)="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", 0x719}], 0x3, &(0x7f0000002440)=[@ip_tos_int={{0x14}}, @ip_ttl={{0x14}}, @ip_tos_u8={{0x11}}, @ip_tos_u8={{0x11}}], 0x60}}], 0xffffff1f, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) shutdown(r0, 0x1) [ 417.429082][T20660] device bridge6 entered promiscuous mode [ 417.453195][T20660] device bridge6 left promiscuous mode 19:16:52 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0xf000) sendfile(r1, r2, 0x0, 0xf03b0000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x13, r0, 0x0) mmap(&(0x7f00004f1000/0x3000)=nil, 0x3000, 0x0, 0x10, r1, 0xec3bc000) r3 = socket$xdp(0x2c, 0x3, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000000), 0xffffff6a) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MEDIA_SET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000200)=ANY=[@ANYBLOB="90010000", @ANYRES16, @ANYBLOB="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"], 0x190}}, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/18, 0x30c000, 0x800}, 0x200d20) [ 417.487455][T20660] bond5: (slave vlan2): making interface the new active one [ 417.516784][T20660] device bridge6 entered promiscuous mode [ 417.533829][T20660] bond5: (slave vlan2): Enslaving as an active interface with an up link [ 417.563783][T20610] hsr0 speed is unknown, defaulting to 1000 [ 417.563875][T20626] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 417.724990][T20619] hsr0 speed is unknown, defaulting to 1000 [ 417.726028][T20622] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 19:16:52 executing program 2: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c0000002c00270d001001041ecd5d0000dbff00", @ANYRES32=r3, @ANYBLOB="00000010000000000e0000000c0001007463696e646578000c000200060002"], 0x3c}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec15, 0x0) [ 417.792414][T20693] hsr0 speed is unknown, defaulting to 1000 [ 417.817963][T20695] hsr0 speed is unknown, defaulting to 1000 19:16:52 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0xf000) sendfile(r1, r2, 0x0, 0xf03b0000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x13, r0, 0x0) mmap(&(0x7f00004f1000/0x3000)=nil, 0x3000, 0x0, 0x10, r1, 0xec3bc000) r3 = socket$xdp(0x2c, 0x3, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000000), 0xffffff6a) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MEDIA_SET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000200)=ANY=[@ANYBLOB="90010000", @ANYRES16, @ANYBLOB="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"], 0x190}}, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/18, 0x30c000, 0x800}, 0x200d20) [ 418.043910][T20753] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 19:16:53 executing program 2: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c0000002c00270d001001041ecd5d0000dbff00", @ANYRES32=r3, @ANYBLOB="00000010000000000e0000000c0001007463696e646578000c000200060002"], 0x3c}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec15, 0x0) 19:16:53 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) sendmmsg$inet(r0, &(0x7f00000039c0)=[{{0x0, 0x0, &(0x7f00000023c0)=[{&(0x7f00000001c0)="cc6e8ceba8e2848c64fd51773f8efc2bbf5ca67c99cad71e0e62285ffd2a6fe9bea2e85c71c695b95e54c88da803099c800668924a39ed10e3adec0236acea863ed0c86f68b2", 0x46}, {&(0x7f0000000240)="e2e923285a0b4f0f16f68b7de621e12476d7a4ad739e55991df246651e177870f7c3086c247d14fe5fdc238993674d506af47a209dfbb3088112b899052b24e4e8029f13905671b942e679d706550a595bdec73c74e35e1f08af84ff720ff5c751e69ca561da616e18ac01a3a7f34f448f9c7294278de38947ef668b2df6bdb7f610cc97ec25d5584d49f9269ee3819400afa9310c4f", 0x96}, {&(0x7f0000000300)="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", 0x719}], 0x3, &(0x7f0000002440)=[@ip_tos_int={{0x14}}, @ip_ttl={{0x14}}, @ip_tos_u8={{0x11}}, @ip_tos_u8={{0x11}}], 0x60}}], 0xffffff1f, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) shutdown(r0, 0x1) [ 418.638328][T20819] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 19:16:53 executing program 1: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000100)="1400000052005f7fb3e4bf80a000080000000000", 0x14) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x18c, &(0x7f0000001140)={&(0x7f0000000200)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x3c}}, 0x0) recvmmsg(r0, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x344, 0x10122, 0x0) 19:16:53 executing program 2: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c0000002c00270d001001041ecd5d0000dbff00", @ANYRES32=r3, @ANYBLOB="00000010000000000e0000000c0001007463696e646578000c000200060002"], 0x3c}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec15, 0x0) [ 419.225709][T20856] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 420.359541][ T8196] Bluetooth: hci5: command 0x0405 tx timeout 19:16:57 executing program 1: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000100)="1400000052005f7fb3e4bf80a000080000000000", 0x14) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x18c, &(0x7f0000001140)={&(0x7f0000000200)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x3c}}, 0x0) recvmmsg(r0, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x344, 0x10122, 0x0) 19:16:57 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0xf000) sendfile(r1, r2, 0x0, 0xf03b0000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x13, r0, 0x0) mmap(&(0x7f00004f1000/0x3000)=nil, 0x3000, 0x0, 0x10, r1, 0xec3bc000) r3 = socket$xdp(0x2c, 0x3, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000000), 0xffffff6a) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MEDIA_SET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000200)=ANY=[@ANYBLOB="90010000", @ANYRES16, @ANYBLOB="010000000000000000000c0000003c0007800c0003000000000000000000080001000000000008000200000000000c000400000000000000000008000200000000000800010000000000940005800c000280080002000000000024000280080004000000000008000400000000000800030000000004080002000000000007000100696200003c0002180800040000000000080003000000000008000400000000000800030000000000080001000000000008000300000000000800020000000000080001806574680014000280080003000000000008000200003aa49be82d75ec72620acbab000000500005802400028008000400000000000800020000000000080003000000000008000100000000000c0002800800010000000000080001006574680014000280080001000000000008000200000000001800078008000200000000000c00040000000000000000004400098008000200000000000800020000000000080002000000000008000200000000000800020000000000"], 0x190}}, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/18, 0x30c000, 0x800}, 0x200d20) 19:16:57 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0xf000) sendfile(r1, r2, 0x0, 0xf03b0000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x13, r0, 0x0) mmap(&(0x7f00004f1000/0x3000)=nil, 0x3000, 0x0, 0x10, r1, 0xec3bc000) r3 = socket$xdp(0x2c, 0x3, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000000), 0xffffff6a) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MEDIA_SET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000200)=ANY=[@ANYBLOB="90010000", @ANYRES16, @ANYBLOB="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"], 0x190}}, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/18, 0x30c000, 0x800}, 0x200d20) 19:16:57 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) sendmmsg$inet(r0, &(0x7f00000039c0)=[{{0x0, 0x0, &(0x7f00000023c0)=[{&(0x7f00000001c0)="cc6e8ceba8e2848c64fd51773f8efc2bbf5ca67c99cad71e0e62285ffd2a6fe9bea2e85c71c695b95e54c88da803099c800668924a39ed10e3adec0236acea863ed0c86f68b2", 0x46}, {&(0x7f0000000240)="e2e923285a0b4f0f16f68b7de621e12476d7a4ad739e55991df246651e177870f7c3086c247d14fe5fdc238993674d506af47a209dfbb3088112b899052b24e4e8029f13905671b942e679d706550a595bdec73c74e35e1f08af84ff720ff5c751e69ca561da616e18ac01a3a7f34f448f9c7294278de38947ef668b2df6bdb7f610cc97ec25d5584d49f9269ee3819400afa9310c4f", 0x96}, {&(0x7f0000000300)="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", 0x719}], 0x3, &(0x7f0000002440)=[@ip_tos_int={{0x14}}, @ip_ttl={{0x14}}, @ip_tos_u8={{0x11}}, @ip_tos_u8={{0x11}}], 0x60}}], 0xffffff1f, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) shutdown(r0, 0x1) 19:16:57 executing program 2: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000100)="1400000052005f7fb3e4bf80a000080000000000", 0x14) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x18c, &(0x7f0000001140)={&(0x7f0000000200)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x3c}}, 0x0) recvmmsg(r0, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x344, 0x10122, 0x0) 19:16:57 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x30, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_NODEID={0xc}]}]}, 0x30}}, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r3, r2, 0x0, 0x10000a006) syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), r3) 19:16:57 executing program 2: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000100)="1400000052005f7fb3e4bf80a000080000000000", 0x14) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x18c, &(0x7f0000001140)={&(0x7f0000000200)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x3c}}, 0x0) recvmmsg(r0, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x344, 0x10122, 0x0) [ 422.735944][ T26] audit: type=1804 audit(1634671017.693:254): pid=20894 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir579533360/syzkaller.8uGMIM/294/cgroup.controllers" dev="sda1" ino=14933 res=1 errno=0 19:16:57 executing program 1: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000100)="1400000052005f7fb3e4bf80a000080000000000", 0x14) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x18c, &(0x7f0000001140)={&(0x7f0000000200)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x3c}}, 0x0) recvmmsg(r0, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x344, 0x10122, 0x0) 19:16:58 executing program 2: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000100)="1400000052005f7fb3e4bf80a000080000000000", 0x14) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x18c, &(0x7f0000001140)={&(0x7f0000000200)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x3c}}, 0x0) recvmmsg(r0, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x344, 0x10122, 0x0) 19:16:58 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x30, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_NODEID={0xc}]}]}, 0x30}}, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r3, r2, 0x0, 0x10000a006) syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), r3) 19:16:58 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) sendmmsg$inet(r0, &(0x7f00000039c0)=[{{0x0, 0x0, &(0x7f00000023c0)=[{&(0x7f00000001c0)="cc6e8ceba8e2848c64fd51773f8efc2bbf5ca67c99cad71e0e62285ffd2a6fe9bea2e85c71c695b95e54c88da803099c800668924a39ed10e3adec0236acea863ed0c86f68b2", 0x46}, {&(0x7f0000000240)="e2e923285a0b4f0f16f68b7de621e12476d7a4ad739e55991df246651e177870f7c3086c247d14fe5fdc238993674d506af47a209dfbb3088112b899052b24e4e8029f13905671b942e679d706550a595bdec73c74e35e1f08af84ff720ff5c751e69ca561da616e18ac01a3a7f34f448f9c7294278de38947ef668b2df6bdb7f610cc97ec25d5584d49f9269ee3819400afa9310c4f", 0x96}, {&(0x7f0000000300)="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", 0x719}], 0x3, &(0x7f0000002440)=[@ip_tos_int={{0x14}}, @ip_ttl={{0x14}}, @ip_tos_u8={{0x11}}, @ip_tos_u8={{0x11}}], 0x60}}], 0xffffff1f, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) shutdown(r0, 0x1) 19:16:58 executing program 1: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000100)="1400000052005f7fb3e4bf80a000080000000000", 0x14) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x18c, &(0x7f0000001140)={&(0x7f0000000200)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x3c}}, 0x0) recvmmsg(r0, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x344, 0x10122, 0x0) 19:16:58 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0xf000) sendfile(r1, r2, 0x0, 0xf03b0000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x13, r0, 0x0) mmap(&(0x7f00004f1000/0x3000)=nil, 0x3000, 0x0, 0x10, r1, 0xec3bc000) r3 = socket$xdp(0x2c, 0x3, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000000), 0xffffff6a) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MEDIA_SET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000200)=ANY=[@ANYBLOB="90010000", @ANYRES16, @ANYBLOB="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"], 0x190}}, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/18, 0x30c000, 0x800}, 0x200d20) 19:16:58 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0xf000) sendfile(r1, r2, 0x0, 0xf03b0000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x13, r0, 0x0) mmap(&(0x7f00004f1000/0x3000)=nil, 0x3000, 0x0, 0x10, r1, 0xec3bc000) r3 = socket$xdp(0x2c, 0x3, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000000), 0xffffff6a) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MEDIA_SET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000200)=ANY=[@ANYBLOB="90010000", @ANYRES16, @ANYBLOB="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"], 0x190}}, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/18, 0x30c000, 0x800}, 0x200d20) [ 423.881388][ T26] audit: type=1804 audit(1634671018.843:255): pid=20924 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir579533360/syzkaller.8uGMIM/295/cgroup.controllers" dev="sda1" ino=14725 res=1 errno=0 19:16:58 executing program 2: pselect6(0x40, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) 19:16:58 executing program 1: sendmsg$TIPC_NL_NODE_GET(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000040), 0xc, &(0x7f0000000280)={0x0}}, 0x0) r0 = accept$alg(0xffffffffffffffff, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="193fff7f", @ANYRES32, @ANYRES32=0x1], &(0x7f0000000780)='GPL\x00', 0x3, 0x0, 0x0, 0x41100, 0x7, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000007c0)={0x3, 0x1}, 0x8, 0x10, &(0x7f0000000800)={0x4, 0x10, 0x9, 0x10000}, 0x10}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={&(0x7f0000000940)='ext4_evict_inode\x00', r2}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000200), 0xf000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a80)={0x18, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="850000008100000018110000", @ANYRES32=0x1, @ANYBLOB="00003b6b6502ffffffff"], &(0x7f0000000440)='GPL\x00', 0xeaa6893, 0xee, &(0x7f0000000980)=""/238, 0x40f00, 0x17, '\x00', 0x0, 0x0, r5, 0x8, &(0x7f0000000480)={0xa}, 0x8, 0x10, &(0x7f00000004c0)={0x3, 0x6, 0x20, 0x8000}, 0x10}, 0x78) ioctl$EXT4_IOC_MIGRATE(r3, 0x6609) sendfile(r4, r5, 0x0, 0xf03b0000) ioctl$sock_TIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000100)) sendmsg$TIPC_CMD_SET_LINK_PRI(r5, &(0x7f0000000b40)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000b00)={&(0x7f0000000880)=ANY=[@ANYBLOB='\x00\x00', @ANYRES16=0x0, @ANYBLOB="000327bd7000fddbdf2501000000000000000841000000140018000000057564703a73797a3000000000"], 0x30}}, 0x40880) sendfile(r4, r3, 0x0, 0x8000000000004) socket$inet_sctp(0x2, 0x0, 0x84) preadv(r0, &(0x7f0000000640)=[{&(0x7f0000000300)=""/255, 0xff}, {0x0}, {&(0x7f00000001c0)=""/50, 0x32}, {&(0x7f0000000500)=""/72, 0x48}, {&(0x7f0000000580)=""/27, 0x1b}, {&(0x7f00000005c0)=""/109, 0x6d}], 0x6, 0x4, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) 19:16:59 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x30, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_NODEID={0xc}]}]}, 0x30}}, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r3, r2, 0x0, 0x10000a006) syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), r3) 19:16:59 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000003580)={{0x14}, [@NFT_MSG_NEWSETELEM={0x18, 0xc, 0xa, 0x101, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}, @NFT_MSG_DELFLOWTABLE={0x2c, 0x18, 0xa, 0x101, 0x0, 0x0, {}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}]}, @NFT_MSG_NEWSETELEM={0x14, 0xc, 0xa, 0x201}], {0x14}}, 0x80}}, 0x0) [ 424.633253][ T26] audit: type=1804 audit(1634671019.593:256): pid=20944 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir579533360/syzkaller.8uGMIM/296/cgroup.controllers" dev="sda1" ino=14609 res=1 errno=0 19:16:59 executing program 0: r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) listen(r0, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f0000000140)=0x2) accept4$ax25(r0, 0x0, 0x0, 0x0) 19:17:00 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x24, 0x3, 0x8, 0xa5e7d4cd1579e4a3, 0x0, 0x0, {}, [@CTA_TIMEOUT_L4PROTO={0x5}, @CTA_TIMEOUT_L3PROTO={0x6}]}, 0x24}}, 0x0) 19:17:00 executing program 1: sendmsg$TIPC_NL_NODE_GET(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000040), 0xc, &(0x7f0000000280)={0x0}}, 0x0) r0 = accept$alg(0xffffffffffffffff, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="193fff7f", @ANYRES32, @ANYRES32=0x1], &(0x7f0000000780)='GPL\x00', 0x3, 0x0, 0x0, 0x41100, 0x7, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000007c0)={0x3, 0x1}, 0x8, 0x10, &(0x7f0000000800)={0x4, 0x10, 0x9, 0x10000}, 0x10}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={&(0x7f0000000940)='ext4_evict_inode\x00', r2}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000200), 0xf000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a80)={0x18, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="850000008100000018110000", @ANYRES32=0x1, @ANYBLOB="00003b6b6502ffffffff"], &(0x7f0000000440)='GPL\x00', 0xeaa6893, 0xee, &(0x7f0000000980)=""/238, 0x40f00, 0x17, '\x00', 0x0, 0x0, r5, 0x8, &(0x7f0000000480)={0xa}, 0x8, 0x10, &(0x7f00000004c0)={0x3, 0x6, 0x20, 0x8000}, 0x10}, 0x78) ioctl$EXT4_IOC_MIGRATE(r3, 0x6609) sendfile(r4, r5, 0x0, 0xf03b0000) ioctl$sock_TIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000100)) sendmsg$TIPC_CMD_SET_LINK_PRI(r5, &(0x7f0000000b40)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000b00)={&(0x7f0000000880)=ANY=[@ANYBLOB='\x00\x00', @ANYRES16=0x0, @ANYBLOB="000327bd7000fddbdf2501000000000000000841000000140018000000057564703a73797a3000000000"], 0x30}}, 0x40880) sendfile(r4, r3, 0x0, 0x8000000000004) socket$inet_sctp(0x2, 0x0, 0x84) preadv(r0, &(0x7f0000000640)=[{&(0x7f0000000300)=""/255, 0xff}, {0x0}, {&(0x7f00000001c0)=""/50, 0x32}, {&(0x7f0000000500)=""/72, 0x48}, {&(0x7f0000000580)=""/27, 0x1b}, {&(0x7f00000005c0)=""/109, 0x6d}], 0x6, 0x4, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) 19:17:00 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x1a, &(0x7f0000000000)=0x800, 0x4) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20}, 0x1c) 19:17:00 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x1}]}, 0x24}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000022c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x80}]}, 0x2c}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x24, r8, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x0) r10 = socket(0x18, 0x0, 0x1) accept4$netrom(r10, 0x0, 0x0, 0x0) 19:17:00 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x30, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_NODEID={0xc}]}]}, 0x30}}, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r3, r2, 0x0, 0x10000a006) syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), r3) [ 425.854018][ T26] audit: type=1804 audit(1634671020.813:257): pid=20984 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir579533360/syzkaller.8uGMIM/297/cgroup.controllers" dev="sda1" ino=14940 res=1 errno=0 19:17:00 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x328, 0x0, 0x5c, 0x160, 0x148, 0x3e0, 0x258, 0x228, 0x228, 0x258, 0x228, 0x3, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [], [], 'macvlan1\x00', 'netdevsim0\x00'}, 0x0, 0x128, 0x148, 0x52020000, {}, [@common=@unspec=@limit={{0x48}, {0x0, 0x7}}, @common=@unspec=@time={{0x38}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x388) [ 426.132182][ T26] audit: type=1800 audit(1634671020.843:258): pid=20984 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="cgroup.controllers" dev="sda1" ino=14940 res=0 errno=0 [ 426.210955][T20990] xt_CT: You must specify a L4 protocol and not use inversions on it 19:17:01 executing program 5: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x2, {{}, {0x0}, 0x0}}], 0x48}, 0x0) 19:17:01 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x1}]}, 0x24}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000022c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x80}]}, 0x2c}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x24, r8, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x0) r10 = socket(0x18, 0x0, 0x1) accept4$netrom(r10, 0x0, 0x0, 0x0) [ 426.270992][ T26] audit: type=1804 audit(1634671020.853:259): pid=20982 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir579533360/syzkaller.8uGMIM/297/cgroup.controllers" dev="sda1" ino=14940 res=1 errno=0 19:17:01 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) connect$inet6(r0, &(0x7f0000000340)={0x2, 0x4e20, 0x0, @loopback}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000001200)=[{&(0x7f0000000080)="580000001400add427323b472545b45602117fffffff81004e220e227f000001925aa80020007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) 19:17:01 executing program 0: r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000200)={0x18, 0x0, {0x3, @remote, 'wg1\x00'}}, 0x1e) ioctl$PPPOEIOCSFWD(r0, 0x4008b100, &(0x7f0000000000)={0x18, 0x0, {0x4, @link_local, 'ip6_vti0\x00'}}) 19:17:01 executing program 3: r0 = socket$inet_dccp(0x2, 0x6, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) writev(r1, &(0x7f0000000580)=[{&(0x7f0000000500)='f', 0x1}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) getsockopt$inet_int(r0, 0x10d, 0xc, 0x0, &(0x7f0000000000)) 19:17:01 executing program 4: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000e80)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x10, 0x4, 0x4, 0x3}, 0x40) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r1, &(0x7f0000000140), &(0x7f0000000200)=""/5}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000004c0)={r1, &(0x7f0000000400), &(0x7f0000000440)=""/97}, 0x20) 19:17:01 executing program 1: sendmsg$TIPC_NL_NODE_GET(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000040), 0xc, &(0x7f0000000280)={0x0}}, 0x0) r0 = accept$alg(0xffffffffffffffff, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="193fff7f", @ANYRES32, @ANYRES32=0x1], &(0x7f0000000780)='GPL\x00', 0x3, 0x0, 0x0, 0x41100, 0x7, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000007c0)={0x3, 0x1}, 0x8, 0x10, &(0x7f0000000800)={0x4, 0x10, 0x9, 0x10000}, 0x10}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={&(0x7f0000000940)='ext4_evict_inode\x00', r2}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000200), 0xf000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a80)={0x18, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="850000008100000018110000", @ANYRES32=0x1, @ANYBLOB="00003b6b6502ffffffff"], &(0x7f0000000440)='GPL\x00', 0xeaa6893, 0xee, &(0x7f0000000980)=""/238, 0x40f00, 0x17, '\x00', 0x0, 0x0, r5, 0x8, &(0x7f0000000480)={0xa}, 0x8, 0x10, &(0x7f00000004c0)={0x3, 0x6, 0x20, 0x8000}, 0x10}, 0x78) ioctl$EXT4_IOC_MIGRATE(r3, 0x6609) sendfile(r4, r5, 0x0, 0xf03b0000) ioctl$sock_TIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000100)) sendmsg$TIPC_CMD_SET_LINK_PRI(r5, &(0x7f0000000b40)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000b00)={&(0x7f0000000880)=ANY=[@ANYBLOB='\x00\x00', @ANYRES16=0x0, @ANYBLOB="000327bd7000fddbdf2501000000000000000841000000140018000000057564703a73797a3000000000"], 0x30}}, 0x40880) sendfile(r4, r3, 0x0, 0x8000000000004) socket$inet_sctp(0x2, 0x0, 0x84) preadv(r0, &(0x7f0000000640)=[{&(0x7f0000000300)=""/255, 0xff}, {0x0}, {&(0x7f00000001c0)=""/50, 0x32}, {&(0x7f0000000500)=""/72, 0x48}, {&(0x7f0000000580)=""/27, 0x1b}, {&(0x7f00000005c0)=""/109, 0x6d}], 0x6, 0x4, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) 19:17:01 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000001c0)="0a0775b0", 0x4) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000100)="f297c0eccf859705acf983fd5b4b6039b63eac610b", 0x8}, {&(0x7f0000001400)="c98812c1be8a", 0xffffffc8}, {&(0x7f00000012c0)="406f2bef596a8a3130012ee7bf", 0xd}, {&(0x7f0000001300)="7f5549f794326461", 0x8}], 0x4, &(0x7f00000000c0)=[@op={0x18}], 0x18}, 0x0) recvmsg(r1, &(0x7f00000013c0)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000001500)=""/74, 0x4a}, {&(0x7f0000001580)=""/32, 0x2fa80}], 0x2, 0x0, 0x0, 0x80fa0200}, 0x0) 19:17:01 executing program 5: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x201a7fa6, 0x0, 0x1}]}, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x21, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x287b361ae6c523fa, 0x10, &(0x7f0000000000), 0x128}, 0x48) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r0, 0xffffffffffffffff, 0x25}, 0x10) 19:17:01 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x1}]}, 0x24}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000022c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x80}]}, 0x2c}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x24, r8, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x0) r10 = socket(0x18, 0x0, 0x1) accept4$netrom(r10, 0x0, 0x0, 0x0) 19:17:01 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000080)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x2a}, @call={0x85, 0x0, 0x0, 0x23}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000500)='ext4_mballoc_alloc\x00', r1}, 0x10) write$cgroup_type(r0, &(0x7f0000000000), 0x248800) 19:17:02 executing program 5: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x201a7fa6, 0x0, 0x1}]}, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x21, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x287b361ae6c523fa, 0x10, &(0x7f0000000000), 0x128}, 0x48) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r0, 0xffffffffffffffff, 0x25}, 0x10) 19:17:02 executing program 4: r0 = socket$inet(0x2b, 0x801, 0x0) listen(r0, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, 0x0) 19:17:02 executing program 3: socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x0, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r1, &(0x7f00000002c0)={0x1f, 0x0, @fixed}, 0xe) listen(r1, 0x0) setsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0x7, &(0x7f0000000000), 0x4) preadv(r1, &(0x7f0000000580)=[{&(0x7f00000007c0)=""/4096, 0x1000}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/152, 0x98}, {&(0x7f0000000440)=""/253, 0xfd}, {&(0x7f0000000540)=""/45, 0x2d}], 0x5, 0x200, 0xb4e) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={0x0}}, 0x0) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={&(0x7f0000000100), 0xc, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c010000240004002abd7000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="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"/290], 0x13c}, 0x1, 0x0, 0x0, 0x8005}, 0x4048000) ioctl$sock_ifreq(r0, 0x8914, &(0x7f0000000040)={'macvtap0\x00', @ifru_addrs=@vsock={0x28, 0x0, 0x0, @local}}) 19:17:02 executing program 5: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x201a7fa6, 0x0, 0x1}]}, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x21, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x287b361ae6c523fa, 0x10, &(0x7f0000000000), 0x128}, 0x48) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r0, 0xffffffffffffffff, 0x25}, 0x10) 19:17:02 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x1}]}, 0x24}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000022c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x80}]}, 0x2c}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x24, r8, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x0) r10 = socket(0x18, 0x0, 0x1) accept4$netrom(r10, 0x0, 0x0, 0x0) 19:17:02 executing program 4: syz_emit_ethernet(0xbe, &(0x7f0000000440)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @local}, @source_quench={0xb, 0x4, 0x0, 0x0, {0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, @dev, @local, {[@noop, @generic={0x0, 0xc, "13000000000000000000"}, @ssrr={0x89, 0xb, 0x0, [@remote, @dev]}, @cipso={0x86, 0x65, 0x0, [{0x0, 0x8, "800000000000"}, {0x0, 0x12, "60d82474f42a627821f6b8035211b584"}, {0x0, 0xf, "549c610726e1d66ba7791e50e5"}, {0x0, 0xb, "7f05fe1ebc49279061"}, {0x0, 0x2}, {0x0, 0x12, "0c57b549158e146dab91d54093e05534"}, {0x0, 0x11, "a31c24f994fe3cab1d6e08763bc6b6"}, {0x0, 0x6, "7b3b9922"}]}]}}}}}}}, 0x0) [ 427.735261][T21043] device veth0_macvtap left promiscuous mode [ 427.747752][T21043] device macvtap0 entered promiscuous mode 19:17:02 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000001c0)="0a0775b0", 0x4) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000100)="f297c0eccf859705acf983fd5b4b6039b63eac610b", 0x8}, {&(0x7f0000001400)="c98812c1be8a", 0xffffffc8}, {&(0x7f00000012c0)="406f2bef596a8a3130012ee7bf", 0xd}, {&(0x7f0000001300)="7f5549f794326461", 0x8}], 0x4, &(0x7f00000000c0)=[@op={0x18}], 0x18}, 0x0) recvmsg(r1, &(0x7f00000013c0)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000001500)=""/74, 0x4a}, {&(0x7f0000001580)=""/32, 0x2fa80}], 0x2, 0x0, 0x0, 0x80fa0200}, 0x0) 19:17:03 executing program 1: sendmsg$TIPC_NL_NODE_GET(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000040), 0xc, &(0x7f0000000280)={0x0}}, 0x0) r0 = accept$alg(0xffffffffffffffff, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="193fff7f", @ANYRES32, @ANYRES32=0x1], &(0x7f0000000780)='GPL\x00', 0x3, 0x0, 0x0, 0x41100, 0x7, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000007c0)={0x3, 0x1}, 0x8, 0x10, &(0x7f0000000800)={0x4, 0x10, 0x9, 0x10000}, 0x10}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={&(0x7f0000000940)='ext4_evict_inode\x00', r2}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000200), 0xf000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a80)={0x18, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="850000008100000018110000", @ANYRES32=0x1, @ANYBLOB="00003b6b6502ffffffff"], &(0x7f0000000440)='GPL\x00', 0xeaa6893, 0xee, &(0x7f0000000980)=""/238, 0x40f00, 0x17, '\x00', 0x0, 0x0, r5, 0x8, &(0x7f0000000480)={0xa}, 0x8, 0x10, &(0x7f00000004c0)={0x3, 0x6, 0x20, 0x8000}, 0x10}, 0x78) ioctl$EXT4_IOC_MIGRATE(r3, 0x6609) sendfile(r4, r5, 0x0, 0xf03b0000) ioctl$sock_TIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000100)) sendmsg$TIPC_CMD_SET_LINK_PRI(r5, &(0x7f0000000b40)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000b00)={&(0x7f0000000880)=ANY=[@ANYBLOB='\x00\x00', @ANYRES16=0x0, @ANYBLOB="000327bd7000fddbdf2501000000000000000841000000140018000000057564703a73797a3000000000"], 0x30}}, 0x40880) sendfile(r4, r3, 0x0, 0x8000000000004) socket$inet_sctp(0x2, 0x0, 0x84) preadv(r0, &(0x7f0000000640)=[{&(0x7f0000000300)=""/255, 0xff}, {0x0}, {&(0x7f00000001c0)=""/50, 0x32}, {&(0x7f0000000500)=""/72, 0x48}, {&(0x7f0000000580)=""/27, 0x1b}, {&(0x7f00000005c0)=""/109, 0x6d}], 0x6, 0x4, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) 19:17:03 executing program 5: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x201a7fa6, 0x0, 0x1}]}, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x21, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x287b361ae6c523fa, 0x10, &(0x7f0000000000), 0x128}, 0x48) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r0, 0xffffffffffffffff, 0x25}, 0x10) 19:17:03 executing program 3: socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x0, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r1, &(0x7f00000002c0)={0x1f, 0x0, @fixed}, 0xe) listen(r1, 0x0) setsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0x7, &(0x7f0000000000), 0x4) preadv(r1, &(0x7f0000000580)=[{&(0x7f00000007c0)=""/4096, 0x1000}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/152, 0x98}, {&(0x7f0000000440)=""/253, 0xfd}, {&(0x7f0000000540)=""/45, 0x2d}], 0x5, 0x200, 0xb4e) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={0x0}}, 0x0) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={&(0x7f0000000100), 0xc, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c010000240004002abd7000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="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"/290], 0x13c}, 0x1, 0x0, 0x0, 0x8005}, 0x4048000) ioctl$sock_ifreq(r0, 0x8914, &(0x7f0000000040)={'macvtap0\x00', @ifru_addrs=@vsock={0x28, 0x0, 0x0, @local}}) 19:17:03 executing program 4: socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x0, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r1, &(0x7f00000002c0)={0x1f, 0x0, @fixed}, 0xe) listen(r1, 0x0) setsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0x7, &(0x7f0000000000), 0x4) preadv(r1, &(0x7f0000000580)=[{&(0x7f00000007c0)=""/4096, 0x1000}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/152, 0x98}, {&(0x7f0000000440)=""/253, 0xfd}, {&(0x7f0000000540)=""/45, 0x2d}], 0x5, 0x200, 0xb4e) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={0x0}}, 0x0) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={&(0x7f0000000100), 0xc, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c010000240004002abd7000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="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"/290], 0x13c}, 0x1, 0x0, 0x0, 0x8005}, 0x4048000) ioctl$sock_ifreq(r0, 0x8914, &(0x7f0000000040)={'macvtap0\x00', @ifru_addrs=@vsock={0x28, 0x0, 0x0, @local}}) 19:17:03 executing program 2: r0 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_qrtr_TIOCINQ(r0, 0x541b, &(0x7f00000021c0)) [ 428.332254][T21067] device veth0_macvtap left promiscuous mode [ 428.349943][T21067] device macvtap0 entered promiscuous mode 19:17:03 executing program 3: socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x0, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r1, &(0x7f00000002c0)={0x1f, 0x0, @fixed}, 0xe) listen(r1, 0x0) setsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0x7, &(0x7f0000000000), 0x4) preadv(r1, &(0x7f0000000580)=[{&(0x7f00000007c0)=""/4096, 0x1000}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/152, 0x98}, {&(0x7f0000000440)=""/253, 0xfd}, {&(0x7f0000000540)=""/45, 0x2d}], 0x5, 0x200, 0xb4e) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={0x0}}, 0x0) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={&(0x7f0000000100), 0xc, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c010000240004002abd7000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="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"/290], 0x13c}, 0x1, 0x0, 0x0, 0x8005}, 0x4048000) ioctl$sock_ifreq(r0, 0x8914, &(0x7f0000000040)={'macvtap0\x00', @ifru_addrs=@vsock={0x28, 0x0, 0x0, @local}}) 19:17:03 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-224\x00'}, 0x58) r2 = accept$alg(r1, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000008000)=[{0x0, 0x0, &(0x7f0000002780)=[{&(0x7f00000000c0)="5577535bc48d6c75366fb8f4511f8778", 0x5000}], 0x1}], 0x500, 0x103) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_DEL(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) 19:17:03 executing program 4: socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x0, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r1, &(0x7f00000002c0)={0x1f, 0x0, @fixed}, 0xe) listen(r1, 0x0) setsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0x7, &(0x7f0000000000), 0x4) preadv(r1, &(0x7f0000000580)=[{&(0x7f00000007c0)=""/4096, 0x1000}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/152, 0x98}, {&(0x7f0000000440)=""/253, 0xfd}, {&(0x7f0000000540)=""/45, 0x2d}], 0x5, 0x200, 0xb4e) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={0x0}}, 0x0) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={&(0x7f0000000100), 0xc, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c010000240004002abd7000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="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"/290], 0x13c}, 0x1, 0x0, 0x0, 0x8005}, 0x4048000) ioctl$sock_ifreq(r0, 0x8914, &(0x7f0000000040)={'macvtap0\x00', @ifru_addrs=@vsock={0x28, 0x0, 0x0, @local}}) 19:17:03 executing program 5: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x10, 0xffffffffffffffff, 0x0) unshare(0x40000200) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x39, 0x0, "b0fd7b07ff8a216915a8d3215a3225178096acf74c85ad01ba95fd9d0543750fb5a62a045888e8febca073f1f821abb8083f4d192383c47b3800abd4d841e2d4b56039653b95d0cd0a71a6ea35bdfaf6"}, 0xd8) sendto$inet6(r1, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd0d0c2ac, 0x1, 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x406f408, 0x0) [ 428.809282][ T26] audit: type=1804 audit(1634671023.763:260): pid=21080 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir127233530/syzkaller.uXAqcu/301/cgroup.controllers" dev="sda1" ino=14953 res=1 errno=0 [ 428.920611][T21082] hsr0 speed is unknown, defaulting to 1000 19:17:04 executing program 3: socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x0, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r1, &(0x7f00000002c0)={0x1f, 0x0, @fixed}, 0xe) listen(r1, 0x0) setsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0x7, &(0x7f0000000000), 0x4) preadv(r1, &(0x7f0000000580)=[{&(0x7f00000007c0)=""/4096, 0x1000}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/152, 0x98}, {&(0x7f0000000440)=""/253, 0xfd}, {&(0x7f0000000540)=""/45, 0x2d}], 0x5, 0x200, 0xb4e) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={0x0}}, 0x0) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={&(0x7f0000000100), 0xc, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c010000240004002abd7000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="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"/290], 0x13c}, 0x1, 0x0, 0x0, 0x8005}, 0x4048000) ioctl$sock_ifreq(r0, 0x8914, &(0x7f0000000040)={'macvtap0\x00', @ifru_addrs=@vsock={0x28, 0x0, 0x0, @local}}) [ 429.001432][T21078] hsr0 speed is unknown, defaulting to 1000 19:17:04 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000001c0)="0a0775b0", 0x4) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000100)="f297c0eccf859705acf983fd5b4b6039b63eac610b", 0x8}, {&(0x7f0000001400)="c98812c1be8a", 0xffffffc8}, {&(0x7f00000012c0)="406f2bef596a8a3130012ee7bf", 0xd}, {&(0x7f0000001300)="7f5549f794326461", 0x8}], 0x4, &(0x7f00000000c0)=[@op={0x18}], 0x18}, 0x0) recvmsg(r1, &(0x7f00000013c0)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000001500)=""/74, 0x4a}, {&(0x7f0000001580)=""/32, 0x2fa80}], 0x2, 0x0, 0x0, 0x80fa0200}, 0x0) 19:17:04 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-224\x00'}, 0x58) r2 = accept$alg(r1, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000008000)=[{0x0, 0x0, &(0x7f0000002780)=[{&(0x7f00000000c0)="5577535bc48d6c75366fb8f4511f8778", 0x5000}], 0x1}], 0x500, 0x103) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_DEL(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) 19:17:04 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-224\x00'}, 0x58) r2 = accept$alg(r1, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000008000)=[{0x0, 0x0, &(0x7f0000002780)=[{&(0x7f00000000c0)="5577535bc48d6c75366fb8f4511f8778", 0x5000}], 0x1}], 0x500, 0x103) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_DEL(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) 19:17:04 executing program 4: socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x0, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r1, &(0x7f00000002c0)={0x1f, 0x0, @fixed}, 0xe) listen(r1, 0x0) setsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0x7, &(0x7f0000000000), 0x4) preadv(r1, &(0x7f0000000580)=[{&(0x7f00000007c0)=""/4096, 0x1000}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/152, 0x98}, {&(0x7f0000000440)=""/253, 0xfd}, {&(0x7f0000000540)=""/45, 0x2d}], 0x5, 0x200, 0xb4e) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={0x0}}, 0x0) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={&(0x7f0000000100), 0xc, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c010000240004002abd7000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="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"/290], 0x13c}, 0x1, 0x0, 0x0, 0x8005}, 0x4048000) ioctl$sock_ifreq(r0, 0x8914, &(0x7f0000000040)={'macvtap0\x00', @ifru_addrs=@vsock={0x28, 0x0, 0x0, @local}}) 19:17:04 executing program 1: r0 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000480), 0xffffffffffffffff) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000280)=ANY=[], 0x208e292) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) sendmsg$WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x1c, r0, 0x707, 0x0, 0x0, {}, [@WGDEVICE_A_IFINDEX={0x8}]}, 0x1c}}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r3, r2, 0x0, 0x100000002) [ 429.502550][T21082] hsr0 speed is unknown, defaulting to 1000 [ 429.508200][ T26] audit: type=1804 audit(1634671024.463:261): pid=21139 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir127233530/syzkaller.uXAqcu/302/cgroup.controllers" dev="sda1" ino=14951 res=1 errno=0 19:17:04 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-224\x00'}, 0x58) r2 = accept$alg(r1, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000008000)=[{0x0, 0x0, &(0x7f0000002780)=[{&(0x7f00000000c0)="5577535bc48d6c75366fb8f4511f8778", 0x5000}], 0x1}], 0x500, 0x103) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_DEL(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) 19:17:04 executing program 4: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_pressure(r0, &(0x7f0000000080)='cpu.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r1, &(0x7f0000001340)={'full', 0x20, 0x5, 0x20, 0xfffff}, 0x2f) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) ppoll(&(0x7f00000000c0)=[{r1}, {r2}], 0x2, 0x0, 0x0, 0x0) 19:17:04 executing program 5: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x10, 0xffffffffffffffff, 0x0) unshare(0x40000200) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x39, 0x0, "b0fd7b07ff8a216915a8d3215a3225178096acf74c85ad01ba95fd9d0543750fb5a62a045888e8febca073f1f821abb8083f4d192383c47b3800abd4d841e2d4b56039653b95d0cd0a71a6ea35bdfaf6"}, 0xd8) sendto$inet6(r1, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd0d0c2ac, 0x1, 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x406f408, 0x0) [ 429.914016][ T26] audit: type=1804 audit(1634671024.873:262): pid=21167 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir266573529/syzkaller.JjYHuA/299/cgroup.controllers" dev="sda1" ino=14565 res=1 errno=0 [ 430.033683][ T26] audit: type=1804 audit(1634671024.973:263): pid=21155 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir038986091/syzkaller.GPbuUD/312/cgroup.controllers" dev="sda1" ino=13936 res=1 errno=0 19:17:05 executing program 4: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_pressure(r0, &(0x7f0000000080)='cpu.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r1, &(0x7f0000001340)={'full', 0x20, 0x5, 0x20, 0xfffff}, 0x2f) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) ppoll(&(0x7f00000000c0)=[{r1}, {r2}], 0x2, 0x0, 0x0, 0x0) 19:17:05 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000001c0)="0a0775b0", 0x4) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000100)="f297c0eccf859705acf983fd5b4b6039b63eac610b", 0x8}, {&(0x7f0000001400)="c98812c1be8a", 0xffffffc8}, {&(0x7f00000012c0)="406f2bef596a8a3130012ee7bf", 0xd}, {&(0x7f0000001300)="7f5549f794326461", 0x8}], 0x4, &(0x7f00000000c0)=[@op={0x18}], 0x18}, 0x0) recvmsg(r1, &(0x7f00000013c0)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000001500)=""/74, 0x4a}, {&(0x7f0000001580)=""/32, 0x2fa80}], 0x2, 0x0, 0x0, 0x80fa0200}, 0x0) 19:17:05 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-224\x00'}, 0x58) r2 = accept$alg(r1, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000008000)=[{0x0, 0x0, &(0x7f0000002780)=[{&(0x7f00000000c0)="5577535bc48d6c75366fb8f4511f8778", 0x5000}], 0x1}], 0x500, 0x103) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_DEL(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) [ 430.221689][T21179] hsr0 speed is unknown, defaulting to 1000 [ 430.308878][T21180] hsr0 speed is unknown, defaulting to 1000 [ 430.357499][ T26] audit: type=1804 audit(1634671025.313:264): pid=21171 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir266573529/syzkaller.JjYHuA/299/cgroup.controllers" dev="sda1" ino=14565 res=1 errno=0 19:17:05 executing program 4: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_pressure(r0, &(0x7f0000000080)='cpu.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r1, &(0x7f0000001340)={'full', 0x20, 0x5, 0x20, 0xfffff}, 0x2f) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) ppoll(&(0x7f00000000c0)=[{r1}, {r2}], 0x2, 0x0, 0x0, 0x0) 19:17:05 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-224\x00'}, 0x58) r2 = accept$alg(r1, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000008000)=[{0x0, 0x0, &(0x7f0000002780)=[{&(0x7f00000000c0)="5577535bc48d6c75366fb8f4511f8778", 0x5000}], 0x1}], 0x500, 0x103) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_DEL(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) 19:17:05 executing program 1: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_pressure(r0, &(0x7f0000000080)='cpu.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r1, &(0x7f0000001340)={'full', 0x20, 0x5, 0x20, 0xfffff}, 0x2f) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) ppoll(&(0x7f00000000c0)=[{r1}, {r2}], 0x2, 0x0, 0x0, 0x0) [ 430.567289][ T26] audit: type=1804 audit(1634671025.313:265): pid=21174 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir127233530/syzkaller.uXAqcu/303/cgroup.controllers" dev="sda1" ino=14952 res=1 errno=0 [ 430.744747][ T26] audit: type=1804 audit(1634671025.313:266): pid=21167 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir266573529/syzkaller.JjYHuA/299/cgroup.controllers" dev="sda1" ino=14565 res=1 errno=0 19:17:05 executing program 4: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_pressure(r0, &(0x7f0000000080)='cpu.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r1, &(0x7f0000001340)={'full', 0x20, 0x5, 0x20, 0xfffff}, 0x2f) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) ppoll(&(0x7f00000000c0)=[{r1}, {r2}], 0x2, 0x0, 0x0, 0x0) [ 430.912269][ T26] audit: type=1804 audit(1634671025.753:267): pid=21217 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir038986091/syzkaller.GPbuUD/313/cgroup.controllers" dev="sda1" ino=14951 res=1 errno=0 19:17:05 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-224\x00'}, 0x58) r2 = accept$alg(r1, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000008000)=[{0x0, 0x0, &(0x7f0000002780)=[{&(0x7f00000000c0)="5577535bc48d6c75366fb8f4511f8778", 0x5000}], 0x1}], 0x500, 0x103) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_DEL(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) 19:17:06 executing program 1: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_pressure(r0, &(0x7f0000000080)='cpu.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r1, &(0x7f0000001340)={'full', 0x20, 0x5, 0x20, 0xfffff}, 0x2f) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) ppoll(&(0x7f00000000c0)=[{r1}, {r2}], 0x2, 0x0, 0x0, 0x0) 19:17:06 executing program 5: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x10, 0xffffffffffffffff, 0x0) unshare(0x40000200) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x39, 0x0, "b0fd7b07ff8a216915a8d3215a3225178096acf74c85ad01ba95fd9d0543750fb5a62a045888e8febca073f1f821abb8083f4d192383c47b3800abd4d841e2d4b56039653b95d0cd0a71a6ea35bdfaf6"}, 0xd8) sendto$inet6(r1, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd0d0c2ac, 0x1, 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x406f408, 0x0) 19:17:06 executing program 4: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_pressure(r0, &(0x7f0000000080)='cpu.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r1, &(0x7f0000001340)={'full', 0x20, 0x5, 0x20, 0xfffff}, 0x2f) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) ppoll(&(0x7f00000000c0)=[{r1}, {r2}], 0x2, 0x0, 0x0, 0x0) [ 431.144189][ T26] audit: type=1804 audit(1634671026.043:268): pid=21239 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir127233530/syzkaller.uXAqcu/304/cgroup.controllers" dev="sda1" ino=14658 res=1 errno=0 19:17:06 executing program 0: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x10, 0xffffffffffffffff, 0x0) unshare(0x40000200) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x39, 0x0, "b0fd7b07ff8a216915a8d3215a3225178096acf74c85ad01ba95fd9d0543750fb5a62a045888e8febca073f1f821abb8083f4d192383c47b3800abd4d841e2d4b56039653b95d0cd0a71a6ea35bdfaf6"}, 0xd8) sendto$inet6(r1, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd0d0c2ac, 0x1, 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x406f408, 0x0) 19:17:06 executing program 2: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x10, 0xffffffffffffffff, 0x0) unshare(0x40000200) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x39, 0x0, "b0fd7b07ff8a216915a8d3215a3225178096acf74c85ad01ba95fd9d0543750fb5a62a045888e8febca073f1f821abb8083f4d192383c47b3800abd4d841e2d4b56039653b95d0cd0a71a6ea35bdfaf6"}, 0xd8) sendto$inet6(r1, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd0d0c2ac, 0x1, 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x406f408, 0x0) 19:17:06 executing program 1: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_pressure(r0, &(0x7f0000000080)='cpu.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r1, &(0x7f0000001340)={'full', 0x20, 0x5, 0x20, 0xfffff}, 0x2f) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) ppoll(&(0x7f00000000c0)=[{r1}, {r2}], 0x2, 0x0, 0x0, 0x0) [ 431.401270][T21255] hsr0 speed is unknown, defaulting to 1000 19:17:06 executing program 4: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_pressure(r0, &(0x7f0000000080)='cpu.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r1, &(0x7f0000001340)={'full', 0x20, 0x5, 0x20, 0xfffff}, 0x2f) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) ppoll(&(0x7f00000000c0)=[{r1}, {r2}], 0x2, 0x0, 0x0, 0x0) [ 431.482064][T21259] hsr0 speed is unknown, defaulting to 1000 [ 431.528102][ T26] audit: type=1804 audit(1634671026.483:269): pid=21273 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir038986091/syzkaller.GPbuUD/314/cgroup.controllers" dev="sda1" ino=14194 res=1 errno=0 [ 431.567432][T21264] hsr0 speed is unknown, defaulting to 1000 [ 431.680153][T21269] hsr0 speed is unknown, defaulting to 1000 [ 431.734227][T21270] hsr0 speed is unknown, defaulting to 1000 [ 431.829495][T21276] hsr0 speed is unknown, defaulting to 1000 19:17:06 executing program 1: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x10, 0xffffffffffffffff, 0x0) unshare(0x40000200) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x39, 0x0, "b0fd7b07ff8a216915a8d3215a3225178096acf74c85ad01ba95fd9d0543750fb5a62a045888e8febca073f1f821abb8083f4d192383c47b3800abd4d841e2d4b56039653b95d0cd0a71a6ea35bdfaf6"}, 0xd8) sendto$inet6(r1, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd0d0c2ac, 0x1, 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x406f408, 0x0) 19:17:06 executing program 3: sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="d8c18000", @ANYRES16=0x0, @ANYBLOB="01000000208d8c2b82e7c8530000060001"], 0x1c}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00'}) ioctl(r0, 0x8b32, &(0x7f0000000040)) 19:17:06 executing program 4: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_pressure(r0, &(0x7f0000000080)='cpu.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r1, &(0x7f0000001340)={'full', 0x20, 0x5, 0x20, 0xfffff}, 0x2f) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) ppoll(&(0x7f00000000c0)=[{r1}, {r2}], 0x2, 0x0, 0x0, 0x0) [ 432.238846][T21404] hsr0 speed is unknown, defaulting to 1000 [ 432.354827][T21405] hsr0 speed is unknown, defaulting to 1000 19:17:07 executing program 5: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x10, 0xffffffffffffffff, 0x0) unshare(0x40000200) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x39, 0x0, "b0fd7b07ff8a216915a8d3215a3225178096acf74c85ad01ba95fd9d0543750fb5a62a045888e8febca073f1f821abb8083f4d192383c47b3800abd4d841e2d4b56039653b95d0cd0a71a6ea35bdfaf6"}, 0xd8) sendto$inet6(r1, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd0d0c2ac, 0x1, 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x406f408, 0x0) 19:17:07 executing program 4: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$PNPIPE_ENCAP(r0, 0x113, 0x1, &(0x7f0000000000), &(0x7f0000000040)=0x4) 19:17:07 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x2, &(0x7f00000000c0)=@raw=[@call={0x85, 0x0, 0x0, 0x7}, @exit={0x95, 0x0, 0x9fff}], &(0x7f0000000040)='GPL\x00', 0x4, 0x9c, &(0x7f0000000140)=""/156, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 19:17:07 executing program 2: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x10, 0xffffffffffffffff, 0x0) unshare(0x40000200) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x39, 0x0, "b0fd7b07ff8a216915a8d3215a3225178096acf74c85ad01ba95fd9d0543750fb5a62a045888e8febca073f1f821abb8083f4d192383c47b3800abd4d841e2d4b56039653b95d0cd0a71a6ea35bdfaf6"}, 0xd8) sendto$inet6(r1, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd0d0c2ac, 0x1, 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x406f408, 0x0) 19:17:07 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000080)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}], 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000100)={0x1, [0x0]}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000200)={r1, 0x10, "3de314a7682a2e770c633409db5a1e02"}, &(0x7f00000000c0)=0x18) getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0x84, &(0x7f0000000280)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in={{0x2, 0x0, @local}}}}, &(0x7f0000000340)=0xb0) [ 432.704334][T21457] hsr0 speed is unknown, defaulting to 1000 [ 432.847975][T21459] hsr0 speed is unknown, defaulting to 1000 [ 432.914547][T21465] hsr0 speed is unknown, defaulting to 1000 [ 433.045707][T21475] hsr0 speed is unknown, defaulting to 1000 19:17:09 executing program 0: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x10, 0xffffffffffffffff, 0x0) unshare(0x40000200) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x39, 0x0, "b0fd7b07ff8a216915a8d3215a3225178096acf74c85ad01ba95fd9d0543750fb5a62a045888e8febca073f1f821abb8083f4d192383c47b3800abd4d841e2d4b56039653b95d0cd0a71a6ea35bdfaf6"}, 0xd8) sendto$inet6(r1, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd0d0c2ac, 0x1, 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x406f408, 0x0) 19:17:09 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x18, r1, 0x39e31cc425c6b397, 0x0, 0x0, {}, [@HEADER={0x4}]}, 0x18}}, 0x0) 19:17:09 executing program 1: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x10, 0xffffffffffffffff, 0x0) unshare(0x40000200) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x39, 0x0, "b0fd7b07ff8a216915a8d3215a3225178096acf74c85ad01ba95fd9d0543750fb5a62a045888e8febca073f1f821abb8083f4d192383c47b3800abd4d841e2d4b56039653b95d0cd0a71a6ea35bdfaf6"}, 0xd8) sendto$inet6(r1, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd0d0c2ac, 0x1, 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x406f408, 0x0) 19:17:09 executing program 5: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x7}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, 0x0, 0x4) 19:17:09 executing program 2: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x10, 0xffffffffffffffff, 0x0) unshare(0x40000200) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x39, 0x0, "b0fd7b07ff8a216915a8d3215a3225178096acf74c85ad01ba95fd9d0543750fb5a62a045888e8febca073f1f821abb8083f4d192383c47b3800abd4d841e2d4b56039653b95d0cd0a71a6ea35bdfaf6"}, 0xd8) sendto$inet6(r1, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd0d0c2ac, 0x1, 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x406f408, 0x0) 19:17:09 executing program 4: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x80000000}, 0x19a) write(r0, &(0x7f0000000080)="240000001a005f3814f9f407000903018000200000000000000000000800020040000000", 0x24) [ 434.578192][T21565] hsr0 speed is unknown, defaulting to 1000 19:17:09 executing program 4: r0 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) r1 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x20) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="17090000000000000000010000000500070000000000080009000000000014002000fc00000000000000000000000000000008000a0000000000060002000100000014001f"], 0x5c}}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000180)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r4, r3, 0x0, 0x100007000) 19:17:09 executing program 5: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000140)={0x18, 0x0, {0x203, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x34}, 'macvlan1\x00'}}, 0x1e) sendmmsg(r1, &(0x7f0000001cc0)=[{{0x0, 0x0, &(0x7f0000001b80)=[{&(0x7f0000001a40)='k', 0x1}], 0x4c}}], 0x1, 0x0) recvmmsg(r1, &(0x7f00000002c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x7ffff000}}], 0x300, 0x12102, 0x0) 19:17:09 executing program 3: r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000180)=[@in={0x2, 0x0, @private=0xa010100}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f00000000c0)={0x1, [0x0]}, &(0x7f0000000100)=0x8) setsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f00000000c0)=@assoc_value={r2}, 0x8) [ 434.671232][T21573] hsr0 speed is unknown, defaulting to 1000 [ 434.736609][T21571] hsr0 speed is unknown, defaulting to 1000 [ 434.783564][T21575] hsr0 speed is unknown, defaulting to 1000 [ 434.833731][T21578] hsr0 speed is unknown, defaulting to 1000 [ 434.903284][T21585] hsr0 speed is unknown, defaulting to 1000 [ 435.045196][ T26] audit: type=1804 audit(1634671030.003:270): pid=21630 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir579533360/syzkaller.8uGMIM/316/cgroup.controllers" dev="sda1" ino=14983 res=1 errno=0 19:17:10 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0xf000) sendfile(r1, 0xffffffffffffffff, 0x0, 0xf03b0000) sendfile(r1, r0, 0x0, 0x800000000000c) socket$netlink(0x10, 0x3, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x111) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, 0x0) close(r2) r3 = socket$l2tp(0x2, 0x2, 0x73) ioctl(r3, 0x88912, &(0x7f00000001c0)='\b\r') ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) pwrite64(0xffffffffffffffff, &(0x7f0000000600), 0x0, 0x0) r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$BTRFS_IOC_BALANCE(r1, 0x5000940c, 0x0) setsockopt$sock_int(r4, 0x1, 0x3e, &(0x7f00000000c0)=0x7, 0x4) bind$llc(r4, &(0x7f0000000000)={0x1a, 0x0, 0x9, 0x0, 0x0, 0x2}, 0x10) sendmmsg(r4, &(0x7f0000001380), 0x3fffffffffffeed, 0x17) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) 19:17:10 executing program 4: r0 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) r1 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x20) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="17090000000000000000010000000500070000000000080009000000000014002000fc00000000000000000000000000000008000a0000000000060002000100000014001f"], 0x5c}}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000180)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r4, r3, 0x0, 0x100007000) 19:17:10 executing program 1: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x10, 0xffffffffffffffff, 0x0) unshare(0x40000200) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x39, 0x0, "b0fd7b07ff8a216915a8d3215a3225178096acf74c85ad01ba95fd9d0543750fb5a62a045888e8febca073f1f821abb8083f4d192383c47b3800abd4d841e2d4b56039653b95d0cd0a71a6ea35bdfaf6"}, 0xd8) sendto$inet6(r1, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd0d0c2ac, 0x1, 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x406f408, 0x0) [ 435.859807][ T26] audit: type=1804 audit(1634671030.823:271): pid=21722 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir579533360/syzkaller.8uGMIM/317/cgroup.controllers" dev="sda1" ino=14627 res=1 errno=0 [ 435.977528][T21732] hsr0 speed is unknown, defaulting to 1000 [ 436.024654][T21736] hsr0 speed is unknown, defaulting to 1000 19:17:12 executing program 0: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x10, 0xffffffffffffffff, 0x0) unshare(0x40000200) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x39, 0x0, "b0fd7b07ff8a216915a8d3215a3225178096acf74c85ad01ba95fd9d0543750fb5a62a045888e8febca073f1f821abb8083f4d192383c47b3800abd4d841e2d4b56039653b95d0cd0a71a6ea35bdfaf6"}, 0xd8) sendto$inet6(r1, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd0d0c2ac, 0x1, 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x406f408, 0x0) 19:17:12 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000040)="370002000000", 0x6) 19:17:12 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000240)={{0x10, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000140)=""/198, 0x1a, 0xc6, 0x5}, 0x20) 19:17:12 executing program 4: r0 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) r1 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x20) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="17090000000000000000010000000500070000000000080009000000000014002000fc00000000000000000000000000000008000a0000000000060002000100000014001f"], 0x5c}}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000180)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r4, r3, 0x0, 0x100007000) 19:17:12 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0xf000) sendfile(r1, 0xffffffffffffffff, 0x0, 0xf03b0000) sendfile(r1, r0, 0x0, 0x800000000000c) socket$netlink(0x10, 0x3, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x111) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, 0x0) close(r2) r3 = socket$l2tp(0x2, 0x2, 0x73) ioctl(r3, 0x88912, &(0x7f00000001c0)='\b\r') ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) pwrite64(0xffffffffffffffff, &(0x7f0000000600), 0x0, 0x0) r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$BTRFS_IOC_BALANCE(r1, 0x5000940c, 0x0) setsockopt$sock_int(r4, 0x1, 0x3e, &(0x7f00000000c0)=0x7, 0x4) bind$llc(r4, &(0x7f0000000000)={0x1a, 0x0, 0x9, 0x0, 0x0, 0x2}, 0x10) sendmmsg(r4, &(0x7f0000001380), 0x3fffffffffffeed, 0x17) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) 19:17:12 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x34, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1\x00'}]}]}, 0x34}}, 0x0) 19:17:12 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000040)="370002000000", 0x6) 19:17:12 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={0x0}}, 0x0) ioctl$sock_ifreq(r0, 0x89b0, &(0x7f0000000040)={'macvtap0\x00', @ifru_addrs=@vsock={0x28, 0x0, 0x0, @local}}) 19:17:12 executing program 2: r0 = socket(0x2a, 0x2, 0x0) setsockopt$inet6_dccp_buf(r0, 0x21, 0x0, 0x0, 0x0) [ 437.918225][T21805] hsr0 speed is unknown, defaulting to 1000 [ 437.952894][ T26] audit: type=1804 audit(1634671032.913:272): pid=21804 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir579533360/syzkaller.8uGMIM/318/cgroup.controllers" dev="sda1" ino=15001 res=1 errno=0 [ 437.960190][T21806] hsr0 speed is unknown, defaulting to 1000 19:17:13 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={0x44, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY={0x28, 0x50, 0x0, 0x1, [@NL80211_KEY_CIPHER={0x8, 0x3, 0xfac06}, @NL80211_KEY_IDX={0x5, 0x2, 0x5}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "d19fcf3a5a1f4f620100"}]}]}, 0x44}}, 0x0) 19:17:13 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000040)="370002000000", 0x6) 19:17:13 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000700)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000007c0)={0x48, r2, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_SEC_KEY={0x2c, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_FRAMES={0x5}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "5df7441c7321934b7737cc493a95f02f"}, @NL802154_KEY_ATTR_ID={0xc, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x4}]}]}]}, 0x48}}, 0x0) [ 438.403279][T21852] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 438.460889][T21869] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 439.720791][ T1360] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.727112][ T1360] ieee802154 phy1 wpan1: encryption failed: -22 19:17:15 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000700)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000007c0)={0x48, r2, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_SEC_KEY={0x2c, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_FRAMES={0x5}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "5df7441c7321934b7737cc493a95f02f"}, @NL802154_KEY_ATTR_ID={0xc, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x4}]}]}]}, 0x48}}, 0x0) 19:17:15 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000040)="370002000000", 0x6) 19:17:15 executing program 4: r0 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) r1 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x20) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="17090000000000000000010000000500070000000000080009000000000014002000fc00000000000000000000000000000008000a0000000000060002000100000014001f"], 0x5c}}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000180)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r4, r3, 0x0, 0x100007000) 19:17:15 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0xf000) sendfile(r1, 0xffffffffffffffff, 0x0, 0xf03b0000) sendfile(r1, r0, 0x0, 0x800000000000c) socket$netlink(0x10, 0x3, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x111) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, 0x0) close(r2) r3 = socket$l2tp(0x2, 0x2, 0x73) ioctl(r3, 0x88912, &(0x7f00000001c0)='\b\r') ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) pwrite64(0xffffffffffffffff, &(0x7f0000000600), 0x0, 0x0) r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$BTRFS_IOC_BALANCE(r1, 0x5000940c, 0x0) setsockopt$sock_int(r4, 0x1, 0x3e, &(0x7f00000000c0)=0x7, 0x4) bind$llc(r4, &(0x7f0000000000)={0x1a, 0x0, 0x9, 0x0, 0x0, 0x2}, 0x10) sendmmsg(r4, &(0x7f0000001380), 0x3fffffffffffeed, 0x17) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) 19:17:15 executing program 2: r0 = socket(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000000)={@remote}, 0x14) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r1, 0x1) syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2}}}}}}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000005c0)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "000400", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x7}}}}}}}, 0x0) 19:17:15 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000700)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000007c0)={0x48, r2, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_SEC_KEY={0x2c, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_FRAMES={0x5}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "5df7441c7321934b7737cc493a95f02f"}, @NL802154_KEY_ATTR_ID={0xc, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x4}]}]}]}, 0x48}}, 0x0) [ 440.788887][T21886] netlink: 'syz-executor.1': attribute type 4 has an invalid length. 19:17:15 executing program 3: r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000180)={0x0, 0x4, 0x10}, 0xc) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000140)={0x20}) pwrite64(r1, &(0x7f00000002c0)='_', 0x1, 0x0) write$cgroup_int(r1, 0x0, 0x0) ioctl$FIBMAP(r1, 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000380), 0x101bf) ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x660c) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000001300)={0x2880008, r1}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001380)=@bpf_ext={0x1c, 0x5, &(0x7f00000001c0)=@raw=[@exit, @map_val={0x18, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x889}, @map_val={0x18, 0x0, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x81}], &(0x7f0000000200)='GPL\x00', 0x7ff, 0x1000, &(0x7f0000000380)=""/4096, 0x41000, 0x5, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f0000000240)={0x3, 0x4}, 0x8, 0x10, &(0x7f0000000280)={0x5, 0xf, 0x1, 0xffff8001}, 0x10, 0x125f6}, 0x78) r3 = socket$kcm(0x10, 0x0, 0x10) r4 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1}, 0x0) recvmsg(r3, &(0x7f000000b440)={0x0, 0x0, 0x0}, 0x0) 19:17:15 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) pipe(&(0x7f0000000100)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0xf000) sendfile(r1, r2, 0x0, 0xf03b0000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x13, r0, 0x0) socket$xdp(0x2c, 0x3, 0x0) mmap(&(0x7f000077f000/0x1000)=nil, 0x1000, 0x0, 0x11, 0xffffffffffffffff, 0x89643000) socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$netlink(r3, &(0x7f0000001340)={0x0, 0x803e0000, &(0x7f0000001280)=[{&(0x7f0000001e80)={0x10}, 0x20001290}], 0x1, &(0x7f0000001300)=[@rights={{0x14, 0x1, 0x1, [r4]}}], 0x18}, 0x0) recvmmsg(r4, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x0, 0x0) recvmsg$kcm(r4, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000001c0)=[{0x0}, {&(0x7f00000004c0)=""/70, 0x46}], 0x2}, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 19:17:15 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000700)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000007c0)={0x48, r2, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_SEC_KEY={0x2c, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_FRAMES={0x5}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "5df7441c7321934b7737cc493a95f02f"}, @NL802154_KEY_ATTR_ID={0xc, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x4}]}]}]}, 0x48}}, 0x0) [ 440.927550][T21892] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 441.009708][ T26] audit: type=1804 audit(1634671035.973:273): pid=21885 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir579533360/syzkaller.8uGMIM/319/cgroup.controllers" dev="sda1" ino=15015 res=1 errno=0 19:17:16 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000700)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000007c0)={0x48, r2, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_SEC_KEY={0x2c, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_FRAMES={0x5}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "5df7441c7321934b7737cc493a95f02f"}, @NL802154_KEY_ATTR_ID={0xc, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x4}]}]}]}, 0x48}}, 0x0) [ 441.184473][T21900] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 441.227164][T21901] netlink: 'syz-executor.3': attribute type 11 has an invalid length. 19:17:16 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000700)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000007c0)={0x48, r2, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_SEC_KEY={0x2c, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_FRAMES={0x5}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "5df7441c7321934b7737cc493a95f02f"}, @NL802154_KEY_ATTR_ID={0xc, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x4}]}]}]}, 0x48}}, 0x0) [ 441.284036][T21901] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.3'. [ 441.506080][T21905] netlink: 'syz-executor.3': attribute type 11 has an invalid length. [ 441.541034][T21905] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.3'. 19:17:16 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0xf000) sendfile(r1, 0xffffffffffffffff, 0x0, 0xf03b0000) sendfile(r1, r0, 0x0, 0x800000000000c) socket$netlink(0x10, 0x3, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x111) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, 0x0) close(r2) r3 = socket$l2tp(0x2, 0x2, 0x73) ioctl(r3, 0x88912, &(0x7f00000001c0)='\b\r') ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) pwrite64(0xffffffffffffffff, &(0x7f0000000600), 0x0, 0x0) r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$BTRFS_IOC_BALANCE(r1, 0x5000940c, 0x0) setsockopt$sock_int(r4, 0x1, 0x3e, &(0x7f00000000c0)=0x7, 0x4) bind$llc(r4, &(0x7f0000000000)={0x1a, 0x0, 0x9, 0x0, 0x0, 0x2}, 0x10) sendmmsg(r4, &(0x7f0000001380), 0x3fffffffffffeed, 0x17) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) 19:17:16 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000700)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000007c0)={0x48, r2, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_SEC_KEY={0x2c, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_FRAMES={0x5}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "5df7441c7321934b7737cc493a95f02f"}, @NL802154_KEY_ATTR_ID={0xc, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x4}]}]}]}, 0x48}}, 0x0) 19:17:16 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f0000000080)={{0xa, 0x0, 0x0, @mcast1}, {0xa, 0x0, 0x0, @empty}}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd3, &(0x7f0000000300)={{0xa, 0x0, 0x0, @mcast1}, {0xa, 0x0, 0x0, @empty}}, 0x5c) 19:17:16 executing program 1: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) close(r0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0x12) sendfile(r0, r3, 0x0, 0x8000000000005) sendfile(r0, r1, 0x0, 0xfff) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) 19:17:16 executing program 3: r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000180)={0x0, 0x4, 0x10}, 0xc) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000140)={0x20}) pwrite64(r1, &(0x7f00000002c0)='_', 0x1, 0x0) write$cgroup_int(r1, 0x0, 0x0) ioctl$FIBMAP(r1, 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000380), 0x101bf) ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x660c) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000001300)={0x2880008, r1}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001380)=@bpf_ext={0x1c, 0x5, &(0x7f00000001c0)=@raw=[@exit, @map_val={0x18, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x889}, @map_val={0x18, 0x0, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x81}], &(0x7f0000000200)='GPL\x00', 0x7ff, 0x1000, &(0x7f0000000380)=""/4096, 0x41000, 0x5, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f0000000240)={0x3, 0x4}, 0x8, 0x10, &(0x7f0000000280)={0x5, 0xf, 0x1, 0xffff8001}, 0x10, 0x125f6}, 0x78) r3 = socket$kcm(0x10, 0x0, 0x10) r4 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1}, 0x0) recvmsg(r3, &(0x7f000000b440)={0x0, 0x0, 0x0}, 0x0) [ 441.907764][T21937] netlink: 'syz-executor.0': attribute type 4 has an invalid length. 19:17:17 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x3c, r1, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8}}]}, 0x3c}}, 0x0) [ 442.225573][T21946] netlink: 'syz-executor.3': attribute type 11 has an invalid length. [ 442.253110][T21946] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.3'. 19:17:17 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000003100)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000000b06010300000000000000000000000005000100070000000900020073797a3000790600100007800c000180"], 0x38}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000005) 19:17:17 executing program 5: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xf0894000) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x380000d, 0x6031, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x80000000001, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffd18, 0x840, 0x0, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000ffd000/0x3000)=nil, 0xfe27}, &(0x7f0000000100)=0x30) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000280)={0x80000000, {{0xa, 0x4e22, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}, 0x1}}}, 0x88) 19:17:17 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) pipe(&(0x7f0000000100)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0xf000) sendfile(r1, r2, 0x0, 0xf03b0000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x13, r0, 0x0) socket$xdp(0x2c, 0x3, 0x0) mmap(&(0x7f000077f000/0x1000)=nil, 0x1000, 0x0, 0x11, 0xffffffffffffffff, 0x89643000) socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$netlink(r3, &(0x7f0000001340)={0x0, 0x803e0000, &(0x7f0000001280)=[{&(0x7f0000001e80)={0x10}, 0x20001290}], 0x1, &(0x7f0000001300)=[@rights={{0x14, 0x1, 0x1, [r4]}}], 0x18}, 0x0) recvmmsg(r4, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x0, 0x0) recvmsg$kcm(r4, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000001c0)=[{0x0}, {&(0x7f00000004c0)=""/70, 0x46}], 0x2}, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 19:17:17 executing program 0: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0xfffffffffffffd20, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="6000000030003dfa0000000000000000000000004c000100480001000700010078740000380002802a000600260000006e676c650000000000000000000000000000000000009edd8cfa00be1200000000000000080002"], 0x1}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) r2 = socket$netlink(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) [ 442.691160][ T26] audit: type=1804 audit(1634671037.653:274): pid=21965 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir579533360/syzkaller.8uGMIM/321/cgroup.controllers" dev="sda1" ino=14999 res=1 errno=0 19:17:17 executing program 3: r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000180)={0x0, 0x4, 0x10}, 0xc) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000140)={0x20}) pwrite64(r1, &(0x7f00000002c0)='_', 0x1, 0x0) write$cgroup_int(r1, 0x0, 0x0) ioctl$FIBMAP(r1, 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000380), 0x101bf) ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x660c) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000001300)={0x2880008, r1}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001380)=@bpf_ext={0x1c, 0x5, &(0x7f00000001c0)=@raw=[@exit, @map_val={0x18, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x889}, @map_val={0x18, 0x0, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x81}], &(0x7f0000000200)='GPL\x00', 0x7ff, 0x1000, &(0x7f0000000380)=""/4096, 0x41000, 0x5, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f0000000240)={0x3, 0x4}, 0x8, 0x10, &(0x7f0000000280)={0x5, 0xf, 0x1, 0xffff8001}, 0x10, 0x125f6}, 0x78) r3 = socket$kcm(0x10, 0x0, 0x10) r4 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1}, 0x0) recvmsg(r3, &(0x7f000000b440)={0x0, 0x0, 0x0}, 0x0) [ 442.970887][T21968] hsr0 speed is unknown, defaulting to 1000 19:17:18 executing program 1: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) close(r0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0x12) sendfile(r0, r3, 0x0, 0x8000000000005) sendfile(r0, r1, 0x0, 0xfff) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) [ 443.127859][T21979] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 443.146535][T21979] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 443.273641][T21987] netlink: 'syz-executor.3': attribute type 11 has an invalid length. [ 443.297331][T21987] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.3'. 19:17:18 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000003100)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000000b06010300000000000000000000000005000100070000000900020073797a3000790600100007800c000180"], 0x38}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000005) 19:17:18 executing program 3: r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000180)={0x0, 0x4, 0x10}, 0xc) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000140)={0x20}) pwrite64(r1, &(0x7f00000002c0)='_', 0x1, 0x0) write$cgroup_int(r1, 0x0, 0x0) ioctl$FIBMAP(r1, 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000380), 0x101bf) ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x660c) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000001300)={0x2880008, r1}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001380)=@bpf_ext={0x1c, 0x5, &(0x7f00000001c0)=@raw=[@exit, @map_val={0x18, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x889}, @map_val={0x18, 0x0, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x81}], &(0x7f0000000200)='GPL\x00', 0x7ff, 0x1000, &(0x7f0000000380)=""/4096, 0x41000, 0x5, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f0000000240)={0x3, 0x4}, 0x8, 0x10, &(0x7f0000000280)={0x5, 0xf, 0x1, 0xffff8001}, 0x10, 0x125f6}, 0x78) r3 = socket$kcm(0x10, 0x0, 0x10) r4 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1}, 0x0) recvmsg(r3, &(0x7f000000b440)={0x0, 0x0, 0x0}, 0x0) 19:17:18 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000003100)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000000b06010300000000000000000000000005000100070000000900020073797a3000790600100007800c000180"], 0x38}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000005) [ 443.946294][ T26] audit: type=1804 audit(1634671038.903:275): pid=22017 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir579533360/syzkaller.8uGMIM/322/cgroup.controllers" dev="sda1" ino=14999 res=1 errno=0 [ 444.130183][T22022] netlink: 'syz-executor.3': attribute type 11 has an invalid length. [ 444.139051][T22022] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.3'. [ 444.287798][ T26] audit: type=1804 audit(1634671039.243:276): pid=22030 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir428718356/syzkaller.vaoGIa/313/cgroup.controllers" dev="sda1" ino=15040 res=1 errno=0 19:17:19 executing program 1: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) close(r0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0x12) sendfile(r0, r3, 0x0, 0x8000000000005) sendfile(r0, r1, 0x0, 0xfff) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) 19:17:19 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) pipe(&(0x7f0000000100)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0xf000) sendfile(r1, r2, 0x0, 0xf03b0000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x13, r0, 0x0) socket$xdp(0x2c, 0x3, 0x0) mmap(&(0x7f000077f000/0x1000)=nil, 0x1000, 0x0, 0x11, 0xffffffffffffffff, 0x89643000) socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$netlink(r3, &(0x7f0000001340)={0x0, 0x803e0000, &(0x7f0000001280)=[{&(0x7f0000001e80)={0x10}, 0x20001290}], 0x1, &(0x7f0000001300)=[@rights={{0x14, 0x1, 0x1, [r4]}}], 0x18}, 0x0) recvmmsg(r4, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x0, 0x0) recvmsg$kcm(r4, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000001c0)=[{0x0}, {&(0x7f00000004c0)=""/70, 0x46}], 0x2}, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 19:17:19 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000003100)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000000b06010300000000000000000000000005000100070000000900020073797a3000790600100007800c000180"], 0x38}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000005) 19:17:19 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000003100)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000000b06010300000000000000000000000005000100070000000900020073797a3000790600100007800c000180"], 0x38}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000005) [ 444.787016][ T26] audit: type=1804 audit(1634671039.743:277): pid=22042 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir428718356/syzkaller.vaoGIa/314/cgroup.controllers" dev="sda1" ino=13908 res=1 errno=0 19:17:20 executing program 5: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xf0894000) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x380000d, 0x6031, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x80000000001, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffd18, 0x840, 0x0, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000ffd000/0x3000)=nil, 0xfe27}, &(0x7f0000000100)=0x30) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000280)={0x80000000, {{0xa, 0x4e22, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}, 0x1}}}, 0x88) 19:17:20 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) close(r0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0x12) sendfile(r0, r3, 0x0, 0x8000000000005) sendfile(r0, r1, 0x0, 0xfff) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) 19:17:20 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000003100)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000000b06010300000000000000000000000005000100070000000900020073797a3000790600100007800c000180"], 0x38}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000005) 19:17:20 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000003100)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000000b06010300000000000000000000000005000100070000000900020073797a3000790600100007800c000180"], 0x38}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000005) 19:17:20 executing program 1: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) close(r0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0x12) sendfile(r0, r3, 0x0, 0x8000000000005) sendfile(r0, r1, 0x0, 0xfff) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) [ 446.142379][T22073] hsr0 speed is unknown, defaulting to 1000 [ 446.197043][ T26] audit: type=1804 audit(1634671041.153:278): pid=22069 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir579533360/syzkaller.8uGMIM/324/cgroup.controllers" dev="sda1" ino=15042 res=1 errno=0 [ 446.319818][ T26] audit: type=1804 audit(1634671041.223:279): pid=22070 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir428718356/syzkaller.vaoGIa/315/cgroup.controllers" dev="sda1" ino=15043 res=1 errno=0 19:17:21 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) pipe(&(0x7f0000000100)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0xf000) sendfile(r1, r2, 0x0, 0xf03b0000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x13, r0, 0x0) socket$xdp(0x2c, 0x3, 0x0) mmap(&(0x7f000077f000/0x1000)=nil, 0x1000, 0x0, 0x11, 0xffffffffffffffff, 0x89643000) socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$netlink(r3, &(0x7f0000001340)={0x0, 0x803e0000, &(0x7f0000001280)=[{&(0x7f0000001e80)={0x10}, 0x20001290}], 0x1, &(0x7f0000001300)=[@rights={{0x14, 0x1, 0x1, [r4]}}], 0x18}, 0x0) recvmmsg(r4, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x0, 0x0) recvmsg$kcm(r4, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000001c0)=[{0x0}, {&(0x7f00000004c0)=""/70, 0x46}], 0x2}, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 19:17:22 executing program 1: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xf0894000) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x380000d, 0x6031, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x80000000001, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffd18, 0x840, 0x0, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000ffd000/0x3000)=nil, 0xfe27}, &(0x7f0000000100)=0x30) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000280)={0x80000000, {{0xa, 0x4e22, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}, 0x1}}}, 0x88) 19:17:22 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@setlink={0x50, 0x13, 0x1, 0x0, 0x0, {}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @private1}]}]}, @IFLA_IFNAME={0x14, 0x3, 'syz_tun\x00'}]}, 0x50}}, 0x0) 19:17:22 executing program 0: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x94, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xfff3}}, [@filter_kind_options=@f_matchall={{0xd}, {0x60, 0x2, [@TCA_MATCHALL_ACT={0x54, 0x2, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6}]}, {0x4}, {0xc}, {0xc}}}]}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x2}]}}]}, 0x94}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 19:17:22 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) close(r0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0x12) sendfile(r0, r3, 0x0, 0x8000000000005) sendfile(r0, r1, 0x0, 0xfff) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) [ 447.275790][T22105] hsr0 speed is unknown, defaulting to 1000 [ 447.295016][T22114] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 447.447070][T22114] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 19:17:22 executing program 4: r0 = socket$inet6(0xa, 0x803, 0x2) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000440)={{{@in6=@mcast1, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x80000000000001}, {{@in=@broadcast, 0x0, 0x6c}, 0x0, @in=@empty, 0x0, 0x4, 0x0, 0x1}}, 0xe8) sendmmsg(r0, &(0x7f0000008440)=[{{0x0, 0x536, 0x0}}], 0x400000000000107, 0x0) 19:17:22 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@ipv6_newroute={0x28, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_MULTIPATH={0xc, 0x9, {0x8}}]}, 0x28}}, 0x0) 19:17:24 executing program 5: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xf0894000) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x380000d, 0x6031, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x80000000001, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffd18, 0x840, 0x0, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000ffd000/0x3000)=nil, 0xfe27}, &(0x7f0000000100)=0x30) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000280)={0x80000000, {{0xa, 0x4e22, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}, 0x1}}}, 0x88) 19:17:24 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) sendto$inet6(r0, &(0x7f0000000080)='N', 0xfffffdef, 0x0, 0x0, 0xe000000) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='highspeed\x00', 0xa) sendto$inet6(r0, &(0x7f00000001c0)='}', 0x1, 0x0, 0x0, 0x0) 19:17:24 executing program 4: r0 = socket$inet6(0xa, 0x803, 0x2) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000440)={{{@in6=@mcast1, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x80000000000001}, {{@in=@broadcast, 0x0, 0x6c}, 0x0, @in=@empty, 0x0, 0x4, 0x0, 0x1}}, 0xe8) sendmmsg(r0, &(0x7f0000008440)=[{{0x0, 0x536, 0x0}}], 0x400000000000107, 0x0) 19:17:24 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) close(r0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0x12) sendfile(r0, r3, 0x0, 0x8000000000005) sendfile(r0, r1, 0x0, 0xfff) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) 19:17:24 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030020000505d25a80648c63940d0224fc60140002400a000a00053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) [ 449.255834][T22175] netlink: 151480 bytes leftover after parsing attributes in process `syz-executor.2'. 19:17:24 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x4c, r1, 0x1, 0x0, 0x0, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8}, {0x6}}]}, 0x4c}}, 0x0) [ 449.531574][T22180] hsr0 speed is unknown, defaulting to 1000 19:17:25 executing program 1: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xf0894000) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x380000d, 0x6031, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x80000000001, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffd18, 0x840, 0x0, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000ffd000/0x3000)=nil, 0xfe27}, &(0x7f0000000100)=0x30) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000280)={0x80000000, {{0xa, 0x4e22, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}, 0x1}}}, 0x88) 19:17:25 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0xffff0001, 0x4) 19:17:25 executing program 4: r0 = socket$inet6(0xa, 0x803, 0x2) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000440)={{{@in6=@mcast1, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x80000000000001}, {{@in=@broadcast, 0x0, 0x6c}, 0x0, @in=@empty, 0x0, 0x4, 0x0, 0x1}}, 0xe8) sendmmsg(r0, &(0x7f0000008440)=[{{0x0, 0x536, 0x0}}], 0x400000000000107, 0x0) 19:17:25 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) sendto$inet6(r0, &(0x7f0000000080)='N', 0xfffffdef, 0x0, 0x0, 0xe000000) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='highspeed\x00', 0xa) sendto$inet6(r0, &(0x7f00000001c0)='}', 0x1, 0x0, 0x0, 0x0) 19:17:25 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) sendto$inet6(r0, &(0x7f0000000080)='N', 0xfffffdef, 0x0, 0x0, 0xe000000) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='highspeed\x00', 0xa) sendto$inet6(r0, &(0x7f00000001c0)='}', 0x1, 0x0, 0x0, 0x0) 19:17:25 executing program 3: bpf$MAP_CREATE(0x2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x40) [ 450.441763][T22219] hsr0 speed is unknown, defaulting to 1000 19:17:26 executing program 5: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xf0894000) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x380000d, 0x6031, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x80000000001, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffd18, 0x840, 0x0, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000ffd000/0x3000)=nil, 0xfe27}, &(0x7f0000000100)=0x30) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000280)={0x80000000, {{0xa, 0x4e22, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}, 0x1}}}, 0x88) 19:17:26 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(r0, &(0x7f0000000000), 0x248800) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events\x00', 0x2da8020000100000, 0x500001c) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) 19:17:26 executing program 4: r0 = socket$inet6(0xa, 0x803, 0x2) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000440)={{{@in6=@mcast1, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x80000000000001}, {{@in=@broadcast, 0x0, 0x6c}, 0x0, @in=@empty, 0x0, 0x4, 0x0, 0x1}}, 0xe8) sendmmsg(r0, &(0x7f0000008440)=[{{0x0, 0x536, 0x0}}], 0x400000000000107, 0x0) 19:17:26 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) sendto$inet6(r0, &(0x7f0000000080)='N', 0xfffffdef, 0x0, 0x0, 0xe000000) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='highspeed\x00', 0xa) sendto$inet6(r0, &(0x7f00000001c0)='}', 0x1, 0x0, 0x0, 0x0) 19:17:26 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) sendto$inet6(r0, &(0x7f0000000080)='N', 0xfffffdef, 0x0, 0x0, 0xe000000) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='highspeed\x00', 0xa) sendto$inet6(r0, &(0x7f00000001c0)='}', 0x1, 0x0, 0x0, 0x0) [ 451.873744][ T26] audit: type=1804 audit(1634671046.823:280): pid=22259 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir038986091/syzkaller.GPbuUD/331/memory.events" dev="sda1" ino=14482 res=1 errno=0 [ 452.084185][ T26] audit: type=1804 audit(1634671046.873:281): pid=22265 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir038986091/syzkaller.GPbuUD/331/memory.events" dev="sda1" ino=14482 res=1 errno=0 [ 452.120942][T22268] hsr0 speed is unknown, defaulting to 1000 [ 452.454994][ T26] audit: type=1804 audit(1634671047.413:282): pid=22259 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir038986091/syzkaller.GPbuUD/331/memory.events" dev="sda1" ino=14482 res=1 errno=0 19:17:27 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(r0, &(0x7f0000000000), 0x248800) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events\x00', 0x2da8020000100000, 0x500001c) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) [ 452.712639][ T26] audit: type=1804 audit(1634671047.443:283): pid=22265 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir038986091/syzkaller.GPbuUD/331/memory.events" dev="sda1" ino=14482 res=1 errno=0 [ 453.070813][ T26] audit: type=1804 audit(1634671048.033:284): pid=22292 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir038986091/syzkaller.GPbuUD/332/memory.events" dev="sda1" ino=14419 res=1 errno=0 19:17:28 executing program 1: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xf0894000) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x380000d, 0x6031, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x80000000001, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffd18, 0x840, 0x0, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000ffd000/0x3000)=nil, 0xfe27}, &(0x7f0000000100)=0x30) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000280)={0x80000000, {{0xa, 0x4e22, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}, 0x1}}}, 0x88) 19:17:28 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(r0, &(0x7f0000000000), 0x248800) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events\x00', 0x2da8020000100000, 0x500001c) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) 19:17:28 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) sendto$inet6(r0, &(0x7f0000000080)='N', 0xfffffdef, 0x0, 0x0, 0xe000000) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='highspeed\x00', 0xa) sendto$inet6(r0, &(0x7f00000001c0)='}', 0x1, 0x0, 0x0, 0x0) [ 453.215506][ T26] audit: type=1804 audit(1634671048.133:285): pid=22293 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir038986091/syzkaller.GPbuUD/332/memory.events" dev="sda1" ino=14419 res=1 errno=0 19:17:28 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) sendto$inet6(r0, &(0x7f0000000080)='N', 0xfffffdef, 0x0, 0x0, 0xe000000) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='highspeed\x00', 0xa) sendto$inet6(r0, &(0x7f00000001c0)='}', 0x1, 0x0, 0x0, 0x0) [ 453.473800][ T26] audit: type=1804 audit(1634671048.333:286): pid=22296 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir579533360/syzkaller.8uGMIM/330/memory.events" dev="sda1" ino=14355 res=1 errno=0 [ 453.553255][T22299] hsr0 speed is unknown, defaulting to 1000 [ 453.733310][ T26] audit: type=1804 audit(1634671048.413:287): pid=22302 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir579533360/syzkaller.8uGMIM/330/memory.events" dev="sda1" ino=14355 res=1 errno=0 19:17:28 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(r0, &(0x7f0000000000), 0x248800) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events\x00', 0x2da8020000100000, 0x500001c) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) 19:17:29 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(r0, &(0x7f0000000000), 0x248800) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events\x00', 0x2da8020000100000, 0x500001c) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) [ 454.077999][ T26] audit: type=1804 audit(1634671049.034:288): pid=22330 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir038986091/syzkaller.GPbuUD/333/memory.events" dev="sda1" ino=14419 res=1 errno=0 [ 454.243410][ T26] audit: type=1804 audit(1634671049.184:289): pid=22333 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir038986091/syzkaller.GPbuUD/333/memory.events" dev="sda1" ino=14419 res=1 errno=0 19:17:30 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x6, 0x4, &(0x7f00000000c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x63}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0xf9, &(0x7f0000000140)=""/249, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 19:17:30 executing program 2: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000000000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r1, 0x0) connect$unix(r0, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) accept4(r1, &(0x7f0000000080)=@ax25={{0x3, @null}, [@default, @rose, @netrom, @default, @null, @netrom, @remote, @default]}, &(0x7f0000000100)=0x80, 0x80800) 19:17:30 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(r0, &(0x7f0000000000), 0x248800) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events\x00', 0x2da8020000100000, 0x500001c) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) 19:17:30 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(r0, &(0x7f0000000000), 0x248800) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events\x00', 0x2da8020000100000, 0x500001c) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) 19:17:30 executing program 5: r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x3, @link_local, 'vxcan1\x00'}}, 0x1e) sendmsg$ETHTOOL_MSG_PAUSE_GET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000002280)={0x0}}, 0x0) 19:17:30 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000500)="b9ff0f005d0d698cb89e14f088a8", 0x0, 0x117, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x48) 19:17:31 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f00000000c0)={0x7, 0x0, 0x0, 0x0, 0x300, 0x1}, 0x40) 19:17:31 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000000000)={@broadcast, @broadcast, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x3, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @empty, @broadcast}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x6558}, {0x0, 0x0, 0x0, 0x0, 0x2, 0x3, 0x805}, {0x0, 0x0, 0x0, 0x0, 0x58, 0x2}, {0x8, 0x88be, 0x86ddffff, {{}, 0x4c1}}}}}}}, 0x0) 19:17:31 executing program 2: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) vmsplice(r1, &(0x7f0000000680)=[{&(0x7f0000000200)='f', 0x1}], 0x1, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x33}}, 0x10) setsockopt$inet_mtu(r2, 0x0, 0xa, &(0x7f0000000100)=0x3, 0x4) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) splice(r0, 0x0, r2, 0x0, 0x2ffff, 0x0) 19:17:31 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x38, r1, 0x201, 0x0, 0x0, {}, [@FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_PEER_V6={0x14, 0x9, @mcast2}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e24}]}, 0x38}}, 0x0) 19:17:31 executing program 4: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000740)={0x1c, 0x2a, 0x5, 0x0, 0x0, "", [@nested={0x4}, @typed={0x8, 0x1, 0x0, 0x0, @uid=0xee00}]}, 0x1c}], 0x1}, 0x0) 19:17:31 executing program 2: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) vmsplice(r1, &(0x7f0000000680)=[{&(0x7f0000000200)='f', 0x1}], 0x1, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x33}}, 0x10) setsockopt$inet_mtu(r2, 0x0, 0xa, &(0x7f0000000100)=0x3, 0x4) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) splice(r0, 0x0, r2, 0x0, 0x2ffff, 0x0) 19:17:31 executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000b40)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d640500000000006504040001001f000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b7000000000000009500002000000000c74396c8e3ebbadc20e5a7625ecffe7ba8337249fe564e0b9cc7553358380b3a1f59916ffc9bf0bdf81509f07fb2819bf5774fedda52e39c90fcffffffffffffff6b4673b4e8d5467e020637da1ce247117038114604ea09b290a248a120c9c6e69f403ff0e80677eeba68562eaeae2bcd87cef9000000a39ca7ef365cc27dfeac7bb40e9048517354b0ca4f9c84b619e40af8b59ee6fa003fe1f2c4c15f20a07db4583a462d8be6602186fd68ee14a19e9b5381791cbf0ceb42122b8635a66ce6b5b92356081bc0f18a0ca83dbc08c2daeb060000000000009813c1efa26001b3f486eb6954871b4344faae85c4d0b96778478ae5355e6f923b1105696904fa93fa915ab8e1e0d7f31ebd19455e6827cd493907bf9d00000000000039d085b47e4b834a401e8b444208a680a929eb7b396e5f9950cdcbcf59957ffb034cdbeb28ac4bc9058db948b4f38d417296742f6177cc9277a11a1c462c70bc561e95a32578e242383e3ab31a0dd41542c9225cd6a33d0ce72590a972f77240dd04319ea26a1ab09b024fdc8ba07fcd606eee9177ea47cfb731b5325754cee028e2a680a9262f8704c37d5f220044e580dcabb1c87f189131b61e1b66b67f13ab8faf740ad7008d425fb7e21acbcf30eb8f830ffa20f8c41270d7b0a119d870a6b20415da40660276954a3fbaf4af891d2364c78f53e0b366388b415523a383a09703a59474ab9fed99cf3e0f785b9af46dad7234574ff21666a45eaca5f9b0fb9d88553633c202cb864988f03b6ae53aacf5741aae9d78a32e244b5e7ba94eb6e5cd45f918dbd788636715bb5a86479b3e9dab34c5e8023a6e0a8c24eee5425700000000000080"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2ca}, 0x48) r1 = socket$packet(0x11, 0x3, 0x300) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="8500000023000000840000000000000095000000000000008f494c404b40ca409ac9731ce50ce3d4dd1c53d9fb39b2e652f8703ec14e759fab3571f1ba0c772367114996db5af99fb9b1f44800000000a140abb0614f5add6ad80edddb811b6d335437ba289d9800"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x64}, 0x48) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000040)=r2, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x2f9, 0x304, &(0x7f0000000040)="b90103600040f000009e0ff008001fffffe100004003632177fbac141414e0000001be3e7d2a182fff", 0x0, 0x104, 0x6000000000000000, 0x0, 0xffffffffffffff2b, &(0x7f0000000400)="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", &(0x7f0000000780)="5a815fcca2f84c9083d93ec92c4c3287b50866f12ebc2745ec11d0ff85c67de717a32b29984a37bfc295a93a63814af567a9914d60e68f9f64a2e8206c54beb44c99c384f125aaa40fd11a8b4f94b75d23a499495412f5c8bfbc6ec46801de7408d6cc1cea9b3444042c78048695b53ba0b90bb6b708811e4f705836f26f8993de068b95f5b2cada5faf2189ce81ec62b1be6a0f82033010c4c090cf088f0b5f6b091d4a9f8197b4e393f0d01f55b55f1b"}, 0x28) 19:17:31 executing program 3: r0 = epoll_create(0xa023) r1 = socket$nl_generic(0x10, 0x3, 0x10) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)={0x20002002}) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f00000007c0)) 19:17:31 executing program 5: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x15, 0x3, &(0x7f0000000200)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x7, 0xffffffd4, 0x0, 0x0, 0x20}}, &(0x7f0000000240)='GPL\x00', 0x1, 0x348, &(0x7f0000000280)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff60}, 0x48) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32, @ANYBLOB="0100000000000000000000000900010068"], 0x3}}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000440)={r0, 0xc0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) 19:17:31 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="300000001800c1c700000000000000000a000000000000000000000014000500fe"], 0x30}}, 0x0) 19:17:31 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r0) sendmsg$IEEE802154_ASSOCIATE_REQ(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r2, 0x109, 0x0, 0x0, {}, [@IEEE802154_ATTR_CHANNEL={0x5}]}, 0x1c}}, 0x0) 19:17:31 executing program 2: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) vmsplice(r1, &(0x7f0000000680)=[{&(0x7f0000000200)='f', 0x1}], 0x1, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x33}}, 0x10) setsockopt$inet_mtu(r2, 0x0, 0xa, &(0x7f0000000100)=0x3, 0x4) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) splice(r0, 0x0, r2, 0x0, 0x2ffff, 0x0) 19:17:31 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000500)=@nat={'nat\x00', 0x1b, 0x5, 0x4f8, 0xa8, 0x160, 0xffffffff, 0x390, 0xa8, 0x460, 0x460, 0xffffffff, 0x460, 0x460, 0x5, &(0x7f0000000000), {[{{@uncond, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x1d, @loopback, @remote, @port=0x4e20, @port=0x4e21}}}}, {{@uncond, 0x0, 0x70, 0xb8}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00', 0x1, 0x1, {0x400}}}}, {{@ip={@private, @loopback, 0x0, 0x0, 'veth0_to_team\x00', 'veth1_to_bond\x00'}, 0x0, 0x1f8, 0x230, 0x0, {}, [@common=@ah={{0x30}, {[0x0, 0x9], 0x1}}, @common=@inet=@policy={{0x158}, {[{@ipv4=@dev, [], @ipv6=@private0, [0xff000000, 0xffffff00, 0xff000000, 0xff000000], 0x4d2, 0x34ff, 0x5b, 0xc6ebe2fdeda369c9, 0x2, 0x2}, {@ipv4=@broadcast}, {@ipv6=@local, [0xff, 0xff000000, 0x0, 0xff000000], @ipv4=@broadcast, [0x0, 0xff000000, 0xff0000ff, 0xffffff00]}, {@ipv6=@loopback, [], @ipv4=@local, [0xffffffff], 0x4d6, 0x3507, 0x62, 0x0, 0xe, 0x14}], 0xc, 0x2}}]}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0x0, @remote, @local, @gre_key, @port=0x4e23}}}}, {{@uncond, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@inet=@tcpmss={{0x28}, {0x7f, 0x8}}]}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0x37, @multicast2, @local, @icmp_id=0x67, @gre_key}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x558) bind$inet(r0, &(0x7f000099e000)={0x2, 0x4e20, @local}, 0x10) sendto$inet(r0, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) r1 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000100)=[{0x28, 0x0, 0xfe, 0xfffff030}, {0x80000006, 0x0, 0x0, 0x20}]}, 0x10) getsockopt$inet_mreqn(r0, 0x0, 0x20, 0x0, 0x0) bind$packet(0xffffffffffffffff, 0x0, 0x0) recvfrom(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 19:17:31 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}}}]}, 0x58}}, 0x0) 19:17:31 executing program 5: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r1, 0x65, 0x2, &(0x7f0000000600)=0xfffff000, 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_raw(r1, &(0x7f0000000180)={0x1d, r2}, 0x10) close(r1) 19:17:32 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x9, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x2e}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 19:17:32 executing program 2: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) vmsplice(r1, &(0x7f0000000680)=[{&(0x7f0000000200)='f', 0x1}], 0x1, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x33}}, 0x10) setsockopt$inet_mtu(r2, 0x0, 0xa, &(0x7f0000000100)=0x3, 0x4) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) splice(r0, 0x0, r2, 0x0, 0x2ffff, 0x0) [ 457.149896][T22409] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 457.167592][T22411] x_tables: duplicate underflow at hook 1 19:17:32 executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000b40)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2ca}, 0x48) r1 = socket$packet(0x11, 0x3, 0x300) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="8500000023000000840000000000000095000000000000008f494c404b40ca409ac9731ce50ce3d4dd1c53d9fb39b2e652f8703ec14e759fab3571f1ba0c772367114996db5af99fb9b1f44800000000a140abb0614f5add6ad80edddb811b6d335437ba289d9800"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x64}, 0x48) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000040)=r2, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x2f9, 0x304, &(0x7f0000000040)="b90103600040f000009e0ff008001fffffe100004003632177fbac141414e0000001be3e7d2a182fff", 0x0, 0x104, 0x6000000000000000, 0x0, 0xffffffffffffff2b, &(0x7f0000000400)="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", &(0x7f0000000780)="5a815fcca2f84c9083d93ec92c4c3287b50866f12ebc2745ec11d0ff85c67de717a32b29984a37bfc295a93a63814af567a9914d60e68f9f64a2e8206c54beb44c99c384f125aaa40fd11a8b4f94b75d23a499495412f5c8bfbc6ec46801de7408d6cc1cea9b3444042c78048695b53ba0b90bb6b708811e4f705836f26f8993de068b95f5b2cada5faf2189ce81ec62b1be6a0f82033010c4c090cf088f0b5f6b091d4a9f8197b4e393f0d01f55b55f1b"}, 0x28) [ 457.265152][T22414] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 19:17:32 executing program 3: unshare(0x6c060000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r1, 0x1) accept4(r1, &(0x7f0000000100)=@l2tp={0x2, 0x0, @dev}, &(0x7f0000000000)=0x80, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x24000004, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) shutdown(r1, 0x1) 19:17:32 executing program 5: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r1, 0x65, 0x2, &(0x7f0000000600)=0xfffff000, 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_raw(r1, &(0x7f0000000180)={0x1d, r2}, 0x10) close(r1) 19:17:32 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0x400448ca, 0x0) 19:17:32 executing program 1: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf32(r1, &(0x7f0000000340)=ANY=[], 0xfe9e) close(r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f00000000c0)=0x800000100000001, 0x4) ioctl$int_in(r1, 0x5421, &(0x7f0000000000)=0x1000) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000180)={@in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}, 0x0, 0x0, 0x22, 0x0, "3a34cdb1381ecce72951f07e3e65e29d2a124e09859d10ffaef0f057e18160565de6acad40f7e92d6b81d039f184e3c4854ebe8277e69aee930f9d2a12c04799f58b0be61a1077f71103f26582b78eaf"}, 0xd8) connect$inet6(r2, &(0x7f0000000140), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000040), 0x355) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000280)=@gcm_256={{0x304}, "cddf018312d6d75b", "c0f711a359a5b7215aeb47f891eb668a642577d10642dcf00350e63e6b940232", "9b6795d9", "36a83ebf3f0d54f0"}, 0x38) splice(r0, 0x0, r1, 0x0, 0x100000000, 0x0) [ 457.534879][T22439] hsr0 speed is unknown, defaulting to 1000 19:17:32 executing program 5: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r1, 0x65, 0x2, &(0x7f0000000600)=0xfffff000, 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_raw(r1, &(0x7f0000000180)={0x1d, r2}, 0x10) close(r1) 19:17:32 executing program 1: bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000040)=0xffffffffffffffff, 0x3b) [ 457.987774][T22426] x_tables: duplicate underflow at hook 1 19:17:33 executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000b40)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d640500000000006504040001001f000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b7000000000000009500002000000000c74396c8e3ebbadc20e5a7625ecffe7ba8337249fe564e0b9cc7553358380b3a1f59916ffc9bf0bdf81509f07fb2819bf5774fedda52e39c90fcffffffffffffff6b4673b4e8d5467e020637da1ce247117038114604ea09b290a248a120c9c6e69f403ff0e80677eeba68562eaeae2bcd87cef9000000a39ca7ef365cc27dfeac7bb40e9048517354b0ca4f9c84b619e40af8b59ee6fa003fe1f2c4c15f20a07db4583a462d8be6602186fd68ee14a19e9b5381791cbf0ceb42122b8635a66ce6b5b92356081bc0f18a0ca83dbc08c2daeb060000000000009813c1efa26001b3f486eb6954871b4344faae85c4d0b96778478ae5355e6f923b1105696904fa93fa915ab8e1e0d7f31ebd19455e6827cd493907bf9d00000000000039d085b47e4b834a401e8b444208a680a929eb7b396e5f9950cdcbcf59957ffb034cdbeb28ac4bc9058db948b4f38d417296742f6177cc9277a11a1c462c70bc561e95a32578e242383e3ab31a0dd41542c9225cd6a33d0ce72590a972f77240dd04319ea26a1ab09b024fdc8ba07fcd606eee9177ea47cfb731b5325754cee028e2a680a9262f8704c37d5f220044e580dcabb1c87f189131b61e1b66b67f13ab8faf740ad7008d425fb7e21acbcf30eb8f830ffa20f8c41270d7b0a119d870a6b20415da40660276954a3fbaf4af891d2364c78f53e0b366388b415523a383a09703a59474ab9fed99cf3e0f785b9af46dad7234574ff21666a45eaca5f9b0fb9d88553633c202cb864988f03b6ae53aacf5741aae9d78a32e244b5e7ba94eb6e5cd45f918dbd788636715bb5a86479b3e9dab34c5e8023a6e0a8c24eee5425700000000000080"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2ca}, 0x48) r1 = socket$packet(0x11, 0x3, 0x300) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="8500000023000000840000000000000095000000000000008f494c404b40ca409ac9731ce50ce3d4dd1c53d9fb39b2e652f8703ec14e759fab3571f1ba0c772367114996db5af99fb9b1f44800000000a140abb0614f5add6ad80edddb811b6d335437ba289d9800"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x64}, 0x48) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000040)=r2, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x2f9, 0x304, &(0x7f0000000040)="b90103600040f000009e0ff008001fffffe100004003632177fbac141414e0000001be3e7d2a182fff", 0x0, 0x104, 0x6000000000000000, 0x0, 0xffffffffffffff2b, &(0x7f0000000400)="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", &(0x7f0000000780)="5a815fcca2f84c9083d93ec92c4c3287b50866f12ebc2745ec11d0ff85c67de717a32b29984a37bfc295a93a63814af567a9914d60e68f9f64a2e8206c54beb44c99c384f125aaa40fd11a8b4f94b75d23a499495412f5c8bfbc6ec46801de7408d6cc1cea9b3444042c78048695b53ba0b90bb6b708811e4f705836f26f8993de068b95f5b2cada5faf2189ce81ec62b1be6a0f82033010c4c090cf088f0b5f6b091d4a9f8197b4e393f0d01f55b55f1b"}, 0x28) 19:17:33 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0x400448ca, 0x0) 19:17:33 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600114900000084ffcf8a7063", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000a00)={0x0, 0x4801, &(0x7f0000000140)={&(0x7f0000001340)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}}, 0x0) 19:17:33 executing program 5: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r1, 0x65, 0x2, &(0x7f0000000600)=0xfffff000, 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_raw(r1, &(0x7f0000000180)={0x1d, r2}, 0x10) close(r1) 19:17:33 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000500)=@nat={'nat\x00', 0x1b, 0x5, 0x4f8, 0xa8, 0x160, 0xffffffff, 0x390, 0xa8, 0x460, 0x460, 0xffffffff, 0x460, 0x460, 0x5, &(0x7f0000000000), {[{{@uncond, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x1d, @loopback, @remote, @port=0x4e20, @port=0x4e21}}}}, {{@uncond, 0x0, 0x70, 0xb8}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00', 0x1, 0x1, {0x400}}}}, {{@ip={@private, @loopback, 0x0, 0x0, 'veth0_to_team\x00', 'veth1_to_bond\x00'}, 0x0, 0x1f8, 0x230, 0x0, {}, [@common=@ah={{0x30}, {[0x0, 0x9], 0x1}}, @common=@inet=@policy={{0x158}, {[{@ipv4=@dev, [], @ipv6=@private0, [0xff000000, 0xffffff00, 0xff000000, 0xff000000], 0x4d2, 0x34ff, 0x5b, 0xc6ebe2fdeda369c9, 0x2, 0x2}, {@ipv4=@broadcast}, {@ipv6=@local, [0xff, 0xff000000, 0x0, 0xff000000], @ipv4=@broadcast, [0x0, 0xff000000, 0xff0000ff, 0xffffff00]}, {@ipv6=@loopback, [], @ipv4=@local, [0xffffffff], 0x4d6, 0x3507, 0x62, 0x0, 0xe, 0x14}], 0xc, 0x2}}]}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0x0, @remote, @local, @gre_key, @port=0x4e23}}}}, {{@uncond, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@inet=@tcpmss={{0x28}, {0x7f, 0x8}}]}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0x37, @multicast2, @local, @icmp_id=0x67, @gre_key}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x558) bind$inet(r0, &(0x7f000099e000)={0x2, 0x4e20, @local}, 0x10) sendto$inet(r0, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) r1 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000100)=[{0x28, 0x0, 0xfe, 0xfffff030}, {0x80000006, 0x0, 0x0, 0x20}]}, 0x10) getsockopt$inet_mreqn(r0, 0x0, 0x20, 0x0, 0x0) bind$packet(0xffffffffffffffff, 0x0, 0x0) recvfrom(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 19:17:33 executing program 3: unshare(0x6c060000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r1, 0x1) accept4(r1, &(0x7f0000000100)=@l2tp={0x2, 0x0, @dev}, &(0x7f0000000000)=0x80, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x24000004, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) shutdown(r1, 0x1) [ 458.169877][T22484] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 458.246068][T22490] x_tables: duplicate underflow at hook 1 [ 458.346997][T22491] bond1: (slave ipvlan7): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. 19:17:33 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0x400448ca, 0x0) 19:17:33 executing program 5: unshare(0x6c060000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r1, 0x1) accept4(r1, &(0x7f0000000100)=@l2tp={0x2, 0x0, @dev}, &(0x7f0000000000)=0x80, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x24000004, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) shutdown(r1, 0x1) [ 458.407476][T22491] bond1: (slave ipvlan7): The slave device specified does not support setting the MAC address [ 458.435878][T22491] bond1: (slave ipvlan7): Setting fail_over_mac to active for active-backup mode 19:17:33 executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000b40)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2ca}, 0x48) r1 = socket$packet(0x11, 0x3, 0x300) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="8500000023000000840000000000000095000000000000008f494c404b40ca409ac9731ce50ce3d4dd1c53d9fb39b2e652f8703ec14e759fab3571f1ba0c772367114996db5af99fb9b1f44800000000a140abb0614f5add6ad80edddb811b6d335437ba289d9800"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x64}, 0x48) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000040)=r2, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x2f9, 0x304, &(0x7f0000000040)="b90103600040f000009e0ff008001fffffe100004003632177fbac141414e0000001be3e7d2a182fff", 0x0, 0x104, 0x6000000000000000, 0x0, 0xffffffffffffff2b, &(0x7f0000000400)="9209558f0c5fb25cd57f98113135c3171b8b331fbc04f0e6955a796ff8e3aae3cac46cec3030dfc999058aea01f0e6dcf2f9d480d328655aca003927bd50ed49d4843c8a0a2a4b26ceb747947200bd644c85e7a8a7d7cfce840c02a7d69c9e0bca410f64d43290abbbf3131e1fa8bd8c3e5f19d5a491d3d4c1a0fe47de9eebaf073ac3da6256bdb681d18fbd607c9b0d710442bcf78bc36fd3c035812bde582a262bff0e4d6181c818fccf542868c6e602d97bea23a101955dc76bcc984142ab305387aa348566d688edd291a3e9d08952adbdf60462bb7f7faebcdfccf17115708b0d73d0f3a469ce7d8374219b3f92c92bcec4958d474bb281c26691949d054b784a5866f081e53eb9cfd7", &(0x7f0000000780)="5a815fcca2f84c9083d93ec92c4c3287b50866f12ebc2745ec11d0ff85c67de717a32b29984a37bfc295a93a63814af567a9914d60e68f9f64a2e8206c54beb44c99c384f125aaa40fd11a8b4f94b75d23a499495412f5c8bfbc6ec46801de7408d6cc1cea9b3444042c78048695b53ba0b90bb6b708811e4f705836f26f8993de068b95f5b2cada5faf2189ce81ec62b1be6a0f82033010c4c090cf088f0b5f6b091d4a9f8197b4e393f0d01f55b55f1b"}, 0x28) [ 458.498520][T22491] 8021q: adding VLAN 0 to HW filter on device ipvlan7 [ 458.593416][T22488] hsr0 speed is unknown, defaulting to 1000 [ 458.624104][T22484] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 19:17:33 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0x400448ca, 0x0) 19:17:33 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600114900000084ffcf8a7063", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000a00)={0x0, 0x4801, &(0x7f0000000140)={&(0x7f0000001340)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}}, 0x0) [ 458.766409][T22540] hsr0 speed is unknown, defaulting to 1000 19:17:33 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_KEY(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100ac0e0000000000008c00000008000300", @ANYRES32=r3], 0x30}}, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r5, r4, 0x0, 0x10000a006) 19:17:33 executing program 2: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) tee(r0, r1, 0x1, 0x0) [ 458.973455][T22578] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 19:17:34 executing program 3: unshare(0x6c060000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r1, 0x1) accept4(r1, &(0x7f0000000100)=@l2tp={0x2, 0x0, @dev}, &(0x7f0000000000)=0x80, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x24000004, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) shutdown(r1, 0x1) [ 459.112718][T22583] bond2: (slave ipvlan7): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. 19:17:34 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000500)=@nat={'nat\x00', 0x1b, 0x5, 0x4f8, 0xa8, 0x160, 0xffffffff, 0x390, 0xa8, 0x460, 0x460, 0xffffffff, 0x460, 0x460, 0x5, &(0x7f0000000000), {[{{@uncond, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x1d, @loopback, @remote, @port=0x4e20, @port=0x4e21}}}}, {{@uncond, 0x0, 0x70, 0xb8}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00', 0x1, 0x1, {0x400}}}}, {{@ip={@private, @loopback, 0x0, 0x0, 'veth0_to_team\x00', 'veth1_to_bond\x00'}, 0x0, 0x1f8, 0x230, 0x0, {}, [@common=@ah={{0x30}, {[0x0, 0x9], 0x1}}, @common=@inet=@policy={{0x158}, {[{@ipv4=@dev, [], @ipv6=@private0, [0xff000000, 0xffffff00, 0xff000000, 0xff000000], 0x4d2, 0x34ff, 0x5b, 0xc6ebe2fdeda369c9, 0x2, 0x2}, {@ipv4=@broadcast}, {@ipv6=@local, [0xff, 0xff000000, 0x0, 0xff000000], @ipv4=@broadcast, [0x0, 0xff000000, 0xff0000ff, 0xffffff00]}, {@ipv6=@loopback, [], @ipv4=@local, [0xffffffff], 0x4d6, 0x3507, 0x62, 0x0, 0xe, 0x14}], 0xc, 0x2}}]}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0x0, @remote, @local, @gre_key, @port=0x4e23}}}}, {{@uncond, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@inet=@tcpmss={{0x28}, {0x7f, 0x8}}]}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0x37, @multicast2, @local, @icmp_id=0x67, @gre_key}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x558) bind$inet(r0, &(0x7f000099e000)={0x2, 0x4e20, @local}, 0x10) sendto$inet(r0, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) r1 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000100)=[{0x28, 0x0, 0xfe, 0xfffff030}, {0x80000006, 0x0, 0x0, 0x20}]}, 0x10) getsockopt$inet_mreqn(r0, 0x0, 0x20, 0x0, 0x0) bind$packet(0xffffffffffffffff, 0x0, 0x0) recvfrom(r0, 0x0, 0x0, 0x0, 0x0, 0x0) [ 459.190986][T22583] bond2: (slave ipvlan7): The slave device specified does not support setting the MAC address [ 459.231397][T22583] bond2: (slave ipvlan7): Setting fail_over_mac to active for active-backup mode [ 459.293555][T22583] 8021q: adding VLAN 0 to HW filter on device ipvlan7 19:17:34 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x4000000000002, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x80, 0x0) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) r3 = openat$cgroup_type(r0, &(0x7f0000000000), 0x2, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000009, 0x40010, r3, 0x80000001000) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) socket(0x10, 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0x1c) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000480)='syz1\x00', 0x1ff) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000020c0), &(0x7f0000002100)=0xc) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x4000000000000, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0xc01, 0x3, 0x438, 0x2e8, 0x5002004a, 0x7d09, 0x0, 0x3, 0x3a0, 0x3c8, 0x3c8, 0x3a0, 0x3c8, 0x4, 0x0, {[{{@uncond, 0x0, 0x2a0, 0x2e8, 0x0, {}, [@common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0xfffd}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x498) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000002240)=[{{&(0x7f0000000040)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000140)=[{&(0x7f00000001c0)="b35459eab157139645dff2328b7c8a914bab223d4675742e77c724e48dfb21d3e31629ee9532371e5a5cd53d95ea4dffc1c7747ae2c9970407d29c4979719bc214ae4f6491b4738e5b10006ec525f48ad733b55c8fc3fedaee48fa46a61089b8961171ad4cdbdfae023d914091a02acf61a2", 0x72}, {&(0x7f0000000300)="1d5a67a8695e623a7342156ee1cebc16ab529930a8dfc51df11a853fb5d2169bbc7ab5aedf5a84dcf610e0443d4f91318d1dacdbab590e036ce16caf36384f545c5f36844200a900992e542bf3eb04e1b04abda74b737a1db6f7aca31de1084d1026948b0c92bae1ccfb4e7d54251b62bb5fbd9d9a4348a108d453e8a22c8c08e4928a01597e30a8a560de57581ad522c22a902b1653cfaed880f6f12d", 0x9d}, {&(0x7f00000003c0)="0890058cb4bc3b8ac36b6236011de0b825c5af5ce6e590fe51465de7e34e17ad675258e454c36a5187dfe4ea2046681ac586b1909764f2898272fb275d01884de30981664a2989436c34cc06ac6175b13ea6636e49c8689f433ae67c880e0a382e68c4200275e18d6b592de41b2baec85f6b2c7e32f0891f3979f6ec8e620777f4b59d", 0x83}], 0x3, &(0x7f0000000540)=[@rights={{0x20, 0x1, 0x1, [r0, 0xffffffffffffffff, r3, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [r2]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01}}}], 0x80}}, {{&(0x7f00000005c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000780)=[{&(0x7f0000000640)="d67948928c56abc67a6fbdf23da152db801331cca670e665b9b9a75ae1ab9aabfdc575251a3ebfc9f12e8d828e91a8eccf4c0ac030f96fb1ae97c69796fe3e08db0b5a6be498cca57c85b71e125a1f0bcf8bef2f7c42be31896c506d96dff78efad4580c65bc7745b893aa7057aa1a8606aa6efdb42a38dcb15f3b4fea4513b74fbb4a27103ce41f", 0x88}, {&(0x7f0000000700)="9ff23d7a8db0d6a406b41399ef499953139e1ee9fdc75b500311e0442020470ae17b624bb330be4289cffad923a09a5b41786a833b9a2693ae34e9f2c9cd9ef2126a8fabf0ec00286f091b17", 0x4c}], 0x2, &(0x7f0000000980)=ANY=[@ANYBLOB="1c000000000000000100000001000000", @ANYRES32, @ANYRES32=r0, @ANYBLOB="40000000000000aff5e9f107741943fe0589a6d964f41de433861b155d894833ef06fe5d5c7bade0592f4723fd2d9482f23d0c93bb5fcc911cd295d59c49e4e78de37830c95b778911d2b4d65e2801795a0c5a06bdcf0797cc6c50cd605c691e2c165d7cc2c223e71a8633444e6df9e3b50c865780b0037866b61e4bd9699d430a6481752e7ca61e26ab39c76bb14755270cdc50bc99a79fd406156d55fcde9231fdd71fd5033550a2d3f3ba3bba67495243c275a42a6f512838bbdb7c2669f7564cd2d626ea8fd747505f132dfc0c86f5380fa6424eae3f92"], 0x20, 0x8000}}, {{&(0x7f0000000800)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000001ac0)=[{0x0}, {&(0x7f0000001940)="ad914b7bd4a854bf8d930679a799cef94f8c", 0x12}, {&(0x7f0000001980)="c7b95ce41008d663886800b6d0a7b5ecfb054fec6238c668ca8c155626e70e0babe72b6cb383859a1104a882f32c9568d3c7a929916c3b0f66208d88b9d078d237232c4e990202ec65bd848575e6609a31bcf882cdff7b151f0939c1499e4cd3667dd0e029ab2ee88139d2ae7eb6750e452963bc668dc58bdfa73df1709fd4dba7218def9f", 0x85}, {&(0x7f0000001a40)="94ba0620db3296bf7d25acd74e77ac7047aaa20eb37009ff2d46f2830e70e214e9cc5da2a15843a8c85be3bbde3de7b6de0aa01a2cc5ae3ee08ca4a3f7a49cf47b9201c94ad619", 0x47}], 0x4, 0x0, 0x0, 0x20000840}}, {{&(0x7f0000001b40)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000001c80)=[{0x0}], 0x1, &(0x7f0000001cc0)=[@cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff}}}], 0x20, 0x20000080}}, {{&(0x7f0000001d00)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000001f00)=[{&(0x7f0000001d80)="1452aefb8af5790fd2dce64efbfc47ae4c872e1e21e622b37632dca524367b5212a2b69226224b59bc795574311789c1e96eaf23ba7173ff098ee3c0d2f06c6dea37d5ec9d6e532564cc9744aba9b2e0363b4a5d691d113e71e9f84945", 0x5d}, {&(0x7f0000001e00)="decc6bf69de7448cfcc1541437dd1d47369caa9d7245c6b221e5a802c4ed00f1f3ff694c4568dfd39e0ed308b2ac88e8887c57aed8f885d0f7ac49bb1e98ba2e3d76a303f86d7904e4927dd535e63f55b11628d1c1dd6488720e7b0afadd9ac618aacd923998f9250d2a9c490a8c75fb18c967731dce82a80f2e0b69c0d2279423c3838b725075a4a1032084e8bfec64ae7e9da2266c84bcfac827ad1dbec7cca7e0a960234c17cc628bf344452583eaae0b910b02e18730bc328d23b4ee98cf015a25e279012decf36d0bb2c69a006d8a23eb684e3718cd55a9b633", 0xdc}], 0x2, &(0x7f0000002140)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB, @ANYRES32=r3, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=r5, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r0, @ANYBLOB="000000001c0000000000000001001f0801000000", @ANYRES32=r2, @ANYRES32, @ANYRES32=r6, @ANYBLOB='\x00\x00\x00\x00'], 0xf0, 0x40d4}}], 0x5, 0x8880) socket$vsock_stream(0x28, 0x1, 0x0) ppoll(&(0x7f00000000c0)=[{r2, 0x8124}, {0xffffffffffffffff, 0x0, 0x64}], 0x2, &(0x7f00000002c0)={0x0, r4+10000000}, 0x0, 0x0) 19:17:34 executing program 5: unshare(0x6c060000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r1, 0x1) accept4(r1, &(0x7f0000000100)=@l2tp={0x2, 0x0, @dev}, &(0x7f0000000000)=0x80, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x24000004, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) shutdown(r1, 0x1) [ 459.377246][T22630] x_tables: duplicate underflow at hook 1 [ 459.383354][ T26] kauditd_printk_skb: 6 callbacks suppressed [ 459.383369][ T26] audit: type=1804 audit(1634671054.344:296): pid=22625 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir428718356/syzkaller.vaoGIa/328/cgroup.controllers" dev="sda1" ino=15084 res=1 errno=0 [ 459.416669][T22625] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. [ 459.463226][T22629] hsr0 speed is unknown, defaulting to 1000 [ 459.663038][T22648] hsr0 speed is unknown, defaulting to 1000 19:17:34 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600114900000084ffcf8a7063", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000a00)={0x0, 0x4801, &(0x7f0000000140)={&(0x7f0000001340)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}}, 0x0) 19:17:34 executing program 3: unshare(0x6c060000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r1, 0x1) accept4(r1, &(0x7f0000000100)=@l2tp={0x2, 0x0, @dev}, &(0x7f0000000000)=0x80, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x24000004, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) shutdown(r1, 0x1) 19:17:34 executing program 0: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000080)='cpuset\x00'}, 0x30) r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)) close(r0) [ 460.001141][T22689] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 19:17:35 executing program 5: unshare(0x6c060000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r1, 0x1) accept4(r1, &(0x7f0000000100)=@l2tp={0x2, 0x0, @dev}, &(0x7f0000000000)=0x80, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x24000004, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) shutdown(r1, 0x1) [ 460.134098][T22690] bond3: (slave ipvlan7): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 460.236547][T22690] bond3: (slave ipvlan7): The slave device specified does not support setting the MAC address [ 460.254251][T22690] bond3: (slave ipvlan7): Setting fail_over_mac to active for active-backup mode 19:17:35 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000500)=@nat={'nat\x00', 0x1b, 0x5, 0x4f8, 0xa8, 0x160, 0xffffffff, 0x390, 0xa8, 0x460, 0x460, 0xffffffff, 0x460, 0x460, 0x5, &(0x7f0000000000), {[{{@uncond, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x1d, @loopback, @remote, @port=0x4e20, @port=0x4e21}}}}, {{@uncond, 0x0, 0x70, 0xb8}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00', 0x1, 0x1, {0x400}}}}, {{@ip={@private, @loopback, 0x0, 0x0, 'veth0_to_team\x00', 'veth1_to_bond\x00'}, 0x0, 0x1f8, 0x230, 0x0, {}, [@common=@ah={{0x30}, {[0x0, 0x9], 0x1}}, @common=@inet=@policy={{0x158}, {[{@ipv4=@dev, [], @ipv6=@private0, [0xff000000, 0xffffff00, 0xff000000, 0xff000000], 0x4d2, 0x34ff, 0x5b, 0xc6ebe2fdeda369c9, 0x2, 0x2}, {@ipv4=@broadcast}, {@ipv6=@local, [0xff, 0xff000000, 0x0, 0xff000000], @ipv4=@broadcast, [0x0, 0xff000000, 0xff0000ff, 0xffffff00]}, {@ipv6=@loopback, [], @ipv4=@local, [0xffffffff], 0x4d6, 0x3507, 0x62, 0x0, 0xe, 0x14}], 0xc, 0x2}}]}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0x0, @remote, @local, @gre_key, @port=0x4e23}}}}, {{@uncond, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@inet=@tcpmss={{0x28}, {0x7f, 0x8}}]}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0x37, @multicast2, @local, @icmp_id=0x67, @gre_key}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x558) bind$inet(r0, &(0x7f000099e000)={0x2, 0x4e20, @local}, 0x10) sendto$inet(r0, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) r1 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000100)=[{0x28, 0x0, 0xfe, 0xfffff030}, {0x80000006, 0x0, 0x0, 0x20}]}, 0x10) getsockopt$inet_mreqn(r0, 0x0, 0x20, 0x0, 0x0) bind$packet(0xffffffffffffffff, 0x0, 0x0) recvfrom(r0, 0x0, 0x0, 0x0, 0x0, 0x0) [ 460.301066][T22690] 8021q: adding VLAN 0 to HW filter on device ipvlan7 [ 460.365696][T22732] hsr0 speed is unknown, defaulting to 1000 [ 460.380475][T22729] hsr0 speed is unknown, defaulting to 1000 [ 460.458078][T22755] x_tables: duplicate underflow at hook 1 19:17:35 executing program 0: unshare(0x6c060000) r0 = socket$inet_icmp(0x2, 0x2, 0x1) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x78) mmap(&(0x7f0000325000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(r1, 0x0, 0x1e, 0x2200c851, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd0d0c2ac, 0x1, 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000200)={&(0x7f0000328000/0x4000)=nil, 0x4000}, &(0x7f0000000240)=0x10) 19:17:35 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600114900000084ffcf8a7063", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000a00)={0x0, 0x4801, &(0x7f0000000140)={&(0x7f0000001340)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}}, 0x0) 19:17:35 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000013c0)={&(0x7f0000001200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x3, [@func={0x2}]}, {0x0, [0x0]}}, &(0x7f00000012c0)=""/255, 0x27, 0xff, 0x1}, 0x20) [ 460.825190][T22792] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 19:17:35 executing program 3: r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000100)={0x0, @initdev, @local}, &(0x7f0000000140)=0xc) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e21, @broadcast}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r1, &(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0x6e) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r2, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) sendmmsg(r2, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) r3 = socket(0x1a, 0x6, 0x3) getsockopt$inet_mreqn(r3, 0x0, 0x24, &(0x7f00000002c0)={@empty, @local}, &(0x7f0000000cc0)=0xc) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r4, &(0x7f0000005900)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) recvfrom$llc(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) [ 460.961273][T22789] hsr0 speed is unknown, defaulting to 1000 [ 461.020720][T22797] bond4: (slave ipvlan7): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 461.073693][T22797] bond4: (slave ipvlan7): The slave device specified does not support setting the MAC address 19:17:36 executing program 5: r0 = socket(0x1000000010, 0x80002, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r1, 0x8912, 0x400308) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@deltaction={0x24, 0x31, 0x305, 0x0, 0x0, {}, [@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}]}]}, 0x24}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) [ 461.138827][T22797] bond4: (slave ipvlan7): Setting fail_over_mac to active for active-backup mode [ 461.172972][T22797] 8021q: adding VLAN 0 to HW filter on device ipvlan7 19:17:37 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x4000000000002, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x80, 0x0) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) r3 = openat$cgroup_type(r0, &(0x7f0000000000), 0x2, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000009, 0x40010, r3, 0x80000001000) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) socket(0x10, 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0x1c) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000480)='syz1\x00', 0x1ff) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000020c0), &(0x7f0000002100)=0xc) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x4000000000000, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0xc01, 0x3, 0x438, 0x2e8, 0x5002004a, 0x7d09, 0x0, 0x3, 0x3a0, 0x3c8, 0x3c8, 0x3a0, 0x3c8, 0x4, 0x0, {[{{@uncond, 0x0, 0x2a0, 0x2e8, 0x0, {}, [@common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0xfffd}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x498) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000002240)=[{{&(0x7f0000000040)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000140)=[{&(0x7f00000001c0)="b35459eab157139645dff2328b7c8a914bab223d4675742e77c724e48dfb21d3e31629ee9532371e5a5cd53d95ea4dffc1c7747ae2c9970407d29c4979719bc214ae4f6491b4738e5b10006ec525f48ad733b55c8fc3fedaee48fa46a61089b8961171ad4cdbdfae023d914091a02acf61a2", 0x72}, {&(0x7f0000000300)="1d5a67a8695e623a7342156ee1cebc16ab529930a8dfc51df11a853fb5d2169bbc7ab5aedf5a84dcf610e0443d4f91318d1dacdbab590e036ce16caf36384f545c5f36844200a900992e542bf3eb04e1b04abda74b737a1db6f7aca31de1084d1026948b0c92bae1ccfb4e7d54251b62bb5fbd9d9a4348a108d453e8a22c8c08e4928a01597e30a8a560de57581ad522c22a902b1653cfaed880f6f12d", 0x9d}, {&(0x7f00000003c0)="0890058cb4bc3b8ac36b6236011de0b825c5af5ce6e590fe51465de7e34e17ad675258e454c36a5187dfe4ea2046681ac586b1909764f2898272fb275d01884de30981664a2989436c34cc06ac6175b13ea6636e49c8689f433ae67c880e0a382e68c4200275e18d6b592de41b2baec85f6b2c7e32f0891f3979f6ec8e620777f4b59d", 0x83}], 0x3, &(0x7f0000000540)=[@rights={{0x20, 0x1, 0x1, [r0, 0xffffffffffffffff, r3, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [r2]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01}}}], 0x80}}, {{&(0x7f00000005c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000780)=[{&(0x7f0000000640)="d67948928c56abc67a6fbdf23da152db801331cca670e665b9b9a75ae1ab9aabfdc575251a3ebfc9f12e8d828e91a8eccf4c0ac030f96fb1ae97c69796fe3e08db0b5a6be498cca57c85b71e125a1f0bcf8bef2f7c42be31896c506d96dff78efad4580c65bc7745b893aa7057aa1a8606aa6efdb42a38dcb15f3b4fea4513b74fbb4a27103ce41f", 0x88}, {&(0x7f0000000700)="9ff23d7a8db0d6a406b41399ef499953139e1ee9fdc75b500311e0442020470ae17b624bb330be4289cffad923a09a5b41786a833b9a2693ae34e9f2c9cd9ef2126a8fabf0ec00286f091b17", 0x4c}], 0x2, &(0x7f0000000980)=ANY=[@ANYBLOB="1c000000000000000100000001000000", @ANYRES32, @ANYRES32=r0, @ANYBLOB="40000000000000aff5e9f107741943fe0589a6d964f41de433861b155d894833ef06fe5d5c7bade0592f4723fd2d9482f23d0c93bb5fcc911cd295d59c49e4e78de37830c95b778911d2b4d65e2801795a0c5a06bdcf0797cc6c50cd605c691e2c165d7cc2c223e71a8633444e6df9e3b50c865780b0037866b61e4bd9699d430a6481752e7ca61e26ab39c76bb14755270cdc50bc99a79fd406156d55fcde9231fdd71fd5033550a2d3f3ba3bba67495243c275a42a6f512838bbdb7c2669f7564cd2d626ea8fd747505f132dfc0c86f5380fa6424eae3f92"], 0x20, 0x8000}}, {{&(0x7f0000000800)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000001ac0)=[{0x0}, {&(0x7f0000001940)="ad914b7bd4a854bf8d930679a799cef94f8c", 0x12}, {&(0x7f0000001980)="c7b95ce41008d663886800b6d0a7b5ecfb054fec6238c668ca8c155626e70e0babe72b6cb383859a1104a882f32c9568d3c7a929916c3b0f66208d88b9d078d237232c4e990202ec65bd848575e6609a31bcf882cdff7b151f0939c1499e4cd3667dd0e029ab2ee88139d2ae7eb6750e452963bc668dc58bdfa73df1709fd4dba7218def9f", 0x85}, {&(0x7f0000001a40)="94ba0620db3296bf7d25acd74e77ac7047aaa20eb37009ff2d46f2830e70e214e9cc5da2a15843a8c85be3bbde3de7b6de0aa01a2cc5ae3ee08ca4a3f7a49cf47b9201c94ad619", 0x47}], 0x4, 0x0, 0x0, 0x20000840}}, {{&(0x7f0000001b40)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000001c80)=[{0x0}], 0x1, &(0x7f0000001cc0)=[@cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff}}}], 0x20, 0x20000080}}, {{&(0x7f0000001d00)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000001f00)=[{&(0x7f0000001d80)="1452aefb8af5790fd2dce64efbfc47ae4c872e1e21e622b37632dca524367b5212a2b69226224b59bc795574311789c1e96eaf23ba7173ff098ee3c0d2f06c6dea37d5ec9d6e532564cc9744aba9b2e0363b4a5d691d113e71e9f84945", 0x5d}, {&(0x7f0000001e00)="decc6bf69de7448cfcc1541437dd1d47369caa9d7245c6b221e5a802c4ed00f1f3ff694c4568dfd39e0ed308b2ac88e8887c57aed8f885d0f7ac49bb1e98ba2e3d76a303f86d7904e4927dd535e63f55b11628d1c1dd6488720e7b0afadd9ac618aacd923998f9250d2a9c490a8c75fb18c967731dce82a80f2e0b69c0d2279423c3838b725075a4a1032084e8bfec64ae7e9da2266c84bcfac827ad1dbec7cca7e0a960234c17cc628bf344452583eaae0b910b02e18730bc328d23b4ee98cf015a25e279012decf36d0bb2c69a006d8a23eb684e3718cd55a9b633", 0xdc}], 0x2, &(0x7f0000002140)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB, @ANYRES32=r3, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=r5, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r0, @ANYBLOB="000000001c0000000000000001001f0801000000", @ANYRES32=r2, @ANYRES32, @ANYRES32=r6, @ANYBLOB='\x00\x00\x00\x00'], 0xf0, 0x40d4}}], 0x5, 0x8880) socket$vsock_stream(0x28, 0x1, 0x0) ppoll(&(0x7f00000000c0)=[{r2, 0x8124}, {0xffffffffffffffff, 0x0, 0x64}], 0x2, &(0x7f00000002c0)={0x0, r4+10000000}, 0x0, 0x0) 19:17:37 executing program 4: r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000060000000400000000000008000000000000000061"], &(0x7f0000000100)=""/234, 0x2a, 0xea, 0x1}, 0x20) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000600)=@bpf_tracing={0x1a, 0x3, &(0x7f0000000040)=@framed, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r0}, 0x78) 19:17:37 executing program 0: unshare(0x6c060000) r0 = socket$inet_icmp(0x2, 0x2, 0x1) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x78) mmap(&(0x7f0000325000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(r1, 0x0, 0x1e, 0x2200c851, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd0d0c2ac, 0x1, 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000200)={&(0x7f0000328000/0x4000)=nil, 0x4000}, &(0x7f0000000240)=0x10) 19:17:37 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x29, 0x18, 0x0, 0x700) 19:17:37 executing program 5: r0 = socket(0x1000000010, 0x80002, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r1, 0x8912, 0x400308) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@deltaction={0x24, 0x31, 0x305, 0x0, 0x0, {}, [@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}]}]}, 0x24}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 19:17:37 executing program 3: r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000100)={0x0, @initdev, @local}, &(0x7f0000000140)=0xc) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e21, @broadcast}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r1, &(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0x6e) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r2, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) sendmmsg(r2, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) r3 = socket(0x1a, 0x6, 0x3) getsockopt$inet_mreqn(r3, 0x0, 0x24, &(0x7f00000002c0)={@empty, @local}, &(0x7f0000000cc0)=0xc) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r4, &(0x7f0000005900)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) recvfrom$llc(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) 19:17:37 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x4000000000002, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x80, 0x0) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) r3 = openat$cgroup_type(r0, &(0x7f0000000000), 0x2, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000009, 0x40010, r3, 0x80000001000) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) socket(0x10, 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0x1c) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000480)='syz1\x00', 0x1ff) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000020c0), &(0x7f0000002100)=0xc) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x4000000000000, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0xc01, 0x3, 0x438, 0x2e8, 0x5002004a, 0x7d09, 0x0, 0x3, 0x3a0, 0x3c8, 0x3c8, 0x3a0, 0x3c8, 0x4, 0x0, {[{{@uncond, 0x0, 0x2a0, 0x2e8, 0x0, {}, [@common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0xfffd}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x498) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000002240)=[{{&(0x7f0000000040)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000140)=[{&(0x7f00000001c0)="b35459eab157139645dff2328b7c8a914bab223d4675742e77c724e48dfb21d3e31629ee9532371e5a5cd53d95ea4dffc1c7747ae2c9970407d29c4979719bc214ae4f6491b4738e5b10006ec525f48ad733b55c8fc3fedaee48fa46a61089b8961171ad4cdbdfae023d914091a02acf61a2", 0x72}, {&(0x7f0000000300)="1d5a67a8695e623a7342156ee1cebc16ab529930a8dfc51df11a853fb5d2169bbc7ab5aedf5a84dcf610e0443d4f91318d1dacdbab590e036ce16caf36384f545c5f36844200a900992e542bf3eb04e1b04abda74b737a1db6f7aca31de1084d1026948b0c92bae1ccfb4e7d54251b62bb5fbd9d9a4348a108d453e8a22c8c08e4928a01597e30a8a560de57581ad522c22a902b1653cfaed880f6f12d", 0x9d}, {&(0x7f00000003c0)="0890058cb4bc3b8ac36b6236011de0b825c5af5ce6e590fe51465de7e34e17ad675258e454c36a5187dfe4ea2046681ac586b1909764f2898272fb275d01884de30981664a2989436c34cc06ac6175b13ea6636e49c8689f433ae67c880e0a382e68c4200275e18d6b592de41b2baec85f6b2c7e32f0891f3979f6ec8e620777f4b59d", 0x83}], 0x3, &(0x7f0000000540)=[@rights={{0x20, 0x1, 0x1, [r0, 0xffffffffffffffff, r3, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [r2]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01}}}], 0x80}}, {{&(0x7f00000005c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000780)=[{&(0x7f0000000640)="d67948928c56abc67a6fbdf23da152db801331cca670e665b9b9a75ae1ab9aabfdc575251a3ebfc9f12e8d828e91a8eccf4c0ac030f96fb1ae97c69796fe3e08db0b5a6be498cca57c85b71e125a1f0bcf8bef2f7c42be31896c506d96dff78efad4580c65bc7745b893aa7057aa1a8606aa6efdb42a38dcb15f3b4fea4513b74fbb4a27103ce41f", 0x88}, {&(0x7f0000000700)="9ff23d7a8db0d6a406b41399ef499953139e1ee9fdc75b500311e0442020470ae17b624bb330be4289cffad923a09a5b41786a833b9a2693ae34e9f2c9cd9ef2126a8fabf0ec00286f091b17", 0x4c}], 0x2, &(0x7f0000000980)=ANY=[@ANYBLOB="1c000000000000000100000001000000", @ANYRES32, @ANYRES32=r0, @ANYBLOB="40000000000000aff5e9f107741943fe0589a6d964f41de433861b155d894833ef06fe5d5c7bade0592f4723fd2d9482f23d0c93bb5fcc911cd295d59c49e4e78de37830c95b778911d2b4d65e2801795a0c5a06bdcf0797cc6c50cd605c691e2c165d7cc2c223e71a8633444e6df9e3b50c865780b0037866b61e4bd9699d430a6481752e7ca61e26ab39c76bb14755270cdc50bc99a79fd406156d55fcde9231fdd71fd5033550a2d3f3ba3bba67495243c275a42a6f512838bbdb7c2669f7564cd2d626ea8fd747505f132dfc0c86f5380fa6424eae3f92"], 0x20, 0x8000}}, {{&(0x7f0000000800)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000001ac0)=[{0x0}, {&(0x7f0000001940)="ad914b7bd4a854bf8d930679a799cef94f8c", 0x12}, {&(0x7f0000001980)="c7b95ce41008d663886800b6d0a7b5ecfb054fec6238c668ca8c155626e70e0babe72b6cb383859a1104a882f32c9568d3c7a929916c3b0f66208d88b9d078d237232c4e990202ec65bd848575e6609a31bcf882cdff7b151f0939c1499e4cd3667dd0e029ab2ee88139d2ae7eb6750e452963bc668dc58bdfa73df1709fd4dba7218def9f", 0x85}, {&(0x7f0000001a40)="94ba0620db3296bf7d25acd74e77ac7047aaa20eb37009ff2d46f2830e70e214e9cc5da2a15843a8c85be3bbde3de7b6de0aa01a2cc5ae3ee08ca4a3f7a49cf47b9201c94ad619", 0x47}], 0x4, 0x0, 0x0, 0x20000840}}, {{&(0x7f0000001b40)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000001c80)=[{0x0}], 0x1, &(0x7f0000001cc0)=[@cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff}}}], 0x20, 0x20000080}}, {{&(0x7f0000001d00)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000001f00)=[{&(0x7f0000001d80)="1452aefb8af5790fd2dce64efbfc47ae4c872e1e21e622b37632dca524367b5212a2b69226224b59bc795574311789c1e96eaf23ba7173ff098ee3c0d2f06c6dea37d5ec9d6e532564cc9744aba9b2e0363b4a5d691d113e71e9f84945", 0x5d}, {&(0x7f0000001e00)="decc6bf69de7448cfcc1541437dd1d47369caa9d7245c6b221e5a802c4ed00f1f3ff694c4568dfd39e0ed308b2ac88e8887c57aed8f885d0f7ac49bb1e98ba2e3d76a303f86d7904e4927dd535e63f55b11628d1c1dd6488720e7b0afadd9ac618aacd923998f9250d2a9c490a8c75fb18c967731dce82a80f2e0b69c0d2279423c3838b725075a4a1032084e8bfec64ae7e9da2266c84bcfac827ad1dbec7cca7e0a960234c17cc628bf344452583eaae0b910b02e18730bc328d23b4ee98cf015a25e279012decf36d0bb2c69a006d8a23eb684e3718cd55a9b633", 0xdc}], 0x2, &(0x7f0000002140)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB, @ANYRES32=r3, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=r5, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r0, @ANYBLOB="000000001c0000000000000001001f0801000000", @ANYRES32=r2, @ANYRES32, @ANYRES32=r6, @ANYBLOB='\x00\x00\x00\x00'], 0xf0, 0x40d4}}], 0x5, 0x8880) socket$vsock_stream(0x28, 0x1, 0x0) ppoll(&(0x7f00000000c0)=[{r2, 0x8124}, {0xffffffffffffffff, 0x0, 0x64}], 0x2, &(0x7f00000002c0)={0x0, r4+10000000}, 0x0, 0x0) 19:17:37 executing program 1: r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000100)={0x0, @initdev, @local}, &(0x7f0000000140)=0xc) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e21, @broadcast}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r1, &(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0x6e) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r2, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) sendmmsg(r2, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) r3 = socket(0x1a, 0x6, 0x3) getsockopt$inet_mreqn(r3, 0x0, 0x24, &(0x7f00000002c0)={@empty, @local}, &(0x7f0000000cc0)=0xc) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r4, &(0x7f0000005900)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) recvfrom$llc(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) [ 462.559955][T22879] hsr0 speed is unknown, defaulting to 1000 19:17:38 executing program 5: r0 = socket(0x1000000010, 0x80002, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r1, 0x8912, 0x400308) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@deltaction={0x24, 0x31, 0x305, 0x0, 0x0, {}, [@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}]}]}, 0x24}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 19:17:38 executing program 0: unshare(0x6c060000) r0 = socket$inet_icmp(0x2, 0x2, 0x1) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x78) mmap(&(0x7f0000325000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(r1, 0x0, 0x1e, 0x2200c851, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd0d0c2ac, 0x1, 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000200)={&(0x7f0000328000/0x4000)=nil, 0x4000}, &(0x7f0000000240)=0x10) 19:17:38 executing program 3: r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000100)={0x0, @initdev, @local}, &(0x7f0000000140)=0xc) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e21, @broadcast}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r1, &(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0x6e) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r2, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) sendmmsg(r2, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) r3 = socket(0x1a, 0x6, 0x3) getsockopt$inet_mreqn(r3, 0x0, 0x24, &(0x7f00000002c0)={@empty, @local}, &(0x7f0000000cc0)=0xc) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r4, &(0x7f0000005900)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) recvfrom$llc(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) 19:17:38 executing program 1: r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000100)={0x0, @initdev, @local}, &(0x7f0000000140)=0xc) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e21, @broadcast}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r1, &(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0x6e) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r2, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) sendmmsg(r2, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) r3 = socket(0x1a, 0x6, 0x3) getsockopt$inet_mreqn(r3, 0x0, 0x24, &(0x7f00000002c0)={@empty, @local}, &(0x7f0000000cc0)=0xc) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r4, &(0x7f0000005900)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) recvfrom$llc(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) [ 463.954047][T22924] hsr0 speed is unknown, defaulting to 1000 19:17:40 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x4000000000002, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x80, 0x0) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) r3 = openat$cgroup_type(r0, &(0x7f0000000000), 0x2, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000009, 0x40010, r3, 0x80000001000) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) socket(0x10, 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0x1c) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000480)='syz1\x00', 0x1ff) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000020c0), &(0x7f0000002100)=0xc) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x4000000000000, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0xc01, 0x3, 0x438, 0x2e8, 0x5002004a, 0x7d09, 0x0, 0x3, 0x3a0, 0x3c8, 0x3c8, 0x3a0, 0x3c8, 0x4, 0x0, {[{{@uncond, 0x0, 0x2a0, 0x2e8, 0x0, {}, [@common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0xfffd}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x498) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000002240)=[{{&(0x7f0000000040)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000140)=[{&(0x7f00000001c0)="b35459eab157139645dff2328b7c8a914bab223d4675742e77c724e48dfb21d3e31629ee9532371e5a5cd53d95ea4dffc1c7747ae2c9970407d29c4979719bc214ae4f6491b4738e5b10006ec525f48ad733b55c8fc3fedaee48fa46a61089b8961171ad4cdbdfae023d914091a02acf61a2", 0x72}, {&(0x7f0000000300)="1d5a67a8695e623a7342156ee1cebc16ab529930a8dfc51df11a853fb5d2169bbc7ab5aedf5a84dcf610e0443d4f91318d1dacdbab590e036ce16caf36384f545c5f36844200a900992e542bf3eb04e1b04abda74b737a1db6f7aca31de1084d1026948b0c92bae1ccfb4e7d54251b62bb5fbd9d9a4348a108d453e8a22c8c08e4928a01597e30a8a560de57581ad522c22a902b1653cfaed880f6f12d", 0x9d}, {&(0x7f00000003c0)="0890058cb4bc3b8ac36b6236011de0b825c5af5ce6e590fe51465de7e34e17ad675258e454c36a5187dfe4ea2046681ac586b1909764f2898272fb275d01884de30981664a2989436c34cc06ac6175b13ea6636e49c8689f433ae67c880e0a382e68c4200275e18d6b592de41b2baec85f6b2c7e32f0891f3979f6ec8e620777f4b59d", 0x83}], 0x3, &(0x7f0000000540)=[@rights={{0x20, 0x1, 0x1, [r0, 0xffffffffffffffff, r3, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [r2]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01}}}], 0x80}}, {{&(0x7f00000005c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000780)=[{&(0x7f0000000640)="d67948928c56abc67a6fbdf23da152db801331cca670e665b9b9a75ae1ab9aabfdc575251a3ebfc9f12e8d828e91a8eccf4c0ac030f96fb1ae97c69796fe3e08db0b5a6be498cca57c85b71e125a1f0bcf8bef2f7c42be31896c506d96dff78efad4580c65bc7745b893aa7057aa1a8606aa6efdb42a38dcb15f3b4fea4513b74fbb4a27103ce41f", 0x88}, {&(0x7f0000000700)="9ff23d7a8db0d6a406b41399ef499953139e1ee9fdc75b500311e0442020470ae17b624bb330be4289cffad923a09a5b41786a833b9a2693ae34e9f2c9cd9ef2126a8fabf0ec00286f091b17", 0x4c}], 0x2, &(0x7f0000000980)=ANY=[@ANYBLOB="1c000000000000000100000001000000", @ANYRES32, @ANYRES32=r0, @ANYBLOB="40000000000000aff5e9f107741943fe0589a6d964f41de433861b155d894833ef06fe5d5c7bade0592f4723fd2d9482f23d0c93bb5fcc911cd295d59c49e4e78de37830c95b778911d2b4d65e2801795a0c5a06bdcf0797cc6c50cd605c691e2c165d7cc2c223e71a8633444e6df9e3b50c865780b0037866b61e4bd9699d430a6481752e7ca61e26ab39c76bb14755270cdc50bc99a79fd406156d55fcde9231fdd71fd5033550a2d3f3ba3bba67495243c275a42a6f512838bbdb7c2669f7564cd2d626ea8fd747505f132dfc0c86f5380fa6424eae3f92"], 0x20, 0x8000}}, {{&(0x7f0000000800)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000001ac0)=[{0x0}, {&(0x7f0000001940)="ad914b7bd4a854bf8d930679a799cef94f8c", 0x12}, {&(0x7f0000001980)="c7b95ce41008d663886800b6d0a7b5ecfb054fec6238c668ca8c155626e70e0babe72b6cb383859a1104a882f32c9568d3c7a929916c3b0f66208d88b9d078d237232c4e990202ec65bd848575e6609a31bcf882cdff7b151f0939c1499e4cd3667dd0e029ab2ee88139d2ae7eb6750e452963bc668dc58bdfa73df1709fd4dba7218def9f", 0x85}, {&(0x7f0000001a40)="94ba0620db3296bf7d25acd74e77ac7047aaa20eb37009ff2d46f2830e70e214e9cc5da2a15843a8c85be3bbde3de7b6de0aa01a2cc5ae3ee08ca4a3f7a49cf47b9201c94ad619", 0x47}], 0x4, 0x0, 0x0, 0x20000840}}, {{&(0x7f0000001b40)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000001c80)=[{0x0}], 0x1, &(0x7f0000001cc0)=[@cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff}}}], 0x20, 0x20000080}}, {{&(0x7f0000001d00)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000001f00)=[{&(0x7f0000001d80)="1452aefb8af5790fd2dce64efbfc47ae4c872e1e21e622b37632dca524367b5212a2b69226224b59bc795574311789c1e96eaf23ba7173ff098ee3c0d2f06c6dea37d5ec9d6e532564cc9744aba9b2e0363b4a5d691d113e71e9f84945", 0x5d}, {&(0x7f0000001e00)="decc6bf69de7448cfcc1541437dd1d47369caa9d7245c6b221e5a802c4ed00f1f3ff694c4568dfd39e0ed308b2ac88e8887c57aed8f885d0f7ac49bb1e98ba2e3d76a303f86d7904e4927dd535e63f55b11628d1c1dd6488720e7b0afadd9ac618aacd923998f9250d2a9c490a8c75fb18c967731dce82a80f2e0b69c0d2279423c3838b725075a4a1032084e8bfec64ae7e9da2266c84bcfac827ad1dbec7cca7e0a960234c17cc628bf344452583eaae0b910b02e18730bc328d23b4ee98cf015a25e279012decf36d0bb2c69a006d8a23eb684e3718cd55a9b633", 0xdc}], 0x2, &(0x7f0000002140)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB, @ANYRES32=r3, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=r5, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r0, @ANYBLOB="000000001c0000000000000001001f0801000000", @ANYRES32=r2, @ANYRES32, @ANYRES32=r6, @ANYBLOB='\x00\x00\x00\x00'], 0xf0, 0x40d4}}], 0x5, 0x8880) socket$vsock_stream(0x28, 0x1, 0x0) ppoll(&(0x7f00000000c0)=[{r2, 0x8124}, {0xffffffffffffffff, 0x0, 0x64}], 0x2, &(0x7f00000002c0)={0x0, r4+10000000}, 0x0, 0x0) 19:17:40 executing program 5: r0 = socket(0x1000000010, 0x80002, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r1, 0x8912, 0x400308) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@deltaction={0x24, 0x31, 0x305, 0x0, 0x0, {}, [@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}]}]}, 0x24}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 19:17:40 executing program 0: unshare(0x6c060000) r0 = socket$inet_icmp(0x2, 0x2, 0x1) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x78) mmap(&(0x7f0000325000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(r1, 0x0, 0x1e, 0x2200c851, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd0d0c2ac, 0x1, 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000200)={&(0x7f0000328000/0x4000)=nil, 0x4000}, &(0x7f0000000240)=0x10) 19:17:40 executing program 3: r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000100)={0x0, @initdev, @local}, &(0x7f0000000140)=0xc) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e21, @broadcast}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r1, &(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0x6e) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r2, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) sendmmsg(r2, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) r3 = socket(0x1a, 0x6, 0x3) getsockopt$inet_mreqn(r3, 0x0, 0x24, &(0x7f00000002c0)={@empty, @local}, &(0x7f0000000cc0)=0xc) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r4, &(0x7f0000005900)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) recvfrom$llc(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) 19:17:40 executing program 1: r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000100)={0x0, @initdev, @local}, &(0x7f0000000140)=0xc) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e21, @broadcast}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r1, &(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0x6e) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r2, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) sendmmsg(r2, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) r3 = socket(0x1a, 0x6, 0x3) getsockopt$inet_mreqn(r3, 0x0, 0x24, &(0x7f00000002c0)={@empty, @local}, &(0x7f0000000cc0)=0xc) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r4, &(0x7f0000005900)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) recvfrom$llc(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) 19:17:40 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x4000000000002, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x80, 0x0) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) r3 = openat$cgroup_type(r0, &(0x7f0000000000), 0x2, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000009, 0x40010, r3, 0x80000001000) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) socket(0x10, 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0x1c) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000480)='syz1\x00', 0x1ff) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000020c0), &(0x7f0000002100)=0xc) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x4000000000000, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0xc01, 0x3, 0x438, 0x2e8, 0x5002004a, 0x7d09, 0x0, 0x3, 0x3a0, 0x3c8, 0x3c8, 0x3a0, 0x3c8, 0x4, 0x0, {[{{@uncond, 0x0, 0x2a0, 0x2e8, 0x0, {}, [@common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0xfffd}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x498) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000002240)=[{{&(0x7f0000000040)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000140)=[{&(0x7f00000001c0)="b35459eab157139645dff2328b7c8a914bab223d4675742e77c724e48dfb21d3e31629ee9532371e5a5cd53d95ea4dffc1c7747ae2c9970407d29c4979719bc214ae4f6491b4738e5b10006ec525f48ad733b55c8fc3fedaee48fa46a61089b8961171ad4cdbdfae023d914091a02acf61a2", 0x72}, {&(0x7f0000000300)="1d5a67a8695e623a7342156ee1cebc16ab529930a8dfc51df11a853fb5d2169bbc7ab5aedf5a84dcf610e0443d4f91318d1dacdbab590e036ce16caf36384f545c5f36844200a900992e542bf3eb04e1b04abda74b737a1db6f7aca31de1084d1026948b0c92bae1ccfb4e7d54251b62bb5fbd9d9a4348a108d453e8a22c8c08e4928a01597e30a8a560de57581ad522c22a902b1653cfaed880f6f12d", 0x9d}, {&(0x7f00000003c0)="0890058cb4bc3b8ac36b6236011de0b825c5af5ce6e590fe51465de7e34e17ad675258e454c36a5187dfe4ea2046681ac586b1909764f2898272fb275d01884de30981664a2989436c34cc06ac6175b13ea6636e49c8689f433ae67c880e0a382e68c4200275e18d6b592de41b2baec85f6b2c7e32f0891f3979f6ec8e620777f4b59d", 0x83}], 0x3, &(0x7f0000000540)=[@rights={{0x20, 0x1, 0x1, [r0, 0xffffffffffffffff, r3, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [r2]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01}}}], 0x80}}, {{&(0x7f00000005c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000780)=[{&(0x7f0000000640)="d67948928c56abc67a6fbdf23da152db801331cca670e665b9b9a75ae1ab9aabfdc575251a3ebfc9f12e8d828e91a8eccf4c0ac030f96fb1ae97c69796fe3e08db0b5a6be498cca57c85b71e125a1f0bcf8bef2f7c42be31896c506d96dff78efad4580c65bc7745b893aa7057aa1a8606aa6efdb42a38dcb15f3b4fea4513b74fbb4a27103ce41f", 0x88}, {&(0x7f0000000700)="9ff23d7a8db0d6a406b41399ef499953139e1ee9fdc75b500311e0442020470ae17b624bb330be4289cffad923a09a5b41786a833b9a2693ae34e9f2c9cd9ef2126a8fabf0ec00286f091b17", 0x4c}], 0x2, &(0x7f0000000980)=ANY=[@ANYBLOB="1c000000000000000100000001000000", @ANYRES32, @ANYRES32=r0, @ANYBLOB="40000000000000aff5e9f107741943fe0589a6d964f41de433861b155d894833ef06fe5d5c7bade0592f4723fd2d9482f23d0c93bb5fcc911cd295d59c49e4e78de37830c95b778911d2b4d65e2801795a0c5a06bdcf0797cc6c50cd605c691e2c165d7cc2c223e71a8633444e6df9e3b50c865780b0037866b61e4bd9699d430a6481752e7ca61e26ab39c76bb14755270cdc50bc99a79fd406156d55fcde9231fdd71fd5033550a2d3f3ba3bba67495243c275a42a6f512838bbdb7c2669f7564cd2d626ea8fd747505f132dfc0c86f5380fa6424eae3f92"], 0x20, 0x8000}}, {{&(0x7f0000000800)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000001ac0)=[{0x0}, {&(0x7f0000001940)="ad914b7bd4a854bf8d930679a799cef94f8c", 0x12}, {&(0x7f0000001980)="c7b95ce41008d663886800b6d0a7b5ecfb054fec6238c668ca8c155626e70e0babe72b6cb383859a1104a882f32c9568d3c7a929916c3b0f66208d88b9d078d237232c4e990202ec65bd848575e6609a31bcf882cdff7b151f0939c1499e4cd3667dd0e029ab2ee88139d2ae7eb6750e452963bc668dc58bdfa73df1709fd4dba7218def9f", 0x85}, {&(0x7f0000001a40)="94ba0620db3296bf7d25acd74e77ac7047aaa20eb37009ff2d46f2830e70e214e9cc5da2a15843a8c85be3bbde3de7b6de0aa01a2cc5ae3ee08ca4a3f7a49cf47b9201c94ad619", 0x47}], 0x4, 0x0, 0x0, 0x20000840}}, {{&(0x7f0000001b40)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000001c80)=[{0x0}], 0x1, &(0x7f0000001cc0)=[@cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff}}}], 0x20, 0x20000080}}, {{&(0x7f0000001d00)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000001f00)=[{&(0x7f0000001d80)="1452aefb8af5790fd2dce64efbfc47ae4c872e1e21e622b37632dca524367b5212a2b69226224b59bc795574311789c1e96eaf23ba7173ff098ee3c0d2f06c6dea37d5ec9d6e532564cc9744aba9b2e0363b4a5d691d113e71e9f84945", 0x5d}, {&(0x7f0000001e00)="decc6bf69de7448cfcc1541437dd1d47369caa9d7245c6b221e5a802c4ed00f1f3ff694c4568dfd39e0ed308b2ac88e8887c57aed8f885d0f7ac49bb1e98ba2e3d76a303f86d7904e4927dd535e63f55b11628d1c1dd6488720e7b0afadd9ac618aacd923998f9250d2a9c490a8c75fb18c967731dce82a80f2e0b69c0d2279423c3838b725075a4a1032084e8bfec64ae7e9da2266c84bcfac827ad1dbec7cca7e0a960234c17cc628bf344452583eaae0b910b02e18730bc328d23b4ee98cf015a25e279012decf36d0bb2c69a006d8a23eb684e3718cd55a9b633", 0xdc}], 0x2, &(0x7f0000002140)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB, @ANYRES32=r3, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=r5, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r0, @ANYBLOB="000000001c0000000000000001001f0801000000", @ANYRES32=r2, @ANYRES32, @ANYRES32=r6, @ANYBLOB='\x00\x00\x00\x00'], 0xf0, 0x40d4}}], 0x5, 0x8880) socket$vsock_stream(0x28, 0x1, 0x0) ppoll(&(0x7f00000000c0)=[{r2, 0x8124}, {0xffffffffffffffff, 0x0, 0x64}], 0x2, &(0x7f00000002c0)={0x0, r4+10000000}, 0x0, 0x0) [ 465.760345][T22972] hsr0 speed is unknown, defaulting to 1000 19:17:41 executing program 5: unshare(0x6c060000) r0 = socket$inet_icmp(0x2, 0x2, 0x1) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x78) mmap(&(0x7f0000325000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(r1, 0x0, 0x1e, 0x2200c851, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd0d0c2ac, 0x1, 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000200)={&(0x7f0000328000/0x4000)=nil, 0x4000}, &(0x7f0000000240)=0x10) 19:17:41 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000001f00)={0x0, 0x0, &(0x7f0000001ec0)={&(0x7f0000001dc0)={0x24, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x9d4b}]}, 0x24}}, 0x0) 19:17:41 executing program 1: r0 = socket(0x1d, 0x2, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x2c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0x28920e58}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x2c}}, 0x0) 19:17:41 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='dctcp\x00', 0x6) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x21, &(0x7f00000003c0), 0x4) write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[], 0x2bcf) shutdown(r0, 0x1) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='scalable\x00', 0x9) recvmsg(r0, &(0x7f0000001440)={0x0, 0xa, &(0x7f00000015c0)=[{&(0x7f0000001600)=""/4096, 0xf99e}], 0x12, 0x0, 0xff96ce4aaaa47475, 0x7115}, 0x1100) [ 466.937009][T23007] hsr0 speed is unknown, defaulting to 1000 19:17:42 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000001f00)={0x0, 0x0, &(0x7f0000001ec0)={&(0x7f0000001dc0)={0x24, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x9d4b}]}, 0x24}}, 0x0) 19:17:42 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='dctcp\x00', 0x6) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x21, &(0x7f00000003c0), 0x4) write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[], 0x2bcf) shutdown(r0, 0x1) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='scalable\x00', 0x9) recvmsg(r0, &(0x7f0000001440)={0x0, 0xa, &(0x7f00000015c0)=[{&(0x7f0000001600)=""/4096, 0xf99e}], 0x12, 0x0, 0xff96ce4aaaa47475, 0x7115}, 0x1100) 19:17:43 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x4000000000002, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x80, 0x0) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) r3 = openat$cgroup_type(r0, &(0x7f0000000000), 0x2, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000009, 0x40010, r3, 0x80000001000) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) socket(0x10, 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0x1c) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000480)='syz1\x00', 0x1ff) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000020c0), &(0x7f0000002100)=0xc) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x4000000000000, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0xc01, 0x3, 0x438, 0x2e8, 0x5002004a, 0x7d09, 0x0, 0x3, 0x3a0, 0x3c8, 0x3c8, 0x3a0, 0x3c8, 0x4, 0x0, {[{{@uncond, 0x0, 0x2a0, 0x2e8, 0x0, {}, [@common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0xfffd}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x498) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000002240)=[{{&(0x7f0000000040)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000140)=[{&(0x7f00000001c0)="b35459eab157139645dff2328b7c8a914bab223d4675742e77c724e48dfb21d3e31629ee9532371e5a5cd53d95ea4dffc1c7747ae2c9970407d29c4979719bc214ae4f6491b4738e5b10006ec525f48ad733b55c8fc3fedaee48fa46a61089b8961171ad4cdbdfae023d914091a02acf61a2", 0x72}, {&(0x7f0000000300)="1d5a67a8695e623a7342156ee1cebc16ab529930a8dfc51df11a853fb5d2169bbc7ab5aedf5a84dcf610e0443d4f91318d1dacdbab590e036ce16caf36384f545c5f36844200a900992e542bf3eb04e1b04abda74b737a1db6f7aca31de1084d1026948b0c92bae1ccfb4e7d54251b62bb5fbd9d9a4348a108d453e8a22c8c08e4928a01597e30a8a560de57581ad522c22a902b1653cfaed880f6f12d", 0x9d}, {&(0x7f00000003c0)="0890058cb4bc3b8ac36b6236011de0b825c5af5ce6e590fe51465de7e34e17ad675258e454c36a5187dfe4ea2046681ac586b1909764f2898272fb275d01884de30981664a2989436c34cc06ac6175b13ea6636e49c8689f433ae67c880e0a382e68c4200275e18d6b592de41b2baec85f6b2c7e32f0891f3979f6ec8e620777f4b59d", 0x83}], 0x3, &(0x7f0000000540)=[@rights={{0x20, 0x1, 0x1, [r0, 0xffffffffffffffff, r3, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [r2]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01}}}], 0x80}}, {{&(0x7f00000005c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000780)=[{&(0x7f0000000640)="d67948928c56abc67a6fbdf23da152db801331cca670e665b9b9a75ae1ab9aabfdc575251a3ebfc9f12e8d828e91a8eccf4c0ac030f96fb1ae97c69796fe3e08db0b5a6be498cca57c85b71e125a1f0bcf8bef2f7c42be31896c506d96dff78efad4580c65bc7745b893aa7057aa1a8606aa6efdb42a38dcb15f3b4fea4513b74fbb4a27103ce41f", 0x88}, {&(0x7f0000000700)="9ff23d7a8db0d6a406b41399ef499953139e1ee9fdc75b500311e0442020470ae17b624bb330be4289cffad923a09a5b41786a833b9a2693ae34e9f2c9cd9ef2126a8fabf0ec00286f091b17", 0x4c}], 0x2, &(0x7f0000000980)=ANY=[@ANYBLOB="1c000000000000000100000001000000", @ANYRES32, @ANYRES32=r0, @ANYBLOB="40000000000000aff5e9f107741943fe0589a6d964f41de433861b155d894833ef06fe5d5c7bade0592f4723fd2d9482f23d0c93bb5fcc911cd295d59c49e4e78de37830c95b778911d2b4d65e2801795a0c5a06bdcf0797cc6c50cd605c691e2c165d7cc2c223e71a8633444e6df9e3b50c865780b0037866b61e4bd9699d430a6481752e7ca61e26ab39c76bb14755270cdc50bc99a79fd406156d55fcde9231fdd71fd5033550a2d3f3ba3bba67495243c275a42a6f512838bbdb7c2669f7564cd2d626ea8fd747505f132dfc0c86f5380fa6424eae3f92"], 0x20, 0x8000}}, {{&(0x7f0000000800)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000001ac0)=[{0x0}, {&(0x7f0000001940)="ad914b7bd4a854bf8d930679a799cef94f8c", 0x12}, {&(0x7f0000001980)="c7b95ce41008d663886800b6d0a7b5ecfb054fec6238c668ca8c155626e70e0babe72b6cb383859a1104a882f32c9568d3c7a929916c3b0f66208d88b9d078d237232c4e990202ec65bd848575e6609a31bcf882cdff7b151f0939c1499e4cd3667dd0e029ab2ee88139d2ae7eb6750e452963bc668dc58bdfa73df1709fd4dba7218def9f", 0x85}, {&(0x7f0000001a40)="94ba0620db3296bf7d25acd74e77ac7047aaa20eb37009ff2d46f2830e70e214e9cc5da2a15843a8c85be3bbde3de7b6de0aa01a2cc5ae3ee08ca4a3f7a49cf47b9201c94ad619", 0x47}], 0x4, 0x0, 0x0, 0x20000840}}, {{&(0x7f0000001b40)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000001c80)=[{0x0}], 0x1, &(0x7f0000001cc0)=[@cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff}}}], 0x20, 0x20000080}}, {{&(0x7f0000001d00)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000001f00)=[{&(0x7f0000001d80)="1452aefb8af5790fd2dce64efbfc47ae4c872e1e21e622b37632dca524367b5212a2b69226224b59bc795574311789c1e96eaf23ba7173ff098ee3c0d2f06c6dea37d5ec9d6e532564cc9744aba9b2e0363b4a5d691d113e71e9f84945", 0x5d}, {&(0x7f0000001e00)="decc6bf69de7448cfcc1541437dd1d47369caa9d7245c6b221e5a802c4ed00f1f3ff694c4568dfd39e0ed308b2ac88e8887c57aed8f885d0f7ac49bb1e98ba2e3d76a303f86d7904e4927dd535e63f55b11628d1c1dd6488720e7b0afadd9ac618aacd923998f9250d2a9c490a8c75fb18c967731dce82a80f2e0b69c0d2279423c3838b725075a4a1032084e8bfec64ae7e9da2266c84bcfac827ad1dbec7cca7e0a960234c17cc628bf344452583eaae0b910b02e18730bc328d23b4ee98cf015a25e279012decf36d0bb2c69a006d8a23eb684e3718cd55a9b633", 0xdc}], 0x2, &(0x7f0000002140)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB, @ANYRES32=r3, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=r5, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r0, @ANYBLOB="000000001c0000000000000001001f0801000000", @ANYRES32=r2, @ANYRES32, @ANYRES32=r6, @ANYBLOB='\x00\x00\x00\x00'], 0xf0, 0x40d4}}], 0x5, 0x8880) socket$vsock_stream(0x28, 0x1, 0x0) ppoll(&(0x7f00000000c0)=[{r2, 0x8124}, {0xffffffffffffffff, 0x0, 0x64}], 0x2, &(0x7f00000002c0)={0x0, r4+10000000}, 0x0, 0x0) 19:17:43 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x1b, 0xc6, 0x0, 0x0, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x5}, 0x40) 19:17:43 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000001f00)={0x0, 0x0, &(0x7f0000001ec0)={&(0x7f0000001dc0)={0x24, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x9d4b}]}, 0x24}}, 0x0) 19:17:43 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='dctcp\x00', 0x6) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x21, &(0x7f00000003c0), 0x4) write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[], 0x2bcf) shutdown(r0, 0x1) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='scalable\x00', 0x9) recvmsg(r0, &(0x7f0000001440)={0x0, 0xa, &(0x7f00000015c0)=[{&(0x7f0000001600)=""/4096, 0xf99e}], 0x12, 0x0, 0xff96ce4aaaa47475, 0x7115}, 0x1100) 19:17:43 executing program 5: unshare(0x6c060000) r0 = socket$inet_icmp(0x2, 0x2, 0x1) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x78) mmap(&(0x7f0000325000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(r1, 0x0, 0x1e, 0x2200c851, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd0d0c2ac, 0x1, 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000200)={&(0x7f0000328000/0x4000)=nil, 0x4000}, &(0x7f0000000240)=0x10) 19:17:43 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x4000000000002, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x80, 0x0) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) r3 = openat$cgroup_type(r0, &(0x7f0000000000), 0x2, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000009, 0x40010, r3, 0x80000001000) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) socket(0x10, 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0x1c) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000480)='syz1\x00', 0x1ff) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000020c0), &(0x7f0000002100)=0xc) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x4000000000000, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0xc01, 0x3, 0x438, 0x2e8, 0x5002004a, 0x7d09, 0x0, 0x3, 0x3a0, 0x3c8, 0x3c8, 0x3a0, 0x3c8, 0x4, 0x0, {[{{@uncond, 0x0, 0x2a0, 0x2e8, 0x0, {}, [@common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0xfffd}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x498) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000002240)=[{{&(0x7f0000000040)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000140)=[{&(0x7f00000001c0)="b35459eab157139645dff2328b7c8a914bab223d4675742e77c724e48dfb21d3e31629ee9532371e5a5cd53d95ea4dffc1c7747ae2c9970407d29c4979719bc214ae4f6491b4738e5b10006ec525f48ad733b55c8fc3fedaee48fa46a61089b8961171ad4cdbdfae023d914091a02acf61a2", 0x72}, {&(0x7f0000000300)="1d5a67a8695e623a7342156ee1cebc16ab529930a8dfc51df11a853fb5d2169bbc7ab5aedf5a84dcf610e0443d4f91318d1dacdbab590e036ce16caf36384f545c5f36844200a900992e542bf3eb04e1b04abda74b737a1db6f7aca31de1084d1026948b0c92bae1ccfb4e7d54251b62bb5fbd9d9a4348a108d453e8a22c8c08e4928a01597e30a8a560de57581ad522c22a902b1653cfaed880f6f12d", 0x9d}, {&(0x7f00000003c0)="0890058cb4bc3b8ac36b6236011de0b825c5af5ce6e590fe51465de7e34e17ad675258e454c36a5187dfe4ea2046681ac586b1909764f2898272fb275d01884de30981664a2989436c34cc06ac6175b13ea6636e49c8689f433ae67c880e0a382e68c4200275e18d6b592de41b2baec85f6b2c7e32f0891f3979f6ec8e620777f4b59d", 0x83}], 0x3, &(0x7f0000000540)=[@rights={{0x20, 0x1, 0x1, [r0, 0xffffffffffffffff, r3, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [r2]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01}}}], 0x80}}, {{&(0x7f00000005c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000780)=[{&(0x7f0000000640)="d67948928c56abc67a6fbdf23da152db801331cca670e665b9b9a75ae1ab9aabfdc575251a3ebfc9f12e8d828e91a8eccf4c0ac030f96fb1ae97c69796fe3e08db0b5a6be498cca57c85b71e125a1f0bcf8bef2f7c42be31896c506d96dff78efad4580c65bc7745b893aa7057aa1a8606aa6efdb42a38dcb15f3b4fea4513b74fbb4a27103ce41f", 0x88}, {&(0x7f0000000700)="9ff23d7a8db0d6a406b41399ef499953139e1ee9fdc75b500311e0442020470ae17b624bb330be4289cffad923a09a5b41786a833b9a2693ae34e9f2c9cd9ef2126a8fabf0ec00286f091b17", 0x4c}], 0x2, &(0x7f0000000980)=ANY=[@ANYBLOB="1c000000000000000100000001000000", @ANYRES32, @ANYRES32=r0, @ANYBLOB="40000000000000aff5e9f107741943fe0589a6d964f41de433861b155d894833ef06fe5d5c7bade0592f4723fd2d9482f23d0c93bb5fcc911cd295d59c49e4e78de37830c95b778911d2b4d65e2801795a0c5a06bdcf0797cc6c50cd605c691e2c165d7cc2c223e71a8633444e6df9e3b50c865780b0037866b61e4bd9699d430a6481752e7ca61e26ab39c76bb14755270cdc50bc99a79fd406156d55fcde9231fdd71fd5033550a2d3f3ba3bba67495243c275a42a6f512838bbdb7c2669f7564cd2d626ea8fd747505f132dfc0c86f5380fa6424eae3f92"], 0x20, 0x8000}}, {{&(0x7f0000000800)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000001ac0)=[{0x0}, {&(0x7f0000001940)="ad914b7bd4a854bf8d930679a799cef94f8c", 0x12}, {&(0x7f0000001980)="c7b95ce41008d663886800b6d0a7b5ecfb054fec6238c668ca8c155626e70e0babe72b6cb383859a1104a882f32c9568d3c7a929916c3b0f66208d88b9d078d237232c4e990202ec65bd848575e6609a31bcf882cdff7b151f0939c1499e4cd3667dd0e029ab2ee88139d2ae7eb6750e452963bc668dc58bdfa73df1709fd4dba7218def9f", 0x85}, {&(0x7f0000001a40)="94ba0620db3296bf7d25acd74e77ac7047aaa20eb37009ff2d46f2830e70e214e9cc5da2a15843a8c85be3bbde3de7b6de0aa01a2cc5ae3ee08ca4a3f7a49cf47b9201c94ad619", 0x47}], 0x4, 0x0, 0x0, 0x20000840}}, {{&(0x7f0000001b40)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000001c80)=[{0x0}], 0x1, &(0x7f0000001cc0)=[@cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff}}}], 0x20, 0x20000080}}, {{&(0x7f0000001d00)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000001f00)=[{&(0x7f0000001d80)="1452aefb8af5790fd2dce64efbfc47ae4c872e1e21e622b37632dca524367b5212a2b69226224b59bc795574311789c1e96eaf23ba7173ff098ee3c0d2f06c6dea37d5ec9d6e532564cc9744aba9b2e0363b4a5d691d113e71e9f84945", 0x5d}, {&(0x7f0000001e00)="decc6bf69de7448cfcc1541437dd1d47369caa9d7245c6b221e5a802c4ed00f1f3ff694c4568dfd39e0ed308b2ac88e8887c57aed8f885d0f7ac49bb1e98ba2e3d76a303f86d7904e4927dd535e63f55b11628d1c1dd6488720e7b0afadd9ac618aacd923998f9250d2a9c490a8c75fb18c967731dce82a80f2e0b69c0d2279423c3838b725075a4a1032084e8bfec64ae7e9da2266c84bcfac827ad1dbec7cca7e0a960234c17cc628bf344452583eaae0b910b02e18730bc328d23b4ee98cf015a25e279012decf36d0bb2c69a006d8a23eb684e3718cd55a9b633", 0xdc}], 0x2, &(0x7f0000002140)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB, @ANYRES32=r3, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=r5, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r0, @ANYBLOB="000000001c0000000000000001001f0801000000", @ANYRES32=r2, @ANYRES32, @ANYRES32=r6, @ANYBLOB='\x00\x00\x00\x00'], 0xf0, 0x40d4}}], 0x5, 0x8880) socket$vsock_stream(0x28, 0x1, 0x0) ppoll(&(0x7f00000000c0)=[{r2, 0x8124}, {0xffffffffffffffff, 0x0, 0x64}], 0x2, &(0x7f00000002c0)={0x0, r4+10000000}, 0x0, 0x0) [ 468.831110][T23064] hsr0 speed is unknown, defaulting to 1000 19:17:43 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x20, 0x2, 0x1, 0x201, 0x0, 0x0, {}, [@CTA_TUPLE_REPLY={0x4, 0x19}, @CTA_MARK={0x8}]}, 0x20}}, 0x0) 19:17:43 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000001f00)={0x0, 0x0, &(0x7f0000001ec0)={&(0x7f0000001dc0)={0x24, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x9d4b}]}, 0x24}}, 0x0) 19:17:44 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='dctcp\x00', 0x6) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x21, &(0x7f00000003c0), 0x4) write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[], 0x2bcf) shutdown(r0, 0x1) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='scalable\x00', 0x9) recvmsg(r0, &(0x7f0000001440)={0x0, 0xa, &(0x7f00000015c0)=[{&(0x7f0000001600)=""/4096, 0xf99e}], 0x12, 0x0, 0xff96ce4aaaa47475, 0x7115}, 0x1100) 19:17:44 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x20, 0x2, 0x1, 0x201, 0x0, 0x0, {}, [@CTA_TUPLE_REPLY={0x4, 0x19}, @CTA_MARK={0x8}]}, 0x20}}, 0x0) 19:17:44 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000440)={0x26, 'hash\x00', 0x0, 0x0, 'sha1-avx\x00'}, 0x58) r2 = accept$alg(r1, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700) pwritev(r3, &(0x7f00000004c0)=[{0x0}, {0x0}, {&(0x7f0000000200)="db", 0xfffff000}], 0x3, 0x8040000, 0x0) sendfile(r2, r0, 0x0, 0x30000) 19:17:44 executing program 3: r0 = socket(0x15, 0x5, 0x0) getsockopt(r0, 0x200000000114, 0x2715, &(0x7f0000000580)=""/102386, &(0x7f0000000000)=0x70e) [ 469.716806][ T26] audit: type=1804 audit(1634671064.674:297): pid=23114 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir428718356/syzkaller.vaoGIa/338/memory.events" dev="sda1" ino=15151 res=1 errno=0 [ 469.905571][ T26] audit: type=1800 audit(1634671064.714:298): pid=23114 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="memory.events" dev="sda1" ino=15151 res=0 errno=0 [ 469.988123][ T26] audit: type=1804 audit(1634671064.714:299): pid=23111 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir428718356/syzkaller.vaoGIa/338/memory.events" dev="sda1" ino=15151 res=1 errno=0 [ 470.068855][ T26] audit: type=1800 audit(1634671064.784:300): pid=23111 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="memory.events" dev="sda1" ino=15151 res=0 errno=0 19:17:46 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)="140000002900055b335a804a8cd0060d0624fcc0", 0x14}], 0x1}, 0x0) 19:17:46 executing program 5: unshare(0x6c060000) r0 = socket$inet_icmp(0x2, 0x2, 0x1) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x78) mmap(&(0x7f0000325000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(r1, 0x0, 0x1e, 0x2200c851, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd0d0c2ac, 0x1, 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000200)={&(0x7f0000328000/0x4000)=nil, 0x4000}, &(0x7f0000000240)=0x10) 19:17:46 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={0x0, 0x30}}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_DEL_SEC_KEY(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) 19:17:46 executing program 3: pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r3, 0x1, 0x2a, &(0x7f0000000540)=0x8000, 0x4) recvmmsg(r3, &(0x7f0000001140)=[{{0x0, 0x0, 0x0}}], 0x700, 0x2, 0x0) write$binfmt_misc(r1, &(0x7f00000000c0)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 19:17:46 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x20, 0x2, 0x1, 0x201, 0x0, 0x0, {}, [@CTA_TUPLE_REPLY={0x4, 0x19}, @CTA_MARK={0x8}]}, 0x20}}, 0x0) 19:17:46 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000440)={0x26, 'hash\x00', 0x0, 0x0, 'sha1-avx\x00'}, 0x58) r2 = accept$alg(r1, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700) pwritev(r3, &(0x7f00000004c0)=[{0x0}, {0x0}, {&(0x7f0000000200)="db", 0xfffff000}], 0x3, 0x8040000, 0x0) sendfile(r2, r0, 0x0, 0x30000) 19:17:46 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x17, 0x0, 0x7ff, 0x3, 0x0, 0x1}, 0x40) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000000)={r0, &(0x7f0000000080)}, 0x20) [ 471.329244][ T26] audit: type=1804 audit(1634671066.294:301): pid=23131 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir428718356/syzkaller.vaoGIa/339/memory.events" dev="sda1" ino=15160 res=1 errno=0 19:17:46 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x20, 0x2, 0x1, 0x201, 0x0, 0x0, {}, [@CTA_TUPLE_REPLY={0x4, 0x19}, @CTA_MARK={0x8}]}, 0x20}}, 0x0) [ 471.388251][T23132] hsr0 speed is unknown, defaulting to 1000 19:17:46 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_percpu_sys\x00', 0x26e1, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)) ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0x13) ioctl$TUNSETTXFILTER(r0, 0x189, 0x0) [ 471.491816][ T26] audit: type=1800 audit(1634671066.294:302): pid=23131 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="memory.events" dev="sda1" ino=15160 res=0 errno=0 19:17:46 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000440)={0x26, 'hash\x00', 0x0, 0x0, 'sha1-avx\x00'}, 0x58) r2 = accept$alg(r1, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700) pwritev(r3, &(0x7f00000004c0)=[{0x0}, {0x0}, {&(0x7f0000000200)="db", 0xfffff000}], 0x3, 0x8040000, 0x0) sendfile(r2, r0, 0x0, 0x30000) 19:17:46 executing program 4: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) write(r0, &(0x7f0000000100)="240000001e005f0014f9f407faac470004000008080003000000080008000100000000ff", 0x24) [ 471.632490][ T26] audit: type=1804 audit(1634671066.334:303): pid=23131 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir428718356/syzkaller.vaoGIa/339/memory.events" dev="sda1" ino=15160 res=1 errno=0 19:17:46 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x8a, &(0x7f0000000240)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x54, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa}, @window, @mss={0x2, 0x4}, @exp_fastopen={0xfe, 0x13, 0xf989, "8f5a00"/15}, @mptcp=@add_addr={0x1e, 0x3e, 0x0, 0xa, 0x0, @remote, 0x0, "185c9f10b2947d97"}]}}, {"792046a7eb7c51946f3d62e6c84680b79c9192f34147d180b69497a51a569f351cc3a555c1efc64722aa8d2c5caf8bc143ccb387bcf3130b7427388766508c2903c9641aa0298256d718f96cf95b94247f013d0c6349"}}}}}}}, 0x0) [ 471.743938][T23167] tap0: tun_chr_ioctl cmd 393 [ 471.851297][ T26] audit: type=1804 audit(1634671066.814:304): pid=23171 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir428718356/syzkaller.vaoGIa/340/memory.events" dev="sda1" ino=15154 res=1 errno=0 19:17:46 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x82, &(0x7f00000002c0)="1a3f000000000000", 0x8) sendto$inet6(r0, &(0x7f0000000000)="ce", 0x34000, 0x0, &(0x7f0000000240)={0xa, 0x0, 0x0, @loopback}, 0x1c) [ 471.993566][ T26] audit: type=1800 audit(1634671066.814:305): pid=23171 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="memory.events" dev="sda1" ino=15154 res=0 errno=0 19:17:47 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000440)={0x26, 'hash\x00', 0x0, 0x0, 'sha1-avx\x00'}, 0x58) r2 = accept$alg(r1, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700) pwritev(r3, &(0x7f00000004c0)=[{0x0}, {0x0}, {&(0x7f0000000200)="db", 0xfffff000}], 0x3, 0x8040000, 0x0) sendfile(r2, r0, 0x0, 0x30000) 19:17:47 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0x4, 0x2}}, 0x0, 0x26}, 0x20) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r0, 0x8910, &(0x7f0000000000)={'macvlan1\x00', @ifru_settings={0x0, 0x0, @sync=0x0}}) ioctl$sock_netdev_private(r0, 0x89f2, &(0x7f0000000000)) 19:17:47 executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="b4050000000000006110600000000000c6000000000000009500000000000000df53c75ab0d2f79d965c640da875e478215f23b95090b7bfcb1192cf6a6eea3b1ffdffffffffffffffb80b23fcad5e7f98f07cea23a8d04b4108a6900235a692d7b329be9ed6c6cbe7a25872f8134536b2a4532a74d5268c25f14e34860edf7f4c400253b4ca60524876efa68248962eb103afd28eb7b1564f40618fba833b8e393472fed77c0fac28343aeea8f8b28acc995ed44624e6dea87a17a384082878b94c4843a7535f71a8fcc51da32966072033fc99b6b81929a3a29f2c596af1a2936d5c3d43edad2543f2ace07371657e5f2d149e7d1ed47ffc"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="b4050000000000006110600000000000c6000000010000009500000000000000639ea0aed15ae99e490cea1926c49582bad5c6f0dd433c8111ea67b54a7d217edea6ade3f0f53ab9e8e567"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r2 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x8, 0x4}, 0x40) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r2, r1, 0x4}, 0x10) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r2, r0, 0x4}, 0x10) 19:17:47 executing program 3: pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r3, 0x1, 0x2a, &(0x7f0000000540)=0x8000, 0x4) recvmmsg(r3, &(0x7f0000001140)=[{{0x0, 0x0, 0x0}}], 0x700, 0x2, 0x0) write$binfmt_misc(r1, &(0x7f00000000c0)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) [ 472.123593][ T26] audit: type=1804 audit(1634671066.814:306): pid=23171 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir428718356/syzkaller.vaoGIa/340/memory.events" dev="sda1" ino=15154 res=1 errno=0 19:17:47 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x82, &(0x7f00000002c0)="1a3f000000000000", 0x8) sendto$inet6(r0, &(0x7f0000000000)="ce", 0x34000, 0x0, &(0x7f0000000240)={0xa, 0x0, 0x0, @loopback}, 0x1c) 19:17:47 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_MCAST_TO_UCAST={0x5, 0x1c, 0x1}]}}}]}, 0x44}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_MCAST_TO_UCAST={0x5, 0x1c, 0x1}]}}}]}, 0x44}}, 0x0) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000380)=0x0, &(0x7f00000003c0)=0x4) sendmsg$nl_route(r0, &(0x7f0000000440)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000400)={&(0x7f0000000580)=@RTM_NEWMDB={0x98, 0x54, 0x1, 0x70bd29, 0x25dfdbff, {}, [@MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x1, 0x3, 0x2, {@in6_addr=@dev={0xfe, 0x80, '\x00', 0x26}, 0x86dd}}}, @MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x1, 0x3, 0x3, {@in6_addr=@remote}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r2, 0x1, 0x2, 0x0, {@ip4=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x8edd}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r4, 0x1, 0x1, 0x2, {@in6_addr=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x86dd}}}]}, 0x98}, 0x1, 0x0, 0x0, 0x80}, 0x20048044) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r6, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x50, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x3}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @sit={{0x8}, {0x24, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @local}, @IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x2}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0xff}]}}}]}, 0x50}}, 0x0) 19:17:47 executing program 4: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$tipc(r0, &(0x7f00000003c0)={&(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x2, 0x4}}, 0x2a, 0x0}, 0x0) 19:17:47 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r1) sendmsg$IEEE802154_LLSEC_DEL_KEY(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r2, 0x1, 0x0, 0x0, {0x23}}, 0x14}}, 0x0) 19:17:47 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003c000505d25a80648c63940d0324fc60100000000a000a00053582c137153e37000a018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 19:17:47 executing program 4: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmmsg$sock(r0, &(0x7f0000000000), 0x400024b, 0x0) 19:17:47 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x82, &(0x7f00000002c0)="1a3f000000000000", 0x8) sendto$inet6(r0, &(0x7f0000000000)="ce", 0x34000, 0x0, &(0x7f0000000240)={0xa, 0x0, 0x0, @loopback}, 0x1c) [ 472.863205][T23213] netlink: 'syz-executor.0': attribute type 1 has an invalid length. 19:17:47 executing program 1: r0 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_ifreq(r0, 0x89f1, &(0x7f0000000040)={'bond0\x00', @ifru_settings={0x0, 0x0, @sync=0x0}}) 19:17:47 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000040)=@gcm_128={{0x304}, "947a00", "b11d00", "3faf4d7f", "a7caa9e4e891a86b"}, 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xffffffffffffff7f, 0x0, 0x0, 0xfffffffffffffe60) setsockopt$sock_timeval(r0, 0x1, 0x20, &(0x7f0000000040)={0x77359400}, 0x10) write$binfmt_misc(r0, &(0x7f0000000240)={'syz1'}, 0x4) [ 472.903622][T23213] netlink: 210364 bytes leftover after parsing attributes in process `syz-executor.0'. 19:17:48 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003c000505d25a80648c63940d0324fc60100000000a000a00053582c137153e37000a018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 19:17:48 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x82, &(0x7f00000002c0)="1a3f000000000000", 0x8) sendto$inet6(r0, &(0x7f0000000000)="ce", 0x34000, 0x0, &(0x7f0000000240)={0xa, 0x0, 0x0, @loopback}, 0x1c) 19:17:48 executing program 3: pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r3, 0x1, 0x2a, &(0x7f0000000540)=0x8000, 0x4) recvmmsg(r3, &(0x7f0000001140)=[{{0x0, 0x0, 0x0}}], 0x700, 0x2, 0x0) write$binfmt_misc(r1, &(0x7f00000000c0)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 19:17:48 executing program 4: openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000004, 0x10012, r0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x595881, 0x0) write$ppp(r1, &(0x7f0000000040)='i', 0x1) 19:17:48 executing program 1: r0 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_ifreq(r0, 0x89f1, &(0x7f0000000040)={'bond0\x00', @ifru_settings={0x0, 0x0, @sync=0x0}}) [ 473.240046][T23227] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 473.303845][T23227] netlink: 210364 bytes leftover after parsing attributes in process `syz-executor.0'. 19:17:48 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003c000505d25a80648c63940d0324fc60100000000a000a00053582c137153e37000a018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 19:17:48 executing program 1: r0 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_ifreq(r0, 0x89f1, &(0x7f0000000040)={'bond0\x00', @ifru_settings={0x0, 0x0, @sync=0x0}}) 19:17:48 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x2, 0x7, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0xe854c304f063017a, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}]}, 0x38}}, 0x0) 19:17:48 executing program 4: r0 = socket(0x1d, 0x2, 0x2) connect(r0, &(0x7f0000000000)=@pppoe={0x18, 0x0, {0x0, @random="2a5d093def8e", 'bridge_slave_0\x00'}}, 0x80) sendmmsg$sock(r0, &(0x7f0000003080)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)="050000006418c3a85d976affd01cf5229df383a431fcac28483800d0317e562e8107add4fb5f585fbb269c", 0x2b}, {&(0x7f0000000140)="e2428c9efab6d9aa32d79259ef", 0xd}], 0x2}}, {{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000440)="5a4d4b89569a430f6935a6eceeb6e88b1191afbaa9874291cfc7cf36c7de9abdc38dacbb7d90541b30fdc1f7eef4f4da614deeb7b9ebd0f0", 0xfffffdef}], 0x1}}], 0x2, 0x0) [ 473.656002][T23242] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 473.703973][T23242] netlink: 210364 bytes leftover after parsing attributes in process `syz-executor.0'. 19:17:48 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003c000505d25a80648c63940d0324fc60100000000a000a00053582c137153e37000a018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 19:17:48 executing program 1: r0 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_ifreq(r0, 0x89f1, &(0x7f0000000040)={'bond0\x00', @ifru_settings={0x0, 0x0, @sync=0x0}}) [ 474.084694][T23261] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 474.117093][T23261] netlink: 210364 bytes leftover after parsing attributes in process `syz-executor.0'. 19:17:49 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000040)=@gcm_128={{0x304}, "947a00", "b11d00", "3faf4d7f", "a7caa9e4e891a86b"}, 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xffffffffffffff7f, 0x0, 0x0, 0xfffffffffffffe60) setsockopt$sock_timeval(r0, 0x1, 0x20, &(0x7f0000000040)={0x77359400}, 0x10) write$binfmt_misc(r0, &(0x7f0000000240)={'syz1'}, 0x4) 19:17:49 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0xf000) sendfile(r1, r2, 0x0, 0xf03b0000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x13, r0, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000000), 0xffffff6a) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/18, 0x30c000, 0x800}, 0x200d20) 19:17:49 executing program 1: r0 = accept$ax25(0xffffffffffffffff, &(0x7f0000001500)={{}, [@rose, @bcast, @remote, @remote, @netrom, @bcast, @bcast, @netrom]}, &(0x7f0000001580)=0x48) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) openat$cgroup_netprio_ifpriomap(r1, &(0x7f0000000180), 0x2, 0x0) ioctl$SIOCAX25NOUID(r0, 0x89e3, &(0x7f00000015c0)=0x1) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r3, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x2, &(0x7f0000000500)=@gcm_256={{}, "b81cefe44eaac171", "2abd7e7b1b92b68c11cbcc766d84eb975916b6ddc16bfffffd00", "8219cb14", "0000ebffc9be00"}, 0x3) recvfrom$inet6(r3, &(0x7f0000000200)=""/91, 0x5b, 0x3, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000001c0)={'sit0\x00', &(0x7f0000000080)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x0, 0x0, 0x4}}) 19:17:49 executing program 0: r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000280)={0x41}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000900)={0x41, 0x4}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000040)={0x41}, 0x10) r3 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000280)={0x41, 0x0, 0x2}, 0x10) sendmsg$tipc(r3, &(0x7f0000000240)={&(0x7f0000000080), 0x10, 0x0}, 0x0) r4 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000100)={0x41, 0x0, 0x2}, 0x1be) sendmsg$tipc(r4, &(0x7f0000000240)={&(0x7f0000000080), 0x10, 0x0}, 0x0) sendmsg$tipc(r3, &(0x7f0000000240)={&(0x7f0000000080), 0x10, 0x0}, 0x0) 19:17:49 executing program 3: pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r3, 0x1, 0x2a, &(0x7f0000000540)=0x8000, 0x4) recvmmsg(r3, &(0x7f0000001140)=[{{0x0, 0x0, 0x0}}], 0x700, 0x2, 0x0) write$binfmt_misc(r1, &(0x7f00000000c0)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 19:17:49 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x2, 0x7, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0xe854c304f063017a, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}]}, 0x38}}, 0x0) 19:17:49 executing program 1: r0 = accept$ax25(0xffffffffffffffff, &(0x7f0000001500)={{}, [@rose, @bcast, @remote, @remote, @netrom, @bcast, @bcast, @netrom]}, &(0x7f0000001580)=0x48) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) openat$cgroup_netprio_ifpriomap(r1, &(0x7f0000000180), 0x2, 0x0) ioctl$SIOCAX25NOUID(r0, 0x89e3, &(0x7f00000015c0)=0x1) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r3, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x2, &(0x7f0000000500)=@gcm_256={{}, "b81cefe44eaac171", "2abd7e7b1b92b68c11cbcc766d84eb975916b6ddc16bfffffd00", "8219cb14", "0000ebffc9be00"}, 0x3) recvfrom$inet6(r3, &(0x7f0000000200)=""/91, 0x5b, 0x3, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000001c0)={'sit0\x00', &(0x7f0000000080)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x0, 0x0, 0x4}}) 19:17:49 executing program 0: r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000280)={0x41}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000900)={0x41, 0x4}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000040)={0x41}, 0x10) r3 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000280)={0x41, 0x0, 0x2}, 0x10) sendmsg$tipc(r3, &(0x7f0000000240)={&(0x7f0000000080), 0x10, 0x0}, 0x0) r4 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000100)={0x41, 0x0, 0x2}, 0x1be) sendmsg$tipc(r4, &(0x7f0000000240)={&(0x7f0000000080), 0x10, 0x0}, 0x0) sendmsg$tipc(r3, &(0x7f0000000240)={&(0x7f0000000080), 0x10, 0x0}, 0x0) 19:17:50 executing program 1: r0 = accept$ax25(0xffffffffffffffff, &(0x7f0000001500)={{}, [@rose, @bcast, @remote, @remote, @netrom, @bcast, @bcast, @netrom]}, &(0x7f0000001580)=0x48) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) openat$cgroup_netprio_ifpriomap(r1, &(0x7f0000000180), 0x2, 0x0) ioctl$SIOCAX25NOUID(r0, 0x89e3, &(0x7f00000015c0)=0x1) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r3, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x2, &(0x7f0000000500)=@gcm_256={{}, "b81cefe44eaac171", "2abd7e7b1b92b68c11cbcc766d84eb975916b6ddc16bfffffd00", "8219cb14", "0000ebffc9be00"}, 0x3) recvfrom$inet6(r3, &(0x7f0000000200)=""/91, 0x5b, 0x3, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000001c0)={'sit0\x00', &(0x7f0000000080)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x0, 0x0, 0x4}}) 19:17:50 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x2, 0x7, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0xe854c304f063017a, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}]}, 0x38}}, 0x0) 19:17:50 executing program 0: r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000280)={0x41}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000900)={0x41, 0x4}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000040)={0x41}, 0x10) r3 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000280)={0x41, 0x0, 0x2}, 0x10) sendmsg$tipc(r3, &(0x7f0000000240)={&(0x7f0000000080), 0x10, 0x0}, 0x0) r4 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000100)={0x41, 0x0, 0x2}, 0x1be) sendmsg$tipc(r4, &(0x7f0000000240)={&(0x7f0000000080), 0x10, 0x0}, 0x0) sendmsg$tipc(r3, &(0x7f0000000240)={&(0x7f0000000080), 0x10, 0x0}, 0x0) 19:17:50 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000009c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x300, 0x158, 0xc8, 0x3c6, 0x158, 0x5803, 0x230, 0x2e8, 0x2e8, 0x230, 0x2e8, 0x3, 0x0, {[{{@ipv6={@remote, @rand_addr=' \x01\x00', [], [], 'bridge0\x00', 'geneve1\x00'}, 0x0, 0x118, 0x158, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@helper={{0x48}, {0x0, 'syz0\x00'}}, @common=@inet=@socket1={{0x28}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x0, 0x6}}}, {{@uncond, 0x0, 0xa8, 0xd8}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0x0, 0xc3}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x360) [ 475.792360][T23322] Cannot find add_set index 0 as target 19:17:50 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000040)=@gcm_128={{0x304}, "947a00", "b11d00", "3faf4d7f", "a7caa9e4e891a86b"}, 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xffffffffffffff7f, 0x0, 0x0, 0xfffffffffffffe60) setsockopt$sock_timeval(r0, 0x1, 0x20, &(0x7f0000000040)={0x77359400}, 0x10) write$binfmt_misc(r0, &(0x7f0000000240)={'syz1'}, 0x4) 19:17:50 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0xf000) sendfile(r1, r2, 0x0, 0xf03b0000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x13, r0, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000000), 0xffffff6a) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/18, 0x30c000, 0x800}, 0x200d20) 19:17:50 executing program 1: r0 = accept$ax25(0xffffffffffffffff, &(0x7f0000001500)={{}, [@rose, @bcast, @remote, @remote, @netrom, @bcast, @bcast, @netrom]}, &(0x7f0000001580)=0x48) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) openat$cgroup_netprio_ifpriomap(r1, &(0x7f0000000180), 0x2, 0x0) ioctl$SIOCAX25NOUID(r0, 0x89e3, &(0x7f00000015c0)=0x1) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r3, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x2, &(0x7f0000000500)=@gcm_256={{}, "b81cefe44eaac171", "2abd7e7b1b92b68c11cbcc766d84eb975916b6ddc16bfffffd00", "8219cb14", "0000ebffc9be00"}, 0x3) recvfrom$inet6(r3, &(0x7f0000000200)=""/91, 0x5b, 0x3, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000001c0)={'sit0\x00', &(0x7f0000000080)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x0, 0x0, 0x4}}) 19:17:50 executing program 0: r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000280)={0x41}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000900)={0x41, 0x4}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000040)={0x41}, 0x10) r3 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000280)={0x41, 0x0, 0x2}, 0x10) sendmsg$tipc(r3, &(0x7f0000000240)={&(0x7f0000000080), 0x10, 0x0}, 0x0) r4 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000100)={0x41, 0x0, 0x2}, 0x1be) sendmsg$tipc(r4, &(0x7f0000000240)={&(0x7f0000000080), 0x10, 0x0}, 0x0) sendmsg$tipc(r3, &(0x7f0000000240)={&(0x7f0000000080), 0x10, 0x0}, 0x0) 19:17:50 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f0000001080)="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", 0x1d1, 0x0, 0x0, 0x0) sendmsg(r0, &(0x7f0000000a40)={0x0, 0xffffff21, &(0x7f0000000380)=[{&(0x7f00000003c0)="339a", 0x2d2c}], 0x1, 0x0, 0x0, 0xffffff8d}, 0x4) 19:17:51 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x2, 0x7, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0xe854c304f063017a, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}]}, 0x38}}, 0x0) 19:17:51 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0xf000) sendfile(r1, r2, 0x0, 0xf03b0000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x13, r0, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000000), 0xffffff6a) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/18, 0x30c000, 0x800}, 0x200d20) 19:17:51 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) getsockname(r0, 0x0, &(0x7f00000002c0)) 19:17:51 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f0000001080)="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", 0x1d1, 0x0, 0x0, 0x0) sendmsg(r0, &(0x7f0000000a40)={0x0, 0xffffff21, &(0x7f0000000380)=[{&(0x7f00000003c0)="339a", 0x2d2c}], 0x1, 0x0, 0x0, 0xffffff8d}, 0x4) 19:17:51 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@struct={0x0, 0x0, 0x0, 0x3, 0x1, 0x0, [{}]}]}}, &(0x7f0000000100)=""/246, 0x32, 0xf6, 0x1}, 0x20) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @loopback}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) [ 476.931484][T23360] netlink: 'syz-executor.1': attribute type 4 has an invalid length. 19:17:51 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newtaction={0x6c, 0x30, 0x119, 0x0, 0x0, {}, [{0x58, 0x1, [@m_gact={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18}, @TCA_GACT_PROB={0xc, 0x3, {0x2}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) 19:17:52 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f0000001080)="ab6d2375853fb2fa72e0bbfaeaafbec8eb33297f250edf99b48c70072c41eebef5dbc119050ae66f46bdd78aa77ec0592f3622eba69ae82624c2bb34761ce1e9073aa07cdceaab91bcf08f48fb97005f0e6ee9777883597522de1d1327ba07ef0f766497065122316664d10b711ff989c9b16f321434e7c046010eb9b08f428f17cbfd1bae08f279bc840c2a20c2c5be45eaa3b05352cf4ada6c8ca621c36f5c4ef859578e44ff0cfcd824b0363ad35a853a07351e1fc47b403d23e71197187f415f7f3fec3b947fd8444f796c5750f3d7c55330af1e9390e6b39375e6f9e26c3d5cc30ef15670fde6284e6288f3f7db24033cfb9fc1bb7874058991ad173f01e9e1e446c5e93d479a8638d703b2153a197595c2e269993d43ab751a358401a334340828b3c1ebbc06508d3194ed1ae5e3297191cf194d64263795b9e536bc6a8189506d4f3e12b8410d299c2b9763d452425e0cf00732b86858d50f7b51918503dc1bea3a8e2a37e1a1803aa6360823cc3d693102ad4d3bd02799c3b62eae1eda66b5275ba0de61c20f4e603d372979986c59a35ea575a6f3fa67062f3cddfa2dc00c9d16a3488e7089334529f5db8eef2843dd09e078d1e29dd01661b6479401ed447a45e482a43d13fe66b60f6ee296", 0x1d1, 0x0, 0x0, 0x0) sendmsg(r0, &(0x7f0000000a40)={0x0, 0xffffff21, &(0x7f0000000380)=[{&(0x7f00000003c0)="339a", 0x2d2c}], 0x1, 0x0, 0x0, 0xffffff8d}, 0x4) 19:17:52 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000040)=@gcm_128={{0x304}, "947a00", "b11d00", "3faf4d7f", "a7caa9e4e891a86b"}, 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xffffffffffffff7f, 0x0, 0x0, 0xfffffffffffffe60) setsockopt$sock_timeval(r0, 0x1, 0x20, &(0x7f0000000040)={0x77359400}, 0x10) write$binfmt_misc(r0, &(0x7f0000000240)={'syz1'}, 0x4) [ 477.338526][T23366] netlink: 'syz-executor.1': attribute type 4 has an invalid length. 19:17:52 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0xf000) sendfile(r1, r2, 0x0, 0xf03b0000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x13, r0, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000000), 0xffffff6a) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/18, 0x30c000, 0x800}, 0x200d20) 19:17:52 executing program 2: syz_emit_ethernet(0x7a, &(0x7f0000000280)={@local, @remote, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "ba8425", 0x44, 0x2f, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @private2}}}}, 0x0) 19:17:52 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@struct={0x0, 0x0, 0x0, 0x3, 0x1, 0x0, [{}]}]}}, &(0x7f0000000100)=""/246, 0x32, 0xf6, 0x1}, 0x20) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @loopback}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) 19:17:52 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f0000001080)="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", 0x1d1, 0x0, 0x0, 0x0) sendmsg(r0, &(0x7f0000000a40)={0x0, 0xffffff21, &(0x7f0000000380)=[{&(0x7f00000003c0)="339a", 0x2d2c}], 0x1, 0x0, 0x0, 0xffffff8d}, 0x4) [ 477.842885][T23375] netlink: 'syz-executor.1': attribute type 4 has an invalid length. 19:17:52 executing program 2: setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, &(0x7f0000000180)=ANY=[@ANYBLOB="000000000000000002000000ffffffff00000000000000000000000000000000000000a76afcc7e71051760000000000000000000000000000000000000000000000000000000000000000000000000000000000f1ff0000010000800000000000000000000000000000000000000000000000000000000bea00000000f1fffffffffff7ff0000000000000002000000020000007f000001000400000000000000000000000200000000000000000000000000000000000020870000000000001d000000010000000000000000cc15000000000000000000000000000000000000000000000000000000000000000700000000000017000000100600000000000000000000000000000000000000000002"], 0x190) r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000280)={'wg2\x00', {0x2, 0x0, @broadcast}}) 19:17:52 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0xf000) sendfile(r1, r2, 0x0, 0xf03b0000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x13, r0, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000000), 0xffffff6a) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/18, 0x30c000, 0x800}, 0x200d20) 19:17:53 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@struct={0x0, 0x0, 0x0, 0x3, 0x1, 0x0, [{}]}]}}, &(0x7f0000000100)=""/246, 0x32, 0xf6, 0x1}, 0x20) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @loopback}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) 19:17:53 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000b40), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x34, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_CQM={0x18, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0xc, 0x1, [0x0, 0x0]}, @NL80211_ATTR_CQM_RSSI_HYST={0x8}]}]}, 0x34}}, 0x0) [ 478.257641][T23384] netlink: 'syz-executor.1': attribute type 4 has an invalid length. 19:17:53 executing program 2: setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, &(0x7f0000000180)=ANY=[@ANYBLOB="000000000000000002000000ffffffff00000000000000000000000000000000000000a76afcc7e71051760000000000000000000000000000000000000000000000000000000000000000000000000000000000f1ff0000010000800000000000000000000000000000000000000000000000000000000bea00000000f1fffffffffff7ff0000000000000002000000020000007f000001000400000000000000000000000200000000000000000000000000000000000020870000000000001d000000010000000000000000cc15000000000000000000000000000000000000000000000000000000000000000700000000000017000000100600000000000000000000000000000000000000000002"], 0x190) r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000280)={'wg2\x00', {0x2, 0x0, @broadcast}}) 19:17:53 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@struct={0x0, 0x0, 0x0, 0x3, 0x1, 0x0, [{}]}]}}, &(0x7f0000000100)=""/246, 0x32, 0xf6, 0x1}, 0x20) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @loopback}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) 19:17:53 executing program 3: r0 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f00000003c0)="1c000000120005070c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0) recvmsg(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) recvfrom$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000780)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) recvfrom$l2tp6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) recvmsg(r0, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) recvmmsg(r0, &(0x7f0000002240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) recvmmsg(r0, &(0x7f0000001a40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) recvmsg(r0, &(0x7f0000002980)={0x0, 0x0, 0x0}, 0x0) recvfrom$inet6(r0, &(0x7f0000000000)=""/114, 0xfffffffffffffd1b, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="2015000020001f", 0xffffffffffffffbf, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="78ad000010", 0x5, 0x0, 0x0, 0x0) r1 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f0000000000)='.', 0x10a25, 0x800, 0x0, 0x4b6ae4f95a5de35b) 19:17:53 executing program 5: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000001540)=[{{0x0, 0x0, 0x0}}], 0x4000005, 0xad0) [ 478.667465][T23395] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 478.788237][T23399] netlink: 41610 bytes leftover after parsing attributes in process `syz-executor.3'. [ 478.885162][T23403] netlink: 41610 bytes leftover after parsing attributes in process `syz-executor.3'. 19:17:54 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0xf000) sendfile(r1, r2, 0x0, 0xf03b0000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x13, r0, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000000), 0xffffff6a) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/18, 0x30c000, 0x800}, 0x200d20) 19:17:54 executing program 2: setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, &(0x7f0000000180)=ANY=[@ANYBLOB="000000000000000002000000ffffffff00000000000000000000000000000000000000a76afcc7e71051760000000000000000000000000000000000000000000000000000000000000000000000000000000000f1ff0000010000800000000000000000000000000000000000000000000000000000000bea00000000f1fffffffffff7ff0000000000000002000000020000007f000001000400000000000000000000000200000000000000000000000000000000000020870000000000001d000000010000000000000000cc15000000000000000000000000000000000000000000000000000000000000000700000000000017000000100600000000000000000000000000000000000000000002"], 0x190) r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000280)={'wg2\x00', {0x2, 0x0, @broadcast}}) 19:17:54 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x5}], {0x14, 0x10}}, 0x98}}, 0x0) 19:17:54 executing program 5: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000001540)=[{{0x0, 0x0, 0x0}}], 0x4000005, 0xad0) 19:17:54 executing program 3: r0 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f00000003c0)="1c000000120005070c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0) recvmsg(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) recvfrom$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000780)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) recvfrom$l2tp6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) recvmsg(r0, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) recvmmsg(r0, &(0x7f0000002240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) recvmmsg(r0, &(0x7f0000001a40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) recvmsg(r0, &(0x7f0000002980)={0x0, 0x0, 0x0}, 0x0) recvfrom$inet6(r0, &(0x7f0000000000)=""/114, 0xfffffffffffffd1b, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="2015000020001f", 0xffffffffffffffbf, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="78ad000010", 0x5, 0x0, 0x0, 0x0) r1 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f0000000000)='.', 0x10a25, 0x800, 0x0, 0x4b6ae4f95a5de35b) [ 479.450499][T23412] netlink: 41610 bytes leftover after parsing attributes in process `syz-executor.3'. 19:17:54 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0xf000) sendfile(r1, r2, 0x0, 0xf03b0000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x13, r0, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000000), 0xffffff6a) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/18, 0x30c000, 0x800}, 0x200d20) 19:17:54 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000140)='B\x00\x00\x00\x00\x00', 0x6) 19:17:54 executing program 2: setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, &(0x7f0000000180)=ANY=[@ANYBLOB="000000000000000002000000ffffffff00000000000000000000000000000000000000a76afcc7e71051760000000000000000000000000000000000000000000000000000000000000000000000000000000000f1ff0000010000800000000000000000000000000000000000000000000000000000000bea00000000f1fffffffffff7ff0000000000000002000000020000007f000001000400000000000000000000000200000000000000000000000000000000000020870000000000001d000000010000000000000000cc15000000000000000000000000000000000000000000000000000000000000000700000000000017000000100600000000000000000000000000000000000000000002"], 0x190) r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000280)={'wg2\x00', {0x2, 0x0, @broadcast}}) 19:17:54 executing program 3: r0 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f00000003c0)="1c000000120005070c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0) recvmsg(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) recvfrom$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000780)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) recvfrom$l2tp6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) recvmsg(r0, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) recvmmsg(r0, &(0x7f0000002240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) recvmmsg(r0, &(0x7f0000001a40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) recvmsg(r0, &(0x7f0000002980)={0x0, 0x0, 0x0}, 0x0) recvfrom$inet6(r0, &(0x7f0000000000)=""/114, 0xfffffffffffffd1b, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="2015000020001f", 0xffffffffffffffbf, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="78ad000010", 0x5, 0x0, 0x0, 0x0) r1 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f0000000000)='.', 0x10a25, 0x800, 0x0, 0x4b6ae4f95a5de35b) 19:17:54 executing program 5: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000001540)=[{{0x0, 0x0, 0x0}}], 0x4000005, 0xad0) [ 479.981408][T23426] netlink: 41610 bytes leftover after parsing attributes in process `syz-executor.3'. 19:17:55 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000005c0)=0x169, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000380)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x9, 0x6, 0x0, "0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030cf00"}, 0xd8) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x5, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) write$binfmt_elf64(r0, &(0x7f0000000600)=ANY=[], 0xfc30) 19:17:55 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x4102, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newtaction={0x14}, 0x14}}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000000), 0x4) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) recvmmsg(r0, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) 19:17:55 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x17, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x6cb3210000000000, 0x0, 0x0, 0x0, 0x6e}, [@ldst={0x3, 0x0, 0x3, 0x1c10a1}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x100b0, &(0x7f000000cf3d)=""/195}, 0x48) 19:17:55 executing program 3: r0 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f00000003c0)="1c000000120005070c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0) recvmsg(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) recvfrom$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000780)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) recvfrom$l2tp6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) recvmsg(r0, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) recvmmsg(r0, &(0x7f0000002240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) recvmmsg(r0, &(0x7f0000001a40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) recvmsg(r0, &(0x7f0000002980)={0x0, 0x0, 0x0}, 0x0) recvfrom$inet6(r0, &(0x7f0000000000)=""/114, 0xfffffffffffffd1b, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="2015000020001f", 0xffffffffffffffbf, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="78ad000010", 0x5, 0x0, 0x0, 0x0) r1 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f0000000000)='.', 0x10a25, 0x800, 0x0, 0x4b6ae4f95a5de35b) 19:17:55 executing program 5: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000001540)=[{{0x0, 0x0, 0x0}}], 0x4000005, 0xad0) 19:17:55 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x7) getsockopt$inet6_mtu(r0, 0x29, 0x10, 0x0, &(0x7f0000000040)) [ 481.034237][T23446] netlink: 41610 bytes leftover after parsing attributes in process `syz-executor.3'. 19:17:56 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) unshare(0x64020000) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@loopback, @in, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x1, 0x0, 0xffffffffffffffff}, {0x2000000000000}}, {{@in=@local, 0x0, 0x2b}, 0x0, @in6=@empty}}, 0xe8) sendmsg$nl_generic(r0, &(0x7f00000001c0)={0x0, 0x4, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="34000000290029082dbd7000000000000400000008000ce16e3b2e8f5638eb"], 0x34}, 0x1, 0xffffff7f0e000000}, 0x0) [ 481.443996][T23451] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 481.478319][T23450] hsr0 speed is unknown, defaulting to 1000 [ 481.741165][T23451] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 19:17:56 executing program 5: openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) pwritev(r2, &(0x7f0000000140)=[{&(0x7f00000016c0)="d8", 0x1}], 0x1, 0x0, 0x0) r3 = socket$kcm(0x29, 0x5, 0x0) sendfile(r3, r2, 0x0, 0x2) write$binfmt_script(r2, &(0x7f00000000c0)={'#! ', './file0'}, 0xb) 19:17:56 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000140)=ANY=[], 0x8) connect$inet6(r0, &(0x7f0000000240)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) sendmmsg$inet6(r0, &(0x7f0000000040)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="8224", 0x2}], 0x1}}], 0x1, 0x4000c804) write(r0, &(0x7f0000000140)="7c49bfb592236d46097e38e9ffff360000000000804047057eb6", 0x1a) 19:17:56 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x4102, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newtaction={0x14}, 0x14}}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000000), 0x4) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) recvmmsg(r0, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) 19:17:56 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet6(0xa, 0x3, 0x6) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000100)={{{@in, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@mcast1, 0x0, 0x32}, 0x0, @in6=@private0}}, 0xe8) sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0x0) 19:17:56 executing program 1: r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000380)={0x28, 0x0, 0x0, @host}, 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(0xffffffffffffffff, 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r2) connect$vsock_stream(r1, &(0x7f0000000040), 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r1, 0x28, 0x1, &(0x7f0000000080)=0xffffffffffffffe1, 0x8) accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000100), 0x10, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r3, &(0x7f0000002400)={0x0, 0x0, 0x0}, 0x0) r4 = accept$alg(r0, 0x0, 0x0) write(r4, &(0x7f0000000000)="c0", 0xfffffe99) 19:17:57 executing program 0: unshare(0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@delchain={0x24, 0x64, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff3, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001b00)=@delchain={0x2c, 0x66, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff3, 0xffff}}, [@TCA_CHAIN={0x8, 0xb, 0x9}]}, 0x2c}}, 0x0) 19:17:57 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000140)=ANY=[], 0x8) connect$inet6(r0, &(0x7f0000000240)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) sendmmsg$inet6(r0, &(0x7f0000000040)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="8224", 0x2}], 0x1}}], 0x1, 0x4000c804) write(r0, &(0x7f0000000140)="7c49bfb592236d46097e38e9ffff360000000000804047057eb6", 0x1a) 19:17:57 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=@framed={{0xffffffb7, 0x0, 0x0, 0x0, 0xe4ffffff, 0x6f}, [@ldst={0x7, 0x5, 0x0, 0xa01}]}, &(0x7f0000003ff6)='GPL\x00', 0x1, 0xff06, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffe29}, 0x48) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000200), 0xf000) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=@updpolicy={0xc0, 0x19, 0x1, 0x0, 0x0, {{@in=@remote, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@XFRMA_IF_ID={0x8}]}, 0xc0}}, 0x0) 19:17:57 executing program 4: r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) bind$inet(r0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=[{0x58, 0x114, 0x6, "b97cc8667679db8b9ffbccf35fe42c3bd83104546e45c0c428e1fb472f5612dd0df58ba690f308956f68c21e67b3316e25735c4887f6364c5346ae8bac3f1331c5"}], 0x58}, 0x0) 19:17:57 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x4102, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newtaction={0x14}, 0x14}}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000000), 0x4) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) recvmmsg(r0, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) 19:17:57 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000140)=ANY=[], 0x8) connect$inet6(r0, &(0x7f0000000240)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) sendmmsg$inet6(r0, &(0x7f0000000040)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="8224", 0x2}], 0x1}}], 0x1, 0x4000c804) write(r0, &(0x7f0000000140)="7c49bfb592236d46097e38e9ffff360000000000804047057eb6", 0x1a) 19:17:57 executing program 4: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f00000001c0)=0x100000000000000, 0x12) sendfile(r1, r0, &(0x7f0000000080)=0x3, 0x7f) 19:17:57 executing program 1: r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000380)={0x28, 0x0, 0x0, @host}, 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(0xffffffffffffffff, 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r2) connect$vsock_stream(r1, &(0x7f0000000040), 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r1, 0x28, 0x1, &(0x7f0000000080)=0xffffffffffffffe1, 0x8) accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000100), 0x10, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r3, &(0x7f0000002400)={0x0, 0x0, 0x0}, 0x0) r4 = accept$alg(r0, 0x0, 0x0) write(r4, &(0x7f0000000000)="c0", 0xfffffe99) 19:17:57 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000007c0)={0x34, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0xe9}]}, 0x34}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) unshare(0x6c060000) sendmsg$ETHTOOL_MSG_PAUSE_GET(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)={0x1bc, r1, 0x4, 0x70bd27, 0x25dfdbfb, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0xa0, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}]}]}, 0x1bc}, 0x1, 0x0, 0x0, 0x4000004}, 0x40) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) unshare(0x62000200) unshare(0x10000) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(r5, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback, 0x4}, 0x1c) r6 = socket$inet6(0xa, 0x80003, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000940)=ANY=[@ANYBLOB="72617700000000000000af1c6e80000000000000000000000000000000000000c1030000030000002004000000000000800200000000000000000000800000005003000050030000500300005003000050030000030000000000000000000000fe8000000000000000000000000000bbff020000000000000000000000000001000000000000000000623a64130000000000000000000000000000000000000076657468315f746f5f626f6e640000006e657470636930000000000000000000000000000000000000000000000000000000000000e824a52e1d000000000000000000000000000000000000500280020000000001000000000000000000000000000000000000005001686173686c696d697400000000000000000000000000000000000100000274e25745b4736c6176655f310008000000e7000000000000000000000000000000000000000000000000000000000000000000000000004a084be53574641d00000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f60000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000400000000000000b61a000800000000000000000000000000005800686173686c696d697400000000000000000000000000000000000000000173797a6b616d6c657231000000000000000000000000000004000000000000000000000005000000a600000100000000005f0200000000003000434f4e4e4d41524b000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000f6ff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000a800d0000000000000000000000000000000000000000000000000002800434c41535349010000000000000000000000000000000000000009000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000bdfaa522924474380000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d0000000000000000000000000000000000000000000000000002800000000000000000000000000000000000700000000000000000000000000feffffff"], 0x1) ioctl$int_in(r4, 0x5421, &(0x7f0000000180)=0xfff) write$binfmt_misc(r3, &(0x7f0000000040)=ANY=[], 0xfffffecc) splice(r2, 0x0, r4, 0x0, 0x200002b2, 0x0) 19:17:57 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000140)=ANY=[], 0x8) connect$inet6(r0, &(0x7f0000000240)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) sendmmsg$inet6(r0, &(0x7f0000000040)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="8224", 0x2}], 0x1}}], 0x1, 0x4000c804) write(r0, &(0x7f0000000140)="7c49bfb592236d46097e38e9ffff360000000000804047057eb6", 0x1a) 19:17:57 executing program 4: r0 = socket$inet_sctp(0x2, 0x400000000001, 0x84) sendto$inet(r0, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) listen(r0, 0xda8c) r1 = epoll_create(0x1) r2 = epoll_create(0x9) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000100)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r3, 0x8912, 0x400308) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)) accept(r0, 0x0, 0x0) [ 482.673268][T23532] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 19:17:57 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x4102, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newtaction={0x14}, 0x14}}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000000), 0x4) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) recvmmsg(r0, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) [ 482.843471][T23531] hsr0 speed is unknown, defaulting to 1000 [ 482.854796][T23532] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 482.933824][T23534] hsr0 speed is unknown, defaulting to 1000 19:17:58 executing program 0: syz_genetlink_get_family_id$devlink(&(0x7f0000000200), 0xffffffffffffffff) unshare(0x40020000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x5411, 0x0) 19:17:58 executing program 1: r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000380)={0x28, 0x0, 0x0, @host}, 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(0xffffffffffffffff, 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r2) connect$vsock_stream(r1, &(0x7f0000000040), 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r1, 0x28, 0x1, &(0x7f0000000080)=0xffffffffffffffe1, 0x8) accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000100), 0x10, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r3, &(0x7f0000002400)={0x0, 0x0, 0x0}, 0x0) r4 = accept$alg(r0, 0x0, 0x0) write(r4, &(0x7f0000000000)="c0", 0xfffffe99) 19:17:58 executing program 3: close(0xffffffffffffffff) unshare(0x40000200) poll(0x0, 0x0, 0x0) 19:17:58 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x23, 0x0, 0x0) [ 483.217460][T23596] hsr0 speed is unknown, defaulting to 1000 19:17:58 executing program 1: r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000380)={0x28, 0x0, 0x0, @host}, 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(0xffffffffffffffff, 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r2) connect$vsock_stream(r1, &(0x7f0000000040), 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r1, 0x28, 0x1, &(0x7f0000000080)=0xffffffffffffffe1, 0x8) accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000100), 0x10, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r3, &(0x7f0000002400)={0x0, 0x0, 0x0}, 0x0) r4 = accept$alg(r0, 0x0, 0x0) write(r4, &(0x7f0000000000)="c0", 0xfffffe99) 19:17:58 executing program 2: pselect6(0x0, 0xfffffffffffffffd, 0x0, 0x0, &(0x7f00000000c0), 0x0) [ 483.360325][T23608] hsr0 speed is unknown, defaulting to 1000 19:17:58 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000002c0)=ANY=[], 0x2343a726) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x0, 0x3938700}, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r1, 0x6611) 19:17:58 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000007c0)={0x34, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0xe9}]}, 0x34}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) unshare(0x6c060000) sendmsg$ETHTOOL_MSG_PAUSE_GET(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)={0x1bc, r1, 0x4, 0x70bd27, 0x25dfdbfb, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0xa0, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}]}]}, 0x1bc}, 0x1, 0x0, 0x0, 0x4000004}, 0x40) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) unshare(0x62000200) unshare(0x10000) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(r5, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback, 0x4}, 0x1c) r6 = socket$inet6(0xa, 0x80003, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], 0x1) ioctl$int_in(r4, 0x5421, &(0x7f0000000180)=0xfff) write$binfmt_misc(r3, &(0x7f0000000040)=ANY=[], 0xfffffecc) splice(r2, 0x0, r4, 0x0, 0x200002b2, 0x0) [ 483.639778][T23608] hsr0 speed is unknown, defaulting to 1000 19:17:58 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000007c0)={0x34, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0xe9}]}, 0x34}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) unshare(0x6c060000) sendmsg$ETHTOOL_MSG_PAUSE_GET(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)={0x1bc, r1, 0x4, 0x70bd27, 0x25dfdbfb, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0xa0, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}]}]}, 0x1bc}, 0x1, 0x0, 0x0, 0x4000004}, 0x40) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) unshare(0x62000200) unshare(0x10000) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(r5, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback, 0x4}, 0x1c) r6 = socket$inet6(0xa, 0x80003, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], 0x1) ioctl$int_in(r4, 0x5421, &(0x7f0000000180)=0xfff) write$binfmt_misc(r3, &(0x7f0000000040)=ANY=[], 0xfffffecc) splice(r2, 0x0, r4, 0x0, 0x200002b2, 0x0) 19:17:58 executing program 4: r0 = socket$inet_sctp(0x2, 0x400000000001, 0x84) sendto$inet(r0, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) listen(r0, 0xda8c) r1 = epoll_create(0x1) r2 = epoll_create(0x9) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000100)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r3, 0x8912, 0x400308) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)) accept(r0, 0x0, 0x0) 19:17:58 executing program 1: r0 = socket$inet_sctp(0x2, 0x400000000001, 0x84) sendto$inet(r0, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) listen(r0, 0xda8c) r1 = epoll_create(0x1) r2 = epoll_create(0x9) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000100)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r3, 0x8912, 0x400308) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)) accept(r0, 0x0, 0x0) [ 483.895555][T23669] hsr0 speed is unknown, defaulting to 1000 [ 483.934671][T23683] hsr0 speed is unknown, defaulting to 1000 19:17:59 executing program 3: r0 = socket$inet_sctp(0x2, 0x400000000001, 0x84) sendto$inet(r0, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) listen(r0, 0xda8c) r1 = epoll_create(0x1) r2 = epoll_create(0x9) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000100)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r3, 0x8912, 0x400308) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)) accept(r0, 0x0, 0x0) [ 484.038464][T23686] hsr0 speed is unknown, defaulting to 1000 19:17:59 executing program 0: syz_genetlink_get_family_id$devlink(&(0x7f0000000200), 0xffffffffffffffff) unshare(0x40020000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x5411, 0x0) [ 484.180746][T23699] hsr0 speed is unknown, defaulting to 1000 [ 484.410833][T23761] hsr0 speed is unknown, defaulting to 1000 19:17:59 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000007c0)={0x34, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0xe9}]}, 0x34}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) unshare(0x6c060000) sendmsg$ETHTOOL_MSG_PAUSE_GET(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)={0x1bc, r1, 0x4, 0x70bd27, 0x25dfdbfb, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0xa0, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}]}]}, 0x1bc}, 0x1, 0x0, 0x0, 0x4000004}, 0x40) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) unshare(0x62000200) unshare(0x10000) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(r5, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback, 0x4}, 0x1c) r6 = socket$inet6(0xa, 0x80003, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], 0x1) ioctl$int_in(r4, 0x5421, &(0x7f0000000180)=0xfff) write$binfmt_misc(r3, &(0x7f0000000040)=ANY=[], 0xfffffecc) splice(r2, 0x0, r4, 0x0, 0x200002b2, 0x0) 19:17:59 executing program 0: syz_genetlink_get_family_id$devlink(&(0x7f0000000200), 0xffffffffffffffff) unshare(0x40020000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x5411, 0x0) 19:17:59 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000007c0)={0x34, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0xe9}]}, 0x34}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) unshare(0x6c060000) sendmsg$ETHTOOL_MSG_PAUSE_GET(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)={0x1bc, r1, 0x4, 0x70bd27, 0x25dfdbfb, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0xa0, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}]}]}, 0x1bc}, 0x1, 0x0, 0x0, 0x4000004}, 0x40) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) unshare(0x62000200) unshare(0x10000) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(r5, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback, 0x4}, 0x1c) r6 = socket$inet6(0xa, 0x80003, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], 0x1) ioctl$int_in(r4, 0x5421, &(0x7f0000000180)=0xfff) write$binfmt_misc(r3, &(0x7f0000000040)=ANY=[], 0xfffffecc) splice(r2, 0x0, r4, 0x0, 0x200002b2, 0x0) [ 484.802877][T23809] hsr0 speed is unknown, defaulting to 1000 [ 484.929567][T23810] hsr0 speed is unknown, defaulting to 1000 19:17:59 executing program 4: r0 = socket$inet_sctp(0x2, 0x400000000001, 0x84) sendto$inet(r0, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) listen(r0, 0xda8c) r1 = epoll_create(0x1) r2 = epoll_create(0x9) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000100)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r3, 0x8912, 0x400308) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)) accept(r0, 0x0, 0x0) [ 485.028046][T23823] hsr0 speed is unknown, defaulting to 1000 19:18:00 executing program 1: r0 = socket$inet_sctp(0x2, 0x400000000001, 0x84) sendto$inet(r0, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) listen(r0, 0xda8c) r1 = epoll_create(0x1) r2 = epoll_create(0x9) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000100)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r3, 0x8912, 0x400308) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)) accept(r0, 0x0, 0x0) [ 485.162998][T23828] hsr0 speed is unknown, defaulting to 1000 [ 485.248743][T23847] hsr0 speed is unknown, defaulting to 1000 19:18:00 executing program 3: r0 = socket$inet_sctp(0x2, 0x400000000001, 0x84) sendto$inet(r0, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) listen(r0, 0xda8c) r1 = epoll_create(0x1) r2 = epoll_create(0x9) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000100)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r3, 0x8912, 0x400308) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)) accept(r0, 0x0, 0x0) 19:18:00 executing program 0: syz_genetlink_get_family_id$devlink(&(0x7f0000000200), 0xffffffffffffffff) unshare(0x40020000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x5411, 0x0) 19:18:00 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000007c0)={0x34, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0xe9}]}, 0x34}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) unshare(0x6c060000) sendmsg$ETHTOOL_MSG_PAUSE_GET(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)={0x1bc, r1, 0x4, 0x70bd27, 0x25dfdbfb, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0xa0, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}]}]}, 0x1bc}, 0x1, 0x0, 0x0, 0x4000004}, 0x40) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) unshare(0x62000200) unshare(0x10000) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(r5, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback, 0x4}, 0x1c) r6 = socket$inet6(0xa, 0x80003, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], 0x1) ioctl$int_in(r4, 0x5421, &(0x7f0000000180)=0xfff) write$binfmt_misc(r3, &(0x7f0000000040)=ANY=[], 0xfffffecc) splice(r2, 0x0, r4, 0x0, 0x200002b2, 0x0) [ 485.694550][T23934] hsr0 speed is unknown, defaulting to 1000 19:18:00 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000007c0)={0x34, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0xe9}]}, 0x34}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) unshare(0x6c060000) sendmsg$ETHTOOL_MSG_PAUSE_GET(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)={0x1bc, r1, 0x4, 0x70bd27, 0x25dfdbfb, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0xa0, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}]}]}, 0x1bc}, 0x1, 0x0, 0x0, 0x4000004}, 0x40) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) unshare(0x62000200) unshare(0x10000) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(r5, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback, 0x4}, 0x1c) r6 = socket$inet6(0xa, 0x80003, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], 0x1) ioctl$int_in(r4, 0x5421, &(0x7f0000000180)=0xfff) write$binfmt_misc(r3, &(0x7f0000000040)=ANY=[], 0xfffffecc) splice(r2, 0x0, r4, 0x0, 0x200002b2, 0x0) [ 485.833348][T23940] hsr0 speed is unknown, defaulting to 1000 [ 485.911785][T23946] hsr0 speed is unknown, defaulting to 1000 19:18:01 executing program 1: r0 = socket$inet_sctp(0x2, 0x400000000001, 0x84) sendto$inet(r0, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) listen(r0, 0xda8c) r1 = epoll_create(0x1) r2 = epoll_create(0x9) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000100)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r3, 0x8912, 0x400308) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)) accept(r0, 0x0, 0x0) [ 486.137667][T23982] hsr0 speed is unknown, defaulting to 1000 [ 486.173059][T24001] hsr0 speed is unknown, defaulting to 1000 19:18:01 executing program 4: r0 = socket$inet_sctp(0x2, 0x400000000001, 0x84) sendto$inet(r0, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) listen(r0, 0xda8c) r1 = epoll_create(0x1) r2 = epoll_create(0x9) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000100)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r3, 0x8912, 0x400308) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)) accept(r0, 0x0, 0x0) 19:18:01 executing program 3: r0 = socket$inet_sctp(0x2, 0x400000000001, 0x84) sendto$inet(r0, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) listen(r0, 0xda8c) r1 = epoll_create(0x1) r2 = epoll_create(0x9) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000100)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r3, 0x8912, 0x400308) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)) accept(r0, 0x0, 0x0) 19:18:01 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LIST_IFACE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, r1, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x20}}, 0x0) 19:18:01 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LIST_IFACE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, r1, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x20}}, 0x0) 19:18:01 executing program 5: r0 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f00000001c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0) recvmsg(r0, &(0x7f00000003c0)={0x0, 0x59, &(0x7f0000000940)=[{&(0x7f0000005200)=""/4096, 0x1000}, {&(0x7f0000000980)=""/4100, 0x1004}, {&(0x7f00000019c0)=""/4085, 0xff5}], 0x3}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) recvfrom$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) recvfrom$inet6(r0, &(0x7f0000000000)=""/114, 0xfffffffffffffd1b, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="9000000020001f", 0x7, 0x0, 0x0, 0x0) r1 = socket(0x11, 0x800000003, 0x0) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000140)={r3, 0x3, 0x6, @dev}, 0x10) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000180)={r3, 0x1, 0x6, @multicast}, 0x10) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="58ad000011", 0x5, 0x0, 0x0, 0x0) r4 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r4, &(0x7f0000000000)='.', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) [ 486.847915][T24067] device lo entered promiscuous mode [ 486.882352][T24065] netlink: 44266 bytes leftover after parsing attributes in process `syz-executor.5'. 19:18:01 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LIST_IFACE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, r1, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x20}}, 0x0) [ 487.120226][T24063] device lo left promiscuous mode 19:18:02 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x6) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x32}, 0x0, @in=@private, 0x0, 0x1, 0x0, 0x44}}, 0xe8) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) [ 487.149913][T24067] device lo entered promiscuous mode [ 487.157218][T24067] netlink: 7394 bytes leftover after parsing attributes in process `syz-executor.5'. [ 487.303848][T24063] device lo left promiscuous mode 19:18:02 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LIST_IFACE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, r1, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x20}}, 0x0) 19:18:02 executing program 5: r0 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f00000001c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0) recvmsg(r0, &(0x7f00000003c0)={0x0, 0x59, &(0x7f0000000940)=[{&(0x7f0000005200)=""/4096, 0x1000}, {&(0x7f0000000980)=""/4100, 0x1004}, {&(0x7f00000019c0)=""/4085, 0xff5}], 0x3}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) recvfrom$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) recvfrom$inet6(r0, &(0x7f0000000000)=""/114, 0xfffffffffffffd1b, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="9000000020001f", 0x7, 0x0, 0x0, 0x0) r1 = socket(0x11, 0x800000003, 0x0) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000140)={r3, 0x3, 0x6, @dev}, 0x10) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000180)={r3, 0x1, 0x6, @multicast}, 0x10) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="58ad000011", 0x5, 0x0, 0x0, 0x0) r4 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r4, &(0x7f0000000000)='.', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 19:18:02 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x3a) close(r0) 19:18:02 executing program 4: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x6, 0x8000031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x54}, [@ldst={0x6, 0x0, 0x2}]}, &(0x7f0000000080)='GPL\x00', 0x4, 0x3e0, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x76}, 0x48) 19:18:02 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x3c, r1, 0x1, 0x0, 0x0, {0x25}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}]}, 0x3c}}, 0x0) 19:18:02 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x3a) close(r0) [ 487.642242][T24084] device lo entered promiscuous mode [ 487.689728][T24084] netlink: 44266 bytes leftover after parsing attributes in process `syz-executor.5'. 19:18:02 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x8, 0x0}]}]}, 0x58}}, 0x0) 19:18:02 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'jitterentropy_rng\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b6", 0x1) [ 487.800545][T24084] device bridge_slave_1 left promiscuous mode [ 487.850232][T24084] bridge0: port 2(bridge_slave_1) entered disabled state 19:18:02 executing program 2: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000280)=ANY=[@ANYBLOB='-2'], 0x6) [ 487.898627][T24084] device bridge_slave_0 left promiscuous mode [ 487.925018][T24084] bridge0: port 1(bridge_slave_0) entered disabled state 19:18:02 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'erspan0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000140)="01efc12f1794e67fba55f7590800", 0xe, 0x0, &(0x7f0000000040)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @dev}, 0x14) 19:18:03 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'jitterentropy_rng\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b6", 0x1) 19:18:03 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x3a) close(r0) 19:18:03 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x8) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r0, 0x29, 0x41, &(0x7f0000000000)={'raw\x00', 0x3, [{}, {}, {}]}, 0x58) [ 488.249715][T24089] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 488.388394][T24082] device lo left promiscuous mode [ 488.458617][T24089] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 19:18:03 executing program 5: r0 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f00000001c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0) recvmsg(r0, &(0x7f00000003c0)={0x0, 0x59, &(0x7f0000000940)=[{&(0x7f0000005200)=""/4096, 0x1000}, {&(0x7f0000000980)=""/4100, 0x1004}, {&(0x7f00000019c0)=""/4085, 0xff5}], 0x3}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) recvfrom$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) recvfrom$inet6(r0, &(0x7f0000000000)=""/114, 0xfffffffffffffd1b, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="9000000020001f", 0x7, 0x0, 0x0, 0x0) r1 = socket(0x11, 0x800000003, 0x0) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000140)={r3, 0x3, 0x6, @dev}, 0x10) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000180)={r3, 0x1, 0x6, @multicast}, 0x10) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="58ad000011", 0x5, 0x0, 0x0, 0x0) r4 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r4, &(0x7f0000000000)='.', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 19:18:03 executing program 2: r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) getsockopt$X25_QBITINCL(r0, 0x106, 0x1, 0x0, 0xfffffffffffffffd) 19:18:03 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'jitterentropy_rng\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b6", 0x1) [ 488.615672][T24089] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 488.746223][T24127] device lo entered promiscuous mode [ 488.832477][T24089] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 488.876585][T24127] netlink: 44266 bytes leftover after parsing attributes in process `syz-executor.5'. [ 488.979824][T24123] device lo left promiscuous mode [ 489.105336][T24089] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 489.135337][T24089] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 489.161594][T24089] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 489.193143][T24089] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 489.244186][T24122] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 489.356678][T24122] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 489.489735][T24122] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 489.587390][T24122] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 496.344719][T24122] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 496.368856][T24122] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 496.381017][T24122] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 19:18:11 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_STA_WME={0x4}]}, 0x2c}}, 0x0) 19:18:11 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x3a) close(r0) 19:18:11 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) ioctl$FITRIM(r0, 0xc020662a, &(0x7f0000000040)={0xffffffff000, 0x100000000004}) 19:18:11 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'jitterentropy_rng\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b6", 0x1) 19:18:11 executing program 3: openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.controllers\x00', 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000080)) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000040)) 19:18:11 executing program 5: r0 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f00000001c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0) recvmsg(r0, &(0x7f00000003c0)={0x0, 0x59, &(0x7f0000000940)=[{&(0x7f0000005200)=""/4096, 0x1000}, {&(0x7f0000000980)=""/4100, 0x1004}, {&(0x7f00000019c0)=""/4085, 0xff5}], 0x3}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) recvfrom$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) recvfrom$inet6(r0, &(0x7f0000000000)=""/114, 0xfffffffffffffd1b, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="9000000020001f", 0x7, 0x0, 0x0, 0x0) r1 = socket(0x11, 0x800000003, 0x0) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000140)={r3, 0x3, 0x6, @dev}, 0x10) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000180)={r3, 0x1, 0x6, @multicast}, 0x10) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="58ad000011", 0x5, 0x0, 0x0, 0x0) r4 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r4, &(0x7f0000000000)='.', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) [ 496.402157][T24122] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 496.639216][T24173] device lo entered promiscuous mode 19:18:11 executing program 1: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x374, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f0000000140)=""/85, 0x550}, {&(0x7f0000000fc0)=""/4096, 0x4e5}, {&(0x7f0000000400)=""/106, 0xb70}, {&(0x7f0000000740)=""/73, 0x3ac}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x40d}, {&(0x7f0000000000)=""/22, 0xa}], 0x81, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 19:18:11 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f3, &(0x7f0000000240)={'ip6tnl0\x00', &(0x7f00000001c0)={'sit0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @empty}}) [ 496.667689][T24173] netlink: 44266 bytes leftover after parsing attributes in process `syz-executor.5'. 19:18:11 executing program 4: r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000380), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000180)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x28, r0, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_SEC_OUT_KEY_ID={0xc, 0x20, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x28}}, 0x0) 19:18:11 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NL80211_CMD_TDLS_MGMT(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x20, r1, 0x625, 0x0, 0x0, {{0x7e}, {@void, @val={0xc}}}}, 0x20}}, 0x0) [ 497.062373][T24173] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 497.140020][T24173] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 497.216827][T24173] bond0 (unregistering): Released all slaves [ 497.300374][T24187] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 19:18:12 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) ioctl$sock_inet_SIOCDARP(r0, 0x8953, &(0x7f0000000000)={{0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x0, @remote}, 0x0, {0x4, 0x0, @broadcast}, 'syz_tun\x00'}) [ 497.348228][T24187] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db 19:18:12 executing program 1: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x374, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f0000000140)=""/85, 0x550}, {&(0x7f0000000fc0)=""/4096, 0x4e5}, {&(0x7f0000000400)=""/106, 0xb70}, {&(0x7f0000000740)=""/73, 0x3ac}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x40d}, {&(0x7f0000000000)=""/22, 0xa}], 0x81, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) [ 497.451991][T24166] device lo left promiscuous mode 19:18:12 executing program 4: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) bind$llc(r0, &(0x7f0000000040)={0x1a, 0x0, 0x1f, 0x0, 0x0, 0x7f}, 0x10) connect$llc(r0, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, 0x10) sendmmsg(r0, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) recvmmsg(r0, &(0x7f0000002800)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 19:18:12 executing program 3: r0 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r1, &(0x7f0000000400)={0x0, 0xfffffffffffffe4c, &(0x7f00000003c0)={&(0x7f0000000300)={0x4c, r0, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x8, 0x8e}}]}, 0x4c}}, 0x0) 19:18:12 executing program 1: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x374, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f0000000140)=""/85, 0x550}, {&(0x7f0000000fc0)=""/4096, 0x4e5}, {&(0x7f0000000400)=""/106, 0xb70}, {&(0x7f0000000740)=""/73, 0x3ac}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x40d}, {&(0x7f0000000000)=""/22, 0xa}], 0x81, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 19:18:12 executing program 5: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000880)=@bpf_lsm={0x9, 0x6, &(0x7f0000000140)=@framed={{0x18, 0x4}, [@initr0, @jmp={0x4, 0x1, 0x7, 0x4}]}, &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) [ 497.646390][T24249] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 497.690056][T24249] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db 19:18:12 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000b40)={0x28, 0x8, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}}, 0x0) 19:18:12 executing program 2: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.usage_user\x00', 0x0, 0x0) r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25GFACILITIES(r0, 0x541b, &(0x7f0000000100)) 19:18:12 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000e00)={0x38, r1, 0x40b, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x24, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x60}]}]}]}, 0x38}}, 0x0) 19:18:12 executing program 1: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x374, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f0000000140)=""/85, 0x550}, {&(0x7f0000000fc0)=""/4096, 0x4e5}, {&(0x7f0000000400)=""/106, 0xb70}, {&(0x7f0000000740)=""/73, 0x3ac}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x40d}, {&(0x7f0000000000)=""/22, 0xa}], 0x81, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 19:18:13 executing program 2: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.usage_user\x00', 0x0, 0x0) r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25GFACILITIES(r0, 0x541b, &(0x7f0000000100)) 19:18:13 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000002cc0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000200)="d800000018008100e00f80ecdb4cb9040a0265ef0b007c06e87c55a1bc000400b8000699030000000500150003008178a8001600030001400200000003ac040000d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe04000000730d16a4683e4f6d0200003f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92307f27260e9703", 0xd8}], 0x1}, 0x0) [ 498.179758][T24279] netlink: 'syz-executor.3': attribute type 4 has an invalid length. [ 498.199866][T24279] IPv6: NLM_F_CREATE should be specified when creating new route 19:18:13 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) ioctl$sock_inet_SIOCDARP(r0, 0x8953, &(0x7f0000000000)={{0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x0, @remote}, 0x0, {0x4, 0x0, @broadcast}, 'syz_tun\x00'}) 19:18:13 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$sock_ifreq(r1, 0x89a2, &(0x7f0000000000)={'bridge0\x00', @ifru_settings={0x0, 0x0, @fr=0x0}}) 19:18:13 executing program 4: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) bind$llc(r0, &(0x7f0000000040)={0x1a, 0x0, 0x1f, 0x0, 0x0, 0x7f}, 0x10) connect$llc(r0, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, 0x10) sendmmsg(r0, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) recvmmsg(r0, &(0x7f0000002800)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 19:18:13 executing program 1: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00'}, 0x30) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000500)='freezer.self_freezing\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) read(r1, &(0x7f00000003c0)=""/132, 0x84) 19:18:13 executing program 2: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.usage_user\x00', 0x0, 0x0) r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25GFACILITIES(r0, 0x541b, &(0x7f0000000100)) 19:18:13 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$TIPC_CMD_RESET_LINK_STATS(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x28, r1, 0x1, 0x0, 0x0, {{}, {0x0, 0xb}, {0x8, 0x14, 'syz0\x00'}}}, 0x28}}, 0x0) 19:18:13 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB='\aS\x00\x00\x00\x00\x00\x00\x00\x00\v'], 0x14}}, 0x0) sendfile(r2, r1, 0x0, 0x100000004) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r2) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) 19:18:13 executing program 2: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.usage_user\x00', 0x0, 0x0) r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25GFACILITIES(r0, 0x541b, &(0x7f0000000100)) 19:18:13 executing program 5: r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x6, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0xc}, [@ldst={0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2}, 0x48) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000000f195"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) close(r0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r1, 0x30, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000540)={r0, 0x0, 0x0}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f00000000c0)=ANY=[], 0x6db6e559) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r2, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x0}, 0x10) 19:18:13 executing program 1: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00'}, 0x30) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000500)='freezer.self_freezing\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) read(r1, &(0x7f00000003c0)=""/132, 0x84) 19:18:14 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)={0x28, 0x4, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}}, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000502) [ 499.075924][ T26] kauditd_printk_skb: 3 callbacks suppressed [ 499.075941][ T26] audit: type=1804 audit(1634671094.037:310): pid=24312 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir038986091/syzkaller.GPbuUD/380/cgroup.controllers" dev="sda1" ino=14594 res=1 errno=0 19:18:14 executing program 1: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00'}, 0x30) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000500)='freezer.self_freezing\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) read(r1, &(0x7f00000003c0)=""/132, 0x84) 19:18:14 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) ioctl$sock_inet_SIOCDARP(r0, 0x8953, &(0x7f0000000000)={{0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x0, @remote}, 0x0, {0x4, 0x0, @broadcast}, 'syz_tun\x00'}) [ 499.398950][ T26] audit: type=1804 audit(1634671094.357:311): pid=24324 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir127233530/syzkaller.uXAqcu/371/cgroup.controllers" dev="sda1" ino=14930 res=1 errno=0 19:18:14 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB='\aS\x00\x00\x00\x00\x00\x00\x00\x00\v'], 0x14}}, 0x0) sendfile(r2, r1, 0x0, 0x100000004) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r2) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) 19:18:14 executing program 4: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) bind$llc(r0, &(0x7f0000000040)={0x1a, 0x0, 0x1f, 0x0, 0x0, 0x7f}, 0x10) connect$llc(r0, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, 0x10) sendmmsg(r0, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) recvmmsg(r0, &(0x7f0000002800)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 19:18:14 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB='\aS\x00\x00\x00\x00\x00\x00\x00\x00\v'], 0x14}}, 0x0) sendfile(r2, r1, 0x0, 0x100000004) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r2) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) 19:18:14 executing program 5: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x8}, 0x1c) recvmmsg(r0, &(0x7f0000003880)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000180)=""/205, 0xcd}], 0x1}}], 0x1, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) syz_emit_ethernet(0x83, &(0x7f0000000780)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0086dd601bfc97004d8800fe80000052289e000000000000000000ff02000000000000000000000000000100004e20004d90"], 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0) shutdown(r0, 0x0) 19:18:14 executing program 1: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00'}, 0x30) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000500)='freezer.self_freezing\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) read(r1, &(0x7f00000003c0)=""/132, 0x84) [ 499.930189][ T26] audit: type=1804 audit(1634671094.887:312): pid=24332 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir038986091/syzkaller.GPbuUD/381/cgroup.controllers" dev="sda1" ino=14866 res=1 errno=0 19:18:15 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newsa={0x184, 0x10, 0x713, 0x0, 0x0, {{@in=@dev, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in6=@remote, 0x0, 0x32}, @in=@multicast1, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @algo_auth_trunc={0x4c, 0x14, {{'cmac(aes)\x00'}}}]}, 0x184}}, 0x0) [ 500.183364][ T26] audit: type=1804 audit(1634671095.137:313): pid=24338 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir127233530/syzkaller.uXAqcu/372/cgroup.controllers" dev="sda1" ino=14785 res=1 errno=0 19:18:15 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x3a, 0x7, 0x0, 0x0) 19:18:15 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB='\aS\x00\x00\x00\x00\x00\x00\x00\x00\v'], 0x14}}, 0x0) sendfile(r2, r1, 0x0, 0x100000004) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r2) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) 19:18:15 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) ioctl$sock_inet_SIOCDARP(r0, 0x8953, &(0x7f0000000000)={{0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x0, @remote}, 0x0, {0x4, 0x0, @broadcast}, 'syz_tun\x00'}) 19:18:15 executing program 1: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x61, 0x11, 0x4c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 19:18:15 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000012c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x13, r0, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000040601010000000000000000000000000500010007"], 0x1c}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000504) 19:18:15 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB='\aS\x00\x00\x00\x00\x00\x00\x00\x00\v'], 0x14}}, 0x0) sendfile(r2, r1, 0x0, 0x100000004) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r2) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) 19:18:15 executing program 4: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) bind$llc(r0, &(0x7f0000000040)={0x1a, 0x0, 0x1f, 0x0, 0x0, 0x7f}, 0x10) connect$llc(r0, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, 0x10) sendmmsg(r0, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) recvmmsg(r0, &(0x7f0000002800)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 19:18:15 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB='\aS\x00\x00\x00\x00\x00\x00\x00\x00\v'], 0x14}}, 0x0) sendfile(r2, r1, 0x0, 0x100000004) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r2) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) 19:18:15 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0xd1, &(0x7f0000000000)=0x1, 0x4) getsockopt$inet6_int(r0, 0x29, 0xd0, 0x0, &(0x7f0000000180)) [ 501.114882][ T26] audit: type=1804 audit(1634671096.067:314): pid=24370 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir324979812/syzkaller.ofHiir/254/cgroup.controllers" dev="sda1" ino=13972 res=1 errno=0 [ 501.165723][ T1360] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.172083][ T1360] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.326602][ T26] audit: type=1804 audit(1634671096.287:315): pid=24372 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir038986091/syzkaller.GPbuUD/383/cgroup.controllers" dev="sda1" ino=14961 res=1 errno=0 [ 501.468621][ T26] audit: type=1804 audit(1634671096.427:316): pid=24379 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir127233530/syzkaller.uXAqcu/373/cgroup.controllers" dev="sda1" ino=15209 res=1 errno=0 19:18:16 executing program 0: r0 = socket$kcm(0x11, 0x8000000000000003, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000001640), 0xff5f) sendmsg(r0, &(0x7f0000000440)={&(0x7f00000006c0)=@tipc=@name={0x10, 0x2, 0x0, {{0x41}}}, 0x80, &(0x7f0000000140)=[{&(0x7f00000027c0)="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", 0xf49}, {&(0x7f0000000840)='\x00', 0xfd14}], 0x2, 0x0, 0x0, 0x1a0}, 0x80) 19:18:16 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000012c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x13, r0, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000040601010000000000000000000000000500010007"], 0x1c}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000504) 19:18:16 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0xd1, &(0x7f0000000000)=0x1, 0x4) getsockopt$inet6_int(r0, 0x29, 0xd0, 0x0, &(0x7f0000000180)) 19:18:16 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv4_newroute={0x30, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_MULTIPATH={0xc}, @RTA_SRC={0x8, 0x1e, @loopback}]}, 0x30}}, 0x0) 19:18:16 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB='\aS\x00\x00\x00\x00\x00\x00\x00\x00\v'], 0x14}}, 0x0) sendfile(r2, r1, 0x0, 0x100000004) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r2) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) 19:18:17 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0xd1, &(0x7f0000000000)=0x1, 0x4) getsockopt$inet6_int(r0, 0x29, 0xd0, 0x0, &(0x7f0000000180)) 19:18:17 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0xf000) sendfile(r1, r0, 0x0, 0x800000000000c) socket$netlink(0x10, 0x3, 0x4) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x105002, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) ioctl$BTRFS_IOC_FS_INFO(0xffffffffffffffff, 0x8400941f, &(0x7f00000007c0)) close(r2) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000001c0)="080db5055e0b") ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000080)={0x2, 0x80000000, 0x2, 0x0, 0x8001}) pwrite64(0xffffffffffffffff, &(0x7f0000000600), 0x0, 0x0) r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0x3e, &(0x7f00000000c0)=0x7, 0x4) openat$cgroup_ro(r1, &(0x7f0000000100)='cgroup.stat\x00', 0x0, 0x0) bind$llc(r3, &(0x7f0000000000)={0x1a, 0x0, 0x9, 0x0, 0x0, 0x2}, 0x10) sendmmsg(r3, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) 19:18:17 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000003c0), r1) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x38, r2, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MLSLVLLST={0x10, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_DOI={0x8}]}, 0x38}}, 0x0) 19:18:17 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv4_newroute={0x30, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_MULTIPATH={0xc}, @RTA_SRC={0x8, 0x1e, @loopback}]}, 0x30}}, 0x0) [ 502.175334][ T26] audit: type=1804 audit(1634671097.137:317): pid=24393 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir324979812/syzkaller.ofHiir/255/cgroup.controllers" dev="sda1" ino=14818 res=1 errno=0 19:18:17 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000003c0), r1) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x38, r2, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MLSLVLLST={0x10, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_DOI={0x8}]}, 0x38}}, 0x0) [ 502.443900][ T26] audit: type=1804 audit(1634671097.397:318): pid=24400 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir127233530/syzkaller.uXAqcu/374/cgroup.controllers" dev="sda1" ino=14545 res=1 errno=0 19:18:17 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv4_newroute={0x30, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_MULTIPATH={0xc}, @RTA_SRC={0x8, 0x1e, @loopback}]}, 0x30}}, 0x0) 19:18:17 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0xd1, &(0x7f0000000000)=0x1, 0x4) getsockopt$inet6_int(r0, 0x29, 0xd0, 0x0, &(0x7f0000000180)) 19:18:17 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000003c0), r1) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x38, r2, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MLSLVLLST={0x10, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_DOI={0x8}]}, 0x38}}, 0x0) 19:18:17 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000012c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x13, r0, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000040601010000000000000000000000000500010007"], 0x1c}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000504) 19:18:18 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000003c0), r1) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x38, r2, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MLSLVLLST={0x10, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_DOI={0x8}]}, 0x38}}, 0x0) 19:18:18 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0x7, 0x4, 0x8, 0xa000000}, 0x40) 19:18:18 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000d80)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000040)={0x20, r0, 0x62d, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x4}]}, 0x20}}, 0x0) 19:18:18 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv4_newroute={0x30, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_MULTIPATH={0xc}, @RTA_SRC={0x8, 0x1e, @loopback}]}, 0x30}}, 0x0) 19:18:18 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0xf000) sendfile(r1, r0, 0x0, 0x800000000000c) socket$netlink(0x10, 0x3, 0x4) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x105002, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) ioctl$BTRFS_IOC_FS_INFO(0xffffffffffffffff, 0x8400941f, &(0x7f00000007c0)) close(r2) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000001c0)="080db5055e0b") ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000080)={0x2, 0x80000000, 0x2, 0x0, 0x8001}) pwrite64(0xffffffffffffffff, &(0x7f0000000600), 0x0, 0x0) r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0x3e, &(0x7f00000000c0)=0x7, 0x4) openat$cgroup_ro(r1, &(0x7f0000000100)='cgroup.stat\x00', 0x0, 0x0) bind$llc(r3, &(0x7f0000000000)={0x1a, 0x0, 0x9, 0x0, 0x0, 0x2}, 0x10) sendmmsg(r3, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) 19:18:18 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=@newtaction={0x68, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x54, 0x1, [@m_ctinfo={0x50, 0x1, 0x0, 0x0, {{0x10}, {0x24, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_MASK={0x8}, @TCA_CTINFO_ACT={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 19:18:18 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000012c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x13, r0, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000040601010000000000000000000000000500010007"], 0x1c}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000504) 19:18:18 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x20, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) write$binfmt_elf64(r0, 0x0, 0x0) 19:18:18 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0xf000) sendfile(r1, r0, 0x0, 0x800000000000c) socket$netlink(0x10, 0x3, 0x4) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x105002, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) ioctl$BTRFS_IOC_FS_INFO(0xffffffffffffffff, 0x8400941f, &(0x7f00000007c0)) close(r2) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000001c0)="080db5055e0b") ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000080)={0x2, 0x80000000, 0x2, 0x0, 0x8001}) pwrite64(0xffffffffffffffff, &(0x7f0000000600), 0x0, 0x0) r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0x3e, &(0x7f00000000c0)=0x7, 0x4) openat$cgroup_ro(r1, &(0x7f0000000100)='cgroup.stat\x00', 0x0, 0x0) bind$llc(r3, &(0x7f0000000000)={0x1a, 0x0, 0x9, 0x0, 0x0, 0x2}, 0x10) sendmmsg(r3, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) 19:18:18 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000004a40)={0x0, 0x0, &(0x7f0000004a00)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000001a000306000000000000000080"], 0x1c}}, 0x0) [ 503.560374][T24441] netlink: 'syz-executor.1': attribute type 3 has an invalid length. [ 503.607982][T24441] netlink: 'syz-executor.1': attribute type 3 has an invalid length. 19:18:18 executing program 1: r0 = socket$kcm(0xa, 0x2, 0x73) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) connect(r0, &(0x7f0000000180)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="2400000000000000290000003900000000020201"], 0x50}, 0x0) sendmmsg$inet_sctp(r0, &(0x7f00000003c0), 0x3a301e0909ff6cd, 0x0) 19:18:18 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r0) sendmsg$IEEE802154_LLSEC_ADD_DEV(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x14, r1, 0x852dd6c070cd7e4d, 0x0, 0x0, {0x27}}, 0x14}, 0x6}, 0x0) 19:18:18 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)=@newlink={0x58, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @ipv4={'\x00', '\xff\xff', @loopback}}]}}}, @IFLA_ADDRESS={0x4, 0x1, @random="aa69626eae64"}]}, 0x58}}, 0x0) [ 503.904074][ T26] audit: type=1804 audit(1634671098.857:319): pid=24446 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir324979812/syzkaller.ofHiir/257/cgroup.controllers" dev="sda1" ino=15209 res=1 errno=0 19:18:19 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0xf000) sendfile(r1, r0, 0x0, 0x800000000000c) socket$netlink(0x10, 0x3, 0x4) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x105002, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) ioctl$BTRFS_IOC_FS_INFO(0xffffffffffffffff, 0x8400941f, &(0x7f00000007c0)) close(r2) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000001c0)="080db5055e0b") ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000080)={0x2, 0x80000000, 0x2, 0x0, 0x8001}) pwrite64(0xffffffffffffffff, &(0x7f0000000600), 0x0, 0x0) r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0x3e, &(0x7f00000000c0)=0x7, 0x4) openat$cgroup_ro(r1, &(0x7f0000000100)='cgroup.stat\x00', 0x0, 0x0) bind$llc(r3, &(0x7f0000000000)={0x1a, 0x0, 0x9, 0x0, 0x0, 0x2}, 0x10) sendmmsg(r3, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) [ 504.028972][T24461] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 19:18:19 executing program 1: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x1}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_MPLS_BOS={0x5, 0x44, 0xfc}, @TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8847}]}}]}, 0x44}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 19:18:19 executing program 2: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) write(r0, &(0x7f0000000100)="240000001e005f0214f9f407faac471001000000080003000000080008000100000000ff", 0x24) [ 504.291334][T24468] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 19:18:19 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0xf000) sendfile(r1, r0, 0x0, 0x800000000000c) socket$netlink(0x10, 0x3, 0x4) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x105002, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) ioctl$BTRFS_IOC_FS_INFO(0xffffffffffffffff, 0x8400941f, &(0x7f00000007c0)) close(r2) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000001c0)="080db5055e0b") ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000080)={0x2, 0x80000000, 0x2, 0x0, 0x8001}) pwrite64(0xffffffffffffffff, &(0x7f0000000600), 0x0, 0x0) r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0x3e, &(0x7f00000000c0)=0x7, 0x4) openat$cgroup_ro(r1, &(0x7f0000000100)='cgroup.stat\x00', 0x0, 0x0) bind$llc(r3, &(0x7f0000000000)={0x1a, 0x0, 0x9, 0x0, 0x0, 0x2}, 0x10) sendmmsg(r3, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) 19:18:19 executing program 0: r0 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r0, &(0x7f0000000080), 0x10) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, 0x0, 0x0) close(r0) [ 504.384119][T24470] NCSI netlink: No device for ifindex 4278190080 [ 504.437323][T24468] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 19:18:19 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket(0x0, 0x0, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'veth0_vlan\x00', @ifru_ivalue}) getsockname(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000740)={0xffffffffffffffff, 0x8001a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) vmsplice(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x10) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r0, 0x0, 0xe, 0xffffff81, &(0x7f0000000140)="3d6ee2e04b91ab10143d9abe86dd", 0x0, 0xf000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 19:18:19 executing program 0: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x4}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8847}, @TCA_FLOWER_KEY_MPLS_TC={0x5}]}}]}, 0x44}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 19:18:19 executing program 1: socket$netlink(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f00000006c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000680)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r3, @ANYBLOB="0000400000000002280012000c00010076657468"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x70bd2a, 0x0, {0x2, 0x1, 0x0, 0x0, r3}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@ipv4_newaddr={0x28, 0x14, 0x121, 0x0, 0x0, {0x2, 0x1, 0x0, 0x0, r3}, [@IFA_LOCAL={0x8, 0x2, @multicast1}, @IFA_BROADCAST={0x8, 0x4, @broadcast}]}, 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@ipv4_deladdr={0x18, 0x15, 0x1, 0x0, 0x0, {0x2, 0x0, 0x8, 0x0, r3}}, 0x18}}, 0x0) 19:18:19 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0xf000) sendfile(r1, r0, 0x0, 0x800000000000c) socket$netlink(0x10, 0x3, 0x4) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x105002, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) ioctl$BTRFS_IOC_FS_INFO(0xffffffffffffffff, 0x8400941f, &(0x7f00000007c0)) close(r2) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000001c0)="080db5055e0b") ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000080)={0x2, 0x80000000, 0x2, 0x0, 0x8001}) pwrite64(0xffffffffffffffff, &(0x7f0000000600), 0x0, 0x0) r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0x3e, &(0x7f00000000c0)=0x7, 0x4) openat$cgroup_ro(r1, &(0x7f0000000100)='cgroup.stat\x00', 0x0, 0x0) bind$llc(r3, &(0x7f0000000000)={0x1a, 0x0, 0x9, 0x0, 0x0, 0x2}, 0x10) sendmmsg(r3, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) [ 504.825163][T24498] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 19:18:19 executing program 5: syz_emit_ethernet(0x76, &(0x7f0000000080)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "2e9200", 0x40, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, {[@exp_fastopen={0x4, 0x4}, @mss={0x2, 0x4}, @sack_perm={0x4, 0x2}, @eol, @mptcp=@synack={0x1e, 0x10}, @sack_perm={0x4, 0x2}, @mptcp=@mp_fclose={0x1e, 0xc}]}}}}}}}}, 0x0) 19:18:20 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0xf000) sendfile(r1, r0, 0x0, 0x800000000000c) socket$netlink(0x10, 0x3, 0x4) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x105002, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) ioctl$BTRFS_IOC_FS_INFO(0xffffffffffffffff, 0x8400941f, &(0x7f00000007c0)) close(r2) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000001c0)="080db5055e0b") ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000080)={0x2, 0x80000000, 0x2, 0x0, 0x8001}) pwrite64(0xffffffffffffffff, &(0x7f0000000600), 0x0, 0x0) r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0x3e, &(0x7f00000000c0)=0x7, 0x4) openat$cgroup_ro(r1, &(0x7f0000000100)='cgroup.stat\x00', 0x0, 0x0) bind$llc(r3, &(0x7f0000000000)={0x1a, 0x0, 0x9, 0x0, 0x0, 0x2}, 0x10) sendmmsg(r3, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) [ 505.011133][T24499] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 19:18:20 executing program 5: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$inet_icmp_raw(0x2, 0x3, 0x1) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0x4240a2a0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x400fe0, 0x0) 19:18:20 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x29, 0x31, 0x0, 0x0) [ 505.102020][T24498] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 505.136622][T24506] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 19:18:20 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000004c0)={0x14, r1, 0x1}, 0x14}}, 0x0) 19:18:20 executing program 1: socket$netlink(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f00000006c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000680)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r3, @ANYBLOB="0000400000000002280012000c00010076657468"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x70bd2a, 0x0, {0x2, 0x1, 0x0, 0x0, r3}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@ipv4_newaddr={0x28, 0x14, 0x121, 0x0, 0x0, {0x2, 0x1, 0x0, 0x0, r3}, [@IFA_LOCAL={0x8, 0x2, @multicast1}, @IFA_BROADCAST={0x8, 0x4, @broadcast}]}, 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@ipv4_deladdr={0x18, 0x15, 0x1, 0x0, 0x0, {0x2, 0x0, 0x8, 0x0, r3}}, 0x18}}, 0x0) 19:18:20 executing program 3: socket$netlink(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f00000006c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000680)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r3, @ANYBLOB="0000400000000002280012000c00010076657468"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x70bd2a, 0x0, {0x2, 0x1, 0x0, 0x0, r3}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@ipv4_newaddr={0x28, 0x14, 0x121, 0x0, 0x0, {0x2, 0x1, 0x0, 0x0, r3}, [@IFA_LOCAL={0x8, 0x2, @multicast1}, @IFA_BROADCAST={0x8, 0x4, @broadcast}]}, 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@ipv4_deladdr={0x18, 0x15, 0x1, 0x0, 0x0, {0x2, 0x0, 0x8, 0x0, r3}}, 0x18}}, 0x0) 19:18:20 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x8001000000000000, 0x40, &(0x7f0000000300)=@raw={'raw\x00', 0x8, 0x3, 0x368, 0x0, 0x0, 0x148, 0x98, 0x0, 0x2d0, 0x2a8, 0x2a8, 0x2d0, 0x2a8, 0x3, 0x0, {[{{@ip={@empty, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'tunl0\x00', 'nr0\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@uncond, 0x0, 0x1f0, 0x238, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@inet=@hashlimit3={{0x158}, {'bridge_slave_1\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3c8) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000080), 0x10) [ 505.473183][T24548] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 19:18:20 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000004c0)={0x14, r1, 0x1}, 0x14}}, 0x0) [ 505.599748][T24562] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 19:18:20 executing program 1: socket$netlink(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f00000006c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000680)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r3, @ANYBLOB="0000400000000002280012000c00010076657468"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x70bd2a, 0x0, {0x2, 0x1, 0x0, 0x0, r3}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@ipv4_newaddr={0x28, 0x14, 0x121, 0x0, 0x0, {0x2, 0x1, 0x0, 0x0, r3}, [@IFA_LOCAL={0x8, 0x2, @multicast1}, @IFA_BROADCAST={0x8, 0x4, @broadcast}]}, 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@ipv4_deladdr={0x18, 0x15, 0x1, 0x0, 0x0, {0x2, 0x0, 0x8, 0x0, r3}}, 0x18}}, 0x0) [ 505.721624][T24578] xt_TCPMSS: Only works on TCP SYN packets [ 505.752909][T24578] xt_TCPMSS: Only works on TCP SYN packets 19:18:20 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000004c0)={0x14, r1, 0x1}, 0x14}}, 0x0) 19:18:20 executing program 4: r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000002840)=@bpf_lsm={0x2, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$PROG_BIND_MAP(0x1c, &(0x7f0000000440)={r0}, 0xc) 19:18:20 executing program 3: socket$netlink(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f00000006c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000680)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r3, @ANYBLOB="0000400000000002280012000c00010076657468"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x70bd2a, 0x0, {0x2, 0x1, 0x0, 0x0, r3}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@ipv4_newaddr={0x28, 0x14, 0x121, 0x0, 0x0, {0x2, 0x1, 0x0, 0x0, r3}, [@IFA_LOCAL={0x8, 0x2, @multicast1}, @IFA_BROADCAST={0x8, 0x4, @broadcast}]}, 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@ipv4_deladdr={0x18, 0x15, 0x1, 0x0, 0x0, {0x2, 0x0, 0x8, 0x0, r3}}, 0x18}}, 0x0) 19:18:20 executing program 2: unshare(0x48040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x13c, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x3, 0x0, 0xf201}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0xff00}, 0x0) sendmsg$NL80211_CMD_SET_CHANNEL(0xffffffffffffffff, 0x0, 0x0) [ 505.965815][T24587] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 19:18:21 executing program 5: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$inet_icmp_raw(0x2, 0x3, 0x1) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0x4240a2a0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x400fe0, 0x0) 19:18:21 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000004c0)={0x14, r1, 0x1}, 0x14}}, 0x0) [ 506.176159][T24606] hsr0 speed is unknown, defaulting to 1000 19:18:21 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffdd, 0xa}, [@ldst={0x3, 0x0, 0x6, 0x1c10a1}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xb5}, 0x48) 19:18:21 executing program 3: socket$netlink(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f00000006c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000680)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r3, @ANYBLOB="0000400000000002280012000c00010076657468"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x70bd2a, 0x0, {0x2, 0x1, 0x0, 0x0, r3}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@ipv4_newaddr={0x28, 0x14, 0x121, 0x0, 0x0, {0x2, 0x1, 0x0, 0x0, r3}, [@IFA_LOCAL={0x8, 0x2, @multicast1}, @IFA_BROADCAST={0x8, 0x4, @broadcast}]}, 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@ipv4_deladdr={0x18, 0x15, 0x1, 0x0, 0x0, {0x2, 0x0, 0x8, 0x0, r3}}, 0x18}}, 0x0) 19:18:21 executing program 1: socket$netlink(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f00000006c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000680)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r3, @ANYBLOB="0000400000000002280012000c00010076657468"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x70bd2a, 0x0, {0x2, 0x1, 0x0, 0x0, r3}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@ipv4_newaddr={0x28, 0x14, 0x121, 0x0, 0x0, {0x2, 0x1, 0x0, 0x0, r3}, [@IFA_LOCAL={0x8, 0x2, @multicast1}, @IFA_BROADCAST={0x8, 0x4, @broadcast}]}, 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@ipv4_deladdr={0x18, 0x15, 0x1, 0x0, 0x0, {0x2, 0x0, 0x8, 0x0, r3}}, 0x18}}, 0x0) 19:18:21 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000007300)={0x10, 0x4, &(0x7f0000007100)=@framed={{}, [@call]}, &(0x7f0000007180)='GPL\x00', 0x2, 0xa9, &(0x7f00000071c0)=""/169, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 19:18:21 executing program 4: r0 = socket(0x1d, 0x2, 0x6) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$packet(r0, &(0x7f0000000000)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x14) getsockname$packet(r0, 0x0, &(0x7f0000000000)) bind$packet(r0, &(0x7f00000000c0)={0x11, 0x1c, 0x0, 0x1, 0x8}, 0x14) sendmmsg$sock(r0, &(0x7f00000008c0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000380)="d467a8145e1bfbb8", 0x8}], 0x1}}], 0x1, 0x0) close(r0) r2 = socket(0x1d, 0x2, 0x6) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$packet(r2, &(0x7f0000000000)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @link_local}, 0x14) sendmsg$can_bcm(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f00000007c0)=ANY=[], 0x80}}, 0x0) 19:18:21 executing program 0: syz_emit_ethernet(0x52, &(0x7f0000000040)={@local, @broadcast, @val={@void}, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4585b6", 0x18, 0x6, 0x0, @dev, @mcast2, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xd8, 0x0, 0x0, 0x0, {[@fastopen={0x22, 0x2}]}}}}}}}}, 0x0) 19:18:21 executing program 3: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB="440000001000390400"/20, @ANYRES32=r3, @ANYBLOB="0304000000000000240012800b00010067656e65766500001400028005000d000200000005000c0001"], 0x44}}, 0x0) bind$packet(r0, &(0x7f00000000c0)={0x11, 0xc, r3}, 0x14) sendto$inet6(r0, &(0x7f0000000240)="0503cf2846f47baa146aa6000800", 0xe, 0x0, 0x0, 0x0) 19:18:21 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x1, 0x800) sendmsg(r1, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r1, &(0x7f0000000580)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xffffff4e) r3 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$ARPT_SO_SET_REPLACE(r3, 0x0, 0x60, &(0x7f0000000040)={'filter\x00', 0x7, 0x4, 0x4c8, 0x2f8, 0x0, 0x2f8, 0x3e0, 0x3e0, 0x2f8, 0x4, 0x0, {[{{@uncond, 0xc0, 0x1e8}, @unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x0, 0x0, 'system_u:object_r:ldconfig_cache_t:s0\x00'}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @broadcast, @broadcast}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x518) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4800000010000507000000000000000300000000", @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="380000002400e5040000004007a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB='@\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r2, @ANYRES16], 0x40}}, 0x4000080) r4 = socket(0x1000000010, 0x80002, 0x0) recvmsg$unix(r4, &(0x7f00000009c0)={&(0x7f0000000600), 0x6e, &(0x7f0000000900)=[{&(0x7f0000000680)=""/170, 0xaa}, {&(0x7f0000000740)=""/241, 0xf1}, {&(0x7f0000000840)=""/181, 0xb5}], 0x3, &(0x7f0000000940)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x78}, 0x10140) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r6, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x30, r8, 0x721, 0x0, 0x0, {{}, {@val={0x8}, @val={0x8, 0x3, r7}, @val={0xc}}}}, 0x30}}, 0x0) sendmsg$NL80211_CMD_DEL_INTERFACE(r5, &(0x7f0000000ac0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x20, r8, 0x100, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x7, 0x55}}}}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x80000) sendmmsg$alg(r4, &(0x7f0000000200), 0x4924924924926d3, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) 19:18:22 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4c00000024001d0f00"/20, @ANYRES32, @ANYBLOB="00000000f1ffffff000000000900010063616b65"], 0x4c}}, 0x0) [ 507.196103][T24691] hsr0 speed is unknown, defaulting to 1000 [ 507.425234][T24606] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 507.573094][T24606] hsr0 speed is unknown, defaulting to 1000 [ 507.733526][T24735] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 507.759834][T24735] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 507.814445][T24735] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. 19:18:23 executing program 2: unshare(0x48040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x13c, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x3, 0x0, 0xf201}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0xff00}, 0x0) sendmsg$NL80211_CMD_SET_CHANNEL(0xffffffffffffffff, 0x0, 0x0) 19:18:23 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x68, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x2c, 0x11, 0x0, 0x1, @quota={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_QUOTA_BYTES={0xc}, @NFTA_QUOTA_CONSUMED={0xc, 0x2}]}}}]}], {0x14, 0x10}}, 0xb0}}, 0x0) 19:18:23 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000540)={0x18, r1, 0xacaf7f5fa1613fbb, 0x0, 0x0, {0x6}, [@HEADER={0x4}]}, 0x18}}, 0x0) 19:18:23 executing program 5: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$inet_icmp_raw(0x2, 0x3, 0x1) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0x4240a2a0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x400fe0, 0x0) 19:18:23 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x1, 0x800) sendmsg(r1, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r1, &(0x7f0000000580)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xffffff4e) r3 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$ARPT_SO_SET_REPLACE(r3, 0x0, 0x60, &(0x7f0000000040)={'filter\x00', 0x7, 0x4, 0x4c8, 0x2f8, 0x0, 0x2f8, 0x3e0, 0x3e0, 0x2f8, 0x4, 0x0, {[{{@uncond, 0xc0, 0x1e8}, @unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x0, 0x0, 'system_u:object_r:ldconfig_cache_t:s0\x00'}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @broadcast, @broadcast}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x518) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4800000010000507000000000000000300000000", @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="380000002400e5040000004007a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB='@\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r2, @ANYRES16], 0x40}}, 0x4000080) r4 = socket(0x1000000010, 0x80002, 0x0) recvmsg$unix(r4, &(0x7f00000009c0)={&(0x7f0000000600), 0x6e, &(0x7f0000000900)=[{&(0x7f0000000680)=""/170, 0xaa}, {&(0x7f0000000740)=""/241, 0xf1}, {&(0x7f0000000840)=""/181, 0xb5}], 0x3, &(0x7f0000000940)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x78}, 0x10140) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r6, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x30, r8, 0x721, 0x0, 0x0, {{}, {@val={0x8}, @val={0x8, 0x3, r7}, @val={0xc}}}}, 0x30}}, 0x0) sendmsg$NL80211_CMD_DEL_INTERFACE(r5, &(0x7f0000000ac0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x20, r8, 0x100, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x7, 0x55}}}}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x80000) sendmmsg$alg(r4, &(0x7f0000000200), 0x4924924924926d3, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) 19:18:23 executing program 3: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB="440000001000390400"/20, @ANYRES32=r3, @ANYBLOB="0304000000000000240012800b00010067656e65766500001400028005000d000200000005000c0001"], 0x44}}, 0x0) bind$packet(r0, &(0x7f00000000c0)={0x11, 0xc, r3}, 0x14) sendto$inet6(r0, &(0x7f0000000240)="0503cf2846f47baa146aa6000800", 0xe, 0x0, 0x0, 0x0) [ 508.938658][T24786] netlink: 'syz-executor.0': attribute type 2 has an invalid length. 19:18:24 executing program 4: r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x10) sendto$inet(r0, &(0x7f0000000040)='\'', 0x1, 0x0, 0x0, 0x0) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)=[{0x0}, {&(0x7f0000000140)="bf9039e7d922447b135382f9bc24e4c2af725e372d8a30ae3aad15899132391f957d2f2654edd0bd03ea481fb4361e7065e0eb39017b75ab21f05e6709675c2f16fda5ac28920df0180f572086aa60c60821a4f2fb3191d09cac307563797ab5b5e691f6ab11fe15fbb6e440e0bc03e130b9c09aa87a0c2135f10c6d2b6bddb8055ff38ec7ed321d8f0f46e7f76aec86a2e6d68dc237d6352a8082da623d0dcc0e1bad5b1072bdb0982822b84f4096368503f21a760b388274106e056fdda496c99e7990", 0xc4}, {0x0}], 0x3}, 0x0) [ 509.042423][T24787] hsr0 speed is unknown, defaulting to 1000 19:18:24 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xa, 0x4, @remote}, {0xa, 0x4, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x68}}, 0x0) 19:18:24 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x1, 0x800) sendmsg(r1, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r1, &(0x7f0000000580)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xffffff4e) r3 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$ARPT_SO_SET_REPLACE(r3, 0x0, 0x60, &(0x7f0000000040)={'filter\x00', 0x7, 0x4, 0x4c8, 0x2f8, 0x0, 0x2f8, 0x3e0, 0x3e0, 0x2f8, 0x4, 0x0, {[{{@uncond, 0xc0, 0x1e8}, @unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x0, 0x0, 'system_u:object_r:ldconfig_cache_t:s0\x00'}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @broadcast, @broadcast}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x518) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4800000010000507000000000000000300000000", @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="380000002400e5040000004007a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB='@\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r2, @ANYRES16], 0x40}}, 0x4000080) r4 = socket(0x1000000010, 0x80002, 0x0) recvmsg$unix(r4, &(0x7f00000009c0)={&(0x7f0000000600), 0x6e, &(0x7f0000000900)=[{&(0x7f0000000680)=""/170, 0xaa}, {&(0x7f0000000740)=""/241, 0xf1}, {&(0x7f0000000840)=""/181, 0xb5}], 0x3, &(0x7f0000000940)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x78}, 0x10140) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r6, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x30, r8, 0x721, 0x0, 0x0, {{}, {@val={0x8}, @val={0x8, 0x3, r7}, @val={0xc}}}}, 0x30}}, 0x0) sendmsg$NL80211_CMD_DEL_INTERFACE(r5, &(0x7f0000000ac0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x20, r8, 0x100, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x7, 0x55}}}}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x80000) sendmmsg$alg(r4, &(0x7f0000000200), 0x4924924924926d3, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) [ 509.193004][T24800] hsr0 speed is unknown, defaulting to 1000 19:18:24 executing program 4: r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x10) sendto$inet(r0, &(0x7f0000000040)='\'', 0x1, 0x0, 0x0, 0x0) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)=[{0x0}, {&(0x7f0000000140)="bf9039e7d922447b135382f9bc24e4c2af725e372d8a30ae3aad15899132391f957d2f2654edd0bd03ea481fb4361e7065e0eb39017b75ab21f05e6709675c2f16fda5ac28920df0180f572086aa60c60821a4f2fb3191d09cac307563797ab5b5e691f6ab11fe15fbb6e440e0bc03e130b9c09aa87a0c2135f10c6d2b6bddb8055ff38ec7ed321d8f0f46e7f76aec86a2e6d68dc237d6352a8082da623d0dcc0e1bad5b1072bdb0982822b84f4096368503f21a760b388274106e056fdda496c99e7990", 0xc4}, {0x0}], 0x3}, 0x0) [ 509.431807][T24846] __nla_validate_parse: 8 callbacks suppressed [ 509.431825][T24846] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 19:18:24 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xa, 0x4, @remote}, {0xa, 0x4, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x68}}, 0x0) 19:18:24 executing program 4: r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x10) sendto$inet(r0, &(0x7f0000000040)='\'', 0x1, 0x0, 0x0, 0x0) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)=[{0x0}, {&(0x7f0000000140)="bf9039e7d922447b135382f9bc24e4c2af725e372d8a30ae3aad15899132391f957d2f2654edd0bd03ea481fb4361e7065e0eb39017b75ab21f05e6709675c2f16fda5ac28920df0180f572086aa60c60821a4f2fb3191d09cac307563797ab5b5e691f6ab11fe15fbb6e440e0bc03e130b9c09aa87a0c2135f10c6d2b6bddb8055ff38ec7ed321d8f0f46e7f76aec86a2e6d68dc237d6352a8082da623d0dcc0e1bad5b1072bdb0982822b84f4096368503f21a760b388274106e056fdda496c99e7990", 0xc4}, {0x0}], 0x3}, 0x0) [ 510.148801][T24800] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. 19:18:25 executing program 2: unshare(0x48040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x13c, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x3, 0x0, 0xf201}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0xff00}, 0x0) sendmsg$NL80211_CMD_SET_CHANNEL(0xffffffffffffffff, 0x0, 0x0) 19:18:25 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x1, 0x800) sendmsg(r1, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r1, &(0x7f0000000580)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xffffff4e) r3 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$ARPT_SO_SET_REPLACE(r3, 0x0, 0x60, &(0x7f0000000040)={'filter\x00', 0x7, 0x4, 0x4c8, 0x2f8, 0x0, 0x2f8, 0x3e0, 0x3e0, 0x2f8, 0x4, 0x0, {[{{@uncond, 0xc0, 0x1e8}, @unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x0, 0x0, 'system_u:object_r:ldconfig_cache_t:s0\x00'}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @broadcast, @broadcast}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x518) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4800000010000507000000000000000300000000", @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="380000002400e5040000004007a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB='@\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r2, @ANYRES16], 0x40}}, 0x4000080) r4 = socket(0x1000000010, 0x80002, 0x0) recvmsg$unix(r4, &(0x7f00000009c0)={&(0x7f0000000600), 0x6e, &(0x7f0000000900)=[{&(0x7f0000000680)=""/170, 0xaa}, {&(0x7f0000000740)=""/241, 0xf1}, {&(0x7f0000000840)=""/181, 0xb5}], 0x3, &(0x7f0000000940)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x78}, 0x10140) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r6, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x30, r8, 0x721, 0x0, 0x0, {{}, {@val={0x8}, @val={0x8, 0x3, r7}, @val={0xc}}}}, 0x30}}, 0x0) sendmsg$NL80211_CMD_DEL_INTERFACE(r5, &(0x7f0000000ac0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x20, r8, 0x100, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x7, 0x55}}}}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x80000) sendmmsg$alg(r4, &(0x7f0000000200), 0x4924924924926d3, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) 19:18:25 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xa, 0x4, @remote}, {0xa, 0x4, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x68}}, 0x0) 19:18:25 executing program 4: r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x10) sendto$inet(r0, &(0x7f0000000040)='\'', 0x1, 0x0, 0x0, 0x0) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)=[{0x0}, {&(0x7f0000000140)="bf9039e7d922447b135382f9bc24e4c2af725e372d8a30ae3aad15899132391f957d2f2654edd0bd03ea481fb4361e7065e0eb39017b75ab21f05e6709675c2f16fda5ac28920df0180f572086aa60c60821a4f2fb3191d09cac307563797ab5b5e691f6ab11fe15fbb6e440e0bc03e130b9c09aa87a0c2135f10c6d2b6bddb8055ff38ec7ed321d8f0f46e7f76aec86a2e6d68dc237d6352a8082da623d0dcc0e1bad5b1072bdb0982822b84f4096368503f21a760b388274106e056fdda496c99e7990", 0xc4}, {0x0}], 0x3}, 0x0) 19:18:25 executing program 5: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$inet_icmp_raw(0x2, 0x3, 0x1) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0x4240a2a0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x400fe0, 0x0) 19:18:25 executing program 3: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB="440000001000390400"/20, @ANYRES32=r3, @ANYBLOB="0304000000000000240012800b00010067656e65766500001400028005000d000200000005000c0001"], 0x44}}, 0x0) bind$packet(r0, &(0x7f00000000c0)={0x11, 0xc, r3}, 0x14) sendto$inet6(r0, &(0x7f0000000240)="0503cf2846f47baa146aa6000800", 0xe, 0x0, 0x0, 0x0) [ 510.599514][T24886] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 19:18:25 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x5c, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x20, 0x11, 0x0, 0x1, @log={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_LOG_LEVEL={0x8}, @NFTA_LOG_GROUP={0x6}]}}}]}], {0x14, 0x10}}, 0xa4}}, 0x0) [ 510.787311][T24888] hsr0 speed is unknown, defaulting to 1000 [ 510.854806][T24896] hsr0 speed is unknown, defaulting to 1000 19:18:25 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xa, 0x4, @remote}, {0xa, 0x4, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x68}}, 0x0) 19:18:25 executing program 1: unshare(0x60040200) r0 = socket$l2tp(0x2, 0x2, 0x73) connect(r0, &(0x7f0000000780)=@in6={0xa, 0x0, 0x0, @empty}, 0x80) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x2c, r2, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x4}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e22}, @L2TP_ATTR_PEER_SESSION_ID={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x24000810) getgid() setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000000)='highspeed\x00', 0xa) getsockopt$IP_SET_OP_GET_BYNAME(r0, 0x1, 0x53, &(0x7f0000000040)={0x6, 0x7, 'syz1\x00'}, 0x0) 19:18:26 executing program 4: writev(0xffffffffffffffff, &(0x7f00000033c0)=[{&(0x7f00000000c0)='7', 0x1}], 0x1) r0 = socket$inet6(0xa, 0x802, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) sendmmsg(r0, &(0x7f0000002cc0), 0x1a3, 0x0) [ 511.240011][T24957] hsr0 speed is unknown, defaulting to 1000 19:18:26 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001780)={0x0, 0x0, &(0x7f0000001740)={&(0x7f0000001440)=@newpolicy={0xb8, 0x13, 0x1, 0x0, 0x0, {{@in=@broadcast, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {}, {}, 0x0, 0x0, 0x0, 0x2}}, 0xb8}}, 0x0) 19:18:26 executing program 4: writev(0xffffffffffffffff, &(0x7f00000033c0)=[{&(0x7f00000000c0)='7', 0x1}], 0x1) r0 = socket$inet6(0xa, 0x802, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) sendmmsg(r0, &(0x7f0000002cc0), 0x1a3, 0x0) [ 511.884859][T24896] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. 19:18:27 executing program 2: unshare(0x48040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x13c, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x3, 0x0, 0xf201}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0xff00}, 0x0) sendmsg$NL80211_CMD_SET_CHANNEL(0xffffffffffffffff, 0x0, 0x0) 19:18:27 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000001700)={&(0x7f0000001680)={0x1c, 0x2, 0x3, 0x301, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r5 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r5, &(0x7f0000000200), 0x4924924924926d3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x70d, 0x60bd26, 0x0, {0x0, 0x0, 0x0, r4, 0x0, 0x2000}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x4, 0x2, 0x0, 0x1, @void}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2000000010000d0400"/20, @ANYRES32=r4, @ANYBLOB="b3a7cac6000000005772f59e4994e0376462ade756ae3498182b1751d65b178f49631820bf9e2bd1bdbec2639185000178ee142ea3cbffe065bb18b6dc16a97b302422e450bd07959ba8c34c1f5ae662b0594ccdca2e269d433f0201e5803f0d2c4d3723ce1cc70064c0c0cb3a52697cc449985d4bb343ff761ae8594045a6c8741b24042e80c1ec3501f50718aa2342acf50b65a9327c4d9c37a1fe9a"], 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000240)=@newlink={0x20, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x0, 0x2221}}, 0x20}, 0x1, 0xa000000}, 0x0) 19:18:27 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000008180)={0x0, 0x0, &(0x7f0000008140)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000005e000100"/20, @ANYRES32=r2, @ANYBLOB='\\'], 0x1c}}, 0x0) 19:18:27 executing program 1: unshare(0x60040200) r0 = socket$l2tp(0x2, 0x2, 0x73) connect(r0, &(0x7f0000000780)=@in6={0xa, 0x0, 0x0, @empty}, 0x80) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x2c, r2, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x4}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e22}, @L2TP_ATTR_PEER_SESSION_ID={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x24000810) getgid() setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000000)='highspeed\x00', 0xa) getsockopt$IP_SET_OP_GET_BYNAME(r0, 0x1, 0x53, &(0x7f0000000040)={0x6, 0x7, 'syz1\x00'}, 0x0) 19:18:27 executing program 4: writev(0xffffffffffffffff, &(0x7f00000033c0)=[{&(0x7f00000000c0)='7', 0x1}], 0x1) r0 = socket$inet6(0xa, 0x802, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) sendmmsg(r0, &(0x7f0000002cc0), 0x1a3, 0x0) 19:18:27 executing program 3: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB="440000001000390400"/20, @ANYRES32=r3, @ANYBLOB="0304000000000000240012800b00010067656e65766500001400028005000d000200000005000c0001"], 0x44}}, 0x0) bind$packet(r0, &(0x7f00000000c0)={0x11, 0xc, r3}, 0x14) sendto$inet6(r0, &(0x7f0000000240)="0503cf2846f47baa146aa6000800", 0xe, 0x0, 0x0, 0x0) [ 512.321081][T24999] hsr0 speed is unknown, defaulting to 1000 [ 512.332756][T25002] device vxcan3 entered promiscuous mode [ 512.357672][T25001] hsr0 speed is unknown, defaulting to 1000 19:18:27 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000008180)={0x0, 0x0, &(0x7f0000008140)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000005e000100"/20, @ANYRES32=r2, @ANYBLOB='\\'], 0x1c}}, 0x0) 19:18:27 executing program 4: writev(0xffffffffffffffff, &(0x7f00000033c0)=[{&(0x7f00000000c0)='7', 0x1}], 0x1) r0 = socket$inet6(0xa, 0x802, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) sendmmsg(r0, &(0x7f0000002cc0), 0x1a3, 0x0) 19:18:27 executing program 5: r0 = socket(0x15, 0x5, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x1c) [ 512.527148][T25017] hsr0 speed is unknown, defaulting to 1000 19:18:27 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000008180)={0x0, 0x0, &(0x7f0000008140)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000005e000100"/20, @ANYRES32=r2, @ANYBLOB='\\'], 0x1c}}, 0x0) 19:18:27 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv6_getaddr={0x2c, 0x16, 0x1, 0x0, 0x0, {}, [@IFA_LOCAL={0x14, 0x2, @private2}]}, 0x2c}}, 0x0) 19:18:27 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x9, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x69, 0x11, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0xac, &(0x7f0000000200)=""/4096, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) [ 513.342619][T25017] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. 19:18:28 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000008180)={0x0, 0x0, &(0x7f0000008140)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000005e000100"/20, @ANYRES32=r2, @ANYBLOB='\\'], 0x1c}}, 0x0) 19:18:28 executing program 1: unshare(0x60040200) r0 = socket$l2tp(0x2, 0x2, 0x73) connect(r0, &(0x7f0000000780)=@in6={0xa, 0x0, 0x0, @empty}, 0x80) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x2c, r2, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x4}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e22}, @L2TP_ATTR_PEER_SESSION_ID={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x24000810) getgid() setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000000)='highspeed\x00', 0xa) getsockopt$IP_SET_OP_GET_BYNAME(r0, 0x1, 0x53, &(0x7f0000000040)={0x6, 0x7, 'syz1\x00'}, 0x0) 19:18:28 executing program 4: syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(&(0x7f0000005f80), 0xffffffffffffffff) 19:18:28 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x11, 0x4, 0x4, 0x1}, 0x40) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000300)={r0, &(0x7f0000000540), 0x0}, 0x20) 19:18:28 executing program 2: r0 = socket(0x10, 0x803, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000220070f900edffffff", @ANYRES32=r3, @ANYBLOB="139b0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001580)=ANY=[@ANYBLOB="8800000024000b0f0000001e00000000001f4b00", @ANYRES32=r3, @ANYBLOB="00000000ffffffff000000000b0001006d717072696f00005800020001000000000000000000000000000000000010"], 0x88}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x2b) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001580)=ANY=[], 0x88}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000800)=@newtfilter={0x24, 0x2a, 0x1, 0x0, 0x0, {0xe, 0x0, 0x0, r5, {0x10}}}, 0x24}}, 0x0) 19:18:28 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x64, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x28, 0x11, 0x0, 0x1, @cmp={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CMP_OP={0x8}, @NFTA_CMP_DATA={0x8, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4}]}, @NFTA_CMP_SREG={0x8}]}}}]}], {0x14, 0x10}}, 0xac}}, 0x0) 19:18:28 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$sock(r0, &(0x7f0000000480)={&(0x7f0000000000)=@in6={0xa, 0x4e20, 0x0, @mcast1}, 0x80, 0x0, 0x0, &(0x7f00000002c0)=[@mark={{0x14, 0x29, 0x34}}], 0x18}, 0x0) 19:18:28 executing program 0: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700) pwritev(r1, &(0x7f00000004c0)=[{0x0}, {0x0}, {&(0x7f0000000200)="db", 0xfffff000}], 0x3, 0x8040000, 0x0) r2 = socket$kcm(0x29, 0x2, 0x0) ioctl$int_in(r2, 0x5452, &(0x7f0000000080)=0xae) sendfile(r2, r0, 0x0, 0x100000004) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) 19:18:28 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x20, 0x0, 0x100, 0x0, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x0, 0x24}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x4000004}, 0x20000004) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) syz_genetlink_get_family_id$nl80211(0x0, r1) accept4(r1, &(0x7f0000000400)=@qipcrtr, &(0x7f00000002c0)=0x80, 0x80000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000380)={&(0x7f0000000500)={0x18, 0x0, 0x100, 0x70bd25, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}]}, 0x18}}, 0x0) connect$netrom(r2, &(0x7f0000000080)={{0x6, @rose}, [@bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) listen(r2, 0x0) unshare(0x40000080) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r4, &(0x7f0000000200), 0xf000) sendfile(r4, r3, 0x0, 0x800000000000c) getpeername$netrom(r2, 0x0, &(0x7f0000001680)) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) [ 513.906445][T25104] hsr0 speed is unknown, defaulting to 1000 19:18:29 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000040)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x8}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r1}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8, 0x14}]}}}]}, 0x3c}}, 0x0) [ 514.009846][T25113] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 514.096248][ T26] audit: type=1804 audit(1634671109.058:320): pid=25136 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir428718356/syzkaller.vaoGIa/396/memory.events" dev="sda1" ino=14690 res=1 errno=0 19:18:29 executing program 5: r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, 0x0, 0x0) [ 514.245830][T25113] device bond1 entered promiscuous mode [ 514.261202][ T26] audit: type=1800 audit(1634671109.058:321): pid=25136 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="memory.events" dev="sda1" ino=14690 res=0 errno=0 [ 514.297619][T25113] 8021q: adding VLAN 0 to HW filter on device bond1 [ 514.334865][ T26] audit: type=1804 audit(1634671109.058:322): pid=25136 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir428718356/syzkaller.vaoGIa/396/memory.events" dev="sda1" ino=14690 res=1 errno=0 [ 514.485101][ T26] audit: type=1804 audit(1634671109.168:323): pid=25150 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir428718356/syzkaller.vaoGIa/396/memory.events" dev="sda1" ino=14690 res=1 errno=0 [ 514.517316][ T26] audit: type=1800 audit(1634671109.398:324): pid=25136 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="memory.events" dev="sda1" ino=14690 res=0 errno=0 19:18:29 executing program 5: r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @multicast1}, 0xc) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000080)={@multicast1, @dev}, 0xc) syz_emit_ethernet(0x36, &(0x7f0000001800)={@random="dbad6dadf711", @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1=0xe0000002}, @timestamp_reply={0x11}}}}}, 0x0) [ 514.567545][T25113] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 514.582150][ T26] audit: type=1804 audit(1634671109.398:325): pid=25136 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir428718356/syzkaller.vaoGIa/396/memory.events" dev="sda1" ino=14690 res=1 errno=0 [ 514.622154][T25166] hsr0 speed is unknown, defaulting to 1000 19:18:29 executing program 2: r0 = socket(0x10, 0x803, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000220070f900edffffff", @ANYRES32=r3, @ANYBLOB="139b0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001580)=ANY=[@ANYBLOB="8800000024000b0f0000001e00000000001f4b00", @ANYRES32=r3, @ANYBLOB="00000000ffffffff000000000b0001006d717072696f00005800020001000000000000000000000000000000000010"], 0x88}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x2b) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001580)=ANY=[], 0x88}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000800)=@newtfilter={0x24, 0x2a, 0x1, 0x0, 0x0, {0xe, 0x0, 0x0, r5, {0x10}}}, 0x24}}, 0x0) [ 514.776534][ T26] audit: type=1804 audit(1634671109.428:326): pid=25136 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir428718356/syzkaller.vaoGIa/396/memory.events" dev="sda1" ino=14690 res=1 errno=0 [ 515.020428][T25277] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 515.225030][T25277] device bond2 entered promiscuous mode [ 515.280081][T25277] 8021q: adding VLAN 0 to HW filter on device bond2 [ 515.355128][T25166] hsr0 speed is unknown, defaulting to 1000 19:18:33 executing program 1: unshare(0x60040200) r0 = socket$l2tp(0x2, 0x2, 0x73) connect(r0, &(0x7f0000000780)=@in6={0xa, 0x0, 0x0, @empty}, 0x80) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x2c, r2, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x4}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e22}, @L2TP_ATTR_PEER_SESSION_ID={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x24000810) getgid() setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000000)='highspeed\x00', 0xa) getsockopt$IP_SET_OP_GET_BYNAME(r0, 0x1, 0x53, &(0x7f0000000040)={0x6, 0x7, 'syz1\x00'}, 0x0) 19:18:33 executing program 0: r0 = socket(0x10, 0x803, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000220070f900edffffff", @ANYRES32=r3, @ANYBLOB="139b0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001580)=ANY=[@ANYBLOB="8800000024000b0f0000001e00000000001f4b00", @ANYRES32=r3, @ANYBLOB="00000000ffffffff000000000b0001006d717072696f00005800020001000000000000000000000000000000000010"], 0x88}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x2b) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001580)=ANY=[], 0x88}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000800)=@newtfilter={0x24, 0x2a, 0x1, 0x0, 0x0, {0xe, 0x0, 0x0, r5, {0x10}}}, 0x24}}, 0x0) 19:18:33 executing program 3: r0 = socket(0x10, 0x803, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000220070f900edffffff", @ANYRES32=r3, @ANYBLOB="139b0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001580)=ANY=[@ANYBLOB="8800000024000b0f0000001e00000000001f4b00", @ANYRES32=r3, @ANYBLOB="00000000ffffffff000000000b0001006d717072696f00005800020001000000000000000000000000000000000010"], 0x88}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x2b) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001580)=ANY=[], 0x88}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000800)=@newtfilter={0x24, 0x2a, 0x1, 0x0, 0x0, {0xe, 0x0, 0x0, r5, {0x10}}}, 0x24}}, 0x0) 19:18:33 executing program 5: r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @multicast1}, 0xc) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000080)={@multicast1, @dev}, 0xc) syz_emit_ethernet(0x36, &(0x7f0000001800)={@random="dbad6dadf711", @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1=0xe0000002}, @timestamp_reply={0x11}}}}}, 0x0) 19:18:33 executing program 2: r0 = socket(0x10, 0x803, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000220070f900edffffff", @ANYRES32=r3, @ANYBLOB="139b0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001580)=ANY=[@ANYBLOB="8800000024000b0f0000001e00000000001f4b00", @ANYRES32=r3, @ANYBLOB="00000000ffffffff000000000b0001006d717072696f00005800020001000000000000000000000000000000000010"], 0x88}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x2b) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001580)=ANY=[], 0x88}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000800)=@newtfilter={0x24, 0x2a, 0x1, 0x0, 0x0, {0xe, 0x0, 0x0, r5, {0x10}}}, 0x24}}, 0x0) [ 518.239438][T25372] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. 19:18:33 executing program 5: r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @multicast1}, 0xc) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000080)={@multicast1, @dev}, 0xc) syz_emit_ethernet(0x36, &(0x7f0000001800)={@random="dbad6dadf711", @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1=0xe0000002}, @timestamp_reply={0x11}}}}}, 0x0) 19:18:33 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x20, 0x0, 0x100, 0x0, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x0, 0x24}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x4000004}, 0x20000004) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) syz_genetlink_get_family_id$nl80211(0x0, r1) accept4(r1, &(0x7f0000000400)=@qipcrtr, &(0x7f00000002c0)=0x80, 0x80000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000380)={&(0x7f0000000500)={0x18, 0x0, 0x100, 0x70bd25, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}]}, 0x18}}, 0x0) connect$netrom(r2, &(0x7f0000000080)={{0x6, @rose}, [@bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) listen(r2, 0x0) unshare(0x40000080) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r4, &(0x7f0000000200), 0xf000) sendfile(r4, r3, 0x0, 0x800000000000c) getpeername$netrom(r2, 0x0, &(0x7f0000001680)) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) [ 518.422563][T25372] device bond3 entered promiscuous mode [ 518.452579][T25372] 8021q: adding VLAN 0 to HW filter on device bond3 [ 518.480176][T25374] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 518.601225][T25374] device bond8 entered promiscuous mode [ 518.630707][T25374] 8021q: adding VLAN 0 to HW filter on device bond8 [ 518.650842][T25373] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 518.778427][T25373] device bond1 entered promiscuous mode [ 518.791057][T25373] 8021q: adding VLAN 0 to HW filter on device bond1 19:18:33 executing program 2: r0 = socket(0x10, 0x803, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000220070f900edffffff", @ANYRES32=r3, @ANYBLOB="139b0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001580)=ANY=[@ANYBLOB="8800000024000b0f0000001e00000000001f4b00", @ANYRES32=r3, @ANYBLOB="00000000ffffffff000000000b0001006d717072696f00005800020001000000000000000000000000000000000010"], 0x88}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x2b) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001580)=ANY=[], 0x88}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000800)=@newtfilter={0x24, 0x2a, 0x1, 0x0, 0x0, {0xe, 0x0, 0x0, r5, {0x10}}}, 0x24}}, 0x0) 19:18:33 executing program 3: r0 = socket(0x10, 0x803, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000220070f900edffffff", @ANYRES32=r3, @ANYBLOB="139b0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001580)=ANY=[@ANYBLOB="8800000024000b0f0000001e00000000001f4b00", @ANYRES32=r3, @ANYBLOB="00000000ffffffff000000000b0001006d717072696f00005800020001000000000000000000000000000000000010"], 0x88}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x2b) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001580)=ANY=[], 0x88}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000800)=@newtfilter={0x24, 0x2a, 0x1, 0x0, 0x0, {0xe, 0x0, 0x0, r5, {0x10}}}, 0x24}}, 0x0) [ 518.993549][T25461] hsr0 speed is unknown, defaulting to 1000 [ 518.994159][T25502] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. 19:18:34 executing program 0: r0 = socket(0x10, 0x803, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000220070f900edffffff", @ANYRES32=r3, @ANYBLOB="139b0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001580)=ANY=[@ANYBLOB="8800000024000b0f0000001e00000000001f4b00", @ANYRES32=r3, @ANYBLOB="00000000ffffffff000000000b0001006d717072696f00005800020001000000000000000000000000000000000010"], 0x88}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x2b) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001580)=ANY=[], 0x88}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000800)=@newtfilter={0x24, 0x2a, 0x1, 0x0, 0x0, {0xe, 0x0, 0x0, r5, {0x10}}}, 0x24}}, 0x0) 19:18:34 executing program 5: r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @multicast1}, 0xc) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000080)={@multicast1, @dev}, 0xc) syz_emit_ethernet(0x36, &(0x7f0000001800)={@random="dbad6dadf711", @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1=0xe0000002}, @timestamp_reply={0x11}}}}}, 0x0) [ 519.126500][T25502] device bond4 entered promiscuous mode [ 519.133542][T25502] 8021q: adding VLAN 0 to HW filter on device bond4 [ 519.141618][T25377] hsr0 speed is unknown, defaulting to 1000 [ 519.219896][T25525] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 519.280838][T25525] device bond9 entered promiscuous mode [ 519.317635][T25525] 8021q: adding VLAN 0 to HW filter on device bond9 [ 519.339831][T25548] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 19:18:34 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x20, 0x0, 0x100, 0x0, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x0, 0x24}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x4000004}, 0x20000004) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) syz_genetlink_get_family_id$nl80211(0x0, r1) accept4(r1, &(0x7f0000000400)=@qipcrtr, &(0x7f00000002c0)=0x80, 0x80000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000380)={&(0x7f0000000500)={0x18, 0x0, 0x100, 0x70bd25, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}]}, 0x18}}, 0x0) connect$netrom(r2, &(0x7f0000000080)={{0x6, @rose}, [@bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) listen(r2, 0x0) unshare(0x40000080) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r4, &(0x7f0000000200), 0xf000) sendfile(r4, r3, 0x0, 0x800000000000c) getpeername$netrom(r2, 0x0, &(0x7f0000001680)) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) [ 519.522434][T25548] device bond2 entered promiscuous mode [ 519.533688][T25548] 8021q: adding VLAN 0 to HW filter on device bond2 [ 519.768142][T25642] hsr0 speed is unknown, defaulting to 1000 19:18:37 executing program 3: r0 = socket(0x10, 0x803, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000220070f900edffffff", @ANYRES32=r3, @ANYBLOB="139b0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001580)=ANY=[@ANYBLOB="8800000024000b0f0000001e00000000001f4b00", @ANYRES32=r3, @ANYBLOB="00000000ffffffff000000000b0001006d717072696f00005800020001000000000000000000000000000000000010"], 0x88}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x2b) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001580)=ANY=[], 0x88}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000800)=@newtfilter={0x24, 0x2a, 0x1, 0x0, 0x0, {0xe, 0x0, 0x0, r5, {0x10}}}, 0x24}}, 0x0) 19:18:37 executing program 5: unshare(0x6c060000) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)={0x2, 0x4, 0x6, 0x1ff0}, 0x40) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000040)={0x0, &(0x7f00000000c0)=""/214, &(0x7f0000000080), &(0x7f00000001c0), 0x1404, r0}, 0x38) splice(0xffffffffffffffff, &(0x7f0000000080), 0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x80003, 0x0) vmsplice(r1, &(0x7f00000016c0)=[{0x0}, {&(0x7f0000000280)="6269df3e1f6a3db0635901b537e66f0ef7726b2a4094970be2c94397d87d21e9d96d793317e314f3821227919088a46caf5932b64d6434c15019a864271453ab79751dc9bed661deccc4d2d7683dc47adf4eb19d0a8af57aa6d5868aeffb29d8f54b4f76f9d234db3019627414afa167357cdc0b43a4a392bb42a785a86d64424f0d0d13db7ecbcde3572e2fbc99f5504132f46c5a46096745e5188cd40e913eee6ce936379cba141be55cba3e42aa1ecfde0a335a587391e4f212896de6e9e865de", 0xc2}, {&(0x7f0000000380)="81ec884b1580760a1528789005d912803c979f4f79a9ffbacd4f6aebb94d0e77388d940e5f47", 0x26}, {&(0x7f0000001940)="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", 0x275}, {&(0x7f00000005c0)}, {&(0x7f00000006c0)="9143ce0ff215076a364dc6e4c1a44d6d826124a5a88739371bc47f34d550a7842cb13ae4670add729afbe7e5ed5b23ce8ccbc4bf2d3b635e9a61c8422d6eb9f89af101bca8639a6e56f8c164390b8930a0d50ad7cc858dd567799cbda914515ce09df7bb2f191ea11a33fce4fcb9489e17aa5f8b3eec4bd18ac18ba0a53e9ac41ae05048015c78526b2fdcc526b17c01c8861b547ccf5f775cb63249920f3f0268ddac95aad07e37ee2f41576024d5e4070597eaa164a1ece9e47700cfe46e4c8b074ac78ecd4ca35fafd48929ef5bdf418f977cb6bacb3cefb0f5fc21f38d493708700c561372367bfdd3c80832cdf77afd11bb8b8122196664fd2b7dd1b0a0145d090a98b6d23fa3fe18dcf8f649c1667e4434a02dbbd6e13dffe2f3edd5bfb8df1e983e8d260d5552467c2f6b8800ec1f09eb23b0819b9c184149dbf270705b05c4dd3bb30ec3f0eceeee8319f5c96b517185e020875fc755d07e4dc85dd065ac031f53c58461e12ff48eed541228a2fc027e0e90d0e9350e9a080480653886dc681801143c961a57e4e431254787ecc508774cd063f76ad1ae1bfeeb6697be91db6753be2979cccdcbdedd0f93d61e9ed7e11f18ad3adec54060154a25acdb476d6d24c9511377b6b5f0c4a65b50e6e79376e56ff29d2532e03033849876db95a0a5db2cea47928928ea844645dbfdf4a9bed09d6276ca236b68311f3bff50365a512f8476b3388c37d93164170fd4b18ec32c4bd3d95bf07cb95091312c7e450fe92ceba9082b00b3173f52261343debba7d8b9c9f3103022bdca6a33b5c7ad576a03a8e010e59aa419eac0636ef41f1b780bd21f3fddc181253293e5860d3a61649ae78bbdad8e3a91229b35df318a52aba78dfc9f256164c9de94d93fdadde06989ec036ae51df38763274ef2044b9c95546573d7f7e39a1252eb1de278ee81b1dae73ebaf02b36e827871b076cc968a7ede19391f2688b75f32f6b7474165a07fb3db9c86edbaa3c195ee83d573bd2ab5a6f9bdcd503565a2e5e6b7531373094d25ec15ecd02f806e1af8660fdf7ea1d743ba347fec5d3bbf9c449aeb9a98a538f4ed551a60b7acc8c06034304e720fcb5d1715f98af8d06bea0b0a2171e781d9078ef33892f7aa6a8ac7073bb16c2c6a4f82898b921fcd40acc9c5e1bb4eb11ba4af044f1e4f82bf09862adb3d868e3eb25c14675e2c622eb9b6078cbfe2ab42fdd12c33ef69e791c7c544b04516e019155be6cfbac702e7ff85aedbe50229039cd9b52f16bdd93356795c65ee3c8041a0a879f83359ac5c5f3f32767cf79d398aaf7c928d848632963c3e5d11d2c48b48933ea7362d261460510c1aa84b0845881b370e9bc6c714275c0e6f678c905580e7077946997cb27efd608e4aebd7f966f1abf54d4c09606b533b9e8878075e6573b3aae7c6436562c2f7c1df6f2474744f2d85e3ddc9eb46f14caa3b1ca8d9b674d908ba96c3d89b416e66b8f16b2b3df8a715444c507e4e8164d9f51ad19f0978aaa955e8c831615656a5fad2b41224b095cbb9ef28e3fba22e20b811b50a89953c573bbaf1dc1ba685c4c2a4a2c97b2e40d2a986762d9f9d2acbcf88603ab34295ac2570003b66db3bbafef0a4ea8d391133a9aed3a5dea6daec4af81a50b9ecc7af7fa4902c1ac821429a8fe681d5c73b64ecbacfb1a6d392841518fdd428cca134133ab68a20725450b04b011cec1c4954e0d495d1ff3944a52cd1fe563890b061b904a691067d624b0d50ca34432ec50e01d559a360d0cca9047d60c719abab755a839336dfd98cdcc3a739e575f46bceb8963a3f147586664447e0d4eb40e5b804c1f6f2fa6d8a03f96e036010f7ea79886e72505f790c02385edfff00a1b5d1daeb460e3b9ec6ca8cdb0188f21ceba3e67bd4ee1e4185d71405db1a22042f3792fd995d63e7ff59e054564fe6142de190309846e67c5e228d9304e709b9a0509df69d8c271a95fb37a9837a5c253a17753cff036409d2d61589b7bc163e953d9df9315d3170b6983ce7c1d042753b78cb1453a47b2907b3f1a406016d035dc993af16d418f50004a2dedf0550d8af4c87110bd2be0fec4bf2881045cd2133296e06208ca1aa00478d1c57ad322da2d97555ee5bb01d3b4b7e53da169a316b455fb28dd3ab93573990a1b6eb66963e28f9e0b639731e369ebf88327288b49b91ebeebaaa9010802ea15c8d68e0224f718edbd61e5ef8dcf18099c3845718612102f520f15db00746fe105836f0bc96f31dd45ba151673d4f429439670ca5b7d37a39e147b116035546388a4f694f9a13155cd8e05eb0823a76892e0cc4bf2ce8885409338854e31713f8ce32efa0dee4acee64dc1d8bf49b1609489ce306ce80004d6e6069baafddb8d9abdc7cac0a4f1cc6ed3d0f5fa17ea9e1e25b657edc7723bcf07f4b00fdda58a46d713fbdd5f74009ccb67143c0cf8d03098257e684c4bc974c72bde9baeb3ca7629d8eee64ecd831ac0f337c964b4f977d1199f9cd128e1581f913d15fd5cb54e5afedd59648002f6434a73e177c529e75dfa807da5163a06ad6abc76ef6e9b0951e9ec2098c6681c0a9d3d4c5bcf0afb2c609a0940886256cec9bb143ea525ade16a31c2673066ca881c22a690bc46ed761e29c31f176a10b2b8aee43f0f67c79bf5b68747079b46905bd377c57ad271d75805ef79ee50c5fd35de8b48ba879f93f04af28a556fab458ac84571b75f3f7ced49572a9dfe2fc906ad446817617924ab9debab50bd53b8ca1ef91b3e383f3cde0abe39d4cb6244114feb981c30031d86f93606ca7cbf3d6fba9237b6d5d8b673ad00e63fddd95e3c1174ef879108d65a7820e0a01bb9aa08c80cfd074e45378dc141c02d6099eed7ffa14c3331177bf86c5729836e1ba0d221b855179d16652a34b9f29e727037d39b742ca4b2193c6b8575451627f8318e68813617efa06624fd1eb7782871e6253d42c42c9484ce4f3ac8a095e74712d09d6fcb24e2c7178481e617635844044252953f9ad7b4a4e0820c52bd23cea7e39b17cf37928fef273f70a605f345f09163d661da43a9ffd97dfc0867acb2aaecc2ada45156bfe504775d03baa77ec0218b3cb553bde3ae88b7b88907e2b945e0798139915af8eaef071b224fefd1cec92b534e7ec6dd35d0d7acef8fa25967301a739201ae11cf6879c7be8b0b0ff7c2bdec047743b806b1809b4ab5252b9a36fc5a254f1b1ad706c76120e47602c046b2c5e78ba10c0c024d65338c9b3369e3d2168ceb5156ced3e533c96452750f50e1ff5ddf5d74296008942ef33a3dd74c0fa76cfdd44b3fbbd3d2c10e8bef23102a1734008d1978550a4beb3a93e9641eeea2f7bea4659d6eec0bf181ed06d94fe59acb81723dc5f4dde56719599c8e7824c95b698135af255d28238dc3d139645a8b866a41e378db47d7360f22fde32dddbea56bd56f0999e3bd856abe7a7c65000152c9fe382a16c6df8d6a85309be3c71bf8fb403402d84bd7d0f3189572f3c4b891a058f6eea1764e23be967f2da140f0cd20ef9d353ac0519a3f559f8f46bb622d19a14201195b041d2d37519abf082fa463b7bfa65009aa3949e5ef31487b647287c93fc674f173b2de372eccde40ce0320caddea16c0873affeee044b9ce6a33bcee6fddc709ecfe45238fe5cae219b533b714e8d661eed30ccc997ae9c0fe2efe05aba6b8dcb372dcc835f7eb1c271e8345c5a73a97cb784cd481c164bf3ad528d5205e0ac5158f5f9d8dd8fb083bb16898d868faaed084d989916f2aec516d0e82bea1359aa23f4a85f45fa2e690a2750ba80776f9fe4f5f8108232170a2eb3af0a4bf446283526cb2d04a19d5cc25359015bdabfddd42e6ae8973ed7807b6d0b0e51484e49d94f3c2c0780e0b93f02330481d2d111d54160386109077a2cb11caef77b337c8b846f2008b51f360b384d9864679765ebfc4acf87225fcbe82614666485e0992b21c022acfabcab4f5cd80b42ecd9014c2a1b006f7f8328e4dcafd00aec2c2af17dc5956105e2c606be2cdbed7568fc87809551a52a2b6e790f9ecbec56872aba4f93767cf7643e64e4a18dcb16e19fd98e9de887ca9b104b3bf8f51c7f5a0ca57147f3d64937b4b26277ea3f4443d8f79e1d5adddb9fa661a0fddc139708edcc3bf1761dd7ed1594e4259c27a75075bb1ca39a80589b91b91308f84fd12c1e539e248e62611c3676190a08d12ac50530540738b2030b4a04e9872560a9b9164f79b823d0297b6d47038055f0a71ad072b57c5fb25d39991fe3206a9236504482d7614e7b4ee4f1d0ea181d3895a70bd3376c16e668c524629b2bc049d0c5804c944f548db3a40f5b9c395483e9335d986cab1741e94645b554ec36e55a51cb3d25820dda738e900af3c67333a6e135def6d7be89cccc15a7a0c24cfd7325bacf6af5aefda5bd15a4a48b8930fcf13acf589e868af4bdab66e178adf51a3e1ccdbd017ab66bc78b5257d9c7a68887cdaca46f4c4f732fdae0815965c6bfe303cd59d71ba77c0d2b099d123c5989a5e61e89058914a9e7c005753ed007a56297a387900319421b1d79ed6f536be94dd3a310d630a4ae64c988f36b0ff98d8c1dfb2a2cd4c86286b6509e670db50b86b163e812df267eee824e2f3f7a694a514ec52b14c249d0b643b070ada0e1f1d6353a7ae7f370824913b57ff464018ebdec329e5460c883b59777bbac87ab09aea9aeb77ce68355442f7c56aa8a9cd2331cacd488b2a822928547e8596e19b67c370cad6de316e1fdbb411792cdee67237cca4e26d073a8f2c74de54926a484e911a71a2a7cd14d71a54bc91ae00f11861c5c8f7b3b8137affd083eecbb9ace2b7a36d8cd60fa4984bc57f227d4a3d2a3894b6239c052324936990d5d36db3fbc6a9452ab7c45d2ea863a98590e92e0a46025b1ff728078e85ca4a70309f6e9453c16317027ddb462665962e28bd2b5e5f354eb14bc79dc53272c00edaa443d5673bc08850ab06808f8675e7a8a94bdf942ed555e20b70394837663cb5711c9c01c6b78c5a51ae5626f56b968ed821e0039d36f094a648cb8cf2cbf88d59ec683fe3039d70663d3cdca710ee11d21542ffe2366db4d000ec28b32fcbc9b31b7b2b5c219344b0fd1cbb2786852fba469faff0e7dfbd9320be3dea56924cb638572f6a436550d3938cd656279b593077a0535a5e66eb820855ccd31751daed9427f2e790796cd14d78d6551f475c215ec8968afc8e697e488d99fa02e756b8b951872701310c38d1e47e0e75b5a5aba00ea8bc58a019921f2e88f2ab61199fb841b63b8c4488a773e244f3e2d44f824350602f927ac2693a53fb4be233a99045a8382a7b437642fa9b743a87566a45a274113dd83143c76cd930285898ad4044aa417dbf2de72daa", 0xefc}], 0x6, 0x8) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @mcast1, 0xf2}, 0x1c) bind$inet6(r1, &(0x7f00000001c0)={0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, '\x00', 0x22}, 0x4}, 0x1c) 19:18:37 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x20, 0x0, 0x100, 0x0, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x0, 0x24}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x4000004}, 0x20000004) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) syz_genetlink_get_family_id$nl80211(0x0, r1) accept4(r1, &(0x7f0000000400)=@qipcrtr, &(0x7f00000002c0)=0x80, 0x80000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000380)={&(0x7f0000000500)={0x18, 0x0, 0x100, 0x70bd25, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}]}, 0x18}}, 0x0) connect$netrom(r2, &(0x7f0000000080)={{0x6, @rose}, [@bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) listen(r2, 0x0) unshare(0x40000080) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r4, &(0x7f0000000200), 0xf000) sendfile(r4, r3, 0x0, 0x800000000000c) getpeername$netrom(r2, 0x0, &(0x7f0000001680)) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) 19:18:37 executing program 0: r0 = socket(0x10, 0x803, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000220070f900edffffff", @ANYRES32=r3, @ANYBLOB="139b0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001580)=ANY=[@ANYBLOB="8800000024000b0f0000001e00000000001f4b00", @ANYRES32=r3, @ANYBLOB="00000000ffffffff000000000b0001006d717072696f00005800020001000000000000000000000000000000000010"], 0x88}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x2b) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001580)=ANY=[], 0x88}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000800)=@newtfilter={0x24, 0x2a, 0x1, 0x0, 0x0, {0xe, 0x0, 0x0, r5, {0x10}}}, 0x24}}, 0x0) 19:18:37 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x20, 0x0, 0x100, 0x0, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x0, 0x24}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x4000004}, 0x20000004) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) syz_genetlink_get_family_id$nl80211(0x0, r1) accept4(r1, &(0x7f0000000400)=@qipcrtr, &(0x7f00000002c0)=0x80, 0x80000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000380)={&(0x7f0000000500)={0x18, 0x0, 0x100, 0x70bd25, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}]}, 0x18}}, 0x0) connect$netrom(r2, &(0x7f0000000080)={{0x6, @rose}, [@bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) listen(r2, 0x0) unshare(0x40000080) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r4, &(0x7f0000000200), 0xf000) sendfile(r4, r3, 0x0, 0x800000000000c) getpeername$netrom(r2, 0x0, &(0x7f0000001680)) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) 19:18:37 executing program 1: r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000380)={0x28, 0x0, 0x0, @host}, 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000040), 0x10) r2 = accept$alg(r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000002080)=[{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000000500)="4bb2255b78a70ab535802f18654edd0bd0a8d71e7b0c0c9de41bf4cb50c591fe3fcf452f0cd6a2cb03e3f5741955eea8d76ce6add110b73815dc4860a34d2d0d478c4f0299dede0fc420d21aa0042d1771ec3649a183c446edec81187e0be480baae9eb106d7bf5e53e112dbf8570711a9e4cfcbd57404b9987356cde513cfd12a2f38a1bc2cc75e908d7707825278", 0x8f}], 0x1}], 0x1, 0x0) read(r1, &(0x7f00000016c0)=""/112, 0x70) [ 522.410326][T25714] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 19:18:37 executing program 1: r0 = socket(0x10, 0x3, 0x9) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x300}, 0x0) [ 522.598566][T25714] device bond3 entered promiscuous mode [ 522.646506][T25714] 8021q: adding VLAN 0 to HW filter on device bond3 [ 522.729576][T25715] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 19:18:37 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x13, 0x10, 0x3}, 0x2c) bpf$MAP_UPDATE_ELEM(0x4, &(0x7f0000000100)={r0, 0x0, 0x0}, 0x20) [ 522.862395][T25715] device bond10 entered promiscuous mode [ 522.869049][T25715] 8021q: adding VLAN 0 to HW filter on device bond10 [ 522.907897][T25736] hsr0 speed is unknown, defaulting to 1000 [ 522.975529][T25737] hsr0 speed is unknown, defaulting to 1000 [ 522.982331][T25718] hsr0 speed is unknown, defaulting to 1000 19:18:38 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0xb00000000065808, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000140)=0x0) write$cgroup_type(r1, &(0x7f0000000000), 0xb1d000) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x8, 0x5, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3000}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$BTRFS_IOC_START_SYNC(r4, 0x80089418, &(0x7f00000001c0)=0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r3, 0x50009417, &(0x7f0000000800)={{}, r5, 0x0, @inherit={0x0, 0x0}, @subvolid=0x1f}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x8, 0x5, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3000}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) r6 = epoll_create(0x80) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f00000001c0)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r6, 0xc0c89425, &(0x7f0000001880)={"c63d7ac62f0a2d13c642b4920b18c172", r7, r7, {0x6, 0x8}, {0x6, 0xee45}, 0x656, [0x7, 0xc4b, 0x800, 0x8, 0x2, 0x9, 0x7, 0x4, 0x5, 0xbd4a, 0x4e, 0x800, 0x1000, 0xcd, 0x4, 0x9]}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000200)={"f01b6972773ec0c46eb0cf23e58904ed", r5, r7, {0xb3c, 0x9}, {0x3, 0x7}, 0xfff, [0x7, 0x10000, 0x3, 0xbdde, 0x5, 0x1, 0x0, 0xffff, 0x101, 0x6, 0x2, 0x5, 0x5, 0x75e6876b, 0x4, 0xfffffffffffffe01]}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f00000001c0)={"dffe0ede08b26338c4f49c8936661244", r7, r2, {0x7, 0x9}, {0x0, 0xd4}, 0x29e0, [0x4, 0x2, 0x5, 0x0, 0x3, 0x2, 0x7, 0x1d, 0x10001, 0x100000001, 0x44f680000, 0x7, 0x1ff, 0x200, 0x5, 0x8]}) preadv(r0, &(0x7f0000000040)=[{0x0}, {&(0x7f0000001200)=""/102388, 0xffffff9f}, {&(0x7f000001a200)=""/4096, 0xdf4}], 0x3, 0x0, 0x0) 19:18:38 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80648c63940d0424fc60110002400a000a00053582c137153e370848018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 19:18:38 executing program 5: unshare(0x6c060000) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)={0x2, 0x4, 0x6, 0x1ff0}, 0x40) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000040)={0x0, &(0x7f00000000c0)=""/214, &(0x7f0000000080), &(0x7f00000001c0), 0x1404, r0}, 0x38) splice(0xffffffffffffffff, &(0x7f0000000080), 0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x80003, 0x0) vmsplice(r1, &(0x7f00000016c0)=[{0x0}, {&(0x7f0000000280)="6269df3e1f6a3db0635901b537e66f0ef7726b2a4094970be2c94397d87d21e9d96d793317e314f3821227919088a46caf5932b64d6434c15019a864271453ab79751dc9bed661deccc4d2d7683dc47adf4eb19d0a8af57aa6d5868aeffb29d8f54b4f76f9d234db3019627414afa167357cdc0b43a4a392bb42a785a86d64424f0d0d13db7ecbcde3572e2fbc99f5504132f46c5a46096745e5188cd40e913eee6ce936379cba141be55cba3e42aa1ecfde0a335a587391e4f212896de6e9e865de", 0xc2}, {&(0x7f0000000380)="81ec884b1580760a1528789005d912803c979f4f79a9ffbacd4f6aebb94d0e77388d940e5f47", 0x26}, {&(0x7f0000001940)="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", 0x275}, {&(0x7f00000005c0)}, {&(0x7f00000006c0)="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", 0xefc}], 0x6, 0x8) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @mcast1, 0xf2}, 0x1c) bind$inet6(r1, &(0x7f00000001c0)={0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, '\x00', 0x22}, 0x4}, 0x1c) [ 523.527445][ T26] audit: type=1804 audit(1634671118.489:327): pid=25873 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir428718356/syzkaller.vaoGIa/400/memory.events" dev="sda1" ino=13997 res=1 errno=0 [ 523.575842][T25874] netlink: 'syz-executor.1': attribute type 11 has an invalid length. 19:18:38 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x20, 0x0, 0x100, 0x0, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x0, 0x24}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x4000004}, 0x20000004) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) syz_genetlink_get_family_id$nl80211(0x0, r1) accept4(r1, &(0x7f0000000400)=@qipcrtr, &(0x7f00000002c0)=0x80, 0x80000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000380)={&(0x7f0000000500)={0x18, 0x0, 0x100, 0x70bd25, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}]}, 0x18}}, 0x0) connect$netrom(r2, &(0x7f0000000080)={{0x6, @rose}, [@bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) listen(r2, 0x0) unshare(0x40000080) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r4, &(0x7f0000000200), 0xf000) sendfile(r4, r3, 0x0, 0x800000000000c) getpeername$netrom(r2, 0x0, &(0x7f0000001680)) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) 19:18:38 executing program 3: r0 = epoll_create(0x9) epoll_wait(r0, &(0x7f0000000000)=[{}], 0x1, 0xfffffff8) r1 = epoll_create(0x9) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f00000000c0)={0x20002014}) [ 523.656305][ T26] audit: type=1800 audit(1634671118.519:328): pid=25873 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="memory.events" dev="sda1" ino=13997 res=0 errno=0 [ 523.663800][T25874] netlink: 'syz-executor.1': attribute type 23 has an invalid length. 19:18:38 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x20, 0x0, 0x100, 0x0, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x0, 0x24}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x4000004}, 0x20000004) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) syz_genetlink_get_family_id$nl80211(0x0, r1) accept4(r1, &(0x7f0000000400)=@qipcrtr, &(0x7f00000002c0)=0x80, 0x80000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000380)={&(0x7f0000000500)={0x18, 0x0, 0x100, 0x70bd25, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}]}, 0x18}}, 0x0) connect$netrom(r2, &(0x7f0000000080)={{0x6, @rose}, [@bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) listen(r2, 0x0) unshare(0x40000080) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r4, &(0x7f0000000200), 0xf000) sendfile(r4, r3, 0x0, 0x800000000000c) getpeername$netrom(r2, 0x0, &(0x7f0000001680)) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) [ 523.793597][ T26] audit: type=1804 audit(1634671118.529:329): pid=25873 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir428718356/syzkaller.vaoGIa/400/memory.events" dev="sda1" ino=13997 res=1 errno=0 [ 523.816189][T25874] netlink: 151480 bytes leftover after parsing attributes in process `syz-executor.1'. [ 523.859877][T25879] hsr0 speed is unknown, defaulting to 1000 19:18:38 executing program 3: r0 = epoll_create(0x9) epoll_wait(r0, &(0x7f0000000000)=[{}], 0x1, 0xfffffff8) r1 = epoll_create(0x9) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f00000000c0)={0x20002014}) 19:18:39 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffbc, 0x18}, [@ldst={0x3, 0x0, 0x3, 0x1c10a1, 0x8, 0xc}]}, &(0x7f0000000080)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1c0}, 0x48) [ 524.150136][T25904] hsr0 speed is unknown, defaulting to 1000 19:18:39 executing program 3: r0 = epoll_create(0x9) epoll_wait(r0, &(0x7f0000000000)=[{}], 0x1, 0xfffffff8) r1 = epoll_create(0x9) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f00000000c0)={0x20002014}) [ 524.386909][T25932] hsr0 speed is unknown, defaulting to 1000 19:18:39 executing program 5: unshare(0x6c060000) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)={0x2, 0x4, 0x6, 0x1ff0}, 0x40) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000040)={0x0, &(0x7f00000000c0)=""/214, &(0x7f0000000080), &(0x7f00000001c0), 0x1404, r0}, 0x38) splice(0xffffffffffffffff, &(0x7f0000000080), 0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x80003, 0x0) vmsplice(r1, &(0x7f00000016c0)=[{0x0}, {&(0x7f0000000280)="6269df3e1f6a3db0635901b537e66f0ef7726b2a4094970be2c94397d87d21e9d96d793317e314f3821227919088a46caf5932b64d6434c15019a864271453ab79751dc9bed661deccc4d2d7683dc47adf4eb19d0a8af57aa6d5868aeffb29d8f54b4f76f9d234db3019627414afa167357cdc0b43a4a392bb42a785a86d64424f0d0d13db7ecbcde3572e2fbc99f5504132f46c5a46096745e5188cd40e913eee6ce936379cba141be55cba3e42aa1ecfde0a335a587391e4f212896de6e9e865de", 0xc2}, {&(0x7f0000000380)="81ec884b1580760a1528789005d912803c979f4f79a9ffbacd4f6aebb94d0e77388d940e5f47", 0x26}, {&(0x7f0000001940)="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", 0x275}, {&(0x7f00000005c0)}, {&(0x7f00000006c0)="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", 0xefc}], 0x6, 0x8) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @mcast1, 0xf2}, 0x1c) bind$inet6(r1, &(0x7f00000001c0)={0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, '\x00', 0x22}, 0x4}, 0x1c) 19:18:39 executing program 1: getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000480)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipoib={{0xa}, {0x4}}}]}, 0x34}}, 0x0) 19:18:39 executing program 3: r0 = epoll_create(0x9) epoll_wait(r0, &(0x7f0000000000)=[{}], 0x1, 0xfffffff8) r1 = epoll_create(0x9) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f00000000c0)={0x20002014}) [ 524.836428][T25969] hsr0 speed is unknown, defaulting to 1000 19:18:40 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, 0x1e, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x40000000}, 0x10}, 0x78) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FITRIM(r1, 0xc0185879, &(0x7f0000000240)={0x0, 0x7ffffffd}) bpf$PROG_LOAD(0x5, &(0x7f0000000f40)={0xa, 0x3, &(0x7f0000000400)=ANY=[@ANYBLOB="180065fff1f04bb1783902defaacdd82a67e96c4a46f6d4c30ffd391c0b6efa1000000002a00"/63, @ANYRES16=r1, @ANYRES16], &(0x7f0000000200)='syzkaller\x00', 0x5, 0x38, &(0x7f0000000e00)=""/56, 0x40f00, 0x7, '\x00', 0x0, 0x22, r1, 0x8, &(0x7f0000000e40)={0x7, 0x1}, 0x8, 0x10, &(0x7f0000000e80)={0x7, 0xd, 0x200005, 0x7ff}, 0x10, 0xffffffffffffffff, r0}, 0x78) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000001240)='cpuacct.usage_all\x00', 0x275a, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x10, r2, 0x0) write$cgroup_devices(r2, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0x9) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) r5 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$SIOCRSACCEPT(r5, 0x890c) ioctl$EXT4_IOC_MOVE_EXT(r5, 0xc028660f, &(0x7f0000000140)={0x0, r1, 0x6, 0x4, 0x100, 0x3}) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000001400)={0x0, @in6={{0xa, 0x4e20, 0x4, @loopback, 0x7}}, 0xfffffffd, 0x3, 0x5, 0xca1, 0xe5, 0x9, 0x6}, 0x9c) readv(0xffffffffffffffff, &(0x7f0000000580)=[{&(0x7f0000000040)=""/111, 0x6f}], 0x1) splice(0xffffffffffffffff, &(0x7f00000000c0)=0xfad, 0xffffffffffffffff, &(0x7f0000000100)=0x7fff, 0x7f, 0x11) close(0xffffffffffffffff) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000011c0)={0xffffffffffffffff, 0x0, 0x32, 0xfe, &(0x7f00000000c0)="41375a0188dcea361c3d53d230a2cdcb61c6b1577e66502f7d60ca370e8f36b071d3184b62703cbdd6efd61d36d7004db970", &(0x7f0000000fc0)=""/254, 0x4, 0x0, 0xb, 0x1f, &(0x7f0000000f00)="4487e7744060f5bc6c2a1b", &(0x7f0000000480)="40653efd5206f26323154cc9e63773ea0d77a5dcd74fdaceecb71bc0031ae22b64a8e52700a437283d2ccfc455c3e39f4d874c3aa6e4878d9655bf8b91aaae7b61c22e33f7f15aa4eb16b89364772b26ba556daaa6631f1e9b4aeca84e7b34e812ef14a6659a6daac3c590a97fd800201b84cdab1c1db2e9fdf540d519b6f848dc78bf6b50e57c89cdf4", 0x0, 0x8}, 0x48) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000300)=@newlink={0x74, 0x10, 0x401, 0xfffffffd, 0x0, {0x0, 0x0, 0x0, 0x0, 0x462b}, [@IFLA_LINKINFO={0x44, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x34, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE={0x8, 0x2, @dev}, @IFLA_GENEVE_TTL={0x5, 0x3, 0x3f}, @IFLA_GENEVE_DF={0x5, 0xd, 0x4}, @IFLA_GENEVE_DF={0x5}, @IFLA_GENEVE_UDP_ZERO_CSUM6_TX={0x5}, @IFLA_GENEVE_TTL={0x5, 0x3, 0x3}]}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8}]}, 0x74}}, 0x0) [ 525.203615][ T26] audit: type=1804 audit(1634671120.169:330): pid=26002 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir428718356/syzkaller.vaoGIa/400/memory.events" dev="sda1" ino=13997 res=1 errno=0 [ 525.340636][ T26] audit: type=1800 audit(1634671120.169:331): pid=26002 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="memory.events" dev="sda1" ino=13997 res=0 errno=0 19:18:40 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0xb00000000065808, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000140)=0x0) write$cgroup_type(r1, &(0x7f0000000000), 0xb1d000) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x8, 0x5, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3000}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$BTRFS_IOC_START_SYNC(r4, 0x80089418, &(0x7f00000001c0)=0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r3, 0x50009417, &(0x7f0000000800)={{}, r5, 0x0, @inherit={0x0, 0x0}, @subvolid=0x1f}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x8, 0x5, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3000}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) r6 = epoll_create(0x80) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f00000001c0)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r6, 0xc0c89425, &(0x7f0000001880)={"c63d7ac62f0a2d13c642b4920b18c172", r7, r7, {0x6, 0x8}, {0x6, 0xee45}, 0x656, [0x7, 0xc4b, 0x800, 0x8, 0x2, 0x9, 0x7, 0x4, 0x5, 0xbd4a, 0x4e, 0x800, 0x1000, 0xcd, 0x4, 0x9]}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000200)={"f01b6972773ec0c46eb0cf23e58904ed", r5, r7, {0xb3c, 0x9}, {0x3, 0x7}, 0xfff, [0x7, 0x10000, 0x3, 0xbdde, 0x5, 0x1, 0x0, 0xffff, 0x101, 0x6, 0x2, 0x5, 0x5, 0x75e6876b, 0x4, 0xfffffffffffffe01]}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f00000001c0)={"dffe0ede08b26338c4f49c8936661244", r7, r2, {0x7, 0x9}, {0x0, 0xd4}, 0x29e0, [0x4, 0x2, 0x5, 0x0, 0x3, 0x2, 0x7, 0x1d, 0x10001, 0x100000001, 0x44f680000, 0x7, 0x1ff, 0x200, 0x5, 0x8]}) preadv(r0, &(0x7f0000000040)=[{0x0}, {&(0x7f0000001200)=""/102388, 0xffffff9f}, {&(0x7f000001a200)=""/4096, 0xdf4}], 0x3, 0x0, 0x0) 19:18:40 executing program 1: r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000140)=@name={0x2}, 0x10) 19:18:40 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000380), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADD(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)={0x178, r1, 0x11, 0x0, 0x0, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @mcast2}, @NLBL_MGMT_A_DOMAIN={0xe8, 0x1, '\xe6\x03,\'\x00o\x9b0\x9c\x962\n\xdfN\x9c\x10e\x02\x0e\xdd\xa0J&\xfd\xa7\xafl:\x19\x9bz\xd3\r\x93\n\x00\xb4z0x0) write$cgroup_type(r1, &(0x7f0000000000), 0xb1d000) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x8, 0x5, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3000}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$BTRFS_IOC_START_SYNC(r4, 0x80089418, &(0x7f00000001c0)=0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r3, 0x50009417, &(0x7f0000000800)={{}, r5, 0x0, @inherit={0x0, 0x0}, @subvolid=0x1f}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x8, 0x5, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3000}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) r6 = epoll_create(0x80) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f00000001c0)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r6, 0xc0c89425, &(0x7f0000001880)={"c63d7ac62f0a2d13c642b4920b18c172", r7, r7, {0x6, 0x8}, {0x6, 0xee45}, 0x656, [0x7, 0xc4b, 0x800, 0x8, 0x2, 0x9, 0x7, 0x4, 0x5, 0xbd4a, 0x4e, 0x800, 0x1000, 0xcd, 0x4, 0x9]}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000200)={"f01b6972773ec0c46eb0cf23e58904ed", r5, r7, {0xb3c, 0x9}, {0x3, 0x7}, 0xfff, [0x7, 0x10000, 0x3, 0xbdde, 0x5, 0x1, 0x0, 0xffff, 0x101, 0x6, 0x2, 0x5, 0x5, 0x75e6876b, 0x4, 0xfffffffffffffe01]}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f00000001c0)={"dffe0ede08b26338c4f49c8936661244", r7, r2, {0x7, 0x9}, {0x0, 0xd4}, 0x29e0, [0x4, 0x2, 0x5, 0x0, 0x3, 0x2, 0x7, 0x1d, 0x10001, 0x100000001, 0x44f680000, 0x7, 0x1ff, 0x200, 0x5, 0x8]}) preadv(r0, &(0x7f0000000040)=[{0x0}, {&(0x7f0000001200)=""/102388, 0xffffff9f}, {&(0x7f000001a200)=""/4096, 0xdf4}], 0x3, 0x0, 0x0) 19:18:40 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, 0x1e, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x40000000}, 0x10}, 0x78) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FITRIM(r1, 0xc0185879, &(0x7f0000000240)={0x0, 0x7ffffffd}) bpf$PROG_LOAD(0x5, &(0x7f0000000f40)={0xa, 0x3, &(0x7f0000000400)=ANY=[@ANYBLOB="180065fff1f04bb1783902defaacdd82a67e96c4a46f6d4c30ffd391c0b6efa1000000002a00"/63, @ANYRES16=r1, @ANYRES16], &(0x7f0000000200)='syzkaller\x00', 0x5, 0x38, &(0x7f0000000e00)=""/56, 0x40f00, 0x7, '\x00', 0x0, 0x22, r1, 0x8, &(0x7f0000000e40)={0x7, 0x1}, 0x8, 0x10, &(0x7f0000000e80)={0x7, 0xd, 0x200005, 0x7ff}, 0x10, 0xffffffffffffffff, r0}, 0x78) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000001240)='cpuacct.usage_all\x00', 0x275a, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x10, r2, 0x0) write$cgroup_devices(r2, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0x9) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) r5 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$SIOCRSACCEPT(r5, 0x890c) ioctl$EXT4_IOC_MOVE_EXT(r5, 0xc028660f, &(0x7f0000000140)={0x0, r1, 0x6, 0x4, 0x100, 0x3}) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000001400)={0x0, @in6={{0xa, 0x4e20, 0x4, @loopback, 0x7}}, 0xfffffffd, 0x3, 0x5, 0xca1, 0xe5, 0x9, 0x6}, 0x9c) readv(0xffffffffffffffff, &(0x7f0000000580)=[{&(0x7f0000000040)=""/111, 0x6f}], 0x1) splice(0xffffffffffffffff, &(0x7f00000000c0)=0xfad, 0xffffffffffffffff, &(0x7f0000000100)=0x7fff, 0x7f, 0x11) close(0xffffffffffffffff) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000011c0)={0xffffffffffffffff, 0x0, 0x32, 0xfe, &(0x7f00000000c0)="41375a0188dcea361c3d53d230a2cdcb61c6b1577e66502f7d60ca370e8f36b071d3184b62703cbdd6efd61d36d7004db970", &(0x7f0000000fc0)=""/254, 0x4, 0x0, 0xb, 0x1f, &(0x7f0000000f00)="4487e7744060f5bc6c2a1b", &(0x7f0000000480)="40653efd5206f26323154cc9e63773ea0d77a5dcd74fdaceecb71bc0031ae22b64a8e52700a437283d2ccfc455c3e39f4d874c3aa6e4878d9655bf8b91aaae7b61c22e33f7f15aa4eb16b89364772b26ba556daaa6631f1e9b4aeca84e7b34e812ef14a6659a6daac3c590a97fd800201b84cdab1c1db2e9fdf540d519b6f848dc78bf6b50e57c89cdf4", 0x0, 0x8}, 0x48) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000300)=@newlink={0x74, 0x10, 0x401, 0xfffffffd, 0x0, {0x0, 0x0, 0x0, 0x0, 0x462b}, [@IFLA_LINKINFO={0x44, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x34, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE={0x8, 0x2, @dev}, @IFLA_GENEVE_TTL={0x5, 0x3, 0x3f}, @IFLA_GENEVE_DF={0x5, 0xd, 0x4}, @IFLA_GENEVE_DF={0x5}, @IFLA_GENEVE_UDP_ZERO_CSUM6_TX={0x5}, @IFLA_GENEVE_TTL={0x5, 0x3, 0x3}]}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8}]}, 0x74}}, 0x0) [ 525.658138][ T26] audit: type=1804 audit(1634671120.619:333): pid=26040 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir428718356/syzkaller.vaoGIa/401/memory.events" dev="sda1" ino=13971 res=1 errno=0 19:18:40 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'wlan0\x00'}) ioctl(r0, 0x8b26, &(0x7f0000000040)) [ 525.731360][T26038] hsr0 speed is unknown, defaulting to 1000 19:18:40 executing program 4: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x17, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x201a7fa6, 0x2, 0x1}]}, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0xdba3dd835d632dde}, 0x48) [ 525.895245][ T26] audit: type=1800 audit(1634671120.619:334): pid=26040 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="memory.events" dev="sda1" ino=13971 res=0 errno=0 19:18:41 executing program 3: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)) ioctl$PPPIOCSNPMODE(r0, 0x40047451, &(0x7f0000000180)={0x1000000}) 19:18:41 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, 0x1e, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x40000000}, 0x10}, 0x78) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FITRIM(r1, 0xc0185879, &(0x7f0000000240)={0x0, 0x7ffffffd}) bpf$PROG_LOAD(0x5, &(0x7f0000000f40)={0xa, 0x3, &(0x7f0000000400)=ANY=[@ANYBLOB="180065fff1f04bb1783902defaacdd82a67e96c4a46f6d4c30ffd391c0b6efa1000000002a00"/63, @ANYRES16=r1, @ANYRES16], &(0x7f0000000200)='syzkaller\x00', 0x5, 0x38, &(0x7f0000000e00)=""/56, 0x40f00, 0x7, '\x00', 0x0, 0x22, r1, 0x8, &(0x7f0000000e40)={0x7, 0x1}, 0x8, 0x10, &(0x7f0000000e80)={0x7, 0xd, 0x200005, 0x7ff}, 0x10, 0xffffffffffffffff, r0}, 0x78) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000001240)='cpuacct.usage_all\x00', 0x275a, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x10, r2, 0x0) write$cgroup_devices(r2, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0x9) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) r5 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$SIOCRSACCEPT(r5, 0x890c) ioctl$EXT4_IOC_MOVE_EXT(r5, 0xc028660f, &(0x7f0000000140)={0x0, r1, 0x6, 0x4, 0x100, 0x3}) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000001400)={0x0, @in6={{0xa, 0x4e20, 0x4, @loopback, 0x7}}, 0xfffffffd, 0x3, 0x5, 0xca1, 0xe5, 0x9, 0x6}, 0x9c) readv(0xffffffffffffffff, &(0x7f0000000580)=[{&(0x7f0000000040)=""/111, 0x6f}], 0x1) splice(0xffffffffffffffff, &(0x7f00000000c0)=0xfad, 0xffffffffffffffff, &(0x7f0000000100)=0x7fff, 0x7f, 0x11) close(0xffffffffffffffff) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000011c0)={0xffffffffffffffff, 0x0, 0x32, 0xfe, &(0x7f00000000c0)="41375a0188dcea361c3d53d230a2cdcb61c6b1577e66502f7d60ca370e8f36b071d3184b62703cbdd6efd61d36d7004db970", &(0x7f0000000fc0)=""/254, 0x4, 0x0, 0xb, 0x1f, &(0x7f0000000f00)="4487e7744060f5bc6c2a1b", &(0x7f0000000480)="40653efd5206f26323154cc9e63773ea0d77a5dcd74fdaceecb71bc0031ae22b64a8e52700a437283d2ccfc455c3e39f4d874c3aa6e4878d9655bf8b91aaae7b61c22e33f7f15aa4eb16b89364772b26ba556daaa6631f1e9b4aeca84e7b34e812ef14a6659a6daac3c590a97fd800201b84cdab1c1db2e9fdf540d519b6f848dc78bf6b50e57c89cdf4", 0x0, 0x8}, 0x48) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000300)=@newlink={0x74, 0x10, 0x401, 0xfffffffd, 0x0, {0x0, 0x0, 0x0, 0x0, 0x462b}, [@IFLA_LINKINFO={0x44, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x34, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE={0x8, 0x2, @dev}, @IFLA_GENEVE_TTL={0x5, 0x3, 0x3f}, @IFLA_GENEVE_DF={0x5, 0xd, 0x4}, @IFLA_GENEVE_DF={0x5}, @IFLA_GENEVE_UDP_ZERO_CSUM6_TX={0x5}, @IFLA_GENEVE_TTL={0x5, 0x3, 0x3}]}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8}]}, 0x74}}, 0x0) [ 526.077411][ T26] audit: type=1804 audit(1634671120.629:335): pid=26040 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir428718356/syzkaller.vaoGIa/401/memory.events" dev="sda1" ino=13971 res=1 errno=0 19:18:41 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0xb00000000065808, 0x0) r2 = socket$can_bcm(0x1d, 0x2, 0x2) r3 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r3, &(0x7f0000002280)={0x0, 0x0, &(0x7f0000002240)={&(0x7f0000000100)={0x24, 0x14, 0x1, 0x0, 0x0, {0x2c}, [@INET_DIAG_REQ_BYTECODE={0xd, 0x1, "4a57c4c8820b3fbaab"}]}, 0x24}}, 0x0) sendfile(r2, r3, &(0x7f0000000180)=0x100000001, 0x1) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='memory.events\x00', 0x7a05, 0x1700) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000300)=ANY=[], 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r5, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x0, 0x1) sendfile(r4, r1, &(0x7f0000000040), 0x100000001) ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, &(0x7f0000000200)={0x0, 0x0, 0x4a4}) sendfile(r0, 0xffffffffffffffff, &(0x7f0000000100), 0x8) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) [ 526.226500][ T26] audit: type=1804 audit(1634671120.809:336): pid=26049 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir266573529/syzkaller.JjYHuA/405/memory.events" dev="sda1" ino=13978 res=1 errno=0 19:18:42 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x54, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x18, 0x11, 0x0, 0x1, @log={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_LOG_LEVEL={0x8, 0x5, 0x1, 0x0, 0xfffffffe}]}}}]}], {0x14, 0x10}}, 0x9c}}, 0x0) 19:18:42 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d00)={0x10, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xe}]}, &(0x7f0000000080)='GPL\x00', 0x5, 0x103, &(0x7f00000002c0)=""/259, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 19:18:42 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0xb00000000065808, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000140)=0x0) write$cgroup_type(r1, &(0x7f0000000000), 0xb1d000) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x8, 0x5, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3000}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$BTRFS_IOC_START_SYNC(r4, 0x80089418, &(0x7f00000001c0)=0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r3, 0x50009417, &(0x7f0000000800)={{}, r5, 0x0, @inherit={0x0, 0x0}, @subvolid=0x1f}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x8, 0x5, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3000}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) r6 = epoll_create(0x80) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f00000001c0)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r6, 0xc0c89425, &(0x7f0000001880)={"c63d7ac62f0a2d13c642b4920b18c172", r7, r7, {0x6, 0x8}, {0x6, 0xee45}, 0x656, [0x7, 0xc4b, 0x800, 0x8, 0x2, 0x9, 0x7, 0x4, 0x5, 0xbd4a, 0x4e, 0x800, 0x1000, 0xcd, 0x4, 0x9]}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000200)={"f01b6972773ec0c46eb0cf23e58904ed", r5, r7, {0xb3c, 0x9}, {0x3, 0x7}, 0xfff, [0x7, 0x10000, 0x3, 0xbdde, 0x5, 0x1, 0x0, 0xffff, 0x101, 0x6, 0x2, 0x5, 0x5, 0x75e6876b, 0x4, 0xfffffffffffffe01]}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f00000001c0)={"dffe0ede08b26338c4f49c8936661244", r7, r2, {0x7, 0x9}, {0x0, 0xd4}, 0x29e0, [0x4, 0x2, 0x5, 0x0, 0x3, 0x2, 0x7, 0x1d, 0x10001, 0x100000001, 0x44f680000, 0x7, 0x1ff, 0x200, 0x5, 0x8]}) preadv(r0, &(0x7f0000000040)=[{0x0}, {&(0x7f0000001200)=""/102388, 0xffffff9f}, {&(0x7f000001a200)=""/4096, 0xdf4}], 0x3, 0x0, 0x0) 19:18:42 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, 0x1e, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x40000000}, 0x10}, 0x78) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FITRIM(r1, 0xc0185879, &(0x7f0000000240)={0x0, 0x7ffffffd}) bpf$PROG_LOAD(0x5, &(0x7f0000000f40)={0xa, 0x3, &(0x7f0000000400)=ANY=[@ANYBLOB="180065fff1f04bb1783902defaacdd82a67e96c4a46f6d4c30ffd391c0b6efa1000000002a00"/63, @ANYRES16=r1, @ANYRES16], &(0x7f0000000200)='syzkaller\x00', 0x5, 0x38, &(0x7f0000000e00)=""/56, 0x40f00, 0x7, '\x00', 0x0, 0x22, r1, 0x8, &(0x7f0000000e40)={0x7, 0x1}, 0x8, 0x10, &(0x7f0000000e80)={0x7, 0xd, 0x200005, 0x7ff}, 0x10, 0xffffffffffffffff, r0}, 0x78) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000001240)='cpuacct.usage_all\x00', 0x275a, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x10, r2, 0x0) write$cgroup_devices(r2, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0x9) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) r5 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$SIOCRSACCEPT(r5, 0x890c) ioctl$EXT4_IOC_MOVE_EXT(r5, 0xc028660f, &(0x7f0000000140)={0x0, r1, 0x6, 0x4, 0x100, 0x3}) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000001400)={0x0, @in6={{0xa, 0x4e20, 0x4, @loopback, 0x7}}, 0xfffffffd, 0x3, 0x5, 0xca1, 0xe5, 0x9, 0x6}, 0x9c) readv(0xffffffffffffffff, &(0x7f0000000580)=[{&(0x7f0000000040)=""/111, 0x6f}], 0x1) splice(0xffffffffffffffff, &(0x7f00000000c0)=0xfad, 0xffffffffffffffff, &(0x7f0000000100)=0x7fff, 0x7f, 0x11) close(0xffffffffffffffff) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000011c0)={0xffffffffffffffff, 0x0, 0x32, 0xfe, &(0x7f00000000c0)="41375a0188dcea361c3d53d230a2cdcb61c6b1577e66502f7d60ca370e8f36b071d3184b62703cbdd6efd61d36d7004db970", &(0x7f0000000fc0)=""/254, 0x4, 0x0, 0xb, 0x1f, &(0x7f0000000f00)="4487e7744060f5bc6c2a1b", &(0x7f0000000480)="40653efd5206f26323154cc9e63773ea0d77a5dcd74fdaceecb71bc0031ae22b64a8e52700a437283d2ccfc455c3e39f4d874c3aa6e4878d9655bf8b91aaae7b61c22e33f7f15aa4eb16b89364772b26ba556daaa6631f1e9b4aeca84e7b34e812ef14a6659a6daac3c590a97fd800201b84cdab1c1db2e9fdf540d519b6f848dc78bf6b50e57c89cdf4", 0x0, 0x8}, 0x48) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000300)=@newlink={0x74, 0x10, 0x401, 0xfffffffd, 0x0, {0x0, 0x0, 0x0, 0x0, 0x462b}, [@IFLA_LINKINFO={0x44, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x34, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE={0x8, 0x2, @dev}, @IFLA_GENEVE_TTL={0x5, 0x3, 0x3f}, @IFLA_GENEVE_DF={0x5, 0xd, 0x4}, @IFLA_GENEVE_DF={0x5}, @IFLA_GENEVE_UDP_ZERO_CSUM6_TX={0x5}, @IFLA_GENEVE_TTL={0x5, 0x3, 0x3}]}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8}]}, 0x74}}, 0x0) 19:18:42 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0xb00000000065808, 0x0) r2 = socket$can_bcm(0x1d, 0x2, 0x2) r3 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r3, &(0x7f0000002280)={0x0, 0x0, &(0x7f0000002240)={&(0x7f0000000100)={0x24, 0x14, 0x1, 0x0, 0x0, {0x2c}, [@INET_DIAG_REQ_BYTECODE={0xd, 0x1, "4a57c4c8820b3fbaab"}]}, 0x24}}, 0x0) sendfile(r2, r3, &(0x7f0000000180)=0x100000001, 0x1) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='memory.events\x00', 0x7a05, 0x1700) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000300)=ANY=[], 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r5, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x0, 0x1) sendfile(r4, r1, &(0x7f0000000040), 0x100000001) ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, &(0x7f0000000200)={0x0, 0x0, 0x4a4}) sendfile(r0, 0xffffffffffffffff, &(0x7f0000000100), 0x8) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) 19:18:42 executing program 1: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0xb00000000065808, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000140)=0x0) write$cgroup_type(r1, &(0x7f0000000000), 0xb1d000) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x8, 0x5, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3000}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$BTRFS_IOC_START_SYNC(r4, 0x80089418, &(0x7f00000001c0)=0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r3, 0x50009417, &(0x7f0000000800)={{}, r5, 0x0, @inherit={0x0, 0x0}, @subvolid=0x1f}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x8, 0x5, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3000}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) r6 = epoll_create(0x80) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f00000001c0)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r6, 0xc0c89425, &(0x7f0000001880)={"c63d7ac62f0a2d13c642b4920b18c172", r7, r7, {0x6, 0x8}, {0x6, 0xee45}, 0x656, [0x7, 0xc4b, 0x800, 0x8, 0x2, 0x9, 0x7, 0x4, 0x5, 0xbd4a, 0x4e, 0x800, 0x1000, 0xcd, 0x4, 0x9]}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000200)={"f01b6972773ec0c46eb0cf23e58904ed", r5, r7, {0xb3c, 0x9}, {0x3, 0x7}, 0xfff, [0x7, 0x10000, 0x3, 0xbdde, 0x5, 0x1, 0x0, 0xffff, 0x101, 0x6, 0x2, 0x5, 0x5, 0x75e6876b, 0x4, 0xfffffffffffffe01]}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f00000001c0)={"dffe0ede08b26338c4f49c8936661244", r7, r2, {0x7, 0x9}, {0x0, 0xd4}, 0x29e0, [0x4, 0x2, 0x5, 0x0, 0x3, 0x2, 0x7, 0x1d, 0x10001, 0x100000001, 0x44f680000, 0x7, 0x1ff, 0x200, 0x5, 0x8]}) preadv(r0, &(0x7f0000000040)=[{0x0}, {&(0x7f0000001200)=""/102388, 0xffffff9f}, {&(0x7f000001a200)=""/4096, 0xdf4}], 0x3, 0x0, 0x0) 19:18:42 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0xb00000000065808, 0x0) r2 = socket$can_bcm(0x1d, 0x2, 0x2) r3 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r3, &(0x7f0000002280)={0x0, 0x0, &(0x7f0000002240)={&(0x7f0000000100)={0x24, 0x14, 0x1, 0x0, 0x0, {0x2c}, [@INET_DIAG_REQ_BYTECODE={0xd, 0x1, "4a57c4c8820b3fbaab"}]}, 0x24}}, 0x0) sendfile(r2, r3, &(0x7f0000000180)=0x100000001, 0x1) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='memory.events\x00', 0x7a05, 0x1700) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000300)=ANY=[], 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r5, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x0, 0x1) sendfile(r4, r1, &(0x7f0000000040), 0x100000001) ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, &(0x7f0000000200)={0x0, 0x0, 0x4a4}) sendfile(r0, 0xffffffffffffffff, &(0x7f0000000100), 0x8) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) 19:18:42 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f0000000000), 0xfffffffffffffde3) 19:18:42 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'adiantum(xchacha20-simd,anubis-generic,nhpoly1305-sse2)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000000b00)=[{{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f00000001c0)=""/155, 0x9b}, {&(0x7f00000002c0)=""/33, 0x21}, {&(0x7f0000000340)=""/67, 0x43}], 0x3}}], 0x1, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000000040)=ANY=[], 0xfc}}, 0x0) sendto$unix(r1, &(0x7f00000003c0)='<', 0x1, 0x0, 0x0, 0x0) 19:18:43 executing program 5: sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f00000000c0)}], 0x2}, 0x0) r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b19, &(0x7f0000000000)={'wlan0\x00'}) 19:18:43 executing program 5: sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f00000000c0)}], 0x2}, 0x0) r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b19, &(0x7f0000000000)={'wlan0\x00'}) 19:18:43 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'adiantum(xchacha20-simd,anubis-generic,nhpoly1305-sse2)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000000b00)=[{{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f00000001c0)=""/155, 0x9b}, {&(0x7f00000002c0)=""/33, 0x21}, {&(0x7f0000000340)=""/67, 0x43}], 0x3}}], 0x1, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000000040)=ANY=[], 0xfc}}, 0x0) sendto$unix(r1, &(0x7f00000003c0)='<', 0x1, 0x0, 0x0, 0x0) 19:18:43 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0xb00000000065808, 0x0) r2 = socket$can_bcm(0x1d, 0x2, 0x2) r3 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r3, &(0x7f0000002280)={0x0, 0x0, &(0x7f0000002240)={&(0x7f0000000100)={0x24, 0x14, 0x1, 0x0, 0x0, {0x2c}, [@INET_DIAG_REQ_BYTECODE={0xd, 0x1, "4a57c4c8820b3fbaab"}]}, 0x24}}, 0x0) sendfile(r2, r3, &(0x7f0000000180)=0x100000001, 0x1) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='memory.events\x00', 0x7a05, 0x1700) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000300)=ANY=[], 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r5, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x0, 0x1) sendfile(r4, r1, &(0x7f0000000040), 0x100000001) ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, &(0x7f0000000200)={0x0, 0x0, 0x4a4}) sendfile(r0, 0xffffffffffffffff, &(0x7f0000000100), 0x8) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) 19:18:43 executing program 5: sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f00000000c0)}], 0x2}, 0x0) r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b19, &(0x7f0000000000)={'wlan0\x00'}) [ 528.700535][ T26] kauditd_printk_skb: 23 callbacks suppressed [ 528.700549][ T26] audit: type=1804 audit(1634671123.659:360): pid=26140 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir579533360/syzkaller.8uGMIM/401/memory.events" dev="sda1" ino=13978 res=1 errno=0 [ 528.880614][ T26] audit: type=1800 audit(1634671123.699:361): pid=26140 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="memory.events" dev="sda1" ino=13978 res=0 errno=0 [ 529.004159][ T26] audit: type=1804 audit(1634671123.719:362): pid=26140 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir579533360/syzkaller.8uGMIM/401/memory.events" dev="sda1" ino=13978 res=1 errno=0 [ 529.123871][ T26] audit: type=1804 audit(1634671123.739:363): pid=26140 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir579533360/syzkaller.8uGMIM/401/memory.events" dev="sda1" ino=13978 res=1 errno=0 [ 529.283734][ T26] audit: type=1804 audit(1634671124.120:364): pid=26144 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir579533360/syzkaller.8uGMIM/401/memory.events" dev="sda1" ino=13978 res=1 errno=0 19:18:44 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0xb00000000065808, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000140)=0x0) write$cgroup_type(r1, &(0x7f0000000000), 0xb1d000) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x8, 0x5, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3000}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$BTRFS_IOC_START_SYNC(r4, 0x80089418, &(0x7f00000001c0)=0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r3, 0x50009417, &(0x7f0000000800)={{}, r5, 0x0, @inherit={0x0, 0x0}, @subvolid=0x1f}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x8, 0x5, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3000}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) r6 = epoll_create(0x80) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f00000001c0)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r6, 0xc0c89425, &(0x7f0000001880)={"c63d7ac62f0a2d13c642b4920b18c172", r7, r7, {0x6, 0x8}, {0x6, 0xee45}, 0x656, [0x7, 0xc4b, 0x800, 0x8, 0x2, 0x9, 0x7, 0x4, 0x5, 0xbd4a, 0x4e, 0x800, 0x1000, 0xcd, 0x4, 0x9]}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000200)={"f01b6972773ec0c46eb0cf23e58904ed", r5, r7, {0xb3c, 0x9}, {0x3, 0x7}, 0xfff, [0x7, 0x10000, 0x3, 0xbdde, 0x5, 0x1, 0x0, 0xffff, 0x101, 0x6, 0x2, 0x5, 0x5, 0x75e6876b, 0x4, 0xfffffffffffffe01]}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f00000001c0)={"dffe0ede08b26338c4f49c8936661244", r7, r2, {0x7, 0x9}, {0x0, 0xd4}, 0x29e0, [0x4, 0x2, 0x5, 0x0, 0x3, 0x2, 0x7, 0x1d, 0x10001, 0x100000001, 0x44f680000, 0x7, 0x1ff, 0x200, 0x5, 0x8]}) preadv(r0, &(0x7f0000000040)=[{0x0}, {&(0x7f0000001200)=""/102388, 0xffffff9f}, {&(0x7f000001a200)=""/4096, 0xdf4}], 0x3, 0x0, 0x0) 19:18:44 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'adiantum(xchacha20-simd,anubis-generic,nhpoly1305-sse2)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000000b00)=[{{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f00000001c0)=""/155, 0x9b}, {&(0x7f00000002c0)=""/33, 0x21}, {&(0x7f0000000340)=""/67, 0x43}], 0x3}}], 0x1, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000000040)=ANY=[], 0xfc}}, 0x0) sendto$unix(r1, &(0x7f00000003c0)='<', 0x1, 0x0, 0x0, 0x0) 19:18:44 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0xb00000000065808, 0x0) r2 = socket$can_bcm(0x1d, 0x2, 0x2) r3 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r3, &(0x7f0000002280)={0x0, 0x0, &(0x7f0000002240)={&(0x7f0000000100)={0x24, 0x14, 0x1, 0x0, 0x0, {0x2c}, [@INET_DIAG_REQ_BYTECODE={0xd, 0x1, "4a57c4c8820b3fbaab"}]}, 0x24}}, 0x0) sendfile(r2, r3, &(0x7f0000000180)=0x100000001, 0x1) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='memory.events\x00', 0x7a05, 0x1700) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000300)=ANY=[], 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r5, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x0, 0x1) sendfile(r4, r1, &(0x7f0000000040), 0x100000001) ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, &(0x7f0000000200)={0x0, 0x0, 0x4a4}) sendfile(r0, 0xffffffffffffffff, &(0x7f0000000100), 0x8) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) [ 529.805365][ T26] audit: type=1804 audit(1634671124.770:365): pid=26153 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir038986091/syzkaller.GPbuUD/413/memory.events" dev="sda1" ino=14041 res=1 errno=0 [ 529.952735][ T26] audit: type=1800 audit(1634671124.770:366): pid=26153 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="memory.events" dev="sda1" ino=14041 res=0 errno=0 19:18:44 executing program 1: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0xb00000000065808, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000140)=0x0) write$cgroup_type(r1, &(0x7f0000000000), 0xb1d000) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x8, 0x5, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3000}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$BTRFS_IOC_START_SYNC(r4, 0x80089418, &(0x7f00000001c0)=0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r3, 0x50009417, &(0x7f0000000800)={{}, r5, 0x0, @inherit={0x0, 0x0}, @subvolid=0x1f}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x8, 0x5, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3000}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) r6 = epoll_create(0x80) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f00000001c0)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r6, 0xc0c89425, &(0x7f0000001880)={"c63d7ac62f0a2d13c642b4920b18c172", r7, r7, {0x6, 0x8}, {0x6, 0xee45}, 0x656, [0x7, 0xc4b, 0x800, 0x8, 0x2, 0x9, 0x7, 0x4, 0x5, 0xbd4a, 0x4e, 0x800, 0x1000, 0xcd, 0x4, 0x9]}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000200)={"f01b6972773ec0c46eb0cf23e58904ed", r5, r7, {0xb3c, 0x9}, {0x3, 0x7}, 0xfff, [0x7, 0x10000, 0x3, 0xbdde, 0x5, 0x1, 0x0, 0xffff, 0x101, 0x6, 0x2, 0x5, 0x5, 0x75e6876b, 0x4, 0xfffffffffffffe01]}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f00000001c0)={"dffe0ede08b26338c4f49c8936661244", r7, r2, {0x7, 0x9}, {0x0, 0xd4}, 0x29e0, [0x4, 0x2, 0x5, 0x0, 0x3, 0x2, 0x7, 0x1d, 0x10001, 0x100000001, 0x44f680000, 0x7, 0x1ff, 0x200, 0x5, 0x8]}) preadv(r0, &(0x7f0000000040)=[{0x0}, {&(0x7f0000001200)=""/102388, 0xffffff9f}, {&(0x7f000001a200)=""/4096, 0xdf4}], 0x3, 0x0, 0x0) 19:18:44 executing program 5: sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f00000000c0)}], 0x2}, 0x0) r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b19, &(0x7f0000000000)={'wlan0\x00'}) 19:18:44 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0xb00000000065808, 0x0) r2 = socket$can_bcm(0x1d, 0x2, 0x2) r3 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r3, &(0x7f0000002280)={0x0, 0x0, &(0x7f0000002240)={&(0x7f0000000100)={0x24, 0x14, 0x1, 0x0, 0x0, {0x2c}, [@INET_DIAG_REQ_BYTECODE={0xd, 0x1, "4a57c4c8820b3fbaab"}]}, 0x24}}, 0x0) sendfile(r2, r3, &(0x7f0000000180)=0x100000001, 0x1) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='memory.events\x00', 0x7a05, 0x1700) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000300)=ANY=[], 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r5, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x0, 0x1) sendfile(r4, r1, &(0x7f0000000040), 0x100000001) ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, &(0x7f0000000200)={0x0, 0x0, 0x4a4}) sendfile(r0, 0xffffffffffffffff, &(0x7f0000000100), 0x8) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) 19:18:44 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'adiantum(xchacha20-simd,anubis-generic,nhpoly1305-sse2)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000000b00)=[{{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f00000001c0)=""/155, 0x9b}, {&(0x7f00000002c0)=""/33, 0x21}, {&(0x7f0000000340)=""/67, 0x43}], 0x3}}], 0x1, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000000040)=ANY=[], 0xfc}}, 0x0) sendto$unix(r1, &(0x7f00000003c0)='<', 0x1, 0x0, 0x0, 0x0) [ 530.094624][ T26] audit: type=1804 audit(1634671124.770:367): pid=26153 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir038986091/syzkaller.GPbuUD/413/memory.events" dev="sda1" ino=14041 res=1 errno=0 19:18:45 executing program 5: r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind$802154_raw(r0, &(0x7f00000000c0)={0x24, @short}, 0x14) [ 530.278188][ T26] audit: type=1804 audit(1634671124.800:368): pid=26153 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir038986091/syzkaller.GPbuUD/413/memory.events" dev="sda1" ino=14041 res=1 errno=0 19:18:45 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) [ 530.445575][ T26] audit: type=1804 audit(1634671124.960:369): pid=26159 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir428718356/syzkaller.vaoGIa/403/memory.events" dev="sda1" ino=15236 res=1 errno=0 19:18:45 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0xb00000000065808, 0x0) r2 = socket$can_bcm(0x1d, 0x2, 0x2) r3 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r3, &(0x7f0000002280)={0x0, 0x0, &(0x7f0000002240)={&(0x7f0000000100)={0x24, 0x14, 0x1, 0x0, 0x0, {0x2c}, [@INET_DIAG_REQ_BYTECODE={0xd, 0x1, "4a57c4c8820b3fbaab"}]}, 0x24}}, 0x0) sendfile(r2, r3, &(0x7f0000000180)=0x100000001, 0x1) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='memory.events\x00', 0x7a05, 0x1700) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000300)=ANY=[], 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r5, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x0, 0x1) sendfile(r4, r1, &(0x7f0000000040), 0x100000001) ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, &(0x7f0000000200)={0x0, 0x0, 0x4a4}) sendfile(r0, 0xffffffffffffffff, &(0x7f0000000100), 0x8) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) 19:18:45 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newtaction={0x90, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x7c, 0x1, [@m_ctinfo={0x48, 0x1, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18}]}, {0x4}, {0xc}, {0xc}}}, @m_mpls={0x30, 0x2, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x90}}, 0x0) 19:18:45 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x719, &(0x7f00000002c0)={&(0x7f00000000c0)=@newtaction={0x60, 0x30, 0x17b, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_bpf={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x38, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x2}, @TCA_ACT_BPF_PARMS={0x18}, @TCA_ACT_BPF_OPS={0x14, 0x4, [{0x60}, {0x6}]}]}, {0x4}}}]}]}, 0x60}}, 0x0) 19:18:46 executing program 5: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x2200c001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000001180)=ANY=[@ANYRES16, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r3, @ANYBLOB="3c003300c0800000080211000000080211000001ffffffffffff"], 0x58}}, 0x0) sendmsg$NL80211_CMD_RELOAD_REGDB(0xffffffffffffffff, 0x0, 0x0) socket(0x0, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(r1, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd0d0c2ac, 0x1, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x2f, &(0x7f0000000440)=0x2, 0x4) splice(r1, 0x0, r0, 0x0, 0x6f401, 0x0) 19:18:46 executing program 4: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0xfffffffffffffcfd, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newtfilter={0x64, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x4}}, [@filter_kind_options=@f_basic={{0xa}, {0x34, 0x2, [@TCA_BASIC_EMATCHES={0x30, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xae24}}, @TCA_EMATCH_TREE_LIST={0x24, 0x2, 0x0, 0x1, [@TCF_EM_META={0x20, 0x1, 0x0, 0x0, {{}, [@TCA_EM_META_RVALUE={0x5, 0x3, [@TCF_META_TYPE_VAR='\t']}, @TCA_EM_META_HDR={0xc}]}}]}]}]}}]}, 0x64}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 19:18:46 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x79, 0x11, 0x28}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0xac, &(0x7f0000000200)=""/4096, 0x0, 0x0, '\x00', 0x0, 0xe, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 19:18:47 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0x2, 0x4e22, 0x0, @loopback}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000001200)=[{&(0x7f0000000080)="580000001400add427323b472545b45602117fffffff81004e220e227f000001925aa80020007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) 19:18:47 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000240)=0x4712, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) read(r0, &(0x7f0000001340)=""/4096, 0x1000) recvmmsg(r0, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) 19:18:47 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0xb, 0x8, 0x8001, 0x3ff, 0x1}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r0, &(0x7f0000000040), &(0x7f0000000100)=@tcp6, 0x64376963c410598a}, 0x20) 19:18:47 executing program 2: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'sha1-avx\x00'}, 0x58) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000000)="068a923642325f84cdb616149bb3d1a2db3e922baba553fa9001c7aee21e5d9d81d502dc7fef4d31300019d13ac1af402a6be629ca3067b2a479eb6ac2a243967b", 0x41}], 0x1) r3 = accept4$alg(r2, 0x0, 0x0, 0x0) write$binfmt_elf64(r1, 0x0, 0xfffffdea) splice(r0, 0x0, r3, 0x0, 0x2000000000a, 0x0) [ 532.120914][T26201] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 532.228825][T26201] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 19:18:47 executing program 0: r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) connect$ax25(r0, &(0x7f0000000080)={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x7fffffff}, [@bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}, 0x48) 19:18:47 executing program 4: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0xfffffffffffffcfd, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newtfilter={0x64, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x4}}, [@filter_kind_options=@f_basic={{0xa}, {0x34, 0x2, [@TCA_BASIC_EMATCHES={0x30, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xae24}}, @TCA_EMATCH_TREE_LIST={0x24, 0x2, 0x0, 0x1, [@TCF_EM_META={0x20, 0x1, 0x0, 0x0, {{}, [@TCA_EM_META_RVALUE={0x5, 0x3, [@TCF_META_TYPE_VAR='\t']}, @TCA_EM_META_HDR={0xc}]}}]}]}]}}]}, 0x64}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 19:18:47 executing program 1: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(0x0, 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, 0x0, 0x0) socket(0x23, 0x0, 0x4) 19:18:47 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_RESET_STATS(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)={0x24, r1, 0x2ca623390b44f8cd, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}]}, 0x24}}, 0x0) 19:18:47 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @empty}, 0x10) [ 532.700542][T26240] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 19:18:48 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNGETSNDBUF(r0, 0x5450, 0x0) 19:18:48 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001a00)={0x18, 0x5, &(0x7f0000000040)=@framed={{}, [@alu={0x4, 0x0, 0xd, 0x0, 0x0, 0x18}, @call]}, &(0x7f0000001840)='GPL\x00', 0x4, 0xc2, &(0x7f0000001880)=""/194, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 19:18:48 executing program 1: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(0x0, 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, 0x0, 0x0) socket(0x23, 0x0, 0x4) 19:18:48 executing program 0: r0 = socket$vsock_stream(0x28, 0x1, 0x0) getsockname(r0, 0x0, &(0x7f0000000100)) 19:18:48 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000240)=0x4712, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) read(r0, &(0x7f0000001340)=""/4096, 0x1000) recvmmsg(r0, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) 19:18:48 executing program 4: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0xfffffffffffffcfd, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newtfilter={0x64, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x4}}, [@filter_kind_options=@f_basic={{0xa}, {0x34, 0x2, [@TCA_BASIC_EMATCHES={0x30, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xae24}}, @TCA_EMATCH_TREE_LIST={0x24, 0x2, 0x0, 0x1, [@TCF_EM_META={0x20, 0x1, 0x0, 0x0, {{}, [@TCA_EM_META_RVALUE={0x5, 0x3, [@TCF_META_TYPE_VAR='\t']}, @TCA_EM_META_HDR={0xc}]}}]}]}]}}]}, 0x64}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 19:18:48 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x58, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x1c, 0x11, 0x0, 0x1, @exthdr={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x4}]}}}]}], {0x14, 0x10}}, 0xa0}}, 0x0) 19:18:48 executing program 1: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(0x0, 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, 0x0, 0x0) socket(0x23, 0x0, 0x4) 19:18:48 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="020300090e000000030000000000000405000600000000000a00000000000004000000000000000000000021000000000001dd000000000002000100010000000000010200fd000005000500000000000a"], 0x70}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x3ef, 0x0) 19:18:48 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x4000000000002, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x80, 0x0) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) r3 = openat$cgroup_type(r0, &(0x7f0000000000), 0x2, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000009, 0x40010, r3, 0x80000001000) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) r5 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) socket(0x0, 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0x1c) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r6) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000480)='syz1\x00', 0x1ff) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000020c0), &(0x7f0000002100)=0xc) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r7, 0x4000000000000, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0xc01, 0x3, 0x208, 0x2e8, 0x5002004a, 0x7d09, 0x0, 0x3, 0x3a0, 0x3c8, 0x3c8, 0x3a0, 0x3c8, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x268) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000002240)=[{{&(0x7f0000000040)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000140)=[{&(0x7f00000001c0)="b35459eab157139645dff2328b7c8a914bab223d4675742e77c724e48dfb21d3e31629ee9532371e5a5cd53d95ea4dffc1c7747ae2c9970407d29c4979719bc214ae4f6491b4738e5b10006ec525f48ad733b55c8fc3fedaee48fa46a61089b8961171ad4cdbdfae023d914091a02acf61a2", 0x72}, {&(0x7f0000000300)="1d5a67a8695e623a7342156ee1cebc16ab529930a8dfc51df11a853fb5d2169bbc7ab5aedf5a84dcf610e0443d4f91318d1dacdbab590e036ce16caf36384f545c5f36844200a900992e542bf3eb04e1b04abda74b737a1db6f7aca31de1084d1026948b0c92bae1ccfb4e7d54251b62bb5fbd9d9a4348a108d453e8a22c8c08e4928a01597e30a8a560de57581ad522c22a902b1653cfaed880f6f12d", 0x9d}, {&(0x7f00000003c0)="0890058cb4bc3b8ac36b6236011de0b825c5af5ce6e590fe51465de7e34e17ad675258e454c36a5187dfe4ea2046681ac586b1909764f2898272fb275d01884de30981664a2989436c34cc06ac6175b13ea6636e49c8689f433ae67c880e0a382e68c4200275e18d6b592de41b2baec85f6b2c7e32f0891f3979f6ec8e620777f4b59d3abc064f0e60b239724a1ae4af7f815b27bf", 0x95}], 0x3, &(0x7f0000000540)=[@rights={{0x20, 0x1, 0x1, [r0, 0xffffffffffffffff, r3, r5]}}, @rights={{0x14, 0x1, 0x1, [r2]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01}}}], 0x80}}, {{&(0x7f00000005c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000780)=[{&(0x7f0000000640)="d67948928c56abc67a6fbdf23da152db801331cca670e665b9b9a75ae1ab9aabfdc575251a3ebfc9f12e8d828e91a8eccf4c0ac030f96fb1ae97c69796fe3e08db0b5a6be498cca57c85b71e125a1f0bcf8bef2f7c42be31896c506d96dff78efad4580c65bc7745b893aa7057aa1a8606aa6efdb42a38dcb15f3b4fea4513b74fbb4a27103ce41f", 0x88}, {&(0x7f0000000700)="9ff23d7a8db0d6a406b41399ef499953139e1ee9fdc75b500311e0442020470ae17b624bb330be4289cffad923a09a5b41786a833b9a2693ae34e9f2c9cd9ef2126a8fabf0ec00286f091b17", 0x4c}], 0x2, &(0x7f0000000980)=ANY=[@ANYBLOB="1c000000000000000100000001000000", @ANYRES32, @ANYRES32=r0, @ANYBLOB="40000000000000aff5e9f107741943fe0589a6d964f41de433861b155d894833ef06fe5d5c7bade0592f4723fd2d9482f23d0c93bb5fcc911cd295d59c49e4e78de37830c95b778911d2b4d65e2801795a0c5a06bdcf0797cc6c50cd605c691e2c165d7cc2c223e71a8633444e6df9e3b50c865780b0037866b61e4bd9699d430a6481752e7ca61e26ab39c76bb14755270cdc50bc99a79fd406156d55fcde9231fdd71fd5033550a2d3f3ba3bba67495243c275a42a6f512838bbdb7c2669f7564cd2d626ea8fd747505f13"], 0x20, 0x8000}}, {{&(0x7f0000000800)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000001ac0)=[{0x0}, {&(0x7f0000001940)="ad914b7bd4a854bf8d930679a799cef94f8c", 0x12}, {&(0x7f0000001980)="c7b95ce41008d663886800b6d0a7b5ecfb054fec6238c668ca8c155626e70e0babe72b6cb383859a1104a882f32c9568d3c7a929916c3b0f66208d88b9d078d237232c4e990202ec65bd848575e6609a31bcf882cdff7b151f0939c1499e4cd3667dd0e029ab2ee88139d2ae7eb6750e452963bc668dc58bdfa73df1709fd4dba7218def9f", 0x85}, {&(0x7f0000001a40)="94ba0620db3296bf7d25acd74e77ac7047aaa20eb37009ff2d46f2830e70e214e9cc5da2a15843a8c85be3bbde3de7b6de0aa01a2cc5ae3ee08ca4a3f7a49cf47b9201c94ad619", 0x47}], 0x4, 0x0, 0x0, 0x20000840}}, {{&(0x7f0000001b40)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000001c80)=[{&(0x7f0000001bc0)="28cda7cf078c762e4f6a0874a8c34bd2638c9602bd012eef51d965f4f51f6a20f96759830820d524209ee51b312793ada5c0b3caefcb26016e211d257c0e859a26f0445b53f1ddf2604c35495148559718044f0adbce0dfbb70dc69dc5e142e598a66d0e7cd0f3c11c48d9bca37a383d53cb6115c118d6491c5853e7631c144d", 0x80}], 0x1, &(0x7f0000001cc0)=[@cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff}}}], 0x20, 0x20000080}}, {{&(0x7f0000001d00)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000001f00)=[{&(0x7f0000001d80)="1452aefb8af5790fd2dce64efbfc47ae4c872e1e21e622b37632dca524367b5212a2b69226224b59bc795574311789c1e96eaf23ba7173ff098ee3c0d2f06c6dea37d5ec9d6e532564cc9744aba9b2e0363b4a5d691d113e71e9f84945", 0x5d}, {&(0x7f0000001e00)="decc6bf69de7448cfcc1541437dd1d47369caa9d7245c6b221e5a802c4ed00f1f3ff694c4568dfd39e0ed308b2ac88e8887c57aed8f885d0f7ac49bb1e98ba2e3d76a303f86d7904e4927dd535e63f55b11628d1c1dd6488720e7b0afadd9ac618aacd923998f9250d2a9c490a8c75fb18c967731dce82a80f2e0b69c0d2279423c3838b725075a4a1032084e8bfec64ae7e9da2266c84bcfac827ad1dbec7cca7e0a960234c17cc628bf344452583eaae0b910b02e18730bc328d23b4ee98cf015a25e279012decf36d0bb2c69a006d8a23eb684e3718cd55a9b633", 0xdc}], 0x2, &(0x7f0000002140)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="00000000140000000000000001000000010000", @ANYRES32=r3, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=r6, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r0, @ANYBLOB="000000001c0000000000000001001f0801000000", @ANYRES32=r2, @ANYRES32=r5, @ANYRES32=r7, @ANYBLOB='\x00\x00\x00\x00'], 0xf0, 0x40d4}}], 0x5, 0x8880) socket$vsock_stream(0x28, 0x1, 0x0) ppoll(&(0x7f00000000c0)=[{r2, 0x8124}, {0xffffffffffffffff, 0x0, 0x64}], 0x2, &(0x7f00000002c0)={0x0, r4+10000000}, 0x0, 0x0) [ 533.615233][T26288] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 19:18:48 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x20, 0x2, 0x7, 0x5, 0x0, 0x0, {}, [@NFACCT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}}, 0x0) 19:18:48 executing program 1: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(0x0, 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, 0x0, 0x0) socket(0x23, 0x0, 0x4) 19:18:48 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x18, r1, 0x1, 0x0, 0x0, {}, [@SEG6_ATTR_SECRET={0x4}]}, 0x18}}, 0x0) 19:18:48 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_FRAME(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000740)={0x20, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}]}, 0x20}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_FRAME(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000740)={0x28, r7, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x40}]}, 0x28}}, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000001180)={0x58, r8, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME={0x3c, 0x33, @deauth={@with_ht={{{}, {}, @broadcast, @device_b, @from_mac=@broadcast}}, 0x0, @val={0x8c, 0x18, {0x0, "3a6811d3e5cb", @long="2aa2a420d5d146d111b06e52c825aee7"}}}}]}, 0x58}}, 0x0) 19:18:49 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000001480)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000001c0)="0a0775b005e381e5b3b60ced5c54dbb7", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000240)="6a3cafbeb2d30f2fd1a0974fecb1ac20", 0x10}], 0x1}, 0x0) recvmsg(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)=""/4096, 0x10}], 0x1}, 0x0) 19:18:49 executing program 4: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0xfffffffffffffcfd, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newtfilter={0x64, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x4}}, [@filter_kind_options=@f_basic={{0xa}, {0x34, 0x2, [@TCA_BASIC_EMATCHES={0x30, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xae24}}, @TCA_EMATCH_TREE_LIST={0x24, 0x2, 0x0, 0x1, [@TCF_EM_META={0x20, 0x1, 0x0, 0x0, {{}, [@TCA_EM_META_RVALUE={0x5, 0x3, [@TCF_META_TYPE_VAR='\t']}, @TCA_EM_META_HDR={0xc}]}}]}]}]}}]}, 0x64}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) [ 534.395534][T26325] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 19:18:49 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000240)=0x4712, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) read(r0, &(0x7f0000001340)=""/4096, 0x1000) recvmmsg(r0, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) 19:18:49 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000080)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0xe7}, [@ldst={0x6, 0x0, 0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2}, 0x48) 19:18:49 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_opts(r0, 0x29, 0x4b, &(0x7f0000000880)=ANY=[@ANYBLOB="06"], 0x78) sendmsg$inet6(r0, &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=[@pktinfo={{0x24, 0x29, 0x32, {@private1}}}], 0x28}, 0x0) 19:18:49 executing program 5: r0 = socket$inet_smc(0x2b, 0x1, 0x0) listen(r0, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x3, &(0x7f0000000000)=0x7, 0x4) 19:18:49 executing program 4: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000080)={{0x6, @rose}, [@bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) listen(r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) sendfile(r2, r1, 0x0, 0x800000000000c) recvmmsg(0xffffffffffffffff, &(0x7f0000001400)=[{{0x0, 0x0, &(0x7f0000000700)=[{0x0}, {&(0x7f0000000340)=""/127, 0x7f}, {&(0x7f0000000000)=""/31, 0x1f}, {0x0}], 0x4}}], 0x1, 0x20000360, &(0x7f0000001500)) unshare(0x0) recvmmsg(r0, &(0x7f0000000540)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x5dd, 0x40012062, 0x0) 19:18:51 executing program 5: sendmmsg(0xffffffffffffffff, &(0x7f0000009240)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000002280)="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", 0x101}], 0x1}}], 0x1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001240)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000001100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0x28011, r0, 0x0) r1 = socket$inet6(0xa, 0x1, 0x84) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r2, 0x8912, 0x400308) getsockopt$bt_hci(r1, 0x84, 0x72, &(0x7f0000001280)=""/4083, &(0x7f0000000000)=0xff3) 19:18:51 executing program 1: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000015c0)={0x6, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000001400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001640)=@bpf_ext={0x9, 0x3, &(0x7f0000001440)=@framed, &(0x7f0000001480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1c56d, r0}, 0x78) 19:18:51 executing program 2: sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, 0x0, 0x0) unshare(0x40000080) r0 = socket$inet(0x2, 0x6, 0x8) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r0, 0x942e, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, 0x0, 0x0, 0x70bd2a, 0x0, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xdf}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x48090}, 0x4080) 19:18:51 executing program 4: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000080)={{0x6, @rose}, [@bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) listen(r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) sendfile(r2, r1, 0x0, 0x800000000000c) recvmmsg(0xffffffffffffffff, &(0x7f0000001400)=[{{0x0, 0x0, &(0x7f0000000700)=[{0x0}, {&(0x7f0000000340)=""/127, 0x7f}, {&(0x7f0000000000)=""/31, 0x1f}, {0x0}], 0x4}}], 0x1, 0x20000360, &(0x7f0000001500)) unshare(0x0) recvmmsg(r0, &(0x7f0000000540)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x5dd, 0x40012062, 0x0) 19:18:51 executing program 0: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000080)={{0x6, @rose}, [@bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) listen(r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) sendfile(r2, r1, 0x0, 0x800000000000c) recvmmsg(0xffffffffffffffff, &(0x7f0000001400)=[{{0x0, 0x0, &(0x7f0000000700)=[{0x0}, {&(0x7f0000000340)=""/127, 0x7f}, {&(0x7f0000000000)=""/31, 0x1f}, {0x0}], 0x4}}], 0x1, 0x20000360, &(0x7f0000001500)) unshare(0x0) recvmmsg(r0, &(0x7f0000000540)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x5dd, 0x40012062, 0x0) 19:18:51 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000240)=0x4712, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) read(r0, &(0x7f0000001340)=""/4096, 0x1000) recvmmsg(r0, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 536.438049][T26380] hsr0 speed is unknown, defaulting to 1000 19:18:51 executing program 1: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000080)={{0x6, @rose}, [@bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) listen(r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) sendfile(r2, r1, 0x0, 0x800000000000c) recvmmsg(0xffffffffffffffff, &(0x7f0000001400)=[{{0x0, 0x0, &(0x7f0000000700)=[{0x0}, {&(0x7f0000000340)=""/127, 0x7f}, {&(0x7f0000000000)=""/31, 0x1f}, {0x0}], 0x4}}], 0x1, 0x20000360, &(0x7f0000001500)) unshare(0x0) recvmmsg(r0, &(0x7f0000000540)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x5dd, 0x40012062, 0x0) 19:18:51 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000076280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=@newtfilter={0x30, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x1}, {}, {0xa, 0x2}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}}, 0x0) r3 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000200), 0x10efe10675dec16, 0x0) [ 536.861092][T26380] hsr0 speed is unknown, defaulting to 1000 [ 536.914996][T26426] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 537.127433][T26427] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 19:18:52 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000076280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=@newtfilter={0x30, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x1}, {}, {0xa, 0x2}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}}, 0x0) r3 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 19:18:52 executing program 4: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000080)={{0x6, @rose}, [@bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) listen(r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) sendfile(r2, r1, 0x0, 0x800000000000c) recvmmsg(0xffffffffffffffff, &(0x7f0000001400)=[{{0x0, 0x0, &(0x7f0000000700)=[{0x0}, {&(0x7f0000000340)=""/127, 0x7f}, {&(0x7f0000000000)=""/31, 0x1f}, {0x0}], 0x4}}], 0x1, 0x20000360, &(0x7f0000001500)) unshare(0x0) recvmmsg(r0, &(0x7f0000000540)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x5dd, 0x40012062, 0x0) [ 537.475487][T26463] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 19:18:52 executing program 0: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000080)={{0x6, @rose}, [@bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) listen(r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) sendfile(r2, r1, 0x0, 0x800000000000c) recvmmsg(0xffffffffffffffff, &(0x7f0000001400)=[{{0x0, 0x0, &(0x7f0000000700)=[{0x0}, {&(0x7f0000000340)=""/127, 0x7f}, {&(0x7f0000000000)=""/31, 0x1f}, {0x0}], 0x4}}], 0x1, 0x20000360, &(0x7f0000001500)) unshare(0x0) recvmmsg(r0, &(0x7f0000000540)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x5dd, 0x40012062, 0x0) 19:18:52 executing program 3: syz_emit_ethernet(0x6e, &(0x7f0000000600)={@random="e76eaed24211", @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "d64d6d", 0x38, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @dest_unreach={0x2, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, '$\x00@', 0x0, 0x3a, 0x0, @loopback={0xff00000000000000}, @loopback={0xfe80000000000000, 0x277}, [], "80fef5ba764119ab"}}}}}}}, 0x0) 19:18:52 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000076280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=@newtfilter={0x30, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x1}, {}, {0xa, 0x2}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}}, 0x0) r3 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 19:18:52 executing program 1: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000080)={{0x6, @rose}, [@bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) listen(r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) sendfile(r2, r1, 0x0, 0x800000000000c) recvmmsg(0xffffffffffffffff, &(0x7f0000001400)=[{{0x0, 0x0, &(0x7f0000000700)=[{0x0}, {&(0x7f0000000340)=""/127, 0x7f}, {&(0x7f0000000000)=""/31, 0x1f}, {0x0}], 0x4}}], 0x1, 0x20000360, &(0x7f0000001500)) unshare(0x0) recvmmsg(r0, &(0x7f0000000540)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x5dd, 0x40012062, 0x0) [ 538.019035][T26489] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 19:18:55 executing program 2: sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, 0x0, 0x0) unshare(0x40000080) r0 = socket$inet(0x2, 0x6, 0x8) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r0, 0x942e, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, 0x0, 0x0, 0x70bd2a, 0x0, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xdf}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x48090}, 0x4080) 19:18:55 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='wlan0\x00', 0x10) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x400000000000070, 0x0) 19:18:55 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000076280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=@newtfilter={0x30, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x1}, {}, {0xa, 0x2}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}}, 0x0) r3 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 19:18:55 executing program 4: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000080)={{0x6, @rose}, [@bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) listen(r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) sendfile(r2, r1, 0x0, 0x800000000000c) recvmmsg(0xffffffffffffffff, &(0x7f0000001400)=[{{0x0, 0x0, &(0x7f0000000700)=[{0x0}, {&(0x7f0000000340)=""/127, 0x7f}, {&(0x7f0000000000)=""/31, 0x1f}, {0x0}], 0x4}}], 0x1, 0x20000360, &(0x7f0000001500)) unshare(0x0) recvmmsg(r0, &(0x7f0000000540)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x5dd, 0x40012062, 0x0) 19:18:55 executing program 1: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000080)={{0x6, @rose}, [@bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) listen(r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) sendfile(r2, r1, 0x0, 0x800000000000c) recvmmsg(0xffffffffffffffff, &(0x7f0000001400)=[{{0x0, 0x0, &(0x7f0000000700)=[{0x0}, {&(0x7f0000000340)=""/127, 0x7f}, {&(0x7f0000000000)=""/31, 0x1f}, {0x0}], 0x4}}], 0x1, 0x20000360, &(0x7f0000001500)) unshare(0x0) recvmmsg(r0, &(0x7f0000000540)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x5dd, 0x40012062, 0x0) 19:18:55 executing program 0: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000080)={{0x6, @rose}, [@bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) listen(r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) sendfile(r2, r1, 0x0, 0x800000000000c) recvmmsg(0xffffffffffffffff, &(0x7f0000001400)=[{{0x0, 0x0, &(0x7f0000000700)=[{0x0}, {&(0x7f0000000340)=""/127, 0x7f}, {&(0x7f0000000000)=""/31, 0x1f}, {0x0}], 0x4}}], 0x1, 0x20000360, &(0x7f0000001500)) unshare(0x0) recvmmsg(r0, &(0x7f0000000540)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x5dd, 0x40012062, 0x0) [ 540.589012][T26519] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 19:18:55 executing program 3: r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, &(0x7f00000002c0)='Q', 0x0}, 0x48) [ 540.689140][T26523] hsr0 speed is unknown, defaulting to 1000 19:18:55 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, 0x0, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000080)={{{@in6=@ipv4={'\x00', '\xff\xff', @private}, @in6=@loopback, 0x0, 0x0, 0x0, 0xfffc, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {}, 0x0, 0x0, 0x1}, {{@in, 0x0, 0x32}, 0x0, @in6=@mcast1}}, 0xe8) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 19:18:56 executing program 3: r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, &(0x7f00000002c0)='Q', 0x0}, 0x48) 19:18:56 executing program 2: sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, 0x0, 0x0) unshare(0x40000080) r0 = socket$inet(0x2, 0x6, 0x8) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r0, 0x942e, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, 0x0, 0x0, 0x70bd2a, 0x0, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xdf}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x48090}, 0x4080) 19:18:56 executing program 3: r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, &(0x7f00000002c0)='Q', 0x0}, 0x48) 19:18:56 executing program 3: r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, &(0x7f00000002c0)='Q', 0x0}, 0x48) 19:18:56 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000001c00)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000000)=@ipv4_newroute={0x38, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@RTA_MULTIPATH={0xc, 0x9, {0x8}}, @RTA_OIF={0x8, 0x4, r2}, @RTA_PREFSRC={0x8, 0x7, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x38}}, 0x0) [ 541.610761][T26576] hsr0 speed is unknown, defaulting to 1000 19:18:56 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000240)=@newspdinfo={0x1c, 0x24, 0x1, 0x0, 0x0, 0x0, [@XFRMA_SPD_IPV6_HTHRESH={0x6, 0x4, {0x0, 0xc3}}]}, 0x1c}}, 0x0) 19:18:56 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)={0x40, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x2c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7f}, @TIPC_NLA_PROP_TOL={0x8, 0x6}]}]}]}, 0x40}}, 0x0) 19:18:56 executing program 3: sendmmsg$inet(0xffffffffffffffff, &(0x7f0000003440)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[@ip_retopts={{0x14, 0x0, 0x7, {[@rr={0x7, 0x3}]}}}], 0x18}}], 0x1, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000002040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8943, &(0x7f00000000c0)={'syzkaller1\x00', {0x2, 0x0, @initdev}}) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', {0x2, 0x0, @remote}}) 19:18:57 executing program 0: r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0x6e) connect$unix(r0, &(0x7f0000000b80)=@file={0x1, './file0\x00'}, 0x6e) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000140), 0x4c, &(0x7f0000000000)={0x0}}, 0x0) bind$unix(0xffffffffffffffff, &(0x7f0000000140)=@file={0x1, './cgroup/cgroup.procs/file0\x00'}, 0xf) sendmmsg$unix(r0, &(0x7f0000000240)=[{{}, 0x6e}], 0x61, 0x0) 19:18:57 executing program 2: sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, 0x0, 0x0) unshare(0x40000080) r0 = socket$inet(0x2, 0x6, 0x8) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r0, 0x942e, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, 0x0, 0x0, 0x70bd2a, 0x0, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xdf}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x48090}, 0x4080) [ 542.169798][T26619] syzkaller1: default qdisc (pfifo_fast) fail, fallback to noqueue 19:18:57 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x8, 0x4, 0x4, 0x400, 0x0, 0x1}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r0, &(0x7f0000000140), &(0x7f00000001c0)=@tcp}, 0x20) [ 542.234424][T26619] device syzkaller1 entered promiscuous mode [ 542.413582][T26626] hsr0 speed is unknown, defaulting to 1000 [ 542.432548][T26635] syzkaller1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 542.490025][T26635] device syzkaller1 entered promiscuous mode 19:18:57 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, 0x0, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000080)={{{@in6=@ipv4={'\x00', '\xff\xff', @private}, @in6=@loopback, 0x0, 0x0, 0x0, 0xfffc, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {}, 0x0, 0x0, 0x1}, {{@in, 0x0, 0x32}, 0x0, @in6=@mcast1}}, 0xe8) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 19:18:57 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000000080), 0x72a, 0x0, 0x0) 19:18:57 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="380000002400ffffff7f00000000400000000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=@newtfilter={0x74, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0xa}, {}, {0xe, 0x7}}, [@filter_kind_options=@f_tcindex={{0xc}, {0x44, 0x2, [@TCA_TCINDEX_POLICE={0x40, 0x6, [@TCA_POLICE_TBF={0x3c}]}]}}]}, 0x74}}, 0x0) r3 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 19:18:57 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x8, 0x4, 0x4, 0x400, 0x0, 0x1}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r0, &(0x7f0000000140), &(0x7f00000001c0)=@tcp}, 0x20) 19:18:57 executing program 3: sendmmsg$inet(0xffffffffffffffff, &(0x7f0000003440)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[@ip_retopts={{0x14, 0x0, 0x7, {[@rr={0x7, 0x3}]}}}], 0x18}}], 0x1, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000002040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8943, &(0x7f00000000c0)={'syzkaller1\x00', {0x2, 0x0, @initdev}}) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', {0x2, 0x0, @remote}}) [ 542.704609][T26659] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 19:18:57 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x8, 0x4, 0x4, 0x400, 0x0, 0x1}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r0, &(0x7f0000000140), &(0x7f00000001c0)=@tcp}, 0x20) [ 542.837290][T26659] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 542.931734][T26687] syzkaller1: default qdisc (pfifo_fast) fail, fallback to noqueue 19:18:57 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=@bridge_setlink={0x34, 0x13, 0xa29, 0x0, 0x0, {0x7, 0x0, 0x0, r1}, [@IFLA_AF_SPEC={0x14, 0x1a, 0x0, 0x1, [@AF_INET={0x10, 0x4, 0x0, 0x1, {0xc, 0x9, 0x0, 0x1, [{0x8, 0x1}]}}]}]}, 0x34}}, 0x0) [ 542.984628][T26687] device syzkaller1 entered promiscuous mode 19:18:58 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x8, 0x4, 0x4, 0x400, 0x0, 0x1}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r0, &(0x7f0000000140), &(0x7f00000001c0)=@tcp}, 0x20) 19:18:58 executing program 4: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r0 = socket$inet6(0xa, 0x8000008000080003, 0x5) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="2c0000001300358600000000020000000731003e", @ANYRES32=r1, @ANYBLOB="01ffffef080008010c001a00080002001b0004"], 0x2c}}, 0x0) r2 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000140), 0x4, 0x0) 19:18:58 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000070000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001400)={&(0x7f00000013c0)='ext4_es_find_extent_range_enter\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) write$cgroup_int(r1, &(0x7f0000000140), 0xff4d) 19:18:58 executing program 3: sendmmsg$inet(0xffffffffffffffff, &(0x7f0000003440)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[@ip_retopts={{0x14, 0x0, 0x7, {[@rr={0x7, 0x3}]}}}], 0x18}}], 0x1, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000002040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8943, &(0x7f00000000c0)={'syzkaller1\x00', {0x2, 0x0, @initdev}}) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', {0x2, 0x0, @remote}}) 19:18:58 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000)=ANY=[], 0x208e24b) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)=0x4000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) [ 543.476085][T26708] syzkaller1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 543.533352][T26708] device syzkaller1 entered promiscuous mode 19:18:58 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, 0x0, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000080)={{{@in6=@ipv4={'\x00', '\xff\xff', @private}, @in6=@loopback, 0x0, 0x0, 0x0, 0xfffc, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {}, 0x0, 0x0, 0x1}, {{@in, 0x0, 0x32}, 0x0, @in6=@mcast1}}, 0xe8) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 19:18:58 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWSET={0x54, 0x9, 0xa, 0x6234f84c1300dfc9, 0x0, 0x0, {}, [@NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x28}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8, 0x3, 0x1, 0x0, 0xf}, @NFTA_SET_DATA_TYPE={0x8}, @NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x8}]}], {0x14}}, 0x7c}}, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f00000004c0)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x0, 0x7, 0x0, "98d3340600c7aa11897ecaab876eab79576839c5656be8410f2802e944af80373be2666b665770173fbd1883303b6ac4749393ad08f139a68f00"}, 0xd8) bind$inet(r1, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) r2 = syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) recvmsg(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0x1000}], 0x1, 0x0, 0x0, 0xb01001f1}, 0x0) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x3f, &(0x7f0000001ac0)=0x4, 0x4) write$binfmt_elf64(r1, &(0x7f00000000c0)=ANY=[@ANYRESHEX=r2], 0xc63b9e35) 19:18:58 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000020000000900010073797a300000000040000000030a01020000000000000000020000000900010073797a30000000000900030073797a320000000014000c800800014000000000080002400000000014000000020a0900f0ffffffffffffff00"], 0x9c}}, 0x0) sendfile(r2, r1, 0x0, 0x100000314) 19:18:58 executing program 2: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000080)={{0x6, @rose}, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) listen(r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) recvmsg$kcm(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000002c0)=""/100, 0x64}, {&(0x7f0000000340)=""/182, 0xb6}], 0x2}, 0xb9300da51afcc1e1) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) sendfile(r2, r1, 0x0, 0x800000000000c) unshare(0x40000000) recvmmsg(r0, &(0x7f0000000540)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x5dd, 0x40012062, 0x0) 19:18:58 executing program 0: setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000100)={@caif=@rfm={0x25, 0x0, "8117519b069fd705000000767d4483f1"}, {0x0}, 0x0}, 0xa0) r0 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x8905, &(0x7f0000000240)) 19:18:58 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWSET={0x54, 0x9, 0xa, 0x6234f84c1300dfc9, 0x0, 0x0, {}, [@NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x28}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8, 0x3, 0x1, 0x0, 0xf}, @NFTA_SET_DATA_TYPE={0x8}, @NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x8}]}], {0x14}}, 0x7c}}, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f00000004c0)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x0, 0x7, 0x0, "98d3340600c7aa11897ecaab876eab79576839c5656be8410f2802e944af80373be2666b665770173fbd1883303b6ac4749393ad08f139a68f00"}, 0xd8) bind$inet(r1, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) r2 = syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) recvmsg(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0x1000}], 0x1, 0x0, 0x0, 0xb01001f1}, 0x0) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x3f, &(0x7f0000001ac0)=0x4, 0x4) write$binfmt_elf64(r1, &(0x7f00000000c0)=ANY=[@ANYRESHEX=r2], 0xc63b9e35) 19:18:58 executing program 4: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sys_exit\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)={0x11, 0x4, 0x4, 0x100000009}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r2, &(0x7f0000000200), &(0x7f0000000140)=@tcp}, 0x20) [ 543.903325][T26721] hsr0 speed is unknown, defaulting to 1000 19:18:58 executing program 3: sendmmsg$inet(0xffffffffffffffff, &(0x7f0000003440)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[@ip_retopts={{0x14, 0x0, 0x7, {[@rr={0x7, 0x3}]}}}], 0x18}}], 0x1, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000002040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8943, &(0x7f00000000c0)={'syzkaller1\x00', {0x2, 0x0, @initdev}}) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', {0x2, 0x0, @remote}}) 19:18:59 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='wlan0\x00', 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f00000039c0)=[{{0x0, 0x1e, 0x0}}], 0x300, 0x1100000000000000) [ 544.178841][T26751] syzkaller1: default qdisc (pfifo_fast) fail, fallback to noqueue 19:18:59 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWSET={0x54, 0x9, 0xa, 0x6234f84c1300dfc9, 0x0, 0x0, {}, [@NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x28}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8, 0x3, 0x1, 0x0, 0xf}, @NFTA_SET_DATA_TYPE={0x8}, @NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x8}]}], {0x14}}, 0x7c}}, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f00000004c0)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x0, 0x7, 0x0, "98d3340600c7aa11897ecaab876eab79576839c5656be8410f2802e944af80373be2666b665770173fbd1883303b6ac4749393ad08f139a68f00"}, 0xd8) bind$inet(r1, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) r2 = syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) recvmsg(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0x1000}], 0x1, 0x0, 0x0, 0xb01001f1}, 0x0) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x3f, &(0x7f0000001ac0)=0x4, 0x4) write$binfmt_elf64(r1, &(0x7f00000000c0)=ANY=[@ANYRESHEX=r2], 0xc63b9e35) [ 544.237459][T26751] device syzkaller1 entered promiscuous mode 19:18:59 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWSET={0x54, 0x9, 0xa, 0x6234f84c1300dfc9, 0x0, 0x0, {}, [@NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x28}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8, 0x3, 0x1, 0x0, 0xf}, @NFTA_SET_DATA_TYPE={0x8}, @NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x8}]}], {0x14}}, 0x7c}}, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f00000004c0)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x0, 0x7, 0x0, "98d3340600c7aa11897ecaab876eab79576839c5656be8410f2802e944af80373be2666b665770173fbd1883303b6ac4749393ad08f139a68f00"}, 0xd8) bind$inet(r1, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) r2 = syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) recvmsg(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0x1000}], 0x1, 0x0, 0x0, 0xb01001f1}, 0x0) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x3f, &(0x7f0000001ac0)=0x4, 0x4) write$binfmt_elf64(r1, &(0x7f00000000c0)=ANY=[@ANYRESHEX=r2], 0xc63b9e35) 19:18:59 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000140)={0x20}) pwrite64(r1, &(0x7f00000002c0)='_', 0x1, 0x0) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) ioctl$FIBMAP(r1, 0x1, &(0x7f00000000c0)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000380), 0x101bf) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, &(0x7f0000001080)) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000001300)={0x2880008, r1, 0x0, 0x8}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x38, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x38}}, 0x0) sendmsg$NL80211_CMD_FLUSH_PMKSA(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x28, 0x0, 0x20, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x7, 0x5c}}}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x40005}, 0x4080004) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) [ 544.663520][T26772] hsr0 speed is unknown, defaulting to 1000 19:18:59 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, 0x0, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000080)={{{@in6=@ipv4={'\x00', '\xff\xff', @private}, @in6=@loopback, 0x0, 0x0, 0x0, 0xfffc, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {}, 0x0, 0x0, 0x1}, {{@in, 0x0, 0x32}, 0x0, @in6=@mcast1}}, 0xe8) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 19:18:59 executing program 4: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)={0x20002003}) r2 = socket$nl_generic(0x10, 0x3, 0x10) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000080)={0x4000000c}) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r2) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000200)) 19:18:59 executing program 1: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f0000000000)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x6, 0x2, 0x1}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000040)={r1, r0, 0x2}, 0x10) socket$l2tp6(0xa, 0x2, 0x73) 19:19:00 executing program 2: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000080)={{0x6, @rose}, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) listen(r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) recvmsg$kcm(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000002c0)=""/100, 0x64}, {&(0x7f0000000340)=""/182, 0xb6}], 0x2}, 0xb9300da51afcc1e1) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) sendfile(r2, r1, 0x0, 0x800000000000c) unshare(0x40000000) recvmmsg(r0, &(0x7f0000000540)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x5dd, 0x40012062, 0x0) 19:19:00 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='wlan0\x00', 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f00000039c0)=[{{0x0, 0x1e, 0x0}}], 0x300, 0x1100000000000000) 19:19:00 executing program 1: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f0000000000)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x6, 0x2, 0x1}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000040)={r1, r0, 0x2}, 0x10) socket$l2tp6(0xa, 0x2, 0x73) 19:19:00 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000140)={0x20}) pwrite64(r1, &(0x7f00000002c0)='_', 0x1, 0x0) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) ioctl$FIBMAP(r1, 0x1, &(0x7f00000000c0)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000380), 0x101bf) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, &(0x7f0000001080)) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000001300)={0x2880008, r1, 0x0, 0x8}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x38, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x38}}, 0x0) sendmsg$NL80211_CMD_FLUSH_PMKSA(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x28, 0x0, 0x20, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x7, 0x5c}}}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x40005}, 0x4080004) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) [ 545.523869][T26812] hsr0 speed is unknown, defaulting to 1000 19:19:00 executing program 1: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f0000000000)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x6, 0x2, 0x1}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000040)={r1, r0, 0x2}, 0x10) socket$l2tp6(0xa, 0x2, 0x73) 19:19:01 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000140)={0x20}) pwrite64(r1, &(0x7f00000002c0)='_', 0x1, 0x0) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) ioctl$FIBMAP(r1, 0x1, &(0x7f00000000c0)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000380), 0x101bf) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, &(0x7f0000001080)) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000001300)={0x2880008, r1, 0x0, 0x8}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x38, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x38}}, 0x0) sendmsg$NL80211_CMD_FLUSH_PMKSA(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x28, 0x0, 0x20, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x7, 0x5c}}}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x40005}, 0x4080004) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) 19:19:01 executing program 1: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f0000000000)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x6, 0x2, 0x1}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000040)={r1, r0, 0x2}, 0x10) socket$l2tp6(0xa, 0x2, 0x73) 19:19:01 executing program 2: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000080)={{0x6, @rose}, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) listen(r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) recvmsg$kcm(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000002c0)=""/100, 0x64}, {&(0x7f0000000340)=""/182, 0xb6}], 0x2}, 0xb9300da51afcc1e1) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) sendfile(r2, r1, 0x0, 0x800000000000c) unshare(0x40000000) recvmmsg(r0, &(0x7f0000000540)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x5dd, 0x40012062, 0x0) 19:19:01 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000140)={0x20}) pwrite64(r1, &(0x7f00000002c0)='_', 0x1, 0x0) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) ioctl$FIBMAP(r1, 0x1, &(0x7f00000000c0)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000380), 0x101bf) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, &(0x7f0000001080)) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000001300)={0x2880008, r1, 0x0, 0x8}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x38, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x38}}, 0x0) sendmsg$NL80211_CMD_FLUSH_PMKSA(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x28, 0x0, 0x20, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x7, 0x5c}}}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x40005}, 0x4080004) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) 19:19:01 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='wlan0\x00', 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f00000039c0)=[{{0x0, 0x1e, 0x0}}], 0x300, 0x1100000000000000) [ 546.987694][T26860] hsr0 speed is unknown, defaulting to 1000 [ 548.533117][ T10] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 548.589850][ T10] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 548.649355][ T10] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 548.687333][ T10] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 550.597062][ T10] device hsr_slave_0 left promiscuous mode [ 550.604483][ T10] device hsr_slave_1 left promiscuous mode [ 550.617142][ T10] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 550.624896][ T10] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 550.638825][ T10] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 550.646498][ T10] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 550.658681][ T10] device bridge_slave_1 left promiscuous mode [ 550.664926][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 550.712036][ T10] device bridge_slave_0 left promiscuous mode [ 550.719203][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 550.735722][ T10] device veth1_macvtap left promiscuous mode [ 550.743723][ T10] device veth1_vlan left promiscuous mode [ 550.749520][ T10] device veth0_vlan left promiscuous mode [ 551.004793][ T10] team0 (unregistering): Port device team_slave_1 removed [ 551.017933][ T10] team0 (unregistering): Port device team_slave_0 removed [ 551.034576][ T10] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 551.053378][ T10] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 551.128010][ T10] bond0 (unregistering): Released all slaves [ 562.590871][ T1360] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.597193][ T1360] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.975597][T26953] hsr0 speed is unknown, defaulting to 1000 [ 564.106488][T26953] chnl_net:caif_netlink_parms(): no params data found [ 564.182994][T26953] bridge0: port 1(bridge_slave_0) entered blocking state [ 564.191578][T26953] bridge0: port 1(bridge_slave_0) entered disabled state [ 564.199325][T26953] device bridge_slave_0 entered promiscuous mode [ 564.208857][T26953] bridge0: port 2(bridge_slave_1) entered blocking state [ 564.216280][T26953] bridge0: port 2(bridge_slave_1) entered disabled state [ 564.224848][T26953] device bridge_slave_1 entered promiscuous mode [ 564.255510][T26953] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 564.268231][T26953] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 564.313400][T26953] team0: Port device team_slave_0 added [ 564.323730][T26953] team0: Port device team_slave_1 added [ 564.357001][T26953] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 564.365200][T26953] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 564.395561][T26953] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 564.408779][T26953] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 564.416371][T26953] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 564.443719][T26953] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 564.487136][T26953] device hsr_slave_0 entered promiscuous mode [ 564.494297][T26953] device hsr_slave_1 entered promiscuous mode [ 564.502630][T26953] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 564.513215][T26953] Cannot create hsr debugfs directory [ 564.625276][T26953] bridge0: port 2(bridge_slave_1) entered blocking state [ 564.632418][T26953] bridge0: port 2(bridge_slave_1) entered forwarding state [ 564.639837][T26953] bridge0: port 1(bridge_slave_0) entered blocking state [ 564.646902][T26953] bridge0: port 1(bridge_slave_0) entered forwarding state [ 564.712201][T26953] 8021q: adding VLAN 0 to HW filter on device bond0 [ 564.727303][T16139] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 564.740416][T16139] bridge0: port 1(bridge_slave_0) entered disabled state [ 564.748050][T16139] bridge0: port 2(bridge_slave_1) entered disabled state [ 564.756893][T16139] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 564.771326][T26953] 8021q: adding VLAN 0 to HW filter on device team0 [ 564.784337][T16139] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 564.792949][T16139] bridge0: port 1(bridge_slave_0) entered blocking state [ 564.800085][T16139] bridge0: port 1(bridge_slave_0) entered forwarding state [ 564.812957][T15286] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 564.821636][T15286] bridge0: port 2(bridge_slave_1) entered blocking state [ 564.828684][T15286] bridge0: port 2(bridge_slave_1) entered forwarding state [ 564.857055][T20913] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 564.871505][T20913] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 564.879379][T20913] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 564.898147][T26953] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 564.909329][T26953] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 564.921737][T15286] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 564.930870][T15286] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 564.940912][T15286] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 564.960948][T20913] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 564.968956][T20913] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 564.984437][T26953] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 565.068305][T16139] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 565.094649][T15286] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 565.103675][T15286] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 565.116799][T26953] device veth0_vlan entered promiscuous mode [ 565.125079][T15285] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 565.133467][T15285] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 565.153500][T26953] device veth1_vlan entered promiscuous mode [ 565.186217][T26953] device veth0_macvtap entered promiscuous mode [ 565.193526][T15285] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 565.201930][T15285] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 565.211997][T15285] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 565.220520][T15285] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 565.233501][T26953] device veth1_macvtap entered promiscuous mode [ 565.241005][T15285] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 565.249170][T15285] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 565.270189][T26953] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 565.281121][T26953] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 565.295391][T26953] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 565.306455][T26953] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 565.319179][T26953] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 565.327966][T20915] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 565.337470][T20915] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 565.349388][T26953] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 565.360808][T26953] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 565.370980][T26953] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 565.381483][T26953] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 565.391438][T26953] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 565.401934][T26953] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 565.413307][T26953] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 565.423817][T26953] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 565.435532][T26953] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 565.444557][T15286] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 565.453776][T15286] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 565.546694][ T10] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 565.574246][ T10] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 565.606747][T16139] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 565.620497][T12310] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 565.631412][T12310] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 565.646271][T15285] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 19:19:20 executing program 4: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)={0x20002003}) r2 = socket$nl_generic(0x10, 0x3, 0x10) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000080)={0x4000000c}) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r2) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000200)) 19:19:20 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000140)={0x20}) pwrite64(r1, &(0x7f00000002c0)='_', 0x1, 0x0) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) ioctl$FIBMAP(r1, 0x1, &(0x7f00000000c0)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000380), 0x101bf) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, &(0x7f0000001080)) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000001300)={0x2880008, r1, 0x0, 0x8}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x38, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x38}}, 0x0) sendmsg$NL80211_CMD_FLUSH_PMKSA(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x28, 0x0, 0x20, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x7, 0x5c}}}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x40005}, 0x4080004) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) 19:19:20 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000140)={0x20}) pwrite64(r1, &(0x7f00000002c0)='_', 0x1, 0x0) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) ioctl$FIBMAP(r1, 0x1, &(0x7f00000000c0)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000380), 0x101bf) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, &(0x7f0000001080)) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000001300)={0x2880008, r1, 0x0, 0x8}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x38, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x38}}, 0x0) sendmsg$NL80211_CMD_FLUSH_PMKSA(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x28, 0x0, 0x20, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x7, 0x5c}}}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x40005}, 0x4080004) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) 19:19:20 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000140)={0x20}) pwrite64(r1, &(0x7f00000002c0)='_', 0x1, 0x0) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) ioctl$FIBMAP(r1, 0x1, &(0x7f00000000c0)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000380), 0x101bf) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, &(0x7f0000001080)) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000001300)={0x2880008, r1, 0x0, 0x8}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x38, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x38}}, 0x0) sendmsg$NL80211_CMD_FLUSH_PMKSA(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x28, 0x0, 0x20, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x7, 0x5c}}}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x40005}, 0x4080004) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) 19:19:20 executing program 2: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000080)={{0x6, @rose}, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) listen(r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) recvmsg$kcm(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000002c0)=""/100, 0x64}, {&(0x7f0000000340)=""/182, 0xb6}], 0x2}, 0xb9300da51afcc1e1) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) sendfile(r2, r1, 0x0, 0x800000000000c) unshare(0x40000000) recvmmsg(r0, &(0x7f0000000540)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x5dd, 0x40012062, 0x0) 19:19:20 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='wlan0\x00', 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f00000039c0)=[{{0x0, 0x1e, 0x0}}], 0x300, 0x1100000000000000) [ 565.950456][T16139] Bluetooth: hci4: command 0x0409 tx timeout 19:19:21 executing program 4: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)={0x20002003}) r2 = socket$nl_generic(0x10, 0x3, 0x10) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000080)={0x4000000c}) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r2) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000200)) [ 566.112062][T27319] hsr0 speed is unknown, defaulting to 1000 19:19:21 executing program 4: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)={0x20002003}) r2 = socket$nl_generic(0x10, 0x3, 0x10) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000080)={0x4000000c}) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r2) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000200)) 19:19:21 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='wlan0\x00', 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f00000039c0)=[{{0x0, 0x1e, 0x0}}], 0x300, 0x1100000000000000) 19:19:21 executing program 4: syz_emit_ethernet(0x7a, &(0x7f00000004c0)={@multicast, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x44, 0x3c, 0x0, @local, @mcast2, {[@hopopts={0x0, 0x4, '\x00', [@hao={0xc9, 0x10, @ipv4={'\x00', '\xff\xff', @broadcast}}, @hao={0xc9, 0x10, @local}]}], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 19:19:22 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000140)={0x20}) pwrite64(r1, &(0x7f00000002c0)='_', 0x1, 0x0) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) ioctl$FIBMAP(r1, 0x1, &(0x7f00000000c0)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000380), 0x101bf) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, &(0x7f0000001080)) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000001300)={0x2880008, r1, 0x0, 0x8}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x38, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x38}}, 0x0) sendmsg$NL80211_CMD_FLUSH_PMKSA(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x28, 0x0, 0x20, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x7, 0x5c}}}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x40005}, 0x4080004) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) 19:19:22 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000140)={0x20}) pwrite64(r1, &(0x7f00000002c0)='_', 0x1, 0x0) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) ioctl$FIBMAP(r1, 0x1, &(0x7f00000000c0)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000380), 0x101bf) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, &(0x7f0000001080)) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000001300)={0x2880008, r1, 0x0, 0x8}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x38, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x38}}, 0x0) sendmsg$NL80211_CMD_FLUSH_PMKSA(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x28, 0x0, 0x20, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x7, 0x5c}}}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x40005}, 0x4080004) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) 19:19:22 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000140)={0x20}) pwrite64(r1, &(0x7f00000002c0)='_', 0x1, 0x0) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) ioctl$FIBMAP(r1, 0x1, &(0x7f00000000c0)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000380), 0x101bf) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, &(0x7f0000001080)) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000001300)={0x2880008, r1, 0x0, 0x8}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x38, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x38}}, 0x0) sendmsg$NL80211_CMD_FLUSH_PMKSA(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x28, 0x0, 0x20, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x7, 0x5c}}}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x40005}, 0x4080004) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) 19:19:22 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x2, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x6}]}, 0x10) sendmmsg(r0, &(0x7f000000cbc0)=[{{0x0, 0x0, &(0x7f000000cd80)=[{&(0x7f0000002000)="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", 0x1000}, {&(0x7f0000003000)='\n', 0x1}, {&(0x7f0000003040)="4343aae2a83cbb70f41fc0e98857d5b4d90b0162401c639718b2cc5e9f3128ba98d92685472ea22517ace15b7e2fdcbae633e0f198b5a4e57ec03d7a8d3f1460489eaacf996c999aebe611f5f4cacd2a063c9e9f650b0a50679e626cd6d10a7ca4d33b4c639890783ee403dd213df58bd4469952ed72ab2fb1f1e882979875acf6699a28189bb4b75c846ac0a4226b810906905a6e70b66ab7302f26090329c85bba1c5ac2fa17068f9bf2cf04d9dbcde10b30f199e8cfbb6c57e06ee25c7fae48d7b4f2997d5f78623cc715785714aeac41375579f1803502b42b875cca99f9456f54b2fc63da9e4a15c19e1223935a995d6f5c96229660a7ba77d8fc74de65b6be02d3dad1b53cac9323dea33c62118a62b49623c278b8a0d136b17fdcb7354d853c56622ff85f1b4ac968c6fa79c9d3be6362419dee7360c69791d6dca0bb79316427a0a0fbfa1501636fa67ce8d1617863ebb3acea3310b0319001b3bf501b7df309c6f8fac93b900d260823c5f5e4ee4bdb9affbf1636f2e0ebc89864671bf5787895a430a703922444b64562ebec936f4e4da33ba3331378f3cf88633a149f76b05ceadf6a4e38392301ad758f85efd6c7308a94c97bf5fc90237e7c1d8d6dc6259e05891fe561913d7dc7d3709f694e1d12b1b7621c6c1dc8248d31f65a303acfb7457e2f0e9e4b2b0805418a4c05a2c0aed9a4f8b32421f12784b61f62a6d9e8efc53b93416c6ff49ddd9ff192d71d1b9e0f723d79b582a03914d323fab1034bff9410c6a6451a0a270aab28ad341a45c66165e9e2b47de251368298c2dd7cea65ead4cac7e0c5ccf003ef303bf315d52514a9922f25036efcab412b150c5a0b276f1cde52d09ab9e7d667995b1cdf3425298f127b08eeac5831dd5ecf0a7493093c24d6c3184e5f1aa4534a9bfce7112d398aae68410cb183cba5ab89976209bae73e278944086dbe9db36a77b23edcbc663b4608b0a50ff50b2a1963c13c3a5fc103d2ae7ed31ece1809516327bfb49849343b10cde429d6f273c9d9399166b8c66814e6862dc2ea8f0f3bfcea8ba93f6daf365f3dc5542f31ce9d45685f64bac5df3493a5f426cb0251982b929772d1bf81a7eb22db51501c8be8c846cab799fd87d57940cbfaf74dc2806432077d3c7fca137bd1cc77d4c004f09801e616a9a100afffa3529006e4911bf63139120cfb4b7b843fb8c240cf69a6ee3dc7efa7da5155265303a7aa5ebdcb8ec9a27dcea027bcaf88821a969f0cb51f987341641e89aa5d4570b5a6d2fab11c336cb530f8b0859d5aaa243cbb5fcd7b002487b228349fafccb1b32d6b9d0723ec8216b5a51a4ed8bad40a207eedcee76bbc04d4b63076d615d6ae32bb010e08ae9cd63a1fd839c48f6a9bb632802546dc9f5559c8f138ce34119b6e38dd605c4987df0af4699c275f7afc4a4eca23da739ae7931fd8fe6f9861c702a4c1548c1b2f90ef4e8f5b2a903617a4471fdf05f2b836775bde66097d5f5819248c2b511664dd68505fa3419608ef8828431cb19f01bec2bbaed8b2c6fdd47c164b50f53ac195f04e99b3d420957a14bd04f4c2cf1a29d7478f8ce8f333559fe0c0fb7d0c5965fe1917ca0ba9f43cbb7e82b87c9115a112df67cd02ca92a92441c8b9e939dd39a3c9076b5fda28c1ec286abc8e981dd2a004c2776562269b282beb9bc090d6499c5bbb64c4b23aad5f6e97b3137df8aa85d1846d1f7274bce1881749eac69fe12e63c8ab7ec5c22fdf1019d1197c42a6135ff59b5212ee853f0a7c1b212eedcd8ee3775979dae6956714e467f8bf5342c6481bf2e030cc389afeb841d6184f574ece65e0ae14a756d32cbe2416c9568f51f2213edafdae042fae988306c5a7517fac96ef34eda6364a8ded6664e27d1da4d164462a6e59f37f97643f073c48412c72f10e16781b2c064bb390b8559f7b5bcf822c59c846617d665530865a41ebe858ee7bafc34584722bc8884248c3f26286ef900ad7a3eb897efee6ea840f5221dcf2e29fcf41676a283160bad05087daa478060fb26b2ea67d4460eec8ab29ceec8047b61e24676a91d1dad988807d23eeb1e2b7c85ae40c1c3a257cb5fbc74bad8e34f5a18c0a5bed3d37e15d080400b70e25f0ee7b6901d9c135048632729ec3e493f5fc372a409fd7f81b45b69ff5c28327252a8d1401041b07537ad508e7e197f3adb53aedb687cc9fac921d240d7e453cf685c2da11d53bc7d3b2a090ae292ce5cd44986537afd3df60a51a001a71e464234689156e28ee49b0ecc188110d6d8ba6a46ba34149bb3eb2a123db60047061a6783f1dd1c7a040abe8e68ecaeb2bacbd8fdfeba99c455b223f90b847c7bff7f80f1c5fa8ff56199fa6252c42c22a302713c62c13cc9baf85ec42d10dd0b5a4a99da3be7eb578279a7c6640d574584d27a52c7febab71073009f283705e79683bea73c4472a8c4fe732ed7f973bb8bd8bac0415628ed4b7b792570ea6b27b90fe884bb04c23a72670bf97accd07226d0018b067926b9650ce2159d377613a49f51c9760562c3a9889f18e53fbb12647da60d8ec8398b72f854c255bda6b4eb66521711b75ced1b7664c744c88d62ac302b9b5a1ea2aa654441559b3efa4c47ef8bbc9d76fb4cbf50e4d72a9e491ca5e3f0adbf029538fe608032e88d02d004ebb73dd05a2f98a915702f972aac5e51f754ece12498fecb60902783780eb2905a96b940f9941204c20c9911064deb6f3e59e4567ec9565bbfc1dc3c9fda709559e800646c3780ca2ecce2d6f44ffdecc1cc4c9aa0a3145317d3af8c21057a1b1156e06a9e640dbf86271f5dbdc5fda282c816ee6ef0fb3cf97aa24500586cbc3942f978e936174bf3bc6e479eb99941b5f40f0b5d97d8361f7c1467250460e321f6b4756e4d7cc85197a4b27bff7a8f1671a8401f127061320096eb241ad93de103444e409bdbe34e581137008689f4458f22ccd09b305b3156f50740396fc1ab27d23b67bac60aada7688f876d337ba7a30e6097747ace63ac4ed686c67b9f089cd1edcf5455ae361de0c16696820ae03f660938d6e993624752606f1ef02dba53828e0e78556c069a9922761acd1f74941d0cbbf6d2180f13acaab814942da396eb3b48fdadf16a7bea5d5d76a33aff90a24488f7fb6bf4410aa8e74b56184445ce19b72aa72f11a63c8c2ad3b035e41f559af462b9bfd37f22a3ca39b57d23749e016e546295375bdd6671330b6f3d75b5bab5b2e10faab7e98f249a03e3db803fe6e6a51a51ede5d011be6a89335d74ceb320156defc8e0cfdbc863860e4dbdbdecb2c7e76ee450e8806edf96a1f8a1449a773dd7475c73c8fba2283f99ecca3a378f1b0da7672ad1b1e7c2604fd3362e4b52212fc2fcb334aff59b11d2dd712903c35b1df35d8c917e91992af935061baa175ac74e02f863ae682b71e86d07511d6615e26ff8398c1afdd1bb204955ada120b8ed99ad6c25d82cb262bcab21319407f8a6230ce64e3ae3c4ca782e4155edd071fc1e719d6467602d8b9ef22d70fc64119100ec13d82545459d4d7d2126f2b2a5f607cf3929a49aed741adc9d604f3f16677bcc7c9038e1a598f3c717cb0cdac4b0125703987d40e1c855574dea11f2368d0fdc8d9edddf2276c5b0182ae09a0af832258d61f1273875aa9a4def5d172dc4e416e83e7d91b60608d6549c1cddbdf4d0e986a5e8e8cb9bdff4f22a3dd08e89caf3cacb57a53b69f59debd597cf67512d137b91f6c658a5824697ab9c98dee9816a9175b09f702a284475b1382633cc5003f477c5996ad71bfc79446c35e33e1596143f7424f22fb7779fc421a8967123b6fd30cc546d9366581b81056be6b38b4115ebad35603e0a5fb991d91872c719df5bccd4f16f63c314f03f25322620222c625edafde2387bce5836a9c35db503584e843734356357a0ffbf357b0811fca2586b9fcf680ce8bef9aa1c46013e769f6917485d85d33c9ab253040a88b61a9e3160f5f3f42cc7f5f9926309eda27140d7367619253acb0b7e31d20b312a09d862199cd4d77e59b9efd8d3bfd0eda863398bf8a75733298d64560a7130532c3cc6fd172bf43ac955babcdfe0b19e3482dd59fff1a91f4575ddd2bc3ce9b93f02f38d50615f9c0307054adbb1f6ceb2622a7d3e14257e67d6025264000da2b0b0ec84d695301cdfcd4113cbaa1d3a9a896f0fd1ac649c1c81b1c7434cb64dd84e98bf188eb4ad769c8666e3368bb9b04e85b5e14847330b8b78cd55342666249670da5e7e2c6898c930aa46700974232a9000c6f67fdaa5732f659ccfb5cdbd3cd4597218ef65acad5e90dfee58a1bf58c82088522214b819e09da214ec343b5ceda40b1d180df18df0902376069737a7f2a8c1237f831ef566f5f684aafe8e9528fc7bbbb672a7fc3270f4880148e942f206a47a48f24af71a3f07ea274caa14f3727dae405afa41487130df2152ba3fd5343e08e45992173fccbf066dc16ac211ab2912787edf6da0be6cb7351beecc64e4a488d6fa2640e66261f986ead59a90a81ee42a3e54bc722f3021f4ee9c3756d56da2210011d1f77ee45a23e82e6554c6a51d166a29f8574996aa9dd35143e08f85713446f40e48130fb2100d1451b4465551627f87713cb0e39900866a190e3663c9454855121dacd039be2f1a375a1435b92627523537511e3340d984aa7da0bdefac45cdc83e640cc6a1e3f2d5447565e8802c6461abb9a624dc06038719b2956a70db12f1bd15d259a628c3aa06dd96b35beb51672c10b95449be46dd296030b12f0e13a7ab77ec0c99fdeb41ae91d60c8731a14491368519289dec133c3bcff3718ce5bc945c8bb9853be0eb90db283225bc4f8ba9a2d6aca8ef1241f897c44e5d438a4daf72c9ade13ef440e5f1c98bf730b41629ca1232e72f5e0f16995f662743bbb9028ca06075112b53347df151dcfa55cc8ec76fa5e8586afbbf44b85e2c5bd007db13767063dcd644d130f0d50d375e095913c4f670c27f3ecee26a7adfca5589d3a0b0f14bb137569de4cb93d62515a625e946fd6448b889472bb0aa4532b9040c8a9dd47119281d69962f628d12e2443f119a88705222788b25bdbd2b8ba7ed2f00eddc8af09c74517820c1c309a4539c0395ebddc95363bacdd4169e015e70dcc8e07f11f6fb2b26ab792026cbbb72488b5634be5956b37236e3f8113f4b81d2434b614d53fac9b73758d7f1630ad65cc7d28250cce3d38461fea7b544a1b671a03771ab37743b4e64437ab1053fbcbe940adae6ca81f6578a7c127e4237de5521b4398f9144418184379fb12195043a435bc1c32f40f0977276d5ab6f0195893dcdcd67531a8ca6d86730ccfbb980b647daab9c42a94b3975b9d7df2388346bbb1d5be1466d1fe6ddd684a92476d7b903c2b5efd7f89e2c0b86fc93f7f70d251a336ad592be0d4fec38c7046f3b004d93352ba7d25d08acef0753b981213a673ec3aa9594a3e6ced077202ca30ce4ae12a9ee52f509aaaab531760a281bc1f07c4d440ae800ad77e086fa3de04695c1fb0c2148a6a168cbe48b2575e493e9d645420828a12e9b28d82f74248590f74b7868177750eb147c5c91c9b31464c7fc2f1178bb1466fab12b155a9306abddd73af4713fe2049d9b7f256288d4bceb24aaa094c8d21c30882d96f3441f86c914da3adcd77ba4708d4177a91ca6de2950b5fce10da41ae1cbcfa4ac81fafaab386fea76bc899513147b26b474474959038fe5bbea80938f4d0301b1089349a1fe7dfdf47b3f557", 0x1000}, {&(0x7f0000004040)="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", 0x1000}, {&(0x7f0000005040)="7b116ed3c67931c7069e29c0627c7e6faacd17ca43234d63ce4fc1666454009c6b0705e97d03a0e54231af85d8f48fa11070cb726fece0078aea0e2a7b9df07c9902aa7b2cea47bb1e304a1578fd48f4f09d5ece261cf8243108bbaa80aa8157a51df481c25a59b2440389029e1a272cb316c9bdfe304fc3d01d11d4d7210f1f9a709fed09e259f7ad95f4ff73393e3f59da4324182216275fc2add8e844324d843c75c90ac1c1ab95b604bb66dc7fb73eb7b6a82ee119c514d9c24690d17b8e7e447831f0c48907125175e6b1d0ff62426759d45d909178ee7d64b269f75a4840d9340f55289162ebf5332a7c210b4382d4dec31d92d915882f4328371981c32edf5e2a63e5c0533588977272ed7ed1f7f867a27760d1cbb160e264af05e66e777fcc1eeaaf58695ce7143b687cbef5da2a61655c91653c948749845268b9ab70ade7e65d72a504f8ed39be4d3df438f083dbcf615764cd1d295703bb7158896cf7ebbb6c74f921b077132ad46877cae76591e98b830410ea4233d828b8bd8e6cbebd25057425ccb17c4e197d0a2dc27d98b97a93652ae9117695d0d1f2ae24ebdc860c49ebc4072a70e5f28ecd1930d6d789640cea34a61a38cc0cef45b4f7be9c6eb3e850f119f588e4cf58b80a2405e8913b8e8c2198ebb86c2922a8b9c38cbd53b81e29eb5dc2a473d7679d3ad7b724cbbe30c7f4cb394ade8dd0cf4b1e05dbd98bfa868a90b6cce71f5b8ac7bdd2f7c35c7218731a35149b839f5ad3a7de68cb90b63af8c8f8e738fcab585533cdc5bc781e4339197ec613d89c6f94ffcd0a1ce85424d702aa7fbc1261579748bc1c632244d38e93135a67cb5afa33704a5f56a149921f6b6b46e9ba7f3ae1025784c22edfb9d7c77071de777fd505e2d1ed4e0eec2b69464299c80bcdb75acdfe37312c12e67bb0b7c0a7c9b76d86c7c52813e665da2149195c8b0ecd19e79fc14aabad294110f510e51a669c1025be4ecb594bbe669c78aaa33b6b271672680d87596de33714c136075dbbf067d7a494a5d69b1de784ce2ee0b8df6360e8139dd0e26cda34504a1f707c5b1b9aeabe142cedd67ff1738a823e05446a508789d6bc84076d134c9e69791378f0d71845014b28b321fb1f866baafa4d539ebc150e373c282147b2e6465c99a2f406a1950d02d511a0afa5240fb2f18ffaa8b217d3acce3a7b2e3a5f32eda8f42be21ac5271a47c7070526c31babcdd9b9d9cc2a68b101ce021a5dd0cb4dab99c066a8598223a2acde372334af85ad46f43dcadf0c3352aaa05167fdce8b1e1a748762ca7be61d8e9eb7eb739df07ef507aca6774aa0f8743ec9a73e73715f478026a35497ac0517212263c06d2310eece13da0c23e0b4e4cfc27686bbdd7c6323e4a4de27caad5fe10904c53e8421dac51e2a553d4e1f690048d09544c4b08ad21184d3ef24dc2b579f3b7bba05620b2935cbc1959d90f9c0b4988dc24e4af5891e47452545706c585f2c42274d486c30fbfb1e2d9386b74043940a3fd8d31cf50c6149d362ef5b520da4758bb934003f2ede58b9d8c005d9947bdf6eee3fc15f45c7b8f3ac38c9c105bef02c190d047ef2a0ecbdea77b9df7b1f5bd7b72e6c338c80aa933342b708fae356b7044a56f2159a761e3e9bc1ef1851a1fac25d49b5883d98e9291ba7cf7753117d8a9e7f710bcf1ee7df0862622d4affce05bcd9f03a1cf0d6a04241075d3413855d2bdf816128fad859dbe4d1f9e9d4324b9b90c3d3f6acf971efa10f3808b92083e94a1a7db2a31658f7bf465cb9bb85e64ed9484ce5ef7e503584432292eaf2d0d27ea3b9b0461e9ad1056d67954c61d46bfe1b4ef3198ceee84f605d2d4231feb9720bfb8755cd7fb253a46c206349840838d408a090c3032ea39fc411c2eaf7b7377cdd1fff19b5cec98fa357c4e508144f9b2aecf285a6af3ff74c1ffd1d7432aa12e7ce9d7477b4a6dc0da4286a4091fedb9738a237e69e99b5fe018b06d204810af0a28fe2cf5c64ffbae129b351a63f5d94aaa778f3503b70953c6054eb5257f168a01145b86397d60ad786ff257fca628bd1f7392ea60f6788f066aa9bde75b3bc6585a2d76e445c652e006130f6eb452abbab1e7b06ba1cf52d9859df928fcd8eb302e04b1c8ff37735d6453f9d5ed17d482d8933e7967731d057ac04db5585eec32f9076c5734eeb60055b511753a5470e48f223b1f327d128027072c33a12f65b17f941d3b811d6e3e81fae61dd57b0daae207adf935da9325fe86a5fce56fe5ddddee36d2fec705a56869b818a4801b10f23f6e12668cb1e12ca47133d8466eb828f16a06ff48fd9e24c686abcc8592cf3e2e4e30d05094fcb75b2acc2f9d7b66536bd9edfdc49094063d9eff98e6c3a75f2d12bae71a42f6ce2e752e66d3bed638038f92ad0ec74ab4f93adb19db82193be7e81259c94fb049f0d2afebc02788fe2b0e7858b86e4c81dd80812023367f8b9e58f773f3fbbe504ac87e900dfa0d9eab93cf5d26d96275ab72947180a279d2cfcf3ec074789b361e3bf0e69a19c2f0c929549c3c2309e5c68decb8fa2df9acfd2b8ccd082ffe662863199b4cd42e6a1ce0883ec11a55a4e0c02870e08a35489e8e2e3f01a90046c09f87b5b0953f006173a26f01664b8453643a71a3ceedc2e1368b1517e5a4c26591a2544f947cfa9f5fb4e8efd1880e736462f8c78807771786500cc21d10be006da76b850affa7394388879266d98507eeb80ca9a67796965613ea3ee0cf4381b116cd7ae6c542bc19bbb52c8691574f736ed10592d720a2f78f176efea9220823dbf996b56960b72255e3240bd6544310b0595f5a5b07581499c848c12ea9a215a1203a4c349c815498f3220686e37abebe47daa8718cd3af5ac8b0eceeb13ad0f1bb0b91b6d559093c9f6decd88d9e1ad219a3a99d55eb2a2fdd2b328da3a3bde9188f42782713e171431fe826016587277c36f786061a788247819a9ff3ae09bcf16c10b83a0a678d55a26f1d5440967caf9a336dd24eeadb157c06e11bc208bc996de6b7e52f386b69cb283b69e3eacbf6c52423af35be82220b60088f2ab705925e7907ab8443077d7b00af1b941e3322693ffcf7452289631ac855503af4c427f2877455dd6944eaefe44928fbaa55a6e88bd8f4a0ce8048771db335d8835bb54fbdcbd88aa9f6c8050d236fb8a3f0619c65f387aef802a68820c3217f0f305dc4b5adb6d146026e68dcd76c48a1be87f3e1ab61bf3c4ba33618d4a55899158206a0e0751c764c69900ba1d7fc05eacd4d24ddaecd6b52f5ef1e26c9503df6a2412c97b8645382d84b67b45b3424ee0c4f0ede16701b65754ece4870c9e4172566449621a9d9d5a920f4104b76328b4da3d5f378093937f1ce4d953b80318d16b95d34370b9377174885fca799aec1b6b76783b510bbf57389c98e53dcfd7618caf38e309fbded533c5114f94f4327e61c93c1a639b27219267b576fbb1bd3f3b7a8306e7ae7918ad9664cb8b4656667e6d04a559c587e6cc094b6becaadfe953b5576784455b76029ff1c269a3b7c134d4734d36eeab6c8e525bb23cd600f757c8c0d3cdb377f950d51a5cb00271bd9f43c5c440cf520414f2820691d5f6f297eb924677b7ae16839c7702418c77a2b24edc1837c9b8dbb68393dba0bc80f8182a68584c1135e8701b57269da109745fc9c23ffdcfe2bcba96a116670d555285883ab5f6b090e878bc5b1c33f883bf1dde7c179d104a296961fa54b1c77ed96ef6abb4c7135c8a5de96cb2356524b20c046b31f612b709249c639905572b741093f8ea7a691ff056bbfcaf3eaf469bd1050f9a8b912056eeddc54b3030c448406d4dddc1db708247843cf97f637bb6e37258a7f49560d0d81ba721eb160fed45e9eb5699e07c249850bfe9a998694c3c95f04bc26d687b2d0327e36ddafddda9c54e2c916666831d984415f42008278b56983425f549a8a5d62a1d0cfd45f0e61789229ad51d0002598511c0372f647a557bdd525fbb36875ed0d48a7648cb9d8e0b65c3d636392c88b98e65dfc399be7862e347cc3b9d6a7d4e6e1791a7e6c0b9a430535df6c94a870c66a182f6d5909f3e55a9ba6bc44a0507b1a5c550a3292ce6cede02d6e429247f7915107353abbbd0978b7d43bb7c405602b614cf48c4d680f1772e403bc0a0e217dc5438f064fd745feb30c074dd3b43094e80229dff1b682a3828ecb36530e27daf59e49e869fa4cd70545a8c6621d7f4fc9834e74cb6b6c8612b06d45937e520bbd8317b63bd243d625837b4c03136fdb980faf6fb7479fa46a0429c413e52bbd8a0595fa6e5dfb1c7b988f8ead20e40c6b15f43a20e5c7fe39e0ef63f0aa1b5646364c35deabde2e822bbea0a4ec571bba021831ad2bc0022aed6bed578213a7841387d9f11db42546f43c48b873af66466d61b627e4b3096bec68c7284daff71884f472a867ee500a5610abbcc8e9e3c97748ec022e5b60d58d0ee60c108493d1d6703f206451d9897dd8c67bcff1f3696098c7d13131da8c165b4d6d367f3a4bf892f1287157dc15aebfad162b6492432a6bd799fb26a107c18393038577602d13f407b7b32053a83515615608594442e32539531546ce1cddeb876d3d40d5a214a41ecb8e8acdb18352a71bdd1eb78e74d410e5ba89ea682498d70bde175ac001bcbfb0b0f048b67f7317a078a83eb9ce899ccf4c2a08c373bcf7c27cc8ea3426842b6fab65114446fe612e62b8dcc7450a9ad494156c26447543bca376e0a25ed5d190b1d7e6d8b2a03c1fc5c8f14751fe142ee3d6da8baf2605dd09c2e176c8e6272fab27126e0676c629ca2e6fcb679355eb3a918ba1ea6646440de4ed56bfcefe33c003815c98e584d319692c086e80592fe6c08f4ced00914214a64fefa2fc704e0f75beae35ecf3124427f854ba64ae9b6b769dab7233582dec857cb1b07365cb7f45b257c40633e37eafc3b5375686c614a110810677b7a94d99ba5b881de0e66c8e0ea24895bf9ccd68a212a690e176caa60db1c54f6ca53d4ae40b1d8b23f83bb94cf67f627c8b3c72ff5cf9e1be66435472d781b5d615c8439dcd03b6f3971c133f5e7c4a1f1541cc826d82ab4f96cc3187c1a19c91ef707e765fef0b367d186a3affa19088571c7f1ef041be9d29305641faf276b4214b8342f6ed4c5c7219f052631b2dc336c1063e076b03070cf79960f34d7a67603520749607ad71f1c96913a7508b1b229b299eff6ef17c19f3c23e6ec8763d06e6b0ed4f80388166e40c07837935c914f17afcbd51592454f108e1ab16fd0540b23b308d492d0d0679cb7", 0xec0}], 0x5}}], 0x1, 0x0) 19:19:22 executing program 4: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth1_vlan\x00'}}]}, 0x38}}, 0x0) [ 567.440825][T27388] rdma_rxe: rxe_register_device failed with error -23 19:19:22 executing program 2: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000006, 0x100000002272, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000000240)=0xffffffff, 0x4) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f00000001c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x56) listen(r1, 0x0) connect$unix(r0, &(0x7f0000000140)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r2 = socket(0x11, 0x0, 0x0) r3 = accept(r1, 0x0, 0x0) recvfrom$unix(r0, &(0x7f00000000c0)=""/90, 0xffffffffffffffef, 0x0, 0x0, 0x0) sendto$inet6(r3, &(0x7f0000000000), 0xffffffffffffffe6, 0x0, 0x0, 0x18fae6fad8906d26) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x4ca31, 0xffffffffffffffff, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002a40)=[{{&(0x7f0000000140), 0x10, 0x0}}], 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) sendmsg$inet(r4, &(0x7f0000000340)={&(0x7f0000000000)={0x2, 0x4e20, @broadcast}, 0x10, &(0x7f0000000280)=[{0x0}, {&(0x7f0000000080)="800a79b0ee1ebc805b37fcaca0542072abdfaec7a182bbbc5b92d260978c446669dc3d286eadc188e47cb5b18619d51cfaa05e96f7c9fe7229754335ed703da23e5e30fd39dffd9836262faa58a863cab8fe1a66e651fb5e86055dfdb045cc88e160e8b89cb83b98f14532adcc7c2f4880cf9e30bd5abac3525b", 0x7a}], 0x2, &(0x7f00000002c0)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x3500}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x4b}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x42}, @dev={0xac, 0x14, 0x14, 0x2b}}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x2}}], 0x68}, 0x94) socket$inet6_tcp(0xa, 0x1, 0x0) r5 = accept4(r2, &(0x7f0000000580)=@l2, &(0x7f0000000600)=0x80, 0x180000) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r5, &(0x7f00000007c0)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000780)={&(0x7f0000000680)={0xe0, 0x0, 0x10, 0x70bd25, 0x25dfdbfe, {}, [@TIPC_NLA_NODE={0x10, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7ff}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_MEDIA={0x2c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_NODE={0x54, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x99}, @TIPC_NLA_NODE_KEY={0x3f, 0x4, {'gcm(aes)\x00', 0x17, "3d72aab19320824cc009504ee9e31ebe559db739424a8b"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x6}]}, @TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xffffffff}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7}, @TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x4}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3}]}]}, 0xe0}, 0x1, 0x0, 0x0, 0x4000800}, 0x44011) [ 567.504948][T27388] rdma_rxe: failed to add veth1_vlan 19:19:22 executing program 4: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth1_vlan\x00'}}]}, 0x38}}, 0x0) [ 567.997717][T27406] rdma_rxe: rxe_register_device failed with error -23 [ 568.029722][T16139] Bluetooth: hci4: command 0x041b tx timeout [ 568.083393][T27406] rdma_rxe: failed to add veth1_vlan 19:19:23 executing program 4: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth1_vlan\x00'}}]}, 0x38}}, 0x0) 19:19:23 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='wlan0\x00', 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f00000039c0)=[{{0x0, 0x1e, 0x0}}], 0x300, 0x1100000000000000) [ 568.355836][T27412] rdma_rxe: rxe_register_device failed with error -23 [ 568.370304][T27412] rdma_rxe: failed to add veth1_vlan 19:19:23 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x2, 0x3, 0x1d8, 0x0, 0x98, 0x98, 0x0, 0x98, 0x140, 0x140, 0x140, 0x113, 0x140, 0x7fffffe, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x3ff}}}, {{@uncond, 0x0, 0x70, 0xa8}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffff}, {0xffff}, {0xffff}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x238) 19:19:23 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000500)={'veth0_to_hsr\x00'}) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r4, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000000)={0x2c, 0x1d, 0x1, 0x0, 0x0, "", [@nested={0x1c, 0x0, 0x0, 0x1, [@typed={0xc, 0x1, 0x0, 0x0, @u64}, @typed={0xc, 0x0, 0x0, 0x0, @str='!\\$].\x14^\x00'}]}]}, 0x2c}], 0x1}, 0x0) ioctl$sock_SIOCGIFBR(r4, 0x8940, &(0x7f00000004c0)=@get={0x1, &(0x7f0000000380)=""/144, 0x75ad2fed}) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000507000000000000000000000400", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@dellinkprop={0x4c, 0x6d, 0x1, 0x0, 0x0, {}, [@IFLA_PROP_LIST={0x18, 0x34, 0x0, 0x1, [{0x14, 0x35, 'syzkaller1\x00'}]}, @IFLA_ALT_IFNAME={0x14, 0x35, 'macvlan1\x00'}]}, 0x4c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000810500001c000000000000000000", @ANYRES32=0x0, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES32=r5], 0x50}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x50, 0x10, 0x581, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x3}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1c, 0xf}}]}}}, @IFLA_LINK={0x8, 0x5, r5}]}, 0x50}}, 0x0) socket(0x28, 0x1, 0x1f) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="2000000011000d0400"/20, @ANYRES32=r9, @ANYBLOB="b8941b0f8dc9dcec9f84c9be656e87"], 0x20}}, 0x0) 19:19:23 executing program 4: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth1_vlan\x00'}}]}, 0x38}}, 0x0) 19:19:23 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000380)=@newlink={0x3c, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x9, r2}]}}}]}, 0x3c}}, 0x0) 19:19:23 executing program 2: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000006, 0x100000002272, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000000240)=0xffffffff, 0x4) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f00000001c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x56) listen(r1, 0x0) connect$unix(r0, &(0x7f0000000140)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r2 = socket(0x11, 0x0, 0x0) r3 = accept(r1, 0x0, 0x0) recvfrom$unix(r0, &(0x7f00000000c0)=""/90, 0xffffffffffffffef, 0x0, 0x0, 0x0) sendto$inet6(r3, &(0x7f0000000000), 0xffffffffffffffe6, 0x0, 0x0, 0x18fae6fad8906d26) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x4ca31, 0xffffffffffffffff, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002a40)=[{{&(0x7f0000000140), 0x10, 0x0}}], 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) sendmsg$inet(r4, &(0x7f0000000340)={&(0x7f0000000000)={0x2, 0x4e20, @broadcast}, 0x10, &(0x7f0000000280)=[{0x0}, {&(0x7f0000000080)="800a79b0ee1ebc805b37fcaca0542072abdfaec7a182bbbc5b92d260978c446669dc3d286eadc188e47cb5b18619d51cfaa05e96f7c9fe7229754335ed703da23e5e30fd39dffd9836262faa58a863cab8fe1a66e651fb5e86055dfdb045cc88e160e8b89cb83b98f14532adcc7c2f4880cf9e30bd5abac3525b", 0x7a}], 0x2, &(0x7f00000002c0)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x3500}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x4b}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x42}, @dev={0xac, 0x14, 0x14, 0x2b}}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x2}}], 0x68}, 0x94) socket$inet6_tcp(0xa, 0x1, 0x0) r5 = accept4(r2, &(0x7f0000000580)=@l2, &(0x7f0000000600)=0x80, 0x180000) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r5, &(0x7f00000007c0)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000780)={&(0x7f0000000680)={0xe0, 0x0, 0x10, 0x70bd25, 0x25dfdbfe, {}, [@TIPC_NLA_NODE={0x10, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7ff}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_MEDIA={0x2c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_NODE={0x54, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x99}, @TIPC_NLA_NODE_KEY={0x3f, 0x4, {'gcm(aes)\x00', 0x17, "3d72aab19320824cc009504ee9e31ebe559db739424a8b"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x6}]}, @TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xffffffff}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7}, @TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x4}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3}]}]}, 0xe0}, 0x1, 0x0, 0x0, 0x4000800}, 0x44011) [ 568.654537][T27416] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 19:19:23 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) sendfile(r2, 0xffffffffffffffff, &(0x7f0000000040), 0x2) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000140)={0x20}) pwrite64(r1, &(0x7f00000002c0)='_', 0x1, 0x0) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) ioctl$FIBMAP(r1, 0x1, &(0x7f0000000600)) ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x660c) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0xf21) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000001300)={0x2880008, r1, 0x0, 0x8, 0x0, 0x2}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x0) [ 568.697165][T27419] rdma_rxe: rxe_register_device failed with error -23 [ 568.720042][T27416] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 568.752443][T27419] rdma_rxe: failed to add veth1_vlan [ 568.841753][T27424] netlink: 'syz-executor.3': attribute type 9 has an invalid length. 19:19:23 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'macvlan0\x00', 0x0}) sendto$packet(r0, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x11, 0x8808, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) [ 569.052592][T27443] netlink: 'syz-executor.3': attribute type 9 has an invalid length. [ 569.105907][T27434] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 19:19:24 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@newspdinfo={0x1c, 0x24, 0x1, 0x0, 0x0, 0x0, [@XFRMA_SPD_IPV4_HTHRESH={0x6, 0x3, {0x40}}]}, 0x1c}}, 0x0) 19:19:24 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x1f) setsockopt$inet6_int(r0, 0x29, 0x4e, &(0x7f0000000000)=0x5, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @private1}, 0x53) 19:19:24 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) sendfile(r2, 0xffffffffffffffff, &(0x7f0000000040), 0x2) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000140)={0x20}) pwrite64(r1, &(0x7f00000002c0)='_', 0x1, 0x0) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) ioctl$FIBMAP(r1, 0x1, &(0x7f0000000600)) ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x660c) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0xf21) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000001300)={0x2880008, r1, 0x0, 0x8, 0x0, 0x2}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x0) 19:19:24 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000500)={'veth0_to_hsr\x00'}) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r4, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000000)={0x2c, 0x1d, 0x1, 0x0, 0x0, "", [@nested={0x1c, 0x0, 0x0, 0x1, [@typed={0xc, 0x1, 0x0, 0x0, @u64}, @typed={0xc, 0x0, 0x0, 0x0, @str='!\\$].\x14^\x00'}]}]}, 0x2c}], 0x1}, 0x0) ioctl$sock_SIOCGIFBR(r4, 0x8940, &(0x7f00000004c0)=@get={0x1, &(0x7f0000000380)=""/144, 0x75ad2fed}) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000507000000000000000000000400", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@dellinkprop={0x4c, 0x6d, 0x1, 0x0, 0x0, {}, [@IFLA_PROP_LIST={0x18, 0x34, 0x0, 0x1, [{0x14, 0x35, 'syzkaller1\x00'}]}, @IFLA_ALT_IFNAME={0x14, 0x35, 'macvlan1\x00'}]}, 0x4c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000810500001c000000000000000000", @ANYRES32=0x0, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES32=r5], 0x50}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x50, 0x10, 0x581, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x3}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1c, 0xf}}]}}}, @IFLA_LINK={0x8, 0x5, r5}]}, 0x50}}, 0x0) socket(0x28, 0x1, 0x1f) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="2000000011000d0400"/20, @ANYRES32=r9, @ANYBLOB="b8941b0f8dc9dcec9f84c9be656e87"], 0x20}}, 0x0) 19:19:24 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='wlan0\x00', 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f00000039c0)=[{{0x0, 0x1e, 0x0}}], 0x300, 0x1100000000000000) 19:19:24 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000500)={'veth0_to_hsr\x00'}) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r4, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000000)={0x2c, 0x1d, 0x1, 0x0, 0x0, "", [@nested={0x1c, 0x0, 0x0, 0x1, [@typed={0xc, 0x1, 0x0, 0x0, @u64}, @typed={0xc, 0x0, 0x0, 0x0, @str='!\\$].\x14^\x00'}]}]}, 0x2c}], 0x1}, 0x0) ioctl$sock_SIOCGIFBR(r4, 0x8940, &(0x7f00000004c0)=@get={0x1, &(0x7f0000000380)=""/144, 0x75ad2fed}) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000507000000000000000000000400", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@dellinkprop={0x4c, 0x6d, 0x1, 0x0, 0x0, {}, [@IFLA_PROP_LIST={0x18, 0x34, 0x0, 0x1, [{0x14, 0x35, 'syzkaller1\x00'}]}, @IFLA_ALT_IFNAME={0x14, 0x35, 'macvlan1\x00'}]}, 0x4c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000810500001c000000000000000000", @ANYRES32=0x0, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES32=r5], 0x50}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x50, 0x10, 0x581, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x3}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1c, 0xf}}]}}}, @IFLA_LINK={0x8, 0x5, r5}]}, 0x50}}, 0x0) socket(0x28, 0x1, 0x1f) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="2000000011000d0400"/20, @ANYRES32=r9, @ANYBLOB="b8941b0f8dc9dcec9f84c9be656e87"], 0x20}}, 0x0) 19:19:24 executing program 3: r0 = socket$vsock_stream(0x28, 0x1, 0x0) unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x8031, 0xffffffffffffffff, 0x0) connect$vsock_stream(r0, &(0x7f0000000080)={0x28, 0x0, 0x0, @hyper}, 0x10) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000200)=ANY=[@ANYBLOB="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"/646], 0x1) unshare(0x40040000) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f00000004c0)=0x80, 0x4) mmap$xdp(&(0x7f0000684000/0x1000)=nil, 0x1000, 0x0, 0x11, r3, 0x100000000) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000100)=0x1400100, 0x4) splice(r2, &(0x7f0000000000)=0x200, 0xffffffffffffffff, &(0x7f0000000040)=0x7ff, 0x0, 0x8) accept4$vsock_stream(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, &(0x7f0000000200), 0x8) [ 569.509970][T27487] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 569.575449][T27487] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 569.597993][T27492] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 19:19:24 executing program 2: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000006, 0x100000002272, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000000240)=0xffffffff, 0x4) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f00000001c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x56) listen(r1, 0x0) connect$unix(r0, &(0x7f0000000140)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r2 = socket(0x11, 0x0, 0x0) r3 = accept(r1, 0x0, 0x0) recvfrom$unix(r0, &(0x7f00000000c0)=""/90, 0xffffffffffffffef, 0x0, 0x0, 0x0) sendto$inet6(r3, &(0x7f0000000000), 0xffffffffffffffe6, 0x0, 0x0, 0x18fae6fad8906d26) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x4ca31, 0xffffffffffffffff, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002a40)=[{{&(0x7f0000000140), 0x10, 0x0}}], 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) sendmsg$inet(r4, &(0x7f0000000340)={&(0x7f0000000000)={0x2, 0x4e20, @broadcast}, 0x10, &(0x7f0000000280)=[{0x0}, {&(0x7f0000000080)="800a79b0ee1ebc805b37fcaca0542072abdfaec7a182bbbc5b92d260978c446669dc3d286eadc188e47cb5b18619d51cfaa05e96f7c9fe7229754335ed703da23e5e30fd39dffd9836262faa58a863cab8fe1a66e651fb5e86055dfdb045cc88e160e8b89cb83b98f14532adcc7c2f4880cf9e30bd5abac3525b", 0x7a}], 0x2, &(0x7f00000002c0)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x3500}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x4b}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x42}, @dev={0xac, 0x14, 0x14, 0x2b}}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x2}}], 0x68}, 0x94) socket$inet6_tcp(0xa, 0x1, 0x0) r5 = accept4(r2, &(0x7f0000000580)=@l2, &(0x7f0000000600)=0x80, 0x180000) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r5, &(0x7f00000007c0)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000780)={&(0x7f0000000680)={0xe0, 0x0, 0x10, 0x70bd25, 0x25dfdbfe, {}, [@TIPC_NLA_NODE={0x10, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7ff}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_MEDIA={0x2c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_NODE={0x54, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x99}, @TIPC_NLA_NODE_KEY={0x3f, 0x4, {'gcm(aes)\x00', 0x17, "3d72aab19320824cc009504ee9e31ebe559db739424a8b"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x6}]}, @TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xffffffff}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7}, @TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x4}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3}]}]}, 0xe0}, 0x1, 0x0, 0x0, 0x4000800}, 0x44011) [ 569.744336][T27509] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 569.855452][T27501] hsr0 speed is unknown, defaulting to 1000 [ 570.110196][T20913] Bluetooth: hci4: command 0x040f tx timeout 19:19:25 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) sendfile(r2, 0xffffffffffffffff, &(0x7f0000000040), 0x2) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000140)={0x20}) pwrite64(r1, &(0x7f00000002c0)='_', 0x1, 0x0) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) ioctl$FIBMAP(r1, 0x1, &(0x7f0000000600)) ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x660c) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0xf21) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000001300)={0x2880008, r1, 0x0, 0x8, 0x0, 0x2}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x0) 19:19:25 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000500)={'veth0_to_hsr\x00'}) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r4, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000000)={0x2c, 0x1d, 0x1, 0x0, 0x0, "", [@nested={0x1c, 0x0, 0x0, 0x1, [@typed={0xc, 0x1, 0x0, 0x0, @u64}, @typed={0xc, 0x0, 0x0, 0x0, @str='!\\$].\x14^\x00'}]}]}, 0x2c}], 0x1}, 0x0) ioctl$sock_SIOCGIFBR(r4, 0x8940, &(0x7f00000004c0)=@get={0x1, &(0x7f0000000380)=""/144, 0x75ad2fed}) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000507000000000000000000000400", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@dellinkprop={0x4c, 0x6d, 0x1, 0x0, 0x0, {}, [@IFLA_PROP_LIST={0x18, 0x34, 0x0, 0x1, [{0x14, 0x35, 'syzkaller1\x00'}]}, @IFLA_ALT_IFNAME={0x14, 0x35, 'macvlan1\x00'}]}, 0x4c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000810500001c000000000000000000", @ANYRES32=0x0, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES32=r5], 0x50}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x50, 0x10, 0x581, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x3}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1c, 0xf}}]}}}, @IFLA_LINK={0x8, 0x5, r5}]}, 0x50}}, 0x0) socket(0x28, 0x1, 0x1f) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="2000000011000d0400"/20, @ANYRES32=r9, @ANYBLOB="b8941b0f8dc9dcec9f84c9be656e87"], 0x20}}, 0x0) 19:19:25 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000500)={'veth0_to_hsr\x00'}) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r4, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000000)={0x2c, 0x1d, 0x1, 0x0, 0x0, "", [@nested={0x1c, 0x0, 0x0, 0x1, [@typed={0xc, 0x1, 0x0, 0x0, @u64}, @typed={0xc, 0x0, 0x0, 0x0, @str='!\\$].\x14^\x00'}]}]}, 0x2c}], 0x1}, 0x0) ioctl$sock_SIOCGIFBR(r4, 0x8940, &(0x7f00000004c0)=@get={0x1, &(0x7f0000000380)=""/144, 0x75ad2fed}) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000507000000000000000000000400", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@dellinkprop={0x4c, 0x6d, 0x1, 0x0, 0x0, {}, [@IFLA_PROP_LIST={0x18, 0x34, 0x0, 0x1, [{0x14, 0x35, 'syzkaller1\x00'}]}, @IFLA_ALT_IFNAME={0x14, 0x35, 'macvlan1\x00'}]}, 0x4c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000810500001c000000000000000000", @ANYRES32=0x0, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES32=r5], 0x50}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x50, 0x10, 0x581, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x3}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1c, 0xf}}]}}}, @IFLA_LINK={0x8, 0x5, r5}]}, 0x50}}, 0x0) socket(0x28, 0x1, 0x1f) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="2000000011000d0400"/20, @ANYRES32=r9, @ANYBLOB="b8941b0f8dc9dcec9f84c9be656e87"], 0x20}}, 0x0) [ 570.665184][T27568] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 570.732478][T27572] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 19:19:25 executing program 0: r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)) mkdirat$cgroup(r0, &(0x7f0000000140)='syz0\x00', 0x1ff) [ 570.783868][T27573] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 19:19:25 executing program 2: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000006, 0x100000002272, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000000240)=0xffffffff, 0x4) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f00000001c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x56) listen(r1, 0x0) connect$unix(r0, &(0x7f0000000140)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r2 = socket(0x11, 0x0, 0x0) r3 = accept(r1, 0x0, 0x0) recvfrom$unix(r0, &(0x7f00000000c0)=""/90, 0xffffffffffffffef, 0x0, 0x0, 0x0) sendto$inet6(r3, &(0x7f0000000000), 0xffffffffffffffe6, 0x0, 0x0, 0x18fae6fad8906d26) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x4ca31, 0xffffffffffffffff, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002a40)=[{{&(0x7f0000000140), 0x10, 0x0}}], 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) sendmsg$inet(r4, &(0x7f0000000340)={&(0x7f0000000000)={0x2, 0x4e20, @broadcast}, 0x10, &(0x7f0000000280)=[{0x0}, {&(0x7f0000000080)="800a79b0ee1ebc805b37fcaca0542072abdfaec7a182bbbc5b92d260978c446669dc3d286eadc188e47cb5b18619d51cfaa05e96f7c9fe7229754335ed703da23e5e30fd39dffd9836262faa58a863cab8fe1a66e651fb5e86055dfdb045cc88e160e8b89cb83b98f14532adcc7c2f4880cf9e30bd5abac3525b", 0x7a}], 0x2, &(0x7f00000002c0)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x3500}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x4b}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x42}, @dev={0xac, 0x14, 0x14, 0x2b}}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x2}}], 0x68}, 0x94) socket$inet6_tcp(0xa, 0x1, 0x0) r5 = accept4(r2, &(0x7f0000000580)=@l2, &(0x7f0000000600)=0x80, 0x180000) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r5, &(0x7f00000007c0)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000780)={&(0x7f0000000680)={0xe0, 0x0, 0x10, 0x70bd25, 0x25dfdbfe, {}, [@TIPC_NLA_NODE={0x10, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7ff}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_MEDIA={0x2c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_NODE={0x54, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x99}, @TIPC_NLA_NODE_KEY={0x3f, 0x4, {'gcm(aes)\x00', 0x17, "3d72aab19320824cc009504ee9e31ebe559db739424a8b"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x6}]}, @TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xffffffff}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7}, @TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x4}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3}]}]}, 0xe0}, 0x1, 0x0, 0x0, 0x4000800}, 0x44011) [ 570.985251][T27573] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 19:19:26 executing program 0: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00008feff0)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x4, 0x0, &(0x7f00008feff0)={&(0x7f0000000080)=ANY=[@ANYBLOB="020d0000100000000000000000000000030006000100000002000000e0000001000000f5000000000800120002000200000000000000000030006c02643861645b05a27b000000200a0000c4bb152c000000000000000001020014bb00000000000000000000000003000500000000000200f1"], 0x80}}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmmsg(r1, &(0x7f0000000180), 0x400024c, 0x0) [ 571.167479][T27501] hsr0 speed is unknown, defaulting to 1000 19:19:26 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) sendfile(r2, 0xffffffffffffffff, &(0x7f0000000040), 0x2) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000140)={0x20}) pwrite64(r1, &(0x7f00000002c0)='_', 0x1, 0x0) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) ioctl$FIBMAP(r1, 0x1, &(0x7f0000000600)) ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x660c) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0xf21) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000001300)={0x2880008, r1, 0x0, 0x8, 0x0, 0x2}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x0) [ 571.422474][T27604] bridge0: port 2(bridge_slave_1) entered disabled state 19:19:26 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=@newqdisc={0x38, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@delchain={0x24, 0x64, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff3, 0xffff}}}, 0x24}}, 0x0) [ 571.683312][T27604] device bridge_slave_1 left promiscuous mode [ 571.720258][T27604] bridge0: port 2(bridge_slave_1) entered disabled state [ 571.804926][T27514] hsr0 speed is unknown, defaulting to 1000 [ 571.823439][T27636] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 19:19:26 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000500)={'veth0_to_hsr\x00'}) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r4, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000000)={0x2c, 0x1d, 0x1, 0x0, 0x0, "", [@nested={0x1c, 0x0, 0x0, 0x1, [@typed={0xc, 0x1, 0x0, 0x0, @u64}, @typed={0xc, 0x0, 0x0, 0x0, @str='!\\$].\x14^\x00'}]}]}, 0x2c}], 0x1}, 0x0) ioctl$sock_SIOCGIFBR(r4, 0x8940, &(0x7f00000004c0)=@get={0x1, &(0x7f0000000380)=""/144, 0x75ad2fed}) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000507000000000000000000000400", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@dellinkprop={0x4c, 0x6d, 0x1, 0x0, 0x0, {}, [@IFLA_PROP_LIST={0x18, 0x34, 0x0, 0x1, [{0x14, 0x35, 'syzkaller1\x00'}]}, @IFLA_ALT_IFNAME={0x14, 0x35, 'macvlan1\x00'}]}, 0x4c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000810500001c000000000000000000", @ANYRES32=0x0, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES32=r5], 0x50}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x50, 0x10, 0x581, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x3}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1c, 0xf}}]}}}, @IFLA_LINK={0x8, 0x5, r5}]}, 0x50}}, 0x0) socket(0x28, 0x1, 0x1f) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="2000000011000d0400"/20, @ANYRES32=r9, @ANYBLOB="b8941b0f8dc9dcec9f84c9be656e87"], 0x20}}, 0x0) [ 571.924972][T27621] hsr0 speed is unknown, defaulting to 1000 [ 571.944083][T27637] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 19:19:27 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000500)={'veth0_to_hsr\x00'}) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r4, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000000)={0x2c, 0x1d, 0x1, 0x0, 0x0, "", [@nested={0x1c, 0x0, 0x0, 0x1, [@typed={0xc, 0x1, 0x0, 0x0, @u64}, @typed={0xc, 0x0, 0x0, 0x0, @str='!\\$].\x14^\x00'}]}]}, 0x2c}], 0x1}, 0x0) ioctl$sock_SIOCGIFBR(r4, 0x8940, &(0x7f00000004c0)=@get={0x1, &(0x7f0000000380)=""/144, 0x75ad2fed}) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000507000000000000000000000400", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@dellinkprop={0x4c, 0x6d, 0x1, 0x0, 0x0, {}, [@IFLA_PROP_LIST={0x18, 0x34, 0x0, 0x1, [{0x14, 0x35, 'syzkaller1\x00'}]}, @IFLA_ALT_IFNAME={0x14, 0x35, 'macvlan1\x00'}]}, 0x4c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000001000810500001c000000000000000000", @ANYRES32=0x0, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES32=r5], 0x50}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x50, 0x10, 0x581, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x3}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1c, 0xf}}]}}}, @IFLA_LINK={0x8, 0x5, r5}]}, 0x50}}, 0x0) socket(0x28, 0x1, 0x1f) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="2000000011000d0400"/20, @ANYRES32=r9, @ANYBLOB="b8941b0f8dc9dcec9f84c9be656e87"], 0x20}}, 0x0) [ 572.140238][T27701] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 572.189534][T20915] Bluetooth: hci4: command 0x0419 tx timeout [ 572.218319][T27701] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 572.315516][T27716] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 572.344731][T27716] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 572.606751][T27716] bond0: (slave bond_slave_1): Releasing backup interface 19:19:27 executing program 3: r0 = socket$vsock_stream(0x28, 0x1, 0x0) unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x8031, 0xffffffffffffffff, 0x0) connect$vsock_stream(r0, &(0x7f0000000080)={0x28, 0x0, 0x0, @hyper}, 0x10) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000200)=ANY=[@ANYBLOB="726177000000000000000000000000000000000000000000000000000000000008f80000030000003003000098020000000000000000000000000000000000009802000098020000980200009802000098020000030080000000000000000000ffffffffe00000010000000000000000e4000000010000000000bd00000000007465616d5f736c6176655f310000000000000b00000000000000000000000000000000000000000000000000000000000000000000000000c001080200000000000000000000000000000000000000005001686173686c696d6974000000000000000000000000000000000000000002726f736530000000000000000000000000000000000000000000000000000000000000e4ff0800000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000fcffffffffffffff0000000000000000000000000300000007000000000000000000000000000000480043540000000000000000000000000000000000000000000000000000f24400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100"/646], 0x1) unshare(0x40040000) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f00000004c0)=0x80, 0x4) mmap$xdp(&(0x7f0000684000/0x1000)=nil, 0x1000, 0x0, 0x11, r3, 0x100000000) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000100)=0x1400100, 0x4) splice(r2, &(0x7f0000000000)=0x200, 0xffffffffffffffff, &(0x7f0000000040)=0x7ff, 0x0, 0x8) accept4$vsock_stream(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, &(0x7f0000000200), 0x8) 19:19:27 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=@newqdisc={0x38, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@delchain={0x24, 0x64, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff3, 0xffff}}}, 0x24}}, 0x0) 19:19:27 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x2, 0x3, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev}}, @sadb_sa={0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast2}}, @sadb_x_sa2={0x2, 0x13, 0x3f}]}, 0x60}}, 0x0) 19:19:27 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200), 0x1c) socketpair(0x11, 0x1, 0x7, &(0x7f00000001c0)={0xffffffffffffffff}) connect$inet6(r1, &(0x7f0000000740)={0xa, 0x4e20, 0xb9e, @empty, 0x20}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_256={{0x303}, "c9cf93f0c1c4f374", "d9e43c39a96eee24b5d69e31cc8d4db65d9780286df96a3faa652a48bd1b7a15", "c7b7dc39", "16890f27cfc9b8ab"}, 0x38) r2 = accept4$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @private1}, &(0x7f00000000c0)=0x1c, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r2, 0x29, 0x2a, &(0x7f0000000240)={0x101, {{0xa, 0x4e21, 0x200, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x9}}}, 0x88) sendto$inet6(r0, &(0x7f00000005c0), 0xffffffffffffff7f, 0x0, 0x0, 0xfffffffffffffe60) setsockopt$sock_timeval(r0, 0x1, 0x20, &(0x7f0000000080)={0x77359400}, 0x10) 19:19:27 executing program 2: r0 = socket$vsock_stream(0x28, 0x1, 0x0) unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x8031, 0xffffffffffffffff, 0x0) connect$vsock_stream(r0, &(0x7f0000000080)={0x28, 0x0, 0x0, @hyper}, 0x10) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000200)=ANY=[@ANYBLOB="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"/646], 0x1) unshare(0x40040000) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f00000004c0)=0x80, 0x4) mmap$xdp(&(0x7f0000684000/0x1000)=nil, 0x1000, 0x0, 0x11, r3, 0x100000000) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000100)=0x1400100, 0x4) splice(r2, &(0x7f0000000000)=0x200, 0xffffffffffffffff, &(0x7f0000000040)=0x7ff, 0x0, 0x8) accept4$vsock_stream(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, &(0x7f0000000200), 0x8) 19:19:27 executing program 5: syz_emit_ethernet(0x2e, &(0x7f00000011c0)={@link_local, @broadcast, @void, {@ipv4={0x800, @igmp={{0x6, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x2, 0x0, @local, @rand_addr=0x64010102, {[@generic={0x44, 0x4, "ff45"}]}}, {0x0, 0x0, 0x0, @multicast1}}}}}, 0x0) 19:19:28 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newsa={0x140, 0x10, 0x501, 0x0, 0x0, {{@in6=@mcast2, @in6=@mcast2}, {@in6=@ipv4={'\x00', '\xff\xff', @local}, 0x0, 0x6c}, @in6=@empty, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @tfcpad={0x8}]}, 0x140}}, 0x0) 19:19:28 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=@newqdisc={0x38, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@delchain={0x24, 0x64, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff3, 0xffff}}}, 0x24}}, 0x0) [ 573.110507][T27778] hsr0 speed is unknown, defaulting to 1000 19:19:28 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="20000000140001040000000000000000021f0000", @ANYRES32=r4, @ANYBLOB="08000200a0"], 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x411, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x6865}}, 0x20}}, 0x0) [ 573.247323][T27786] hsr0 speed is unknown, defaulting to 1000 19:19:28 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(r1, &(0x7f0000000000), 0x248800) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002380)=ANY=[@ANYBLOB="b702000000000000bf230000000000004403000000fefff67a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001000000b7050000400000006a0a00fe00000000850000000b000000b70000004dc50000950000000000000089c81f20273d16b72eb83ec5a3c87bb07eb78c27b061773f04a22ba8cedf8510e63fb112cf6956e09d1938013c217e0f6ae30bbc1ea8fa69f5f980b9f2a00097132c151bf8612101368a313f47851e7ae40b1ce0f958667156071f5ce69fab33a7bc09a26dbfd8e1bf77a91141891cfafcde8eb29461c18850443377e91f792b2dabd2b89fdb228663b223fdd873f345eb0e3ac9277e4bae32af9c461f0db7ebd13f2087f59747561aa67e162bbac013049a561824616e1b5e80e7a0778207f81a6eb95f9406072bac37d3641708b03e02be186f2b1babf7c2d17bc2bcae168528a5991041005b8e6156633fc6e52b5705f2dd216c0f85be48b1a0fe859174fa89269e5ac23dbd969be8eb4bd8f43b027deb9cd2b89de3ec615248836d80317aa74c2df3d715e35b2e1b3f1007da1a3aa3a5c5de62971f6b12aecaf03cb64e6d6a3c6a3cf3164117d488f9f1feb328907a6917bded4cd3ea1050b581f91bac1a22550491180cddde8a042328ecf44ef7f29143aebc6ef28a4103add254f39af4d237d54d57ffd659a6cf20c53ee2ae79a4d261a67e6059a913dee4b980b05a716793a94f39fb1bcdd6b9808b59ca8b14e91489a7cf3bd928f6f32572e44efdfd9f67e51d4c1d9b146e24933c0a20e0adb5126be11dfcfd676a7bb85e472481b3bd00000000000000000000009a8842a46c1cd37a82c066e62b89f86e171946fdbb491fb29b6bf1e62e71029c9fffda0a8078287eba2ccb33c13c97bccdd0ef7951c818072283713c934246d4991f3de8a2d60ffa561f94a93ff748548de7763bae102c3cb6308b4892613beed2e17123015ffe20addcecb7d51ac06d689a2c6c29fe8ff856f3abb8a381d3297959c0224f6b7cfccd6719ee15112a711e85820af4eb9100829f756048ad514a7bc58786dbaae03517b4eab867b98643de1ab029e27036fdbe068b43e8862a1ef5273f8bb7abfa49ff06ce7a66d40587e28edbc051d8190c64a89eb54d86230c4a016f8304b694b301e4427af0393ea1f03fb4c49c363fc4f9c27917a7d04459902279018d4745d334183bf472a6ab43551f4fe3818e90c8a40861e6676f1a219b4c9d646108eb4789e4552727b25699ef8bb08043f6551bc9ec708556194b4a1c1646f7cb829a297d7bbda72be100c9a22f6ea554feec7fe6441898df0690ce809b129853a594ab97fdb34bf4cef212f55770a48a2af70d3f52dbd724e7081e7223628c1cb9fd2e46a0e7a7a7afd2a9f5dedc8bac5e166424e089e1ee220fc7eb40754e7a47fa854a6f9d5ad38bc33c0d2d43290ed0d686224bfb99ec4a971b3d9a8d036fa9f134d7567a02589e407d8d705cbbbfe00b4f605aaa32700b59f2201c1236b5524b46c70408f8991bb91e2145edd65b8f735dc943d69a199561adbf2964d8ae174d1bec21645cec2c376c5909789814979bf188cad1566a09d32ff0acd8b853b084d4140f20ba60d5990ab9cd6ac668f7da20310b69dc6a33a2a198b2f2ac80b2107433caa93cb03fdd7544dbac625e136dd28034903fd5774477f8c9e5746df12ffe56d374844b3c9377c6e89f1568c7ba23320587bf8241e3fadb53f8c695b545671ef3a23077c5a0916d0359a56cc3ab0e5cc2d55c1b0359755dabb334d7d134cb8d4eae6fafae008c18ad5892f7fbe16cc46c3779629466111854146051242bd6a2b90393caa760cfb03f635b8fd30b2ad62646a2e2c30a02a88c3eb6ef5172964a8d5709db64774ad51063355f82a774e3b3cd2acfc6f8f1d7478e7777a6cd167baf8479a17867229eac2ab738db35f3fc408bc61363368063d030083054279e413c58994bbc30778e0be7dd6501442e6e3d34adc5789663474aa946ac5d9b3668e75df03020a62067f34e6998b4d19125a4c7fe85bc950dcc58ad2f9d4ef622283406e58c8cbdf118b1834fa76a5e803385c13e31c46389c2db88d1cd44181a26fdfb1bceefc593dd85c7c86bbcc117ff1ada10a7d5b5844c59cf5a242f12c3bbdde3339594003b6b6e2ec6a451b7c56941d8c4d9511d7f9d4066f1f07ba0bec645b7ff9c999216aa851aa786c192e8f2492c4f56551cb697daf16890c9d052d9fd47fdb33373fac08984da7cbd462f0f7c6ef8f3848c373e34a25344e46d0c08701db4b23445de2f8df2c5a876a38dde3b9875825a0a15ead7ad1053bc30b37a"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffde9, 0x10, &(0x7f0000000000), 0xfffffffffffffcc7}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r2, 0x609, 0x102, 0x0, &(0x7f0000000140)="e460cdfbef2408000000fd9286dd6a", 0x0, 0xf000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000380)={"6ffe93f088001fb2e5d2d430b305ea66", 0x0, 0x0, {0x4, 0x3ff}, {0xfffffffffffffffc, 0x9}, 0x9703, [0x10000, 0xfa8, 0x2, 0x6, 0x80000001, 0x8, 0x1f, 0x1ff, 0xff, 0x0, 0x20, 0x3, 0x3, 0xfffffffffffffff7, 0x1, 0x7ff]}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000480)={"6b9a06f3cae09c4063b0d1d5c4b01fac", 0x0, r3, {0x2, 0x7}, {0x6, 0x4}, 0x85, [0x6, 0x96, 0x4113ae93, 0x8, 0x100000000000000, 0x74cb33a2, 0x4, 0x2, 0x2, 0x8, 0x4, 0xfffffffffffffffb, 0x0, 0x5, 0x3, 0x101]}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x7a05, 0x1700) r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$sock_timeval(r4, 0x1, 0x15, &(0x7f0000000140)={0x0, 0x7530}, 0x10) connect$llc(r4, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x1, 0x3, 0x0, @remote}, 0x10) socketpair(0x1, 0x5, 0x2, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPCTNL_MSG_CT_DELETE(r5, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={&(0x7f0000000580)={0xf0, 0x2, 0x1, 0x3, 0x0, 0x0, {0xa, 0x0, 0x7}, [@CTA_TUPLE_REPLY={0x88, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @local}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1}, {0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @CTA_MARK_MASK={0x8}, @CTA_HELP={0x10, 0x5, 0x0, 0x1, {0xa, 0x1, 'Q.931\x00'}}, @CTA_SEQ_ADJ_ORIG={0xc, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x866}]}, @CTA_TUPLE_MASTER={0x10, 0xe, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}]}, @CTA_NAT_DST={0x20, 0xd, 0x0, 0x1, [@CTA_NAT_PROTO={0x1c, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e22}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e22}]}]}]}, 0xf0}, 0x1, 0x0, 0x0, 0x4088040}, 0x44091) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000002a40)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct}}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f00000007c0)={r6, 0x6, 0x6}) ioctl$BTRFS_IOC_RESIZE(0xffffffffffffffff, 0x50009403, &(0x7f0000000000)=ANY=[@ANYRES32, @ANYBLOB='\x00\x00\x00\x00', @ANYRESDEC=r6, @ANYBLOB=':-0D000z06e']) ioctl$BTRFS_IOC_DEV_INFO(r4, 0xd000941e, &(0x7f0000000c40)={0x0, "d1e156be399698ab57e7859a8a4569f3"}) 19:19:28 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=@newqdisc={0x38, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@delchain={0x24, 0x64, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff3, 0xffff}}}, 0x24}}, 0x0) 19:19:28 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="20000000140001040000000000000000021f0000", @ANYRES32=r4, @ANYBLOB="08000200a0"], 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x411, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x6865}}, 0x20}}, 0x0) [ 573.801207][T27867] __nla_validate_parse: 5 callbacks suppressed [ 573.801226][T27867] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 574.402524][T27778] hsr0 speed is unknown, defaulting to 1000 [ 574.496192][T27786] hsr0 speed is unknown, defaulting to 1000 19:19:29 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="20000000140001040000000000000000021f0000", @ANYRES32=r4, @ANYBLOB="08000200a0"], 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x411, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x6865}}, 0x20}}, 0x0) 19:19:29 executing program 4: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000)=ANY=[], 0x8) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close(r1) 19:19:29 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000940)={'wpan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000a40), r0) sendmsg$IEEE802154_LLSEC_ADD_DEV(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x1c, r3, 0x852dd6c070cd7e4d, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r2}]}, 0x1c}, 0x6}, 0x0) 19:19:29 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200), 0x1c) socketpair(0x11, 0x1, 0x7, &(0x7f00000001c0)={0xffffffffffffffff}) connect$inet6(r1, &(0x7f0000000740)={0xa, 0x4e20, 0xb9e, @empty, 0x20}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_256={{0x303}, "c9cf93f0c1c4f374", "d9e43c39a96eee24b5d69e31cc8d4db65d9780286df96a3faa652a48bd1b7a15", "c7b7dc39", "16890f27cfc9b8ab"}, 0x38) r2 = accept4$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @private1}, &(0x7f00000000c0)=0x1c, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r2, 0x29, 0x2a, &(0x7f0000000240)={0x101, {{0xa, 0x4e21, 0x200, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x9}}}, 0x88) sendto$inet6(r0, &(0x7f00000005c0), 0xffffffffffffff7f, 0x0, 0x0, 0xfffffffffffffe60) setsockopt$sock_timeval(r0, 0x1, 0x20, &(0x7f0000000080)={0x77359400}, 0x10) 19:19:30 executing program 3: r0 = socket$vsock_stream(0x28, 0x1, 0x0) unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x8031, 0xffffffffffffffff, 0x0) connect$vsock_stream(r0, &(0x7f0000000080)={0x28, 0x0, 0x0, @hyper}, 0x10) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000200)=ANY=[@ANYBLOB="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"/646], 0x1) unshare(0x40040000) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f00000004c0)=0x80, 0x4) mmap$xdp(&(0x7f0000684000/0x1000)=nil, 0x1000, 0x0, 0x11, r3, 0x100000000) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000100)=0x1400100, 0x4) splice(r2, &(0x7f0000000000)=0x200, 0xffffffffffffffff, &(0x7f0000000040)=0x7ff, 0x0, 0x8) accept4$vsock_stream(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, &(0x7f0000000200), 0x8) 19:19:30 executing program 2: r0 = socket$vsock_stream(0x28, 0x1, 0x0) unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x8031, 0xffffffffffffffff, 0x0) connect$vsock_stream(r0, &(0x7f0000000080)={0x28, 0x0, 0x0, @hyper}, 0x10) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000200)=ANY=[@ANYBLOB="726177000000000000000000000000000000000000000000000000000000000008f80000030000003003000098020000000000000000000000000000000000009802000098020000980200009802000098020000030080000000000000000000ffffffffe00000010000000000000000e4000000010000000000bd00000000007465616d5f736c6176655f310000000000000b00000000000000000000000000000000000000000000000000000000000000000000000000c001080200000000000000000000000000000000000000005001686173686c696d6974000000000000000000000000000000000000000002726f736530000000000000000000000000000000000000000000000000000000000000e4ff0800000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000fcffffffffffffff0000000000000000000000000300000007000000000000000000000000000000480043540000000000000000000000000000000000000000000000000000f24400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100"/646], 0x1) unshare(0x40040000) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f00000004c0)=0x80, 0x4) mmap$xdp(&(0x7f0000684000/0x1000)=nil, 0x1000, 0x0, 0x11, r3, 0x100000000) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000100)=0x1400100, 0x4) splice(r2, &(0x7f0000000000)=0x200, 0xffffffffffffffff, &(0x7f0000000040)=0x7ff, 0x0, 0x8) accept4$vsock_stream(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, &(0x7f0000000200), 0x8) [ 575.063928][T27952] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 19:19:30 executing program 0: syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) socket$inet6_udp(0xa, 0x2, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c) sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0x0) connect$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e24, 0xd2, @loopback, 0x3ff}, 0x1c) r2 = socket(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0}, &(0x7f0000000380)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'team0\x00', r3}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000300)={'syztnl0\x00', &(0x7f00000002c0)={'ip_vti0\x00', r3, 0x0, 0x20, 0x0, 0x0, {{0x6, 0x4, 0x0, 0x38, 0x18, 0x0, 0x0, 0x0, 0x2f, 0x0, @private, @local, {[@ra={0x94, 0x4}]}}}}}) 19:19:30 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001bc0)={0x18, 0x3, &(0x7f0000000f40)=@framed, &(0x7f0000000f80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$PROG_BIND_MAP(0x23, &(0x7f00000002c0)={r0}, 0xc) [ 575.245358][T27958] hsr0 speed is unknown, defaulting to 1000 [ 575.315148][T27977] hsr0 speed is unknown, defaulting to 1000 19:19:30 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="20000000140001040000000000000000021f0000", @ANYRES32=r4, @ANYBLOB="08000200a0"], 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x411, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x6865}}, 0x20}}, 0x0) 19:19:30 executing program 4: syz_emit_ethernet(0x6a, &(0x7f0000000080)={@broadcast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010100, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x0, 0x0, 0x0, {0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast, @multicast1, {[@timestamp_prespec={0x44, 0x2c, 0x0, 0x3, 0x0, [{@multicast1=0xfe800000}, {@remote}, {@multicast1}, {@private}, {@local}]}]}}}}}}}, 0x0) [ 575.628505][T28013] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 19:19:30 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x2, 0x3, 0x238, 0x0, 0x0, 0x0, 0x0, 0xd0, 0x1a0, 0x1a0, 0x1a0, 0x1a0, 0x1a0, 0x3, 0x0, {[{{@ip={@local, @multicast1, 0x0, 0xffffffff, 'macvlan0\x00', 'veth1_to_bond\x00'}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local}}}, {{@ip={@rand_addr, @broadcast, 0x0, 0x0, 'wg0\x00', 'team_slave_1\x00'}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @local}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x298) 19:19:30 executing program 5: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000040)) write$ppp(r0, 0x0, 0x0) [ 576.019611][T28046] ipt_CLUSTERIP: no config found for 224.0.0.1, need 'new' 19:19:31 executing program 4: mmap$xdp(&(0x7f0000ff5000/0x3000)=nil, 0x3000, 0x0, 0x30, 0xffffffffffffffff, 0x0) 19:19:31 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200), 0x1c) socketpair(0x11, 0x1, 0x7, &(0x7f00000001c0)={0xffffffffffffffff}) connect$inet6(r1, &(0x7f0000000740)={0xa, 0x4e20, 0xb9e, @empty, 0x20}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_256={{0x303}, "c9cf93f0c1c4f374", "d9e43c39a96eee24b5d69e31cc8d4db65d9780286df96a3faa652a48bd1b7a15", "c7b7dc39", "16890f27cfc9b8ab"}, 0x38) r2 = accept4$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @private1}, &(0x7f00000000c0)=0x1c, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r2, 0x29, 0x2a, &(0x7f0000000240)={0x101, {{0xa, 0x4e21, 0x200, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x9}}}, 0x88) sendto$inet6(r0, &(0x7f00000005c0), 0xffffffffffffff7f, 0x0, 0x0, 0xfffffffffffffe60) setsockopt$sock_timeval(r0, 0x1, 0x20, &(0x7f0000000080)={0x77359400}, 0x10) 19:19:31 executing program 4: sendmsg$NL802154_CMD_GET_SEC_LEVEL(0xffffffffffffffff, 0x0, 0x4041) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_KEY(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x70, 0x0, 0x8, 0x70bd2b, 0x25dfdbff, {}, [@NL802154_ATTR_SEC_KEY={0x2c, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "3e7aa6be6361b6848987a200f546d4c6"}, @NL802154_KEY_ATTR_ID={0x14, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_MODE={0x8}]}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r0}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x70}, 0x1, 0x0, 0x0, 0x10}, 0x40000) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) socket$inet_mptcp(0x2, 0x1, 0x106) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r2, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x24, r3, 0x400, 0x70bd2b, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r0}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x2) getsockopt$inet_IP_XFRM_POLICY(r1, 0x6, 0xd, 0x0, 0x0) unshare(0x40060400) [ 576.668413][T28070] hsr0 speed is unknown, defaulting to 1000 19:19:31 executing program 5: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000040)) write$ppp(r0, 0x0, 0x0) [ 576.896096][T27958] hsr0 speed is unknown, defaulting to 1000 [ 576.904316][T27977] hsr0 speed is unknown, defaulting to 1000 19:19:36 executing program 3: r0 = socket$vsock_stream(0x28, 0x1, 0x0) unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x8031, 0xffffffffffffffff, 0x0) connect$vsock_stream(r0, &(0x7f0000000080)={0x28, 0x0, 0x0, @hyper}, 0x10) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000200)=ANY=[@ANYBLOB="726177000000000000000000000000000000000000000000000000000000000008f80000030000003003000098020000000000000000000000000000000000009802000098020000980200009802000098020000030080000000000000000000ffffffffe00000010000000000000000e4000000010000000000bd00000000007465616d5f736c6176655f310000000000000b00000000000000000000000000000000000000000000000000000000000000000000000000c001080200000000000000000000000000000000000000005001686173686c696d6974000000000000000000000000000000000000000002726f736530000000000000000000000000000000000000000000000000000000000000e4ff0800000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000fcffffffffffffff0000000000000000000000000300000007000000000000000000000000000000480043540000000000000000000000000000000000000000000000000000f24400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100"/646], 0x1) unshare(0x40040000) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f00000004c0)=0x80, 0x4) mmap$xdp(&(0x7f0000684000/0x1000)=nil, 0x1000, 0x0, 0x11, r3, 0x100000000) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000100)=0x1400100, 0x4) splice(r2, &(0x7f0000000000)=0x200, 0xffffffffffffffff, &(0x7f0000000040)=0x7ff, 0x0, 0x8) accept4$vsock_stream(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, &(0x7f0000000200), 0x8) 19:19:36 executing program 0: syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) socket$inet6_udp(0xa, 0x2, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c) sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0x0) connect$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e24, 0xd2, @loopback, 0x3ff}, 0x1c) r2 = socket(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0}, &(0x7f0000000380)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'team0\x00', r3}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000300)={'syztnl0\x00', &(0x7f00000002c0)={'ip_vti0\x00', r3, 0x0, 0x20, 0x0, 0x0, {{0x6, 0x4, 0x0, 0x38, 0x18, 0x0, 0x0, 0x0, 0x2f, 0x0, @private, @local, {[@ra={0x94, 0x4}]}}}}}) 19:19:36 executing program 5: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000040)) write$ppp(r0, 0x0, 0x0) 19:19:36 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200), 0x1c) socketpair(0x11, 0x1, 0x7, &(0x7f00000001c0)={0xffffffffffffffff}) connect$inet6(r1, &(0x7f0000000740)={0xa, 0x4e20, 0xb9e, @empty, 0x20}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_256={{0x303}, "c9cf93f0c1c4f374", "d9e43c39a96eee24b5d69e31cc8d4db65d9780286df96a3faa652a48bd1b7a15", "c7b7dc39", "16890f27cfc9b8ab"}, 0x38) r2 = accept4$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @private1}, &(0x7f00000000c0)=0x1c, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r2, 0x29, 0x2a, &(0x7f0000000240)={0x101, {{0xa, 0x4e21, 0x200, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x9}}}, 0x88) sendto$inet6(r0, &(0x7f00000005c0), 0xffffffffffffff7f, 0x0, 0x0, 0xfffffffffffffe60) setsockopt$sock_timeval(r0, 0x1, 0x20, &(0x7f0000000080)={0x77359400}, 0x10) 19:19:36 executing program 4: recvmsg$unix(0xffffffffffffffff, &(0x7f0000001340)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="10"], 0x10}, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) bind$packet(r0, &(0x7f0000000140)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) sendmmsg(r0, &(0x7f0000000c80), 0x400000000000345, 0x0) 19:19:36 executing program 2: r0 = socket$vsock_stream(0x28, 0x1, 0x0) unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x8031, 0xffffffffffffffff, 0x0) connect$vsock_stream(r0, &(0x7f0000000080)={0x28, 0x0, 0x0, @hyper}, 0x10) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000200)=ANY=[@ANYBLOB="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"/646], 0x1) unshare(0x40040000) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f00000004c0)=0x80, 0x4) mmap$xdp(&(0x7f0000684000/0x1000)=nil, 0x1000, 0x0, 0x11, r3, 0x100000000) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000100)=0x1400100, 0x4) splice(r2, &(0x7f0000000000)=0x200, 0xffffffffffffffff, &(0x7f0000000040)=0x7ff, 0x0, 0x8) accept4$vsock_stream(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, &(0x7f0000000200), 0x8) [ 581.463902][T28170] hsr0 speed is unknown, defaulting to 1000 19:19:36 executing program 5: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000040)) write$ppp(r0, 0x0, 0x0) [ 581.571619][T28178] hsr0 speed is unknown, defaulting to 1000 19:19:36 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {}, 0x0, 0x0, 0x1}, {{@in, 0x0, 0x33}, 0x0, @in=@loopback, 0x0, 0x0, 0x0, 0xb7}}, 0xe8) getpid() sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) sendmsg$key(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x2, 0x9, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 19:19:37 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@union={0x0, 0x1, 0x0, 0x5, 0x1, 0x0, [{0xe}]}]}}, &(0x7f00000000c0)=""/156, 0x32, 0x9c, 0x1}, 0x20) 19:19:37 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_COST={0x8}]}}}]}, 0x44}}, 0x0) 19:19:37 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB=':\x00\x00\x00\a'], 0xd) 19:19:37 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1e, 0x6, &(0x7f00000000c0)=ANY=[@ANYBLOB="b40600009d00000073110000000000008510000002000000850000000000000095004c00000000009500001200000000019f18971127185729184edf728fab9de435ff23956fb4b05ec05406841d6fcaee1307279600"], &(0x7f0000000080)='GPL\x00', 0x7, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) [ 583.051373][T28170] hsr0 speed is unknown, defaulting to 1000 [ 583.115324][T28178] hsr0 speed is unknown, defaulting to 1000 19:19:38 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {}, 0x0, 0x0, 0x1}, {{@in, 0x0, 0x33}, 0x0, @in=@loopback, 0x0, 0x0, 0x0, 0xb7}}, 0xe8) getpid() sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) sendmsg$key(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x2, 0x9, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 19:19:38 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB=':\x00\x00\x00\a'], 0xd) 19:19:38 executing program 5: poll(0xfffffffffffffffe, 0x7e, 0x0) 19:19:38 executing program 0: syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) socket$inet6_udp(0xa, 0x2, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c) sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0x0) connect$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e24, 0xd2, @loopback, 0x3ff}, 0x1c) r2 = socket(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0}, &(0x7f0000000380)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'team0\x00', r3}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000300)={'syztnl0\x00', &(0x7f00000002c0)={'ip_vti0\x00', r3, 0x0, 0x20, 0x0, 0x0, {{0x6, 0x4, 0x0, 0x38, 0x18, 0x0, 0x0, 0x0, 0x2f, 0x0, @private, @local, {[@ra={0x94, 0x4}]}}}}}) 19:19:38 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {}, 0x0, 0x0, 0x1}, {{@in, 0x0, 0x33}, 0x0, @in=@loopback, 0x0, 0x0, 0x0, 0xb7}}, 0xe8) getpid() sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) sendmsg$key(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x2, 0x9, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 19:19:41 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB=':\x00\x00\x00\a'], 0xd) 19:19:41 executing program 5: unshare(0x42000000) r0 = socket$inet6(0xa, 0x1, 0x2) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e28, 0x20, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x10005}, 0x79) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x201, @empty, 0x200}, 0x1c) getsockopt$bt_hci(r0, 0x84, 0x21, &(0x7f00000000c0)=""/4102, &(0x7f0000001140)=0x1006) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0xa, 0x8010, r0, 0x0) mmap(&(0x7f0000f8e000/0x1000)=nil, 0x1000, 0x1000003, 0x13, 0xffffffffffffffff, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000001200)={0x18, 0x0, {0x1, @multicast, 'vlan1\x00'}}, 0x1e) ioctl$BTRFS_IOC_QUOTA_CTL(r1, 0xc0109428, &(0x7f0000001100)={0x1, 0x7d}) ioctl$PPPOEIOCSFWD(r1, 0x4008b100, &(0x7f0000001240)={0x18, 0x4, {0x100, @empty, 'vlan0\x00'}}) connect$pppoe(0xffffffffffffffff, &(0x7f00000000c0)={0x18, 0x0, {0x1, @multicast, 'bridge_slave_0\x00'}}, 0x1e) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000001180)=0x8, 0x1) ioctl$PPPOEIOCSFWD(0xffffffffffffffff, 0x4008b100, &(0x7f0000000040)={0x18, 0x4, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, 'wlan0\x00'}}) splice(0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xffffffffffffffff, &(0x7f00000011c0)=0xa, 0x4, 0xc4633fb62aa9066) r2 = socket$inet6(0xa, 0x3, 0x3a) socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MRT6_ADD_MIF(r2, 0x29, 0xca, &(0x7f0000001280)={0x0, 0x0, 0x20, 0x4, 0x8000}, 0xc) 19:19:41 executing program 0: syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) socket$inet6_udp(0xa, 0x2, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c) sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0x0) connect$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e24, 0xd2, @loopback, 0x3ff}, 0x1c) r2 = socket(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0}, &(0x7f0000000380)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'team0\x00', r3}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000300)={'syztnl0\x00', &(0x7f00000002c0)={'ip_vti0\x00', r3, 0x0, 0x20, 0x0, 0x0, {{0x6, 0x4, 0x0, 0x38, 0x18, 0x0, 0x0, 0x0, 0x2f, 0x0, @private, @local, {[@ra={0x94, 0x4}]}}}}}) 19:19:41 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {}, 0x0, 0x0, 0x1}, {{@in, 0x0, 0x33}, 0x0, @in=@loopback, 0x0, 0x0, 0x0, 0xb7}}, 0xe8) getpid() sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) sendmsg$key(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x2, 0x9, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 19:19:41 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {}, 0x0, 0x0, 0x1}, {{@in, 0x0, 0x33}, 0x0, @in=@loopback, 0x0, 0x0, 0x0, 0xb7}}, 0xe8) getpid() sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) sendmsg$key(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x2, 0x9, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 19:19:41 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB=':\x00\x00\x00\a'], 0xd) 19:19:41 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) close(r0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) connect$inet(r1, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000040)=0x25c3, 0x4) sendmmsg(r1, &(0x7f00000038c0), 0x4000000000000a8, 0x0) setsockopt$inet_mreq(r0, 0x0, 0x23, &(0x7f00000000c0)={@multicast1=0xe0000300, @local}, 0x8) [ 586.922950][T28372] hsr0 speed is unknown, defaulting to 1000 19:19:42 executing program 1: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000040)={0x0, 0x0, 0x800, 0x0, 0x2}, 0x20) 19:19:42 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) close(r0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) connect$inet(r1, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000040)=0x25c3, 0x4) sendmmsg(r1, &(0x7f00000038c0), 0x4000000000000a8, 0x0) setsockopt$inet_mreq(r0, 0x0, 0x23, &(0x7f00000000c0)={@multicast1=0xe0000300, @local}, 0x8) [ 587.413737][T28372] hsr0 speed is unknown, defaulting to 1000 19:19:42 executing program 1: r0 = socket(0x40000000015, 0x5, 0x0) bind$inet(r0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000001980)={&(0x7f0000000040)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000001900)=[@zcopy_cookie={0x13, 0x114, 0x3}], 0x18}, 0x0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_DAEMON(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)={0x50, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'vcan0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}]}]}, 0x50}}, 0x2604c004) sendmsg$IPVS_CMD_GET_SERVICE(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x130, r1, 0x800, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x64, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private1={0xfc, 0x1, '\x00', 0x1}}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x5}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'rose0\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x7f}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x4}]}, @IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x5e}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@empty}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_SERVICE={0x60, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x7}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'fo\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x46}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@dev={0xfe, 0x80, '\x00', 0x2e}}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'sed\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x1}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x4}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x200}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x80000001}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xfffffff9}]}, 0x130}, 0x1, 0x0, 0x0, 0x48044}, 0x44840) [ 587.898000][T28455] IPVS: Error connecting to the multicast addr 19:19:43 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) close(r0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) connect$inet(r1, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000040)=0x25c3, 0x4) sendmmsg(r1, &(0x7f00000038c0), 0x4000000000000a8, 0x0) setsockopt$inet_mreq(r0, 0x0, 0x23, &(0x7f00000000c0)={@multicast1=0xe0000300, @local}, 0x8) 19:19:43 executing program 1: r0 = socket(0x40000000015, 0x5, 0x0) bind$inet(r0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000001980)={&(0x7f0000000040)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000001900)=[@zcopy_cookie={0x13, 0x114, 0x3}], 0x18}, 0x0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_DAEMON(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)={0x50, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'vcan0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}]}]}, 0x50}}, 0x2604c004) sendmsg$IPVS_CMD_GET_SERVICE(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x130, r1, 0x800, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x64, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private1={0xfc, 0x1, '\x00', 0x1}}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x5}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'rose0\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x7f}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x4}]}, @IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x5e}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@empty}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_SERVICE={0x60, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x7}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'fo\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x46}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@dev={0xfe, 0x80, '\x00', 0x2e}}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'sed\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x1}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x4}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x200}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x80000001}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xfffffff9}]}, 0x130}, 0x1, 0x0, 0x0, 0x48044}, 0x44840) [ 588.229867][T28468] IPVS: Error connecting to the multicast addr 19:19:43 executing program 1: r0 = socket(0x40000000015, 0x5, 0x0) bind$inet(r0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000001980)={&(0x7f0000000040)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000001900)=[@zcopy_cookie={0x13, 0x114, 0x3}], 0x18}, 0x0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_DAEMON(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)={0x50, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'vcan0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}]}]}, 0x50}}, 0x2604c004) sendmsg$IPVS_CMD_GET_SERVICE(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x130, r1, 0x800, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x64, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private1={0xfc, 0x1, '\x00', 0x1}}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x5}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'rose0\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x7f}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x4}]}, @IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x5e}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@empty}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_SERVICE={0x60, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x7}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'fo\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x46}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@dev={0xfe, 0x80, '\x00', 0x2e}}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'sed\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x1}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x4}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x200}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x80000001}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xfffffff9}]}, 0x130}, 0x1, 0x0, 0x0, 0x48044}, 0x44840) [ 588.588676][T28472] IPVS: Error connecting to the multicast addr 19:19:45 executing program 5: r0 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r4, @ANYBLOB="fe000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, r4}}}}}}]}, 0x48}}, 0x0) 19:19:45 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) close(r0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) connect$inet(r1, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000040)=0x25c3, 0x4) sendmmsg(r1, &(0x7f00000038c0), 0x4000000000000a8, 0x0) setsockopt$inet_mreq(r0, 0x0, 0x23, &(0x7f00000000c0)={@multicast1=0xe0000300, @local}, 0x8) 19:19:45 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {}, 0x0, 0x0, 0x1}, {{@in, 0x0, 0x33}, 0x0, @in=@loopback, 0x0, 0x0, 0x0, 0xb7}}, 0xe8) getpid() sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) sendmsg$key(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x2, 0x9, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 19:19:45 executing program 0: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000000000000000004dd6000000000a20000000000a01000000000000000000000000000900010073797a300000000070000000120a0100001f34010400000000000000040004800900020073793a30002e37000900010073797a3000000000080003400000000022000200b717fa41", @ANYRES16, @ANYBLOB="7f8997"], 0xb8}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETCHAIN(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x8}, 0x0) 19:19:45 executing program 1: r0 = socket(0x40000000015, 0x5, 0x0) bind$inet(r0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000001980)={&(0x7f0000000040)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000001900)=[@zcopy_cookie={0x13, 0x114, 0x3}], 0x18}, 0x0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_DAEMON(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)={0x50, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'vcan0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}]}]}, 0x50}}, 0x2604c004) sendmsg$IPVS_CMD_GET_SERVICE(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x130, r1, 0x800, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x64, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private1={0xfc, 0x1, '\x00', 0x1}}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x5}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'rose0\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x7f}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x4}]}, @IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x5e}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@empty}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_SERVICE={0x60, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x7}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'fo\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x46}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@dev={0xfe, 0x80, '\x00', 0x2e}}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'sed\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x1}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x4}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x200}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x80000001}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xfffffff9}]}, 0x130}, 0x1, 0x0, 0x0, 0x48044}, 0x44840) 19:19:45 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {}, 0x0, 0x0, 0x1}, {{@in, 0x0, 0x33}, 0x0, @in=@loopback, 0x0, 0x0, 0x0, 0xb7}}, 0xe8) getpid() sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) sendmsg$key(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x2, 0x9, 0x0, 0x0, 0x2}, 0x10}}, 0x0) [ 590.488318][T28488] IPVS: Error connecting to the multicast addr [ 590.496112][T28490] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 590.562650][T28492] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 590.615173][T28490] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. 19:19:45 executing program 1: r0 = socket$inet6(0xa, 0x8000000000080001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f00000000c0)={0x1, {{0xa, 0x0, 0x0, @mcast1}}}, 0x90) 19:19:45 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000000c0)=@newlink={0x20, 0x4e, 0x503}, 0x20}}, 0x0) 19:19:46 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_WOWLAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x28, r2, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r3}, @val={0xc}}}}, 0x28}}, 0x0) 19:19:46 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x38, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8}, @NL80211_ATTR_CQM_TXE_RATE={0x8}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0xfffffffc}]}]}, 0x38}}, 0x0) 19:19:46 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local}, 0xc) bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x0, "080002000000000008ff43944eeba71a4976e252922cb18f6e2e48ba000000012e0b385404b03ae96d09800000000000000101013c5811039e15825527ecba66fd767ce7a7f6e1b6b408561839ede6dd248a00000000000000000000000000000006ad8e5ecc326d3a09ffc2c6540200e4f200"}, 0x80) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x0, 0x0, 0x0, 0x0, {0x6}}, 0x14}}, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000080)=ANY=[@ANYBLOB="e0000002ac1414aa0000000003"], 0x1c) syz_emit_ethernet(0x36, &(0x7f0000001800)={@random="03366dadf711", @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1=0xe0000002}, @timestamp_reply={0x11}}}}}, 0x0) 19:19:46 executing program 0: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newtaction={0x64, 0x30, 0x1, 0x0, 0x0, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) r1 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r1, &(0x7f0000000200), 0x4924924924926d3, 0x0) 19:19:46 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed}, 0xe) connect(r0, &(0x7f0000000000)=@rc={0x1f, @fixed, 0x8}, 0x80) 19:19:46 executing program 5: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xc, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x11, 0x30}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x7}, @exit]}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r0, 0x2, 0x0}, 0x10) 19:19:47 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000100)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x2bf, 0x0, 0x32}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r0, 0x1) 19:19:47 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local}, 0xc) bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x0, "080002000000000008ff43944eeba71a4976e252922cb18f6e2e48ba000000012e0b385404b03ae96d09800000000000000101013c5811039e15825527ecba66fd767ce7a7f6e1b6b408561839ede6dd248a00000000000000000000000000000006ad8e5ecc326d3a09ffc2c6540200e4f200"}, 0x80) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x0, 0x0, 0x0, 0x0, {0x6}}, 0x14}}, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000080)=ANY=[@ANYBLOB="e0000002ac1414aa0000000003"], 0x1c) syz_emit_ethernet(0x36, &(0x7f0000001800)={@random="03366dadf711", @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1=0xe0000002}, @timestamp_reply={0x11}}}}}, 0x0) 19:19:47 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed}, 0xe) connect(r0, &(0x7f0000000000)=@rc={0x1f, @fixed, 0x8}, 0x80) 19:19:47 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local}, 0xc) bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x0, "080002000000000008ff43944eeba71a4976e252922cb18f6e2e48ba000000012e0b385404b03ae96d09800000000000000101013c5811039e15825527ecba66fd767ce7a7f6e1b6b408561839ede6dd248a00000000000000000000000000000006ad8e5ecc326d3a09ffc2c6540200e4f200"}, 0x80) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x0, 0x0, 0x0, 0x0, {0x6}}, 0x14}}, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000080)=ANY=[@ANYBLOB="e0000002ac1414aa0000000003"], 0x1c) syz_emit_ethernet(0x36, &(0x7f0000001800)={@random="03366dadf711", @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1=0xe0000002}, @timestamp_reply={0x11}}}}}, 0x0) 19:19:47 executing program 3: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'adiantum(xchacha20-simd,anubis-generic,nhpoly1305-sse2)\x00'}, 0x58) close(r1) 19:19:47 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed}, 0xe) connect(r0, &(0x7f0000000000)=@rc={0x1f, @fixed, 0x8}, 0x80) 19:19:47 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed}, 0xe) connect(r0, &(0x7f0000000000)=@rc={0x1f, @fixed, 0x8}, 0x80) 19:19:47 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(r0, 0x0, 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f0000000040)='cpuacct.stat\x00', 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r0, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r2, &(0x7f0000000100)=ANY=[], 0x6) recvmmsg(r2, &(0x7f0000000600), 0x204083acb88ff8b, 0x2, 0x0) 19:19:47 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed}, 0xe) connect(r0, &(0x7f0000000000)=@rc={0x1f, @fixed, 0x8}, 0x80) 19:19:47 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local}, 0xc) bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x0, "080002000000000008ff43944eeba71a4976e252922cb18f6e2e48ba000000012e0b385404b03ae96d09800000000000000101013c5811039e15825527ecba66fd767ce7a7f6e1b6b408561839ede6dd248a00000000000000000000000000000006ad8e5ecc326d3a09ffc2c6540200e4f200"}, 0x80) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x0, 0x0, 0x0, 0x0, {0x6}}, 0x14}}, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000080)=ANY=[@ANYBLOB="e0000002ac1414aa0000000003"], 0x1c) syz_emit_ethernet(0x36, &(0x7f0000001800)={@random="03366dadf711", @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1=0xe0000002}, @timestamp_reply={0x11}}}}}, 0x0) 19:19:47 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed}, 0xe) connect(r0, &(0x7f0000000000)=@rc={0x1f, @fixed, 0x8}, 0x80) 19:19:47 executing program 0: socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, 0x0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x0, 0x1802, @rand_addr, 0xf401}, 0x1c) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-simd\x00'}, 0x58) r2 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$rds(r2, &(0x7f0000001f00)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/30, 0x1e}, {&(0x7f0000000600)=""/127, 0x2000067f}], 0x2}, 0x0) socket(0xa, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) 19:19:47 executing program 3: r0 = epoll_create1(0x0) r1 = socket$key(0xf, 0x3, 0x2) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000200)) 19:19:47 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed}, 0xe) connect(r0, &(0x7f0000000000)=@rc={0x1f, @fixed, 0x8}, 0x80) 19:19:47 executing program 2: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[], 0x44}}, 0x0) r0 = socket(0x18, 0x0, 0x0) close(r0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r3}, 0x18) r4 = socket(0x18, 0x0, 0x0) close(r4) r5 = socket$can_j1939(0x1d, 0x2, 0x7) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000040)={'vxcan0\x00', 0x0}) bind$can_j1939(r5, &(0x7f0000000340)={0x1d, r7}, 0x18) connect$can_j1939(r4, &(0x7f00000000c0)={0x1d, r7}, 0x18) sendmmsg$alg(r4, &(0x7f00000000c0), 0x4924924924924d8, 0x0) connect$can_j1939(r0, &(0x7f00000000c0)={0x1d, r3}, 0x18) sendmmsg$alg(r0, &(0x7f00000000c0), 0x4924924924924d8, 0x0) 19:19:47 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='memory.numa_stat\x00', 0x7a05, 0x1700) splice(r1, &(0x7f0000000000)=0x9, r0, &(0x7f0000000100)=0x80000fb, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000005c0)=0x169, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000780)={@in={{0x2, 0x0, @local}}, 0x0, 0x9, 0x47, 0x0, "0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030cf00"}, 0xd8) bind$inet(r2, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x20000ffd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) recvmsg(r2, &(0x7f0000000240)={0x0, 0xfffffffffffffd83, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0x5801}], 0x1, 0x0, 0xf080, 0x5801}, 0x100) write$binfmt_elf64(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="92342dfe497400d60f15957f269f4b5eb214fb725e553e96daee6d04dc0e262c319ec1ce213158a6bf2757a88a8bd6b9456d837b961b9a4168ef005ff67444b664ad1c1af47fa2cadadc91248f50af14cde46b17c52c9898afd1e5af595048d3ef5e56399564ad3e2499a97255d621a3f157bcc5445c3fb32f", @ANYRESDEC], 0x1000001bd) write$binfmt_script(r2, &(0x7f00000000c0)={'#! ', './file0', [{0x20, 'memory.numa_stat\x00'}, {0x20, '/&&}*'}, {0x20, 'memory.numa_stat\x00'}], 0xa, "76416494c0"}, 0x3a) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28012, r0, 0x0) [ 592.925162][ C1] vxcan1: j1939_xtp_rx_dat: no tx connection found [ 592.932075][ C1] vxcan1: j1939_xtp_rx_dat_one: 0xffff888044a31c00: last 10 [ 592.941518][ C1] vxcan1: j1939_xtp_rx_dat: no tx connection found [ 592.948125][ C1] vxcan1: j1939_xtp_rx_dat_one: 0xffff888044a31c00: last 10 [ 592.955504][ C1] vxcan1: j1939_xtp_rx_dat: no tx connection found [ 592.962091][ C1] vxcan1: j1939_xtp_rx_dat_one: 0xffff888044a31c00: last 10 19:19:47 executing program 3: r0 = epoll_create1(0x0) r1 = socket$key(0xf, 0x3, 0x2) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000200)) [ 592.969512][ C1] vxcan1: j1939_xtp_rx_dat: no tx connection found [ 592.976073][ C1] vxcan1: j1939_xtp_rx_dat_one: 0xffff888044a31c00: last 10 [ 592.983509][ C1] vxcan1: j1939_xtp_rx_dat: no tx connection found [ 592.990097][ C1] vxcan1: j1939_xtp_rx_dat_one: 0xffff888044a31c00: last 10 [ 592.997558][ C1] vxcan1: j1939_xtp_rx_dat: no tx connection found [ 593.004169][ C1] vxcan1: j1939_xtp_rx_dat_one: 0xffff888044a31c00: last 10 [ 593.011609][ C1] vxcan1: j1939_xtp_rx_dat: no tx connection found [ 593.018183][ C1] vxcan1: j1939_xtp_rx_dat_one: 0xffff888044a31c00: last 10 19:19:48 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_HEADER(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0xc, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) [ 593.025554][ C1] vxcan1: j1939_xtp_rx_dat: no tx connection found [ 593.032142][ C1] vxcan1: j1939_xtp_rx_dat_one: 0xffff888044a31c00: last 10 [ 593.039587][ C1] vxcan1: j1939_xtp_rx_dat: no tx connection found [ 593.046113][ C1] vxcan1: j1939_xtp_rx_dat_one: 0xffff888044a31c00: last 10 [ 593.053541][ C1] vxcan1: j1939_xtp_rx_dat: no tx connection found [ 593.060144][ C1] vxcan1: j1939_xtp_rx_dat_one: 0xffff888044a31c00: last 10 [ 593.067557][ C1] vxcan0: j1939_xtp_rx_abort_one: 0xffff888076403400: 0x00000: (5) Maximal retransmit request limit reached [ 593.104527][ C0] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 593.111115][ C0] vxcan0: j1939_xtp_rx_dat_one: 0xffff888079ebb800: last 10 [ 593.118629][ C0] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 593.125148][ C0] vxcan0: j1939_xtp_rx_dat_one: 0xffff888079ebb800: last 10 [ 593.132596][ C0] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 593.139208][ C0] vxcan0: j1939_xtp_rx_dat_one: 0xffff888079ebb800: last 10 [ 593.146566][ C0] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 593.153172][ C0] vxcan0: j1939_xtp_rx_dat_one: 0xffff888079ebb800: last 10 [ 593.160609][ C0] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 593.167120][ C0] vxcan0: j1939_xtp_rx_dat_one: 0xffff888079ebb800: last 10 [ 593.174537][ C0] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 593.181120][ C0] vxcan0: j1939_xtp_rx_dat_one: 0xffff888079ebb800: last 10 [ 593.188607][ C0] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 593.195118][ C0] vxcan0: j1939_xtp_rx_dat_one: 0xffff888079ebb800: last 10 [ 593.202638][ C0] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 593.209290][ C0] vxcan0: j1939_xtp_rx_dat_one: 0xffff888079ebb800: last 10 [ 593.216635][ C0] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 593.223204][ C0] vxcan0: j1939_xtp_rx_dat_one: 0xffff888079ebb800: last 10 [ 593.230608][ C0] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 593.237119][ C0] vxcan0: j1939_xtp_rx_dat_one: 0xffff888079ebb800: last 10 19:19:48 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x390, 0x0, 0x0, 0x0, 0x160, 0x0, 0x2c0, 0x258, 0x258, 0x2c0, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [], 'wg2\x00', 'macvlan1\x00', {}, {}, 0x73}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x2, 0x0, 0x5}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@uncond, 0x0, 0xf8, 0x160, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3f0) 19:19:48 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='memory.numa_stat\x00', 0x7a05, 0x1700) splice(r1, &(0x7f0000000000)=0x9, r0, &(0x7f0000000100)=0x80000fb, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000005c0)=0x169, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000780)={@in={{0x2, 0x0, @local}}, 0x0, 0x9, 0x47, 0x0, "0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030cf00"}, 0xd8) bind$inet(r2, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x20000ffd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) recvmsg(r2, &(0x7f0000000240)={0x0, 0xfffffffffffffd83, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0x5801}], 0x1, 0x0, 0xf080, 0x5801}, 0x100) write$binfmt_elf64(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="92342dfe497400d60f15957f269f4b5eb214fb725e553e96daee6d04dc0e262c319ec1ce213158a6bf2757a88a8bd6b9456d837b961b9a4168ef005ff67444b664ad1c1af47fa2cadadc91248f50af14cde46b17c52c9898afd1e5af595048d3ef5e56399564ad3e2499a97255d621a3f157bcc5445c3fb32f", @ANYRESDEC], 0x1000001bd) write$binfmt_script(r2, &(0x7f00000000c0)={'#! ', './file0', [{0x20, 'memory.numa_stat\x00'}, {0x20, '/&&}*'}, {0x20, 'memory.numa_stat\x00'}], 0xa, "76416494c0"}, 0x3a) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28012, r0, 0x0) 19:19:48 executing program 0: socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, 0x0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x0, 0x1802, @rand_addr, 0xf401}, 0x1c) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-simd\x00'}, 0x58) r2 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$rds(r2, &(0x7f0000001f00)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/30, 0x1e}, {&(0x7f0000000600)=""/127, 0x2000067f}], 0x2}, 0x0) socket(0xa, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) [ 593.244523][ C0] vxcan1: j1939_xtp_rx_abort_one: 0xffff88806edc9c00: 0x00000: (5) Maximal retransmit request limit reached [ 593.256070][ C0] vxcan1: j1939_xtp_rx_abort_one: 0xffff888044a31c00: 0x00000: (5) Maximal retransmit request limit reached 19:19:48 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x14, 0x11, 0x0, 0x1, @reject={{0xb}, @val={0x4}}}]}], {0x14, 0x10}}, 0x98}}, 0x0) 19:19:48 executing program 3: r0 = epoll_create1(0x0) r1 = socket$key(0xf, 0x3, 0x2) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000200)) 19:19:48 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[], 0x208e24b) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000001980)=[{{&(0x7f0000000200), 0x6e, &(0x7f0000000600)=[{&(0x7f0000000340)=""/89, 0x59}, {0x0}], 0x2, &(0x7f0000000680)=[@cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x70}}, {{&(0x7f0000000700), 0x6e, &(0x7f0000001900)=[{&(0x7f0000000780)=""/156, 0x9c}, {0x0}, {&(0x7f0000001840)=""/165, 0xa5}], 0x3, &(0x7f0000001940)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x30}}], 0x2, 0x40000042, &(0x7f0000001a00)={0x0, 0x989680}) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r1, 0x8912, 0x400308) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(r2, &(0x7f0000000000), 0xb1d000) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="6400000030003dfa000000000000000000000000500001004c0001000f00010074756e6e656c5f6b657900003400028014000b00040000000400010000000000000000001c000200000000000000000002000000000000000000000001"], 0x1}}, 0x0) close(r5) socket(0x10, 0x3, 0x0) write$binfmt_misc(r4, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r3, 0x0, r5, 0x0, 0x4ffe0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) [ 593.399561][T28649] xt_l2tp: v2 doesn't support IP mode 19:19:48 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r2, &(0x7f0000001b40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001000050700000000004097c992000040", @ANYRES32=r3, @ANYBLOB="0000400000000002280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000036c0)=ANY=[@ANYBLOB="2000000014002101000000000000000002000000", @ANYRES32=r3, @ANYBLOB="08000200ac1414"], 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@ipv4_deladdr={0x20, 0x11, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r3}, [@IFA_ADDRESS={0x8, 0x1, @remote}]}, 0x20}}, 0x0) 19:19:48 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) recvmmsg(r0, &(0x7f0000004000)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)=ANY=[@ANYBLOB="020a000007000000b6f1ffff0000854105001a"], 0x38}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), r1) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, &(0x7f0000000000)={0x0, 0x7992}, 0x8) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADD(r3, &(0x7f0000000400)={0x0, 0x1000000, &(0x7f00000003c0)={&(0x7f0000000380)={0x2c, r2, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x2}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x2c}}, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NET_DM_CMD_START(r4, &(0x7f0000000500)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x14, 0x0, 0x400, 0x70bd2c, 0x25dfdbfc, {}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000000) sendmsg$NLBL_MGMT_C_LISTDEF(r4, &(0x7f0000000140)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x74, r2, 0x10, 0x70bd2a, 0x25dfdbff, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x1}, @NLBL_MGMT_A_CLPDOI={0xfffffffffffffe2d, 0xc, 0x1}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @dev={0xfe, 0x80, '\x00', 0x2c}}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x1e76497e7c5437e8}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x26}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x2}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x15}}]}, 0x74}, 0x1, 0x0, 0x0, 0x4004005}, 0x890) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r5) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="020100090e000000030000000000000405000600000000000a0000000000000f00000000000000000000002106000000000000000000000002000100010000000000010200fd000005000500000000000a"], 0x70}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x3ef, 0x0) 19:19:48 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='memory.numa_stat\x00', 0x7a05, 0x1700) splice(r1, &(0x7f0000000000)=0x9, r0, &(0x7f0000000100)=0x80000fb, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000005c0)=0x169, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000780)={@in={{0x2, 0x0, @local}}, 0x0, 0x9, 0x47, 0x0, "0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030cf00"}, 0xd8) bind$inet(r2, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x20000ffd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) recvmsg(r2, &(0x7f0000000240)={0x0, 0xfffffffffffffd83, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0x5801}], 0x1, 0x0, 0xf080, 0x5801}, 0x100) write$binfmt_elf64(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="92342dfe497400d60f15957f269f4b5eb214fb725e553e96daee6d04dc0e262c319ec1ce213158a6bf2757a88a8bd6b9456d837b961b9a4168ef005ff67444b664ad1c1af47fa2cadadc91248f50af14cde46b17c52c9898afd1e5af595048d3ef5e56399564ad3e2499a97255d621a3f157bcc5445c3fb32f", @ANYRESDEC], 0x1000001bd) write$binfmt_script(r2, &(0x7f00000000c0)={'#! ', './file0', [{0x20, 'memory.numa_stat\x00'}, {0x20, '/&&}*'}, {0x20, 'memory.numa_stat\x00'}], 0xa, "76416494c0"}, 0x3a) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28012, r0, 0x0) 19:19:48 executing program 3: r0 = epoll_create1(0x0) r1 = socket$key(0xf, 0x3, 0x2) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000200)) 19:19:48 executing program 0: socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, 0x0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x0, 0x1802, @rand_addr, 0xf401}, 0x1c) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-simd\x00'}, 0x58) r2 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$rds(r2, &(0x7f0000001f00)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/30, 0x1e}, {&(0x7f0000000600)=""/127, 0x2000067f}], 0x2}, 0x0) socket(0xa, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) [ 593.668802][T28663] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 593.739919][T28663] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 593.782494][T28663] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 593.823880][T28667] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 19:19:48 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc6010000c400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 19:19:48 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='memory.numa_stat\x00', 0x7a05, 0x1700) splice(r1, &(0x7f0000000000)=0x9, r0, &(0x7f0000000100)=0x80000fb, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000005c0)=0x169, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000780)={@in={{0x2, 0x0, @local}}, 0x0, 0x9, 0x47, 0x0, "0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030cf00"}, 0xd8) bind$inet(r2, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x20000ffd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) recvmsg(r2, &(0x7f0000000240)={0x0, 0xfffffffffffffd83, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0x5801}], 0x1, 0x0, 0xf080, 0x5801}, 0x100) write$binfmt_elf64(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="92342dfe497400d60f15957f269f4b5eb214fb725e553e96daee6d04dc0e262c319ec1ce213158a6bf2757a88a8bd6b9456d837b961b9a4168ef005ff67444b664ad1c1af47fa2cadadc91248f50af14cde46b17c52c9898afd1e5af595048d3ef5e56399564ad3e2499a97255d621a3f157bcc5445c3fb32f", @ANYRESDEC], 0x1000001bd) write$binfmt_script(r2, &(0x7f00000000c0)={'#! ', './file0', [{0x20, 'memory.numa_stat\x00'}, {0x20, '/&&}*'}, {0x20, 'memory.numa_stat\x00'}], 0xa, "76416494c0"}, 0x3a) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28012, r0, 0x0) 19:19:49 executing program 5: r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) getsockopt$ax25_int(r0, 0x101, 0x8, &(0x7f0000000540), &(0x7f0000000580)=0x4) [ 593.992005][T28667] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 594.124141][T28714] netlink: 'syz-executor.3': attribute type 12 has an invalid length. 19:19:49 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r2, &(0x7f0000001b40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001000050700000000004097c992000040", @ANYRES32=r3, @ANYBLOB="0000400000000002280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000036c0)=ANY=[@ANYBLOB="2000000014002101000000000000000002000000", @ANYRES32=r3, @ANYBLOB="08000200ac1414"], 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@ipv4_deladdr={0x20, 0x11, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r3}, [@IFA_ADDRESS={0x8, 0x1, @remote}]}, 0x20}}, 0x0) 19:19:49 executing program 0: socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, 0x0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x0, 0x1802, @rand_addr, 0xf401}, 0x1c) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-simd\x00'}, 0x58) r2 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$rds(r2, &(0x7f0000001f00)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/30, 0x1e}, {&(0x7f0000000600)=""/127, 0x2000067f}], 0x2}, 0x0) socket(0xa, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) [ 594.180275][T28714] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.3'. 19:19:49 executing program 5: r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000a80)=@bpf_lsm={0x6, 0x3, &(0x7f0000000100)=@framed, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) poll(&(0x7f0000000280)=[{r0}], 0x1, 0x0) [ 594.384208][T28720] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 19:19:49 executing program 2: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000e80)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x54}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1006, &(0x7f000062b000)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffed6}, 0x56) 19:19:49 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @loopback}, 0x4}}, 0x2e) syz_emit_ethernet(0x4c, &(0x7f0000000140)={@link_local, @random="ece65fbcee55", @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x16, 0x11, 0x0, @remote, @local, {[], {0x0, 0xe22, 0x16, 0x0, @gue={{0x2, 0x0, 0x0, 0x3, 0x0, @val=0xffffff8d}, "30b00afe4e70"}}}}}}}, 0x0) 19:19:49 executing program 1: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000007c0)={0x20, 0x10, 0x701, 0x0, 0x0, {0xa, 0x0, 0x2800}, [@typed={0xb, 0x2, 0x0, 0x0, @str='batadv\x00'}]}, 0x20}}, 0x0) 19:19:49 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001240)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000001c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$inet6(0xa, 0x80005, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r2, 0x84, 0xa, &(0x7f0000001280)=""/4065, &(0x7f00000000c0)=0xfe1) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r1, 0x0, 0x100000001) 19:19:49 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet(r0, &(0x7f0000000600)=[{{&(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10, 0x0, 0x0, &(0x7f0000000240)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x20}}], 0x38}}, {{&(0x7f0000000280)={0x2, 0x4e22, @local}, 0x10, 0x0}}], 0x2, 0x0) 19:19:49 executing program 0: mmap(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x2fffffd, 0x8d071, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x4, &(0x7f00000000c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xe}]}, &(0x7f0000000140)='syzkaller\x00', 0x4, 0x8f, &(0x7f0000000000)=""/143, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='mm_page_free_batched\x00', r0}, 0x10) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x4ca31, 0xffffffffffffffff, 0x0) 19:19:49 executing program 1: sendmmsg(0xffffffffffffffff, &(0x7f0000000500)=[{{0x0, 0x0, &(0x7f00000024c0)=[{&(0x7f0000000040)="c59f69ab2cd4cbfc9aca3da4a801181e440829a01aea1d8edcc87039fb74f5540cb46d71d27c01ff41b018f628860f6548f6f8af3692300a6a661a53ac67c57f5b0d6a09631321cd16656ae39d697db51d6906752d3e6c9536ca492a9a8b3131bc4ec0c94eaa06715b9c9a0039f8e82a5f85e44da48632e4e7827e75a81f4a11f6ced797bc71549e62b8466553259a094fee645ccd0284762712514d9b95587f9891250088d8b3327956a4cf7caa1b295ff4812226782b9d60f8f03691b72694f09b4a389d09a6ca02a5386975ebe1fe99", 0xd1}], 0x1}}], 0x1, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNATTACHFILTER(r0, 0x400454ca, &(0x7f0000000100)={0xfffffffffffffd6d, 0x0}) 19:19:49 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r2, &(0x7f0000001b40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001000050700000000004097c992000040", @ANYRES32=r3, @ANYBLOB="0000400000000002280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000036c0)=ANY=[@ANYBLOB="2000000014002101000000000000000002000000", @ANYRES32=r3, @ANYBLOB="08000200ac1414"], 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@ipv4_deladdr={0x20, 0x11, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r3}, [@IFA_ADDRESS={0x8, 0x1, @remote}]}, 0x20}}, 0x0) 19:19:49 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_KEY(r0, &(0x7f00000002c0)={0x0, 0x5000000, &(0x7f0000000280)={&(0x7f00000001c0)={0x3c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY={0x14, 0x50, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x2}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}]}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b={0x8, 0x2, 0x11, 0x0, 0x0, 0x0}}]}, 0x3c}}, 0x0) [ 594.902711][ T26] kauditd_printk_skb: 16 callbacks suppressed [ 594.902728][ T26] audit: type=1804 audit(1634671189.874:386): pid=28759 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir324979812/syzkaller.ofHiir/332/cgroup.controllers" dev="sda1" ino=14250 res=1 errno=0 19:19:49 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000140)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x14, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2}}}}}}}, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000080)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x18, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@mss={0x2, 0x4, 0xaeaf}]}}}}}}}}, 0x0) 19:19:49 executing program 3: preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x40, 0x10, 0x40b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gre={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @multicast2}, @IFLA_GRE_TOS={0x5}]}}}]}, 0x40}}, 0x0) [ 595.126656][T28789] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 595.216771][T28794] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 19:19:50 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x200000000003, 0x3) shutdown(r0, 0x0) read(r0, &(0x7f0000002400)=""/93, 0x5d) 19:19:50 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000a40)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0xe, 0x6}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}}, 0x0) r3 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000200), 0x10efe10675dec16, 0x0) r4 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 19:19:50 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000140)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x14, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2}}}}}}}, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000080)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x18, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@mss={0x2, 0x4, 0xaeaf}]}}}}}}}}, 0x0) 19:19:50 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r2, &(0x7f0000001b40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001000050700000000004097c992000040", @ANYRES32=r3, @ANYBLOB="0000400000000002280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000036c0)=ANY=[@ANYBLOB="2000000014002101000000000000000002000000", @ANYRES32=r3, @ANYBLOB="08000200ac1414"], 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@ipv4_deladdr={0x20, 0x11, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r3}, [@IFA_ADDRESS={0x8, 0x1, @remote}]}, 0x20}}, 0x0) [ 595.514650][T28803] __nla_validate_parse: 1 callbacks suppressed [ 595.514668][T28803] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 595.575618][T28805] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 19:19:50 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001240)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000001c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$inet6(0xa, 0x80005, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r2, 0x84, 0xa, &(0x7f0000001280)=""/4065, &(0x7f00000000c0)=0xfe1) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r1, 0x0, 0x100000001) 19:19:50 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0xa, 0x4, 0x7, 0x101, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x400000}, 0x40) 19:19:50 executing program 0: mmap(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x2fffffd, 0x8d071, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x4, &(0x7f00000000c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xe}]}, &(0x7f0000000140)='syzkaller\x00', 0x4, 0x8f, &(0x7f0000000000)=""/143, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='mm_page_free_batched\x00', r0}, 0x10) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x4ca31, 0xffffffffffffffff, 0x0) [ 595.706474][T28807] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 19:19:50 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000140)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x14, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2}}}}}}}, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000080)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x18, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@mss={0x2, 0x4, 0xaeaf}]}}}}}}}}, 0x0) [ 595.885380][T28806] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 19:19:51 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000a40)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0xe, 0x6}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}}, 0x0) r3 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000200), 0x10efe10675dec16, 0x0) r4 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000200), 0x10efe10675dec16, 0x0) [ 595.974184][T28850] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 19:19:51 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000a40)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0xe, 0x6}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}}, 0x0) r3 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000200), 0x10efe10675dec16, 0x0) r4 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000200), 0x10efe10675dec16, 0x0) [ 596.065389][ T26] audit: type=1804 audit(1634671191.034:387): pid=28835 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir324979812/syzkaller.ofHiir/333/cgroup.controllers" dev="sda1" ino=14280 res=1 errno=0 19:19:51 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, 0xffffffffffffffff, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000140)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x14, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2}}}}}}}, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000080)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x18, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@mss={0x2, 0x4, 0xaeaf}]}}}}}}}}, 0x0) 19:19:51 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001240)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000001c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$inet6(0xa, 0x80005, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r2, 0x84, 0xa, &(0x7f0000001280)=""/4065, &(0x7f00000000c0)=0xfe1) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r1, 0x0, 0x100000001) [ 596.210404][T28855] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 596.378867][T28857] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 596.475517][T28882] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 19:19:51 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000a40)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0xe, 0x6}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}}, 0x0) r3 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000200), 0x10efe10675dec16, 0x0) r4 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 19:19:51 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001240)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000001c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$inet6(0xa, 0x80005, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r2, 0x84, 0xa, &(0x7f0000001280)=""/4065, &(0x7f00000000c0)=0xfe1) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r1, 0x0, 0x100000001) [ 596.661783][ T26] audit: type=1804 audit(1634671191.634:388): pid=28872 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir261437750/syzkaller.IJnp99/33/cgroup.controllers" dev="sda1" ino=14285 res=1 errno=0 19:19:51 executing program 0: mmap(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x2fffffd, 0x8d071, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x4, &(0x7f00000000c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xe}]}, &(0x7f0000000140)='syzkaller\x00', 0x4, 0x8f, &(0x7f0000000000)=""/143, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='mm_page_free_batched\x00', r0}, 0x10) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x4ca31, 0xffffffffffffffff, 0x0) 19:19:51 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000a40)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0xe, 0x6}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}}, 0x0) r3 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000200), 0x10efe10675dec16, 0x0) r4 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000200), 0x10efe10675dec16, 0x0) [ 596.891432][T28898] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 597.046010][T28907] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 597.058778][ T26] audit: type=1804 audit(1634671192.034:389): pid=28897 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir266573529/syzkaller.JjYHuA/467/cgroup.controllers" dev="sda1" ino=14251 res=1 errno=0 19:19:52 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001240)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000001c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$inet6(0xa, 0x80005, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r2, 0x84, 0xa, &(0x7f0000001280)=""/4065, &(0x7f00000000c0)=0xfe1) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r1, 0x0, 0x100000001) 19:19:52 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000a40)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0xe, 0x6}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}}, 0x0) r3 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000200), 0x10efe10675dec16, 0x0) r4 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 19:19:52 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000a40)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0xe, 0x6}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}}, 0x0) r3 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000200), 0x10efe10675dec16, 0x0) r4 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 19:19:52 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001240)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000001c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$inet6(0xa, 0x80005, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r2, 0x84, 0xa, &(0x7f0000001280)=""/4065, &(0x7f00000000c0)=0xfe1) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r1, 0x0, 0x100000001) [ 597.460685][T28939] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 19:19:52 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001240)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000001c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$inet6(0xa, 0x80005, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r2, 0x84, 0xa, &(0x7f0000001280)=""/4065, &(0x7f00000000c0)=0xfe1) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r1, 0x0, 0x100000001) [ 597.602810][T28947] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 19:19:52 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001240)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000001c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$inet6(0xa, 0x80005, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r2, 0x84, 0xa, &(0x7f0000001280)=""/4065, &(0x7f00000000c0)=0xfe1) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r1, 0x0, 0x100000001) 19:19:52 executing program 2: mmap(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x2fffffd, 0x8d071, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x4, &(0x7f00000000c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xe}]}, &(0x7f0000000140)='syzkaller\x00', 0x4, 0x8f, &(0x7f0000000000)=""/143, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='mm_page_free_batched\x00', r0}, 0x10) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x4ca31, 0xffffffffffffffff, 0x0) [ 597.790757][ T26] audit: type=1804 audit(1634671192.764:390): pid=28948 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir261437750/syzkaller.IJnp99/34/cgroup.controllers" dev="sda1" ino=14289 res=1 errno=0 19:19:52 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000001240)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) 19:19:52 executing program 0: mmap(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x2fffffd, 0x8d071, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x4, &(0x7f00000000c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xe}]}, &(0x7f0000000140)='syzkaller\x00', 0x4, 0x8f, &(0x7f0000000000)=""/143, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='mm_page_free_batched\x00', r0}, 0x10) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x4ca31, 0xffffffffffffffff, 0x0) 19:19:53 executing program 5: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket(0x1000000010, 0x80002, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0002000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002fc0)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x7}, {}, {0xfff3, 0xf}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}}, 0x0) sendmmsg$alg(r1, &(0x7f0000000200), 0x10efe10675dec16, 0x0) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r5 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r5, &(0x7f0000000200), 0x4924924924926d3, 0x0) 19:19:53 executing program 3: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xf, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x8}, [@ldst={0x4, 0x0, 0x2}]}, &(0x7f0000000080)='GPL\x00', 0x4, 0x3e0, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x76}, 0x48) [ 598.217156][T28990] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 598.325078][ T26] audit: type=1804 audit(1634671193.294:391): pid=28985 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir266573529/syzkaller.JjYHuA/468/cgroup.controllers" dev="sda1" ino=14305 res=1 errno=0 19:19:53 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x0}]}]}, 0x58}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3800000010000507000000000004000000000000", @ANYRES32, @ANYBLOB="00000016010000001800120008000100736974000c00020008000300bd161e101c1e3b7c072805ac60e1cfa16493911e162613e5ff125822d29b1770f566ef776f0bc62ad1863ef113457a81aa78c92e94ff363b789d7132047e51c700", @ANYRES32], 0x38}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=@newlink={0x50, 0x10, 0x439, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, r1, 0x3}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @sit={{0x8}, {0x24, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast1}, @IFLA_IPTUN_LOCAL={0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0x4}]}}}]}, 0x50}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000140)) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000240)=@ll, 0x80, &(0x7f0000000340)=[{&(0x7f0000000180)=""/33, 0x21}, {&(0x7f00000010c0)=""/4096, 0x1000}, {&(0x7f00000002c0)=""/122, 0x7a}], 0x3, &(0x7f0000000380)=""/122, 0x7a}, 0x2160) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000004c0)={'syztnl2\x00', &(0x7f0000002780)=ANY=[@ANYBLOB='tunl0\x00'/16, @ANYRES32=0x0, @ANYBLOB="0020008000000099000000000000005400660000b3049078ac696741911e0101441c1e43ac1e00010000000664010102000004f8e0000002000000019404010089076dac1e00018907ddac1414bb940400008e09a5dc8b4e0a222f94040000002bdf650b20e9bd2a9fc7e56cb762d6a2d2687ea15f88983b38e6c0735d2139e477faa07b08fe2122e56762d0407e2a6d5f31f6ffd591b139aab94a2b04d6ee9904918f786555e0b88af1a22219d6cb78dfb16e0108967617242d9c31bbcc34da260aa98b71a1467b6696e2b58fcc"]}) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r0, 0x89fb, &(0x7f0000000580)={'syztnl0\x00', &(0x7f0000000500)={'ip6tnl0\x00', 0x0, 0x29, 0x1, 0x9, 0x8, 0x0, @private2, @private0, 0x7, 0x8010, 0xffff7fff, 0xfff}}) r2 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r3, 0x8983, &(0x7f0000000000)={0x2, 'veth0_to_team\x00', {}, 0x8}) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=@newlink={0x50, 0x10, 0x439, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @sit={{0x8}, {0x24, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast1}, @IFLA_IPTUN_LOCAL={0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0x4}]}}}]}, 0x50}}, 0x0) 19:19:53 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000004980)=@newsa={0x144, 0x10, 0x1, 0x0, 0x0, {{@in=@private, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {@in6=@mcast2, 0x0, 0x6c}, @in6=@mcast2, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @offload={0xc}]}, 0x144}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) 19:19:53 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001240)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000001c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$inet6(0xa, 0x80005, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r2, 0x84, 0xa, &(0x7f0000001280)=""/4065, &(0x7f00000000c0)=0xfe1) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r1, 0x0, 0x100000001) [ 598.789271][T29014] ------------[ cut here ]------------ [ 598.795231][T29014] Trying to vfree() nonexistent vm area (ffffc900041f1000) 19:19:53 executing program 2: mmap(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x2fffffd, 0x8d071, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x4, &(0x7f00000000c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xe}]}, &(0x7f0000000140)='syzkaller\x00', 0x4, 0x8f, &(0x7f0000000000)=""/143, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='mm_page_free_batched\x00', r0}, 0x10) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x4ca31, 0xffffffffffffffff, 0x0) [ 598.861157][T29014] WARNING: CPU: 0 PID: 29014 at mm/vmalloc.c:2601 __vunmap+0x150/0xb70 [ 598.959748][T29014] Modules linked in: [ 598.963678][T29014] CPU: 0 PID: 29014 Comm: syz-executor.5 Not tainted 5.15.0-rc5-syzkaller #0 [ 599.016170][T29014] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 19:19:54 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001240)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000001c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$inet6(0xa, 0x80005, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r2, 0x84, 0xa, &(0x7f0000001280)=""/4065, &(0x7f00000000c0)=0xfe1) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r1, 0x0, 0x100000001) [ 599.042708][ T26] audit: type=1804 audit(1634671194.014:392): pid=29032 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir261437750/syzkaller.IJnp99/35/cgroup.controllers" dev="sda1" ino=14240 res=1 errno=0 [ 599.063461][T29014] RIP: 0010:__vunmap+0x150/0xb70 19:19:54 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x6b03, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000f000000e8bd6efb250314000e000100240248ff050005001200", 0x2e}], 0x1}, 0x0) 19:19:54 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x0}]}]}, 0x58}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3800000010000507000000000004000000000000", @ANYRES32, @ANYBLOB="00000016010000001800120008000100736974000c00020008000300bd161e101c1e3b7c072805ac60e1cfa16493911e162613e5ff125822d29b1770f566ef776f0bc62ad1863ef113457a81aa78c92e94ff363b789d7132047e51c700", @ANYRES32], 0x38}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=@newlink={0x50, 0x10, 0x439, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, r1, 0x3}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @sit={{0x8}, {0x24, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast1}, @IFLA_IPTUN_LOCAL={0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0x4}]}}}]}, 0x50}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000140)) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000240)=@ll, 0x80, &(0x7f0000000340)=[{&(0x7f0000000180)=""/33, 0x21}, {&(0x7f00000010c0)=""/4096, 0x1000}, {&(0x7f00000002c0)=""/122, 0x7a}], 0x3, &(0x7f0000000380)=""/122, 0x7a}, 0x2160) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000004c0)={'syztnl2\x00', &(0x7f0000002780)=ANY=[@ANYBLOB='tunl0\x00'/16, @ANYRES32=0x0, @ANYBLOB="0020008000000099000000000000005400660000b3049078ac696741911e0101441c1e43ac1e00010000000664010102000004f8e0000002000000019404010089076dac1e00018907ddac1414bb940400008e09a5dc8b4e0a222f94040000002bdf650b20e9bd2a9fc7e56cb762d6a2d2687ea15f88983b38e6c0735d2139e477faa07b08fe2122e56762d0407e2a6d5f31f6ffd591b139aab94a2b04d6ee9904918f786555e0b88af1a22219d6cb78dfb16e0108967617242d9c31bbcc34da260aa98b71a1467b6696e2b58fcc"]}) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r0, 0x89fb, &(0x7f0000000580)={'syztnl0\x00', &(0x7f0000000500)={'ip6tnl0\x00', 0x0, 0x29, 0x1, 0x9, 0x8, 0x0, @private2, @private0, 0x7, 0x8010, 0xffff7fff, 0xfff}}) r2 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r3, 0x8983, &(0x7f0000000000)={0x2, 'veth0_to_team\x00', {}, 0x8}) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=@newlink={0x50, 0x10, 0x439, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @sit={{0x8}, {0x24, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast1}, @IFLA_IPTUN_LOCAL={0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0x4}]}}}]}, 0x50}}, 0x0) [ 599.103643][T29014] Code: 85 78 ff ff ff e8 b0 7b c3 ff 48 c7 c7 c0 f3 a9 8b e8 94 c6 87 07 e8 9f 7b c3 ff 4c 89 e6 48 c7 c7 20 0d 97 89 e8 b7 37 42 07 <0f> 0b 48 83 c4 38 5b 5d 41 5c 41 5d 41 5e 41 5f e9 7b 7b c3 ff e8 [ 599.212396][T29014] RSP: 0018:ffffc90002cef2d8 EFLAGS: 00010286 [ 599.231970][T29034] device bond0 entered promiscuous mode [ 599.242334][T29014] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 599.255161][T29034] device bond_slave_0 entered promiscuous mode [ 599.280932][T29034] device bond_slave_1 entered promiscuous mode [ 599.288092][T29014] RDX: 0000000000040000 RSI: ffffffff815e9628 RDI: fffff5200059de4d [ 599.349517][T29014] RBP: dffffc0000000000 R08: 0000000000000000 R09: 0000000000000000 [ 599.433288][T29014] R10: ffffffff815e33ce R11: 0000000000000000 R12: ffffc900041f1000 [ 599.495647][T29014] R13: ffff8880772a4c60 R14: ffffc900041f1000 R15: ffffe8ffffc45038 19:19:54 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x0}]}]}, 0x58}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3800000010000507000000000004000000000000", @ANYRES32, @ANYBLOB="00000016010000001800120008000100736974000c00020008000300bd161e101c1e3b7c072805ac60e1cfa16493911e162613e5ff125822d29b1770f566ef776f0bc62ad1863ef113457a81aa78c92e94ff363b789d7132047e51c700", @ANYRES32], 0x38}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=@newlink={0x50, 0x10, 0x439, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, r1, 0x3}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @sit={{0x8}, {0x24, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast1}, @IFLA_IPTUN_LOCAL={0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0x4}]}}}]}, 0x50}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000140)) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000240)=@ll, 0x80, &(0x7f0000000340)=[{&(0x7f0000000180)=""/33, 0x21}, {&(0x7f00000010c0)=""/4096, 0x1000}, {&(0x7f00000002c0)=""/122, 0x7a}], 0x3, &(0x7f0000000380)=""/122, 0x7a}, 0x2160) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000004c0)={'syztnl2\x00', &(0x7f0000002780)=ANY=[@ANYBLOB='tunl0\x00'/16, @ANYRES32=0x0, @ANYBLOB="0020008000000099000000000000005400660000b3049078ac696741911e0101441c1e43ac1e00010000000664010102000004f8e0000002000000019404010089076dac1e00018907ddac1414bb940400008e09a5dc8b4e0a222f94040000002bdf650b20e9bd2a9fc7e56cb762d6a2d2687ea15f88983b38e6c0735d2139e477faa07b08fe2122e56762d0407e2a6d5f31f6ffd591b139aab94a2b04d6ee9904918f786555e0b88af1a22219d6cb78dfb16e0108967617242d9c31bbcc34da260aa98b71a1467b6696e2b58fcc"]}) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r0, 0x89fb, &(0x7f0000000580)={'syztnl0\x00', &(0x7f0000000500)={'ip6tnl0\x00', 0x0, 0x29, 0x1, 0x9, 0x8, 0x0, @private2, @private0, 0x7, 0x8010, 0xffff7fff, 0xfff}}) r2 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r3, 0x8983, &(0x7f0000000000)={0x2, 'veth0_to_team\x00', {}, 0x8}) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=@newlink={0x50, 0x10, 0x439, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @sit={{0x8}, {0x24, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast1}, @IFLA_IPTUN_LOCAL={0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0x4}]}}}]}, 0x50}}, 0x0) [ 599.535098][ T26] audit: type=1804 audit(1634671194.505:393): pid=29038 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir266573529/syzkaller.JjYHuA/469/cgroup.controllers" dev="sda1" ino=14310 res=1 errno=0 [ 599.583858][T29014] FS: 00007f9fc4ca1700(0000) GS:ffff8880b9c00000(0000) knlGS:0000000000000000 19:19:54 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x6b03, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000f000000e8bd6efb250314000e000100240248ff050005001200", 0x2e}], 0x1}, 0x0) [ 599.633476][T29014] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 599.684566][T29014] CR2: 0000001b2f434000 CR3: 0000000033c1f000 CR4: 00000000003506f0 [ 599.725737][T29014] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 599.768645][T29014] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 599.817164][T29014] Call Trace: 19:19:54 executing program 2: mmap(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x2fffffd, 0x8d071, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x4, &(0x7f00000000c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xe}]}, &(0x7f0000000140)='syzkaller\x00', 0x4, 0x8f, &(0x7f0000000000)=""/143, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='mm_page_free_batched\x00', r0}, 0x10) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x4ca31, 0xffffffffffffffff, 0x0) [ 599.844572][T29014] __vfree+0x3c/0xd0 [ 599.867606][T29014] vfree+0x5a/0x90 [ 599.891044][T29014] ipcomp_free_scratches+0xc4/0x160 [ 599.923687][T29014] ipcomp_init_state+0x77c/0xa40 19:19:54 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x6b03, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000f000000e8bd6efb250314000e000100240248ff050005001200", 0x2e}], 0x1}, 0x0) [ 599.947883][T29014] ? lock_downgrade+0x6e0/0x6e0 [ 599.976386][T29014] ipcomp6_init_state+0xc2/0x700 19:19:54 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x0}]}]}, 0x58}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3800000010000507000000000004000000000000", @ANYRES32, @ANYBLOB="00000016010000001800120008000100736974000c00020008000300bd161e101c1e3b7c072805ac60e1cfa16493911e162613e5ff125822d29b1770f566ef776f0bc62ad1863ef113457a81aa78c92e94ff363b789d7132047e51c700", @ANYRES32], 0x38}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=@newlink={0x50, 0x10, 0x439, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, r1, 0x3}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @sit={{0x8}, {0x24, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast1}, @IFLA_IPTUN_LOCAL={0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0x4}]}}}]}, 0x50}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000140)) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000240)=@ll, 0x80, &(0x7f0000000340)=[{&(0x7f0000000180)=""/33, 0x21}, {&(0x7f00000010c0)=""/4096, 0x1000}, {&(0x7f00000002c0)=""/122, 0x7a}], 0x3, &(0x7f0000000380)=""/122, 0x7a}, 0x2160) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000004c0)={'syztnl2\x00', &(0x7f0000002780)=ANY=[@ANYBLOB='tunl0\x00'/16, @ANYRES32=0x0, @ANYBLOB="0020008000000099000000000000005400660000b3049078ac696741911e0101441c1e43ac1e00010000000664010102000004f8e0000002000000019404010089076dac1e00018907ddac1414bb940400008e09a5dc8b4e0a222f94040000002bdf650b20e9bd2a9fc7e56cb762d6a2d2687ea15f88983b38e6c0735d2139e477faa07b08fe2122e56762d0407e2a6d5f31f6ffd591b139aab94a2b04d6ee9904918f786555e0b88af1a22219d6cb78dfb16e0108967617242d9c31bbcc34da260aa98b71a1467b6696e2b58fcc"]}) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r0, 0x89fb, &(0x7f0000000580)={'syztnl0\x00', &(0x7f0000000500)={'ip6tnl0\x00', 0x0, 0x29, 0x1, 0x9, 0x8, 0x0, @private2, @private0, 0x7, 0x8010, 0xffff7fff, 0xfff}}) r2 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r3, 0x8983, &(0x7f0000000000)={0x2, 'veth0_to_team\x00', {}, 0x8}) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=@newlink={0x50, 0x10, 0x439, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @sit={{0x8}, {0x24, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast1}, @IFLA_IPTUN_LOCAL={0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0x4}]}}}]}, 0x50}}, 0x0) 19:19:54 executing program 4: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) recvmmsg(r0, &(0x7f0000001b40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000ac0)=[{0xffffffffffffffff}], 0x1}}], 0x2, 0x0, 0x0) sendmsg$IPVS_CMD_DEL_SERVICE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) [ 599.997875][T29014] __xfrm_init_state+0x995/0x15c0 [ 600.042468][T29014] xfrm_add_sa+0x1ef1/0x35f0 [ 600.072569][T29014] ? xfrm_send_acquire+0xbb0/0xbb0 [ 600.109857][T29014] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 600.136751][T29014] ? security_capable+0x8f/0xc0 [ 600.168559][T29014] ? __nla_parse+0x3d/0x50 [ 600.197933][T29014] ? xfrm_send_acquire+0xbb0/0xbb0 [ 600.228923][T29014] xfrm_user_rcv_msg+0x430/0xa20 [ 600.259231][T29014] ? xfrm_do_migrate+0x7f0/0x7f0 [ 600.292003][T29014] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 600.324334][T29014] ? __dev_queue_xmit+0x193f/0x3630 [ 600.344819][T29014] ? lock_downgrade+0x6e0/0x6e0 [ 600.358836][T29014] ? __mutex_lock+0x21c/0x12f0 [ 600.374412][T29014] netlink_rcv_skb+0x153/0x420 [ 600.395360][T29014] ? xfrm_do_migrate+0x7f0/0x7f0 [ 600.425690][T29014] ? netlink_ack+0xa60/0xa60 [ 600.443721][T29014] ? netlink_deliver_tap+0x1b1/0xc30 [ 600.463101][T29014] xfrm_netlink_rcv+0x6b/0x90 [ 600.506005][T29014] netlink_unicast+0x533/0x7d0 [ 600.529665][T29014] ? netlink_attachskb+0x880/0x880 [ 600.544998][T29014] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 600.556290][T29014] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 600.567377][T29014] ? __phys_addr_symbol+0x2c/0x70 [ 600.573720][T29014] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 600.587032][T29014] ? __check_object_size+0x16e/0x3f0 [ 600.597309][T29014] netlink_sendmsg+0x86d/0xda0 [ 600.638699][T29014] ? netlink_unicast+0x7d0/0x7d0 [ 600.654983][T29014] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 600.704424][T29014] ? netlink_unicast+0x7d0/0x7d0 [ 600.717520][T29014] sock_sendmsg+0xcf/0x120 [ 600.725124][T29014] ____sys_sendmsg+0x6e8/0x810 [ 600.738482][T29014] ? kernel_sendmsg+0x50/0x50 [ 600.745174][T29014] ? do_recvmmsg+0x6d0/0x6d0 [ 600.758868][T29014] ? lock_chain_count+0x20/0x20 [ 600.769432][T29014] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 600.786967][T29014] ___sys_sendmsg+0xf3/0x170 [ 600.794002][T29014] ? sendmsg_copy_msghdr+0x160/0x160 [ 600.806993][T29014] ? __fget_files+0x21b/0x3e0 [ 600.814177][T29014] ? lock_downgrade+0x6e0/0x6e0 [ 600.826730][T29014] ? __fget_files+0x23d/0x3e0 [ 600.833010][T29014] ? __fget_light+0xea/0x280 [ 600.840366][T29014] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 600.846721][T29014] __sys_sendmsg+0xe5/0x1b0 [ 600.852526][T29014] ? __sys_sendmsg_sock+0x30/0x30 [ 600.859043][T29014] ? syscall_enter_from_user_mode+0x21/0x70 [ 600.865084][T29014] do_syscall_64+0x35/0xb0 [ 600.870799][T29014] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 600.878196][T29014] RIP: 0033:0x7f9fc772ba39 [ 600.882728][T29014] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 600.903907][T29014] RSP: 002b:00007f9fc4ca1188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 600.913320][T29014] RAX: ffffffffffffffda RBX: 00007f9fc782ef60 RCX: 00007f9fc772ba39 [ 600.922295][T29014] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000000003 [ 600.931969][T29014] RBP: 00007f9fc7785c5f R08: 0000000000000000 R09: 0000000000000000 [ 600.959435][T29014] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 600.967798][T29014] R13: 00007fff70071c3f R14: 00007f9fc4ca1300 R15: 0000000000022000 [ 600.975807][T29014] Kernel panic - not syncing: panic_on_warn set ... [ 600.982390][T29014] CPU: 1 PID: 29014 Comm: syz-executor.5 Not tainted 5.15.0-rc5-syzkaller #0 [ 600.991158][T29014] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 601.001219][T29014] Call Trace: [ 601.004504][T29014] dump_stack_lvl+0xcd/0x134 [ 601.009194][T29014] panic+0x2b0/0x6dd [ 601.013307][T29014] ? __warn_printk+0xf3/0xf3 [ 601.017923][T29014] ? __warn.cold+0x1a/0x44 [ 601.022358][T29014] ? __vunmap+0x150/0xb70 [ 601.026699][T29014] __warn.cold+0x35/0x44 [ 601.030957][T29014] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 601.037216][T29014] ? __vunmap+0x150/0xb70 [ 601.041557][T29014] report_bug+0x1bd/0x210 [ 601.045975][T29014] handle_bug+0x3c/0x60 [ 601.050147][T29014] exc_invalid_op+0x14/0x40 [ 601.054664][T29014] asm_exc_invalid_op+0x12/0x20 [ 601.059524][T29014] RIP: 0010:__vunmap+0x150/0xb70 [ 601.064494][T29014] Code: 85 78 ff ff ff e8 b0 7b c3 ff 48 c7 c7 c0 f3 a9 8b e8 94 c6 87 07 e8 9f 7b c3 ff 4c 89 e6 48 c7 c7 20 0d 97 89 e8 b7 37 42 07 <0f> 0b 48 83 c4 38 5b 5d 41 5c 41 5d 41 5e 41 5f e9 7b 7b c3 ff e8 [ 601.084118][T29014] RSP: 0018:ffffc90002cef2d8 EFLAGS: 00010286 [ 601.090196][T29014] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 601.098179][T29014] RDX: 0000000000040000 RSI: ffffffff815e9628 RDI: fffff5200059de4d [ 601.106165][T29014] RBP: dffffc0000000000 R08: 0000000000000000 R09: 0000000000000000 [ 601.114149][T29014] R10: ffffffff815e33ce R11: 0000000000000000 R12: ffffc900041f1000 [ 601.122215][T29014] R13: ffff8880772a4c60 R14: ffffc900041f1000 R15: ffffe8ffffc45038 [ 601.130549][T29014] ? wake_up_klogd.part.0+0x8e/0xd0 [ 601.135836][T29014] ? vprintk+0x88/0x90 [ 601.139931][T29014] ? __vunmap+0x150/0xb70 [ 601.144285][T29014] __vfree+0x3c/0xd0 [ 601.148198][T29014] vfree+0x5a/0x90 [ 601.151930][T29014] ipcomp_free_scratches+0xc4/0x160 [ 601.157154][T29014] ipcomp_init_state+0x77c/0xa40 [ 601.162115][T29014] ? lock_downgrade+0x6e0/0x6e0 [ 601.166995][T29014] ipcomp6_init_state+0xc2/0x700 [ 601.171983][T29014] __xfrm_init_state+0x995/0x15c0 [ 601.177033][T29014] xfrm_add_sa+0x1ef1/0x35f0 [ 601.181690][T29014] ? xfrm_send_acquire+0xbb0/0xbb0 [ 601.186819][T29014] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 601.193079][T29014] ? security_capable+0x8f/0xc0 [ 601.197955][T29014] ? __nla_parse+0x3d/0x50 [ 601.202474][T29014] ? xfrm_send_acquire+0xbb0/0xbb0 [ 601.207608][T29014] xfrm_user_rcv_msg+0x430/0xa20 [ 601.212626][T29014] ? xfrm_do_migrate+0x7f0/0x7f0 [ 601.217551][T29014] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 601.223518][T29014] ? __dev_queue_xmit+0x193f/0x3630 [ 601.228719][T29014] ? lock_downgrade+0x6e0/0x6e0 [ 601.233590][T29014] ? __mutex_lock+0x21c/0x12f0 [ 601.238365][T29014] netlink_rcv_skb+0x153/0x420 [ 601.243114][T29014] ? xfrm_do_migrate+0x7f0/0x7f0 [ 601.248047][T29014] ? netlink_ack+0xa60/0xa60 [ 601.252651][T29014] ? netlink_deliver_tap+0x1b1/0xc30 [ 601.257937][T29014] xfrm_netlink_rcv+0x6b/0x90 [ 601.262603][T29014] netlink_unicast+0x533/0x7d0 [ 601.267353][T29014] ? netlink_attachskb+0x880/0x880 [ 601.272447][T29014] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 601.278699][T29014] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 601.284930][T29014] ? __phys_addr_symbol+0x2c/0x70 [ 601.289962][T29014] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 601.295673][T29014] ? __check_object_size+0x16e/0x3f0 [ 601.300949][T29014] netlink_sendmsg+0x86d/0xda0 [ 601.305704][T29014] ? netlink_unicast+0x7d0/0x7d0 [ 601.310627][T29014] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 601.316851][T29014] ? netlink_unicast+0x7d0/0x7d0 [ 601.321773][T29014] sock_sendmsg+0xcf/0x120 [ 601.326175][T29014] ____sys_sendmsg+0x6e8/0x810 [ 601.330925][T29014] ? kernel_sendmsg+0x50/0x50 [ 601.335589][T29014] ? do_recvmmsg+0x6d0/0x6d0 [ 601.340184][T29014] ? lock_chain_count+0x20/0x20 [ 601.345032][T29014] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 601.351093][T29014] ___sys_sendmsg+0xf3/0x170 [ 601.355673][T29014] ? sendmsg_copy_msghdr+0x160/0x160 [ 601.360945][T29014] ? __fget_files+0x21b/0x3e0 [ 601.365608][T29014] ? lock_downgrade+0x6e0/0x6e0 [ 601.370466][T29014] ? __fget_files+0x23d/0x3e0 [ 601.375128][T29014] ? __fget_light+0xea/0x280 [ 601.379697][T29014] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 601.385928][T29014] __sys_sendmsg+0xe5/0x1b0 [ 601.390419][T29014] ? __sys_sendmsg_sock+0x30/0x30 [ 601.395437][T29014] ? syscall_enter_from_user_mode+0x21/0x70 [ 601.401331][T29014] do_syscall_64+0x35/0xb0 [ 601.405748][T29014] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 601.411648][T29014] RIP: 0033:0x7f9fc772ba39 [ 601.416046][T29014] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 601.435639][T29014] RSP: 002b:00007f9fc4ca1188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 601.444035][T29014] RAX: ffffffffffffffda RBX: 00007f9fc782ef60 RCX: 00007f9fc772ba39 [ 601.452089][T29014] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000000003 [ 601.460045][T29014] RBP: 00007f9fc7785c5f R08: 0000000000000000 R09: 0000000000000000 [ 601.468006][T29014] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 601.475972][T29014] R13: 00007fff70071c3f R14: 00007f9fc4ca1300 R15: 0000000000022000 [ 601.484397][T29014] Kernel Offset: disabled [ 601.488910][T29014] Rebooting in 86400 seconds..